$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: r97aKK3OIO1EJIoBg/TXIk3OOe072P6KV+EDat9NzT8= Subject key identifier: EF:7C:FB:89:9B:F2:69:29:99:8F:05:F2:E6:BF:BD:C7:52:86:BD:65 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019A4FD0479FFB75EF0ED1D240D3B5A17C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0F07 Signing time: Tue 04 Nov 2025 17:00:41 +0000 Manifest this update: Tue 04 Nov 2025 17:00:41 +0000 Manifest next update: Wed 05 Nov 2025 17:00:41 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: XBfYXhCY/f9yX/wS8R7S3gI1Yy7qfISK7YNd+P647+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:47:9f:fb:75:ef:0e:d1:d2:40:d3:b5:a1:7c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Nov 4 17:00:41 2025 GMT Not After : Nov 5 17:00:41 2025 GMT Subject: CN=ef7cfb899bf26929998f05f2e6bfbdc75286bd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:5a:31:de:c8:36:2e:1f:d6:a8:93:83:f5: 8d:50:c9:d7:42:2d:7b:c6:4d:bf:fb:0b:cd:2d:d6: bc:48:36:c9:a3:f3:7a:9d:60:40:c4:c0:b8:87:6c: 97:66:5f:88:14:55:98:1f:79:e1:a6:d1:93:c0:e6: d6:c0:c5:77:11:a3:f5:60:60:9c:d5:29:a7:d1:90: d5:be:fc:ba:c3:32:ae:fc:81:53:a8:0c:e6:2c:ee: 3c:c8:c4:f7:1b:1a:e0:19:75:90:55:fd:44:ab:ea: 0f:ba:bc:43:2e:01:7b:1d:53:34:dd:92:d0:b3:b2: 77:25:cd:62:50:1a:40:93:4a:f6:53:42:00:63:15: d2:c1:c3:14:50:f2:74:48:8c:44:4e:90:a8:31:a6: 09:63:44:b6:16:1a:44:9c:dc:24:18:76:6e:e3:65: a3:27:99:4f:cb:a5:28:06:c8:8f:a8:b4:84:3e:3b: 2b:49:fb:41:06:87:5b:69:b3:91:ee:be:65:bc:95: 29:9c:32:1d:fc:97:ff:99:5d:58:5a:65:10:28:88: 1a:00:39:a1:88:32:39:ba:8e:7a:b8:4f:ce:26:26: 5b:d6:b3:c7:25:d2:e6:fb:68:11:b9:3a:99:dc:53: 35:54:1b:2d:46:05:a9:da:f0:b6:ab:20:2e:6e:48: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:FB:89:9B:F2:69:29:99:8F:05:F2:E6:BF:BD:C7:52:86:BD:65 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bd:de:1a:2e:4d:12:92:fa:88:30:d6:52:3e:0e:9d:34:8e: 0d:d5:1b:d5:4a:32:93:b9:b1:2b:56:0a:cd:c8:1d:b2:36:02: 09:1a:a6:86:b6:6e:76:dc:62:cf:42:42:4b:21:88:ed:c3:cc: 2a:10:21:b5:e6:b4:a3:a0:17:de:de:cc:a1:b5:f0:3c:7a:c9: 7f:eb:57:9a:d6:c7:90:44:07:90:eb:9a:3f:79:0c:c8:10:ad: a0:cb:b6:8b:f5:c5:c3:68:b2:af:ee:f3:6a:10:13:4a:1f:83: 53:d4:19:b4:e7:ac:32:b9:75:02:a4:99:d8:fa:a0:3b:6f:49: bd:e7:df:b6:b4:21:d5:0c:3c:b0:83:7d:53:14:d8:dc:8c:16: 03:b8:7a:b0:d0:38:3e:83:3c:8f:46:75:24:79:10:c1:48:1a: 61:2d:53:eb:1a:4e:d5:7d:ba:24:0d:ca:b8:8f:b8:3a:f0:28: 8b:0d:3a:07:8e:5c:f7:a5:ec:25:28:60:46:ba:b4:6d:35:b2: b7:5a:fb:f7:b3:ab:19:43:61:2e:3f:f1:6a:9d:00:53:3a:29: b6:33:6a:ed:99:c4:bc:b6:a1:dd:1a:52:7d:75:31:7e:f1:ec: e4:3d:0a:e9:2b:c9:3d:86:90:dc:36:a4:0c:1e:ff:09:30:c5: fd:96:02:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0Eef+3XvDtHSQNO1oXxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUxMTA0MTcwMDQxWhcNMjUxMTA1MTcwMDQxWjAzMTEwLwYDVQQD EyhlZjdjZmI4OTliZjI2OTI5OTk4ZjA1ZjJlNmJmYmRjNzUyODZiZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX1aMd7INi4f1qiTg/WNUMnXQi17 xk2/+wvNLda8SDbJo/N6nWBAxMC4h2yXZl+IFFWYH3nhptGTwObWwMV3EaP1YGCc 1Smn0ZDVvvy6wzKu/IFTqAzmLO48yMT3GxrgGXWQVf1Eq+oPurxDLgF7HVM03ZLQ s7J3Jc1iUBpAk0r2U0IAYxXSwcMUUPJ0SIxETpCoMaYJY0S2FhpEnNwkGHZu42Wj J5lPy6UoBsiPqLSEPjsrSftBBodbabOR7r5lvJUpnDId/Jf/mV1YWmUQKIgaADmh iDI5uo56uE/OJiZb1rPHJdLm+2gRuTqZ3FM1VBstRgWp2vC2qyAubkiixwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO98+4mb8mkpmY8F8ua/vcdShr1lMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf73eGi5N EpL6iDDWUj4OnTSODdUb1Uoyk7mxK1YKzcgdsjYCCRqmhrZudtxiz0JCSyGI7cPM KhAhtea0o6AX3t7MobXwPHrJf+tXmtbHkEQHkOuaP3kMyBCtoMu2i/XFw2iyr+7z ahATSh+DU9QZtOesMrl1AqSZ2PqgO29JvefftrQh1Qw8sIN9UxTY3IwWA7h6sNA4 PoM8j0Z1JHkQwUgaYS1T6xpO1X26JA3KuI+4OvAoiw06B45c96XsJShgRrq0bTWy t1r797OrGUNhLj/xap0AUzoptjNq7ZnEvLah3RpSfXUxfvHs5D0K6SvJPYaQ3Dak DB7/CTDF/ZYCag== -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:11 2025 by rpki-client