$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: z81dD0E0HRkPf2QtTM4iZqmj2DysvWiD1xAICKb8xVA= Subject key identifier: 16:B1:50:DB:D6:B7:08:2C:5F:4B:76:4C:D4:ED:AC:D9:1A:06:2A:6A Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019770AC7D1DAFAAD5BD03A3D270C28B3885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0D85 Signing time: Sat 14 Jun 2025 23:00:41 +0000 Manifest this update: Sat 14 Jun 2025 23:00:41 +0000 Manifest next update: Sun 15 Jun 2025 23:00:41 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: OlMMJhOrULR3z98uQeY6b3VXgEc.roa (hash: q6ZWYT2ZC6QfyvSsdsgx8ZD0lu2+Rk8uJl+vD5jnyPs=) 5: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 6: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 11: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 12: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: ufXFEjGVw3RWv5cnnPTxxvEnyaTk+ZMSyLgPkR1w3gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:70:ac:7d:1d:af:aa:d5:bd:03:a3:d2:70:c2:8b:38:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jun 14 23:00:41 2025 GMT Not After : Jun 15 23:00:41 2025 GMT Subject: CN=16b150dbd6b7082c5f4b764cd4edacd91a062a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:5b:78:14:2a:98:c2:7c:5c:df:be:4d:0b: 1b:11:89:c9:b5:e4:aa:ea:1d:5a:9b:39:94:71:fe: e0:aa:45:84:76:78:c5:1d:b2:0c:d5:f0:00:c6:fd: 90:6d:9b:1a:9a:0f:7d:e6:e1:fb:a1:65:0e:d4:fe: 4a:30:7e:97:55:39:bb:9c:eb:12:0c:73:40:64:04: 53:7b:97:db:01:ee:86:f1:9e:99:55:06:9d:80:e1: 0f:39:75:e4:46:70:48:a0:9d:d2:d6:39:10:ad:e5: a9:9a:08:4c:f5:0e:73:36:4c:eb:83:3e:ce:62:66: af:94:a7:af:99:08:95:ac:49:9f:d7:3b:97:5c:fb: 5e:88:e0:8d:95:14:af:48:50:0a:71:8b:ba:d7:00: f8:19:2e:44:29:2d:1f:d4:53:17:74:41:0f:a5:3b: 2b:73:01:09:1c:1e:6b:62:8a:15:7b:b2:75:6b:26: 85:6b:c2:e6:40:a7:b7:54:66:f9:32:56:d6:9f:fa: 74:1d:42:0a:f0:24:a8:77:3d:8c:d9:b9:ea:c5:23: ef:81:1f:4e:67:c4:d7:7d:5d:bc:f3:05:bd:f7:69: 6c:22:b8:2f:d6:43:94:76:9e:c2:43:55:35:3d:b6: 66:05:47:22:9e:0a:ee:79:21:e8:58:4e:96:11:8f: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:50:DB:D6:B7:08:2C:5F:4B:76:4C:D4:ED:AC:D9:1A:06:2A:6A X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e0:45:85:6a:63:a0:57:69:34:6a:27:37:8b:9b:6d:d9:cc: cc:3c:26:b0:60:18:9d:5c:14:2e:8a:83:f2:0e:49:73:bc:c3: 0f:29:59:21:7d:a1:03:c2:97:a2:7f:24:25:d4:30:5c:83:e7: f8:ac:3a:65:b4:9d:70:e1:dd:06:3b:71:6f:83:d8:5e:69:89: 2f:af:c1:8e:b2:de:8c:04:ac:8b:e0:99:d6:77:a9:20:3d:7d: f0:d6:fb:95:46:41:33:b2:9d:04:14:bb:8a:42:98:7e:0c:c2: c5:88:fe:10:53:ef:de:bb:21:03:46:db:f1:09:02:6d:a6:62: 33:6a:f1:d8:1d:9d:63:8c:e3:8d:ed:77:d8:fb:c0:2e:7e:26: d1:c2:a7:76:c0:d7:a5:4a:ef:77:dd:ec:58:5c:ac:ce:3d:9d: 34:66:a0:0c:33:0f:a1:32:09:6d:5c:59:8f:fd:72:7a:7e:ff: c8:6f:2b:3d:81:37:6a:a2:7a:0d:17:b1:3d:a4:0a:f6:e9:df: 98:44:52:6c:f4:85:a2:5e:82:24:4f:64:ee:a2:5a:4d:c8:74: 87:da:96:0e:5b:22:0b:c4:18:e6:cb:12:20:19:62:89:26:a4: 10:17:94:c2:4f:d9:78:45:dd:f8:a9:22:8f:d5:7e:fa:bf:03: 6d:3d:e1:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdwrH0dr6rVvQOj0nDCiziFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNjE0MjMwMDQxWhcNMjUwNjE1MjMwMDQxWjAzMTEwLwYDVQQD EygxNmIxNTBkYmQ2YjcwODJjNWY0Yjc2NGNkNGVkYWNkOTFhMDYyYTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl1beBQqmMJ8XN++TQsbEYnJteSq 6h1amzmUcf7gqkWEdnjFHbIM1fAAxv2QbZsamg995uH7oWUO1P5KMH6XVTm7nOsS DHNAZARTe5fbAe6G8Z6ZVQadgOEPOXXkRnBIoJ3S1jkQreWpmghM9Q5zNkzrgz7O YmavlKevmQiVrEmf1zuXXPteiOCNlRSvSFAKcYu61wD4GS5EKS0f1FMXdEEPpTsr cwEJHB5rYooVe7J1ayaFa8LmQKe3VGb5MlbWn/p0HUIK8CSodz2M2bnqxSPvgR9O Z8TXfV288wW992lsIrgv1kOUdp7CQ1U1PbZmBUcingrueSHoWE6WEY9LMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaxUNvWtwgsX0t2TNTtrNkaBipqMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleBFhWpj oFdpNGonN4ubbdnMzDwmsGAYnVwULoqD8g5Jc7zDDylZIX2hA8KXon8kJdQwXIPn +Kw6ZbSdcOHdBjtxb4PYXmmJL6/BjrLejASsi+CZ1nepID198Nb7lUZBM7KdBBS7 ikKYfgzCxYj+EFPv3rshA0bb8QkCbaZiM2rx2B2dY4zjje132PvALn4m0cKndsDX pUrvd93sWFyszj2dNGagDDMPoTIJbVxZj/1yen7/yG8rPYE3aqJ6DRexPaQK9unf mERSbPSFol6CJE9k7qJaTch0h9qWDlsiC8QY5ssSIBliiSakEBeUwk/ZeEXd+Kki j9V++r8DbT3hpA== -----END CERTIFICATE-----Generated at Sun Jun 15 04:13:42 2025 by rpki-client