$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: 29mCUK/HiJV1oGOpC5edKhNscv+vUEtWF+qnfbIW4HU= Subject key identifier: 5A:62:67:33:C4:4E:63:18:48:49:E1:D8:D3:E1:8C:42:B5:39:D2:BE Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 01983495295F7794EED0804AECEB8964DD93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 134E Signing time: Wed 23 Jul 2025 00:00:47 +0000 Manifest this update: Wed 23 Jul 2025 00:00:47 +0000 Manifest next update: Thu 24 Jul 2025 00:00:47 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: /p5TmWSpQXaisgmWrYdsNkhZdk/ss7pBOffXB29wAUI=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:95:29:5f:77:94:ee:d0:80:4a:ec:eb:89:64:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jul 23 00:00:47 2025 GMT Not After : Jul 24 00:00:47 2025 GMT Subject: CN=5a626733c44e63184849e1d8d3e18c42b539d2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:33:47:88:eb:d1:78:3a:bf:71:2a:b1:1d: 74:59:a6:58:66:0e:81:30:8d:5f:2e:93:38:18:b3: fd:7d:8d:bf:47:9c:81:7a:85:97:19:a6:fd:f8:c8: 61:a0:ce:bc:74:07:16:71:16:c6:da:6e:72:b1:40: 25:d4:2c:cb:b1:0e:47:33:c9:dd:78:4f:76:2d:f1: 87:e0:4e:f7:b2:fe:4f:6e:02:b2:c7:d3:e2:76:94: 93:d0:f1:bf:be:cc:f5:d0:a9:5c:b5:2e:aa:6c:d9: 6a:7b:83:25:93:a5:01:a0:a6:fc:71:a9:7c:c1:3b: 74:47:45:82:a0:c0:70:a9:dd:a5:1d:77:7c:cc:34: 01:99:92:de:c8:aa:2f:03:b1:75:67:ea:22:6e:3c: 76:b9:86:e2:26:1b:4d:6f:32:d3:66:84:6c:31:b1: 75:69:63:c6:57:7f:fc:cf:02:da:73:fc:d7:32:34: 6d:90:e1:a3:7e:39:b4:2e:f2:92:af:61:2b:18:a0: bf:a0:54:65:de:88:4f:71:be:3c:ee:7f:9d:9f:6a: a3:34:4c:88:2e:fa:43:2e:37:60:c8:0c:ef:32:af: 8b:1d:4c:b4:a3:98:51:00:b8:b8:ef:21:84:16:c5: c3:f0:8a:52:e8:95:bf:d7:e2:e1:3c:70:09:95:7c: ec:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:62:67:33:C4:4E:63:18:48:49:E1:D8:D3:E1:8C:42:B5:39:D2:BE X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:91:5a:0b:4a:fc:07:ff:30:f1:3f:36:ac:7f:09:8b:31:d0: cd:ee:bf:c9:8a:6b:2b:a2:0e:73:35:e2:69:63:f0:39:c2:8b: d2:ff:6a:e7:0c:30:f5:c6:e0:0d:d8:f2:64:d2:12:3c:45:0a: 37:95:46:f8:92:25:ee:bc:fc:06:ad:04:6c:9a:0c:7b:11:e4: a3:3c:f5:c0:e9:1c:d2:66:52:75:d8:e0:0c:86:4d:99:ef:f5: 36:19:1c:7d:2a:02:51:82:4e:03:7f:2f:a3:45:8c:c1:db:e7: 47:9e:a8:f6:f9:89:e9:ba:e8:b4:90:52:72:e1:7a:15:af:77: 38:15:d8:69:6a:76:93:40:a7:3e:ed:18:bb:09:bc:f5:c5:49: a6:24:f4:47:50:89:0e:35:fc:26:3b:e4:52:12:ca:c4:6f:22: 0c:8b:7e:4d:16:a3:c7:19:c1:60:64:4e:b9:3d:22:cb:a7:ae: c1:37:c7:3d:f0:2b:00:08:65:9a:85:93:30:b6:15:fe:47:bf: 44:0c:dd:40:4e:0d:04:64:c2:28:8e:bd:c8:5d:ff:35:64:52: 3c:7e:41:43:4e:68:aa:12:95:21:87:33:3f:17:a2:cb:87:58: ee:9a:95:14:9a:d9:f1:d1:22:27:73:6f:e8:84:ba:00:05:cc: d2:5e:97:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0lSlfd5Tu0IBK7OuJZN2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNzIzMDAwMDQ3WhcNMjUwNzI0MDAwMDQ3WjAzMTEwLwYDVQQD Eyg1YTYyNjczM2M0NGU2MzE4NDg0OWUxZDhkM2UxOGM0MmI1MzlkMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8MzR4jr0Xg6v3EqsR10WaZYZg6B MI1fLpM4GLP9fY2/R5yBeoWXGab9+MhhoM68dAcWcRbG2m5ysUAl1CzLsQ5HM8nd eE92LfGH4E73sv5PbgKyx9PidpST0PG/vsz10KlctS6qbNlqe4Mlk6UBoKb8cal8 wTt0R0WCoMBwqd2lHXd8zDQBmZLeyKovA7F1Z+oibjx2uYbiJhtNbzLTZoRsMbF1 aWPGV3/8zwLac/zXMjRtkOGjfjm0LvKSr2ErGKC/oFRl3ohPcb487n+dn2qjNEyI LvpDLjdgyAzvMq+LHUy0o5hRALi47yGEFsXD8IpS6JW/1+LhPHAJlXzsmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpiZzPETmMYSEnh2NPhjEK1OdK+MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpFaC0r8 B/8w8T82rH8JizHQze6/yYprK6IOczXiaWPwOcKL0v9q5www9cbgDdjyZNISPEUK N5VG+JIl7rz8Bq0EbJoMexHkozz1wOkc0mZSddjgDIZNme/1NhkcfSoCUYJOA38v o0WMwdvnR56o9vmJ6brotJBScuF6Fa93OBXYaWp2k0CnPu0Yuwm89cVJpiT0R1CJ DjX8JjvkUhLKxG8iDIt+TRajxxnBYGROuT0iy6euwTfHPfArAAhlmoWTMLYV/ke/ RAzdQE4NBGTCKI69yF3/NWRSPH5BQ05oqhKVIYczPxeiy4dY7pqVFJrZ8dEiJ3Nv 6IS6AAXM0l6XnA== -----END CERTIFICATE-----Generated at Wed Jul 23 06:03:07 2025 by rpki-client