$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: 25M/032Sy3OKPkWZw/NG6I/SRYWrC2uUJwWmkcpH3Us= Subject key identifier: 3C:BF:30:C6:FD:9D:A6:93:C8:22:20:BA:2B:85:82:95:1F:2F:A1:0F Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019889FBC4AD4163337DE7E4ABBE05F56090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0E1C Signing time: Fri 08 Aug 2025 14:00:35 +0000 Manifest this update: Fri 08 Aug 2025 14:00:35 +0000 Manifest next update: Sat 09 Aug 2025 14:00:35 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: O6TwBp7AteISS60LuAgQB/nbPlBvPws2VgioCqno02A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:fb:c4:ad:41:63:33:7d:e7:e4:ab:be:05:f5:60:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Aug 8 14:00:35 2025 GMT Not After : Aug 9 14:00:35 2025 GMT Subject: CN=3cbf30c6fd9da693c82220ba2b8582951f2fa10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:de:90:17:5d:01:54:2e:97:10:29:be:2f: 20:ed:94:b0:0b:82:9f:95:bf:fa:9b:4a:36:98:7c: 6a:5c:5b:cd:2e:93:e8:48:c0:51:e4:da:58:32:cd: 9f:23:66:b3:a8:d6:92:b6:9b:e0:ee:96:5a:5f:84: 43:22:cb:2a:26:59:26:04:ea:f7:a5:22:31:94:61: 4a:98:6d:76:16:8c:c4:0b:68:e5:b0:a4:91:ff:99: 83:0b:f5:81:74:d8:cc:32:a1:61:21:23:4a:87:8c: bc:c6:e4:b4:0a:d4:ba:57:45:ef:1b:7a:d5:ee:6a: a6:56:05:46:67:75:55:22:f3:e1:70:c0:95:08:21: b9:54:3a:26:02:01:cc:7a:1c:c9:cd:1e:c4:93:a0: 6f:b8:16:a1:4d:37:67:54:c7:39:36:53:14:0e:f3: 62:49:5c:bd:52:57:77:2b:38:6e:8c:cd:30:63:2f: 93:5c:9b:55:45:e1:fa:66:19:86:b5:d0:db:65:6e: ff:eb:f3:a8:a2:42:de:67:3d:ea:5c:f1:d0:93:6f: fa:1d:a6:cf:60:24:0d:ed:6d:a1:7c:c8:0a:e1:4c: f1:b4:07:ac:5e:71:ef:52:c5:b6:6e:a5:c8:52:4f: 7b:23:d5:0e:43:2b:18:da:a9:9d:87:d2:41:2b:84: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BF:30:C6:FD:9D:A6:93:C8:22:20:BA:2B:85:82:95:1F:2F:A1:0F X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:b7:2d:d3:e4:7d:ce:c8:23:ef:20:ac:74:80:51:5d:3b: 5f:f4:c1:a7:3b:32:f3:ca:a4:72:b8:fb:40:e7:4f:a0:dd:e8: 24:01:2e:70:09:76:11:90:e7:28:05:94:cb:da:e8:c7:3f:31: 9b:56:80:af:30:75:a1:9f:fc:dd:78:2c:99:49:96:d5:60:84: 55:5f:d0:23:19:48:31:91:d1:dc:a0:32:d0:6c:36:86:df:13: cc:16:56:04:2e:19:08:5f:f9:ca:26:ee:7f:f8:2b:c9:4b:bf: 51:4a:85:33:9c:62:35:bb:ea:2c:d4:cf:18:35:eb:50:a6:06: e6:30:07:8f:75:58:a1:0f:cc:04:0e:d8:a6:d1:84:87:4e:95: 47:7d:0f:73:b1:4c:32:58:d1:4c:f3:ca:0b:90:4d:a8:19:12: 04:c5:f6:6c:8c:91:3a:04:ea:3f:d2:8c:36:7d:21:9d:27:36: 68:05:22:e3:ab:1a:fd:61:a1:8c:02:f9:68:98:06:fb:83:5d: ca:ba:55:e3:7b:eb:6d:3c:29:1e:9e:58:f2:ab:5d:46:83:98: c3:53:76:fb:45:7f:e4:27:7d:5e:99:78:1b:72:89:7a:ca:46: fc:54:d8:83:c6:30:e8:da:a2:43:4b:f5:05:d3:63:6b:7f:31: 60:22:7b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJ+8StQWMzfefkq74F9WCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwODA4MTQwMDM1WhcNMjUwODA5MTQwMDM1WjAzMTEwLwYDVQQD EygzY2JmMzBjNmZkOWRhNjkzYzgyMjIwYmEyYjg1ODI5NTFmMmZhMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDXekBddAVQulxApvi8g7ZSwC4Kf lb/6m0o2mHxqXFvNLpPoSMBR5NpYMs2fI2azqNaStpvg7pZaX4RDIssqJlkmBOr3 pSIxlGFKmG12FozEC2jlsKSR/5mDC/WBdNjMMqFhISNKh4y8xuS0CtS6V0XvG3rV 7mqmVgVGZ3VVIvPhcMCVCCG5VDomAgHMehzJzR7Ek6BvuBahTTdnVMc5NlMUDvNi SVy9Uld3KzhujM0wYy+TXJtVReH6ZhmGtdDbZW7/6/OookLeZz3qXPHQk2/6HabP YCQN7W2hfMgK4UzxtAesXnHvUsW2bqXIUk97I9UOQysY2qmdh9JBK4SRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy/MMb9naaTyCIguiuFgpUfL6EPMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKda3LdPk fc7II+8grHSAUV07X/TBpzsy88qkcrj7QOdPoN3oJAEucAl2EZDnKAWUy9roxz8x m1aArzB1oZ/83XgsmUmW1WCEVV/QIxlIMZHR3KAy0Gw2ht8TzBZWBC4ZCF/5yibu f/gryUu/UUqFM5xiNbvqLNTPGDXrUKYG5jAHj3VYoQ/MBA7YptGEh06VR30Pc7FM MljRTPPKC5BNqBkSBMX2bIyROgTqP9KMNn0hnSc2aAUi46sa/WGhjAL5aJgG+4Nd yrpV43vrbTwpHp5Y8qtdRoOYw1N2+0V/5Cd9Xpl4G3KJespG/FTYg8Yw6NqiQ0v1 BdNja38xYCJ7fg== -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:21 2025 by rpki-client