$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: 0NrnqcFQuxbGIv+Sanc+RIrue4t2Lw6N+gkug3+GNuw= Subject key identifier: 2F:5F:6F:E1:39:78:C8:1E:4F:63:A4:45:7F:8D:B2:A5:F6:AC:F8:53 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 01964DEC9E37894E651577003D1A66CDBD36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 1252 Signing time: Sat 19 Apr 2025 12:01:14 +0000 Manifest this update: Sat 19 Apr 2025 12:01:14 +0000 Manifest next update: Sun 20 Apr 2025 12:01:14 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 9/tYnAJnJfCVlmI+rcwRKq2Ro+uW7qOyQ6rWaStDA74=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4d:ec:9e:37:89:4e:65:15:77:00:3d:1a:66:cd:bd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Apr 19 12:01:14 2025 GMT Not After : Apr 20 12:01:14 2025 GMT Subject: CN=2f5f6fe13978c81e4f63a4457f8db2a5f6acf853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:19:29:28:54:05:c2:7b:ce:f6:c9:f9:8c: 1b:f8:ca:d0:d9:48:f9:8b:aa:45:ab:db:90:ea:c2: e8:77:65:09:71:de:62:8c:49:b6:87:0b:cc:d7:67: a3:8e:f5:e6:4a:a2:b3:2d:fc:2d:2a:db:52:bf:a1: e4:61:a2:31:b1:1d:69:5e:de:c3:a4:2f:e1:d5:89: a5:08:2c:7e:15:0b:02:f8:1f:bf:84:8f:26:05:30: 75:aa:53:05:c6:77:b2:5b:6e:fc:62:df:31:18:ff: 48:6d:dc:bd:6d:52:a4:bc:df:6e:be:69:9d:3b:30: 15:33:b0:4b:e8:33:9f:e4:95:3f:45:e2:e5:d5:0f: 7b:8e:da:61:c5:e6:15:44:eb:8c:c5:d9:9f:8a:93: 16:9f:cd:ca:9f:67:51:ff:0c:3e:f5:c7:4e:04:ea: ee:c9:7d:65:8a:aa:8a:99:b4:fa:fa:cb:bc:fb:d8: fe:ad:64:b9:82:3b:ff:ff:31:80:96:ea:53:11:3b: 97:a7:d3:97:d5:1f:ec:7b:10:c3:b4:8b:f5:6e:9d: 64:3b:f9:46:49:d6:ad:11:6f:c6:bb:98:c7:b9:75: 31:01:3f:0f:45:26:f1:70:6a:69:07:cf:6e:b2:b7: 1f:d5:4d:ff:76:83:a3:f6:9c:bc:b9:42:77:6e:8c: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5F:6F:E1:39:78:C8:1E:4F:63:A4:45:7F:8D:B2:A5:F6:AC:F8:53 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:db:02:d0:6f:a9:52:96:d7:e4:73:26:7f:5c:5d:f5:fb: 73:86:19:d8:05:dd:51:7d:70:75:7e:ef:f6:59:33:fb:50:50: b3:bf:98:b5:56:53:a3:42:7e:7f:db:04:0b:4e:29:b5:92:0f: 4f:0c:7e:71:70:aa:39:0b:56:7b:21:7b:ae:af:b9:af:7d:1c: 6a:62:c7:39:5d:60:d1:1b:f1:6a:f1:76:ce:8b:42:d0:01:cf: ca:cf:6e:d4:57:a9:01:b4:31:64:d9:e5:13:3b:42:ab:e4:97: e7:6e:48:0a:08:fb:bc:86:a5:de:3a:5f:e5:94:e9:87:47:51: 2e:72:1b:a3:02:e2:5a:b9:7f:fe:d4:1a:37:a3:d6:28:0d:16: 7f:df:80:f7:b0:d4:c3:7c:95:a1:c9:bb:87:bb:03:9d:5d:4a: b5:ec:c0:8e:8d:26:d1:e2:2c:a6:18:77:85:0b:45:4f:b9:f1: 70:9d:8b:4a:53:0a:24:36:fa:c0:ad:d2:3b:3f:ad:b5:6c:7e: e5:1d:e0:50:52:6d:88:d6:0f:25:31:1b:9e:d2:af:23:12:6b: d5:58:a7:e4:ab:4e:a2:dc:3a:ae:7e:b5:00:68:d4:fd:b0:72: 7d:72:11:5e:f8:79:64:e1:46:c7:49:06:c7:b3:b8:43:7b:f9: 46:9d:5b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZN7J43iU5lFXcAPRpmzb02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNDE5MTIwMTE0WhcNMjUwNDIwMTIwMTE0WjAzMTEwLwYDVQQD EygyZjVmNmZlMTM5NzhjODFlNGY2M2E0NDU3ZjhkYjJhNWY2YWNmODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZMZKShUBcJ7zvbJ+Ywb+MrQ2Uj5 i6pFq9uQ6sLod2UJcd5ijEm2hwvM12ejjvXmSqKzLfwtKttSv6HkYaIxsR1pXt7D pC/h1YmlCCx+FQsC+B+/hI8mBTB1qlMFxneyW278Yt8xGP9Ibdy9bVKkvN9uvmmd OzAVM7BL6DOf5JU/ReLl1Q97jtphxeYVROuMxdmfipMWn83Kn2dR/ww+9cdOBOru yX1liqqKmbT6+su8+9j+rWS5gjv//zGAlupTETuXp9OX1R/sexDDtIv1bp1kO/lG SdatEW/Gu5jHuXUxAT8PRSbxcGppB89usrcf1U3/doOj9py8uUJ3boxMbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9fb+E5eMgeT2OkRX+NsqX2rPhTMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj87bAtBv qVKW1+RzJn9cXfX7c4YZ2AXdUX1wdX7v9lkz+1BQs7+YtVZTo0J+f9sEC04ptZIP Twx+cXCqOQtWeyF7rq+5r30camLHOV1g0RvxavF2zotC0AHPys9u1FepAbQxZNnl EztCq+SX525ICgj7vIal3jpf5ZTph0dRLnIbowLiWrl//tQaN6PWKA0Wf9+A97DU w3yVocm7h7sDnV1KtezAjo0m0eIsphh3hQtFT7nxcJ2LSlMKJDb6wK3SOz+ttWx+ 5R3gUFJtiNYPJTEbntKvIxJr1Vin5KtOotw6rn61AGjU/bByfXIRXvh5ZOFGx0kG x7O4Q3v5Rp1bAg== -----END CERTIFICATE-----Generated at Sat Apr 19 14:11:48 2025 by rpki-client