$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft File: Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json) Hash identifier: kQ4zI9MPPqtNKADZI6jJ8f3OwhPmiCVlqgxfe5/EceA= Subject key identifier: 66:68:D4:04:A1:B8:D5:C4:6F:8B:70:1B:FB:65:0A:AC:30:D3:C4:99 Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c Certificate serial: 01983C4EAF5C0974BB6C3AC10E8D40AB3CD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft Manifest number: 096D Signing time: Thu 24 Jul 2025 12:00:46 +0000 Manifest this update: Thu 24 Jul 2025 12:00:46 +0000 Manifest next update: Fri 25 Jul 2025 12:00:46 +0000 Files and hashes: 1: 0pA9jqxxzLz7rK77xH9_gAV2Ddc.roa (hash: kuW3cMupmnzRroMZH+onX29Wp3xp+NRO+gRxYcXjYi4=) 2: 2TnqZvmmysxhyiNZrk30acF9SlI.roa (hash: WiwIIXJhkAErUqVwl7rpQhJM1V3EKt+e61vZ4TyGts0=) 3: Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa (hash: TMxwGgTVPG6mIC+cdCWlxe1kZRGY132KC9x3rO2T5lU=) 4: DwPcfSHFXNqM7rUhdUmfwPDUgE4.roa (hash: TJWMP4o9L/gCTxpzvrb7aiWTaCJtkInjMyTtZ8ZQv6w=) 5: I0so05T8WJ0IrbDuX6UjLySLqmI.roa (hash: dR+mdnDCO20UWtvzil7AKdca65/eFTAOBYqBvQ7au8Y=) 6: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: 0KaXb0zSduOEkjVwrZx0XBVINu4iCFj0qOVOWK0FGkM=) 7: SFaGChEcecBfMkYfUdNCUJpmOZs.roa (hash: urAyNSsYssS08ZQ9VO9nXj8k0R3NhqQ1uecoM5zn4Xg=) 8: VdXHdlxLvSXMtikY4Tkq1ivw7b0.roa (hash: d4XyYarFCX7iHNvauLVhaF+5yte4Mx2+kXf0dxCZBfg=) 9: VzB0p7pCZsQMiGHUlZc1UelTzYY.roa (hash: BzzAqeicP4DohtRLpuezZoWn//Z3/wAyEJHVc5sVYtU=) 10: XkP13qdKiUI4ksMyPnhV_Dq7ZH8.roa (hash: YloS2aXtag5qQ1JTIqYqkyKRVfkw4jImfuhbP08yNwU=) 11: _okwze0rSlq8LhXlB7FWi8OlsK4.roa (hash: 3wzhS+5DOCgktIdxwao39vX+OQv7jnEn/glBS5LioaY=) 12: aaPCQ3vYc10mi-8M5KP_x-4UjqI.roa (hash: k87j6NF+EKH8P+VssVknz/tteS+89PmRGUWHWReOd5U=) 13: keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa (hash: gciROLJg7+/w52qQUKA87ZvQS+qeyeOp3E1ngvwPEK4=) 14: mReJXjEFw2vH3gsylG3516bpkxI.roa (hash: orfciGxm8QNpQKbu93OyqVEi/aKCukxyiFS74rnLbXg=) 15: t2p4-i0-AMgrPWWbLPjsZticI0E.roa (hash: /e/8T+eYaFYAkJQaQBKZKZelhBajXo5oP/zmVdgWK8A=) 16: wXmD77ivrLBnzkfNVUx9GVYS9fw.roa (hash: tE/07N+y9ScJvAqYYnDp5CmkVEB1T6atwgfCQwskaeM=) 17: xzcqcrFf-ra6k9gJVEfYsUOL7r0.roa (hash: tLEmQ4Ip0nJAlYr4VF0AY9UERYkLlEbUUc3k5bIYBQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3c:4e:af:5c:09:74:bb:6c:3a:c1:0e:8d:40:ab:3c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c Validity Not Before: Jul 24 12:00:46 2025 GMT Not After : Jul 25 12:00:46 2025 GMT Subject: CN=6668d404a1b8d5c46f8b701bfb650aac30d3c499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:4f:2e:d7:33:e5:58:bc:d5:e3:4c:83:cf: 16:86:a1:7f:28:c0:74:8f:8c:da:55:d6:c5:88:44: 0c:1f:f9:bf:7b:6a:3f:ab:27:3a:a2:e4:95:7f:28: 50:2f:73:fd:4e:47:1b:3d:14:b1:7d:20:52:a9:0e: e4:07:be:2a:38:03:bc:c2:b2:7c:dd:0d:e4:58:49: 78:e6:b2:9c:63:0e:33:2a:66:fa:d9:50:68:2c:b8: b9:48:0e:b8:21:e2:f1:52:d5:1c:ff:a3:28:85:6d: 10:9d:6a:f0:f1:d3:1d:63:90:3c:c0:39:cf:da:b9: c1:9a:37:9a:f8:bc:22:c6:86:c8:01:eb:bb:e1:b8: c5:dd:9b:3e:c2:07:be:3d:f4:b8:db:a3:a2:a3:26: a5:7c:79:35:d7:f8:9d:60:15:07:52:eb:8b:45:ee: 5b:3f:a9:60:05:5e:d3:9a:45:06:f5:a4:80:2d:34: 6a:9d:cb:2b:6a:eb:28:2d:38:21:49:08:34:7d:a7: dd:9a:b5:de:70:ec:19:b9:8b:0c:e3:8c:2b:7f:c2: 7f:59:f9:28:0d:31:a3:85:a5:01:7a:21:c8:92:bc: 23:a5:ba:ce:46:c2:a4:e9:58:e5:7f:75:0a:ed:49: 6d:88:b4:84:fa:67:5f:ae:19:54:61:c3:6c:78:b3: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:D4:04:A1:B8:D5:C4:6F:8B:70:1B:FB:65:0A:AC:30:D3:C4:99 X509v3 Authority Key Identifier: keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8a:31:8d:de:b3:57:77:2a:9c:e2:78:ba:6c:56:67:bc:f4: ef:d4:dd:73:a8:a1:55:39:d9:9a:d1:c3:26:22:ae:71:9b:20: b8:ce:3c:91:17:da:e4:c8:89:54:98:73:e8:66:8c:d6:62:c2: 29:76:d2:b0:9c:5d:b6:d3:e3:10:7c:a9:d4:ea:3a:a2:7e:80: a6:b0:b9:88:e6:a9:13:91:06:9d:16:66:79:7a:bc:14:36:2b: be:22:84:6f:63:67:7c:46:39:fd:69:c9:2f:49:e6:4c:17:f1: b8:43:1a:de:38:c7:ca:b7:a1:18:53:b5:d2:ab:94:66:e5:63: 2c:74:1e:9c:36:17:57:78:99:d0:a9:d2:1d:26:65:df:af:e1: af:9f:da:ba:37:e9:92:e6:75:47:80:27:3d:6a:42:85:d9:89: df:b7:46:7b:44:2e:26:3e:98:bb:aa:9d:5e:92:23:b0:02:a4: 63:7a:ea:e3:3c:65:3e:f5:3b:1e:19:98:47:29:54:6a:db:c8: 87:f1:02:13:bb:52:15:24:eb:eb:2a:70:ac:47:20:07:4a:69: 8f:1d:29:45:51:12:f7:fd:33:92:d7:77:b1:32:5a:b6:15:db: b9:9f:c6:d8:78:3c:c4:2e:ec:e9:ea:a4:ca:85:79:6b:47:99: aa:44:d0:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg8Tq9cCXS7bDrBDo1AqzzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTRhNDE5MjI1ZDVkNzlmNGExYWUxNTIwYTNiMWE1NmQ0 NTI2OGMwHhcNMjUwNzI0MTIwMDQ2WhcNMjUwNzI1MTIwMDQ2WjAzMTEwLwYDVQQD Eyg2NjY4ZDQwNGExYjhkNWM0NmY4YjcwMWJmYjY1MGFhYzMwZDNjNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQBPLtcz5Vi81eNMg88WhqF/KMB0 j4zaVdbFiEQMH/m/e2o/qyc6ouSVfyhQL3P9TkcbPRSxfSBSqQ7kB74qOAO8wrJ8 3Q3kWEl45rKcYw4zKmb62VBoLLi5SA64IeLxUtUc/6MohW0QnWrw8dMdY5A8wDnP 2rnBmjea+LwixobIAeu74bjF3Zs+wge+PfS426OioyalfHk11/idYBUHUuuLRe5b P6lgBV7TmkUG9aSALTRqncsrausoLTghSQg0fafdmrXecOwZuYsM44wrf8J/Wfko DTGjhaUBeiHIkrwjpbrORsKk6Vjlf3UK7UltiLSE+mdfrhlUYcNseLNFqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZo1AShuNXEb4twG/tlCqww08SZMB8GA1UdIwQY MBaAFENUpBkiXV159KGuFSCjsaVtRSaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEt Njg4ZDUxYTQ0NDQ4LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEtNjg4ZDUxYTQ0NDQ4 LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIoxjd6z V3cqnOJ4umxWZ7z079Tdc6ihVTnZmtHDJiKucZsguM48kRfa5MiJVJhz6GaM1mLC KXbSsJxdttPjEHyp1Oo6on6AprC5iOapE5EGnRZmeXq8FDYrviKEb2NnfEY5/WnJ L0nmTBfxuEMa3jjHyrehGFO10quUZuVjLHQenDYXV3iZ0KnSHSZl36/hr5/aujfp kuZ1R4AnPWpChdmJ37dGe0QuJj6Yu6qdXpIjsAKkY3rq4zxlPvU7HhmYRylUatvI h/ECE7tSFSTr6ypwrEcgB0ppjx0pRVES9/0zktd3sTJathXbuZ/G2Hg8xC7s6eqk yoV5a0eZqkTQog== -----END CERTIFICATE-----Generated at Thu Jul 24 21:09:44 2025 by rpki-client