$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: BnBJPvJ0Nrm5z6NuEg3T9SvagMZmVlkQzUiJVTrIzYQ= Subject key identifier: 37:44:FA:4D:C3:B1:00:A1:0C:A4:4F:B1:90:56:4B:BF:48:89:BA:FE Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 01983FF41D1E83D4E1900269D5ED70C8D0A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 11DB Signing time: Fri 25 Jul 2025 05:00:19 +0000 Manifest this update: Fri 25 Jul 2025 05:00:19 +0000 Manifest next update: Sat 26 Jul 2025 05:00:19 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 2xFXk4/wXjyuJGQegK8W6RgpGAcmFQGsFsfUTJbvpz8=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 05:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3f:f4:1d:1e:83:d4:e1:90:02:69:d5:ed:70:c8:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jul 25 05:00:19 2025 GMT Not After : Jul 26 05:00:19 2025 GMT Subject: CN=3744fa4dc3b100a10ca44fb190564bbf4889bafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:17:cf:32:ab:e4:a6:13:fd:3d:ce:75:05: 6c:b4:cb:8b:32:53:38:e7:ce:7a:35:5f:31:eb:56: 8e:21:ae:b1:1a:66:e6:47:15:b5:be:03:01:ff:e1: 57:f8:9c:63:4b:08:6b:2c:62:de:02:77:68:4d:86: 10:21:85:76:76:8c:3d:95:d3:6c:6f:d8:a3:76:3f: 8d:fb:47:08:ba:28:40:55:2b:c2:c8:c7:bf:25:38: e5:b4:ce:08:34:af:4c:2f:6f:37:d1:36:9c:4a:c7: 00:91:57:50:5b:53:5b:55:6f:e4:db:15:7c:db:36: ba:90:54:11:ce:4f:18:fc:e5:e2:97:d5:f8:6d:7b: c8:ea:55:2c:e0:25:67:99:ee:fb:30:9c:f2:b9:6c: 7c:63:84:7a:07:44:4a:40:81:ff:d0:b4:66:38:6d: 8e:37:2d:78:7a:a3:38:94:ba:89:1e:87:d5:b8:a6: b6:52:fa:bf:89:1d:af:24:69:23:fc:32:04:8d:d7: 9d:01:ff:99:9b:7c:6a:48:16:43:ec:b7:36:12:66: 36:0c:98:75:10:00:a5:dc:da:7f:3c:13:28:30:72: 27:d4:61:de:f5:cb:c7:2a:ca:00:a7:26:87:c4:50: fa:ee:e4:87:d4:a5:28:a4:96:e5:99:c9:c8:7c:48: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:44:FA:4D:C3:B1:00:A1:0C:A4:4F:B1:90:56:4B:BF:48:89:BA:FE X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:71:56:de:21:80:c4:ac:82:ea:5c:b4:12:70:2f:06:a3:1a: ae:44:6e:90:f3:d7:2d:b5:de:7c:8b:25:df:5b:95:16:88:9d: a3:86:a0:8b:4b:a7:2b:19:28:a3:c1:31:87:62:eb:97:da:cd: 61:92:70:06:4a:d6:7f:7e:ff:73:0c:73:41:04:c2:11:ea:2a: 16:d1:0a:94:e8:e4:d1:ee:62:ab:92:e5:ea:f3:ab:b8:69:42: ef:88:7e:23:1e:ad:b7:95:f6:05:55:dd:43:eb:96:6a:ad:ef: e8:dd:c9:24:fe:2e:d2:d6:4f:84:11:f1:4e:a8:66:e0:87:1e: 3c:dc:cc:1f:45:18:03:97:19:65:92:43:ba:0f:c8:d2:2a:25: 49:91:6d:7e:9e:48:9e:e4:4e:4d:54:b3:47:91:8e:ae:d1:d7: 40:11:c6:06:35:b1:7e:f4:ff:f2:8d:16:9e:ab:90:d0:08:28: a9:3a:fb:bd:3d:82:74:57:9a:39:88:53:68:96:1b:41:6a:22: ea:23:3e:44:2c:94:78:cc:83:01:1d:47:10:b5:67:aa:f2:6b: cc:f7:bc:82:2a:73:2c:d2:13:99:65:32:57:b7:0e:7f:aa:7f: f8:44:18:93:26:31:82:65:b4:2c:3a:40:26:58:ef:08:4b:47: 0b:90:bc:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg/9B0eg9ThkAJp1e1wyNCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUwNzI1MDUwMDE5WhcNMjUwNzI2MDUwMDE5WjAzMTEwLwYDVQQD EygzNzQ0ZmE0ZGMzYjEwMGExMGNhNDRmYjE5MDU2NGJiZjQ4ODliYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNcXzzKr5KYT/T3OdQVstMuLMlM4 5856NV8x61aOIa6xGmbmRxW1vgMB/+FX+JxjSwhrLGLeAndoTYYQIYV2dow9ldNs b9ijdj+N+0cIuihAVSvCyMe/JTjltM4INK9ML2830TacSscAkVdQW1NbVW/k2xV8 2za6kFQRzk8Y/OXil9X4bXvI6lUs4CVnme77MJzyuWx8Y4R6B0RKQIH/0LRmOG2O Ny14eqM4lLqJHofVuKa2Uvq/iR2vJGkj/DIEjdedAf+Zm3xqSBZD7Lc2EmY2DJh1 EACl3Np/PBMoMHIn1GHe9cvHKsoApyaHxFD67uSH1KUopJblmcnIfEjlfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdE+k3DsQChDKRPsZBWS79Iibr+MB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXFW3iGA xKyC6ly0EnAvBqMarkRukPPXLbXefIsl31uVFoido4agi0unKxkoo8Exh2Lrl9rN YZJwBkrWf37/cwxzQQTCEeoqFtEKlOjk0e5iq5Ll6vOruGlC74h+Ix6tt5X2BVXd Q+uWaq3v6N3JJP4u0tZPhBHxTqhm4IcePNzMH0UYA5cZZZJDug/I0iolSZFtfp5I nuROTVSzR5GOrtHXQBHGBjWxfvT/8o0WnquQ0AgoqTr7vT2CdFeaOYhTaJYbQWoi 6iM+RCyUeMyDAR1HELVnqvJrzPe8gipzLNITmWUyV7cOf6p/+EQYkyYxgmW0LDpA JljvCEtHC5C8mA== -----END CERTIFICATE-----Generated at Fri Jul 25 12:42:02 2025 by rpki-client