$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: 9+he6e5/EV292iCLJunUN8a94WwuFa8O0AmS1LtHqDA= Subject key identifier: FA:86:25:C9:23:5E:1C:0F:30:2F:25:5B:E9:54:52:52:FC:6B:34:32 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019838052A86DC927C3F0EB821BEFD6BE233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0CA2 Signing time: Wed 23 Jul 2025 16:01:59 +0000 Manifest this update: Wed 23 Jul 2025 16:01:59 +0000 Manifest next update: Thu 24 Jul 2025 16:01:59 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: A5DsHdxjGronY1SlJmY-avOq7l0.roa (hash: TRbOBB2FpSmRLzGWMLyHgzyzq9dao9eG06ouQ8rU7ko=) 4: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 5: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: WgCXIP/JsfIff2lr7OHTCaSTRm5W6z+3Lr5syfnNAJ0=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: fhK3spdizh-j08bDgQWAIWcvZm4.roa (hash: Nz0rdH67w5QKkf0wMH2IazVmlZq7Iwuz9Y5nbjtBWvw=) 9: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (hash: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=) 10: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 11: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 12: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 13: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:05:2a:86:dc:92:7c:3f:0e:b8:21:be:fd:6b:e2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jul 23 16:01:59 2025 GMT Not After : Jul 24 16:01:59 2025 GMT Subject: CN=fa8625c9235e1c0f302f255be9545252fc6b3432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:5d:81:26:9f:26:9f:2f:18:ed:e3:17:cf: 2a:58:ac:cb:26:b3:3e:27:76:24:3b:ef:69:93:d7: 94:3a:84:1f:21:0c:bd:91:3d:b7:e2:18:bb:9f:39: 82:d9:bc:2d:d6:f1:e9:40:c2:f1:7f:24:d2:b2:cb: 1a:92:26:79:cf:a0:47:61:58:33:40:7a:6a:88:15: b5:81:f8:d4:44:39:bb:bd:f5:aa:19:6b:41:23:d3: 0d:49:4c:ef:41:8e:88:e2:aa:e7:08:18:19:d4:4a: 20:8c:23:de:aa:e5:55:f0:ee:d8:5b:da:b3:8a:96: aa:50:8b:30:75:73:84:96:91:fa:f0:f1:62:f9:6f: 48:19:91:aa:1f:db:00:68:50:6e:be:ba:72:ff:ac: 02:63:a6:45:e5:b3:bb:66:de:3f:1b:65:f3:05:7a: 44:1b:7a:c2:4e:48:88:10:b6:4d:d7:0a:1e:6c:f4: 00:78:ee:0f:99:7c:82:6e:4d:b6:95:51:a1:cf:6f: 2f:95:ac:59:ee:e7:22:f7:49:23:65:39:38:d1:cd: 8d:f8:ff:96:ca:0a:be:53:38:b6:7a:0f:30:2c:44: 03:f0:4e:65:73:02:bb:cf:cf:d5:0c:5b:95:3e:36: 5f:e5:a4:60:fa:ab:6b:ed:ef:dd:49:b1:36:dd:76: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:25:C9:23:5E:1C:0F:30:2F:25:5B:E9:54:52:52:FC:6B:34:32 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ea:bc:63:f3:94:af:04:94:81:c0:a0:68:fa:11:34:40:8d: 3a:be:3b:0b:0a:fd:7a:9c:86:bb:f5:3d:0d:8a:dd:44:66:a1: a5:69:90:11:9e:c1:e2:09:7a:5a:d6:7d:3c:30:0a:02:88:34: 8a:fa:83:51:47:dc:0a:99:21:78:47:e7:92:22:d7:b9:0f:02: b2:0e:7f:f1:9b:57:b4:2b:4b:8c:ac:50:aa:ea:ff:7a:3d:f9: 0e:20:8c:72:f2:6b:91:d6:5e:0d:39:29:ba:a9:1f:14:95:18: 2c:8f:da:8f:b4:58:3e:2d:08:a1:25:33:6c:0f:45:9a:4c:75: f6:ae:0a:25:82:c6:5f:01:db:27:27:b0:b0:43:38:11:d5:34: ca:e4:55:14:8e:ef:82:2b:b1:dd:90:e8:45:cc:1a:46:38:9c: 61:6d:15:0b:64:03:d7:a2:89:42:e2:6b:a3:0f:e4:7d:4e:41: 1d:9f:cf:64:32:08:96:f3:43:e7:0b:bc:fe:eb:12:c5:5e:22: 7a:d1:45:57:11:16:34:87:52:ac:38:95:2b:26:22:16:be:47: 19:f4:45:ca:98:83:8b:d2:40:ee:3f:74:26:02:aa:e6:44:6e: 9a:b5:2a:d2:eb:80:7a:38:7e:2e:e4:33:66:9e:b8:d5:bd:8c: dd:db:18:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4BSqG3JJ8Pw64Ib79a+IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwNzIzMTYwMTU5WhcNMjUwNzI0MTYwMTU5WjAzMTEwLwYDVQQD EyhmYTg2MjVjOTIzNWUxYzBmMzAyZjI1NWJlOTU0NTI1MmZjNmIzNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqFdgSafJp8vGO3jF88qWKzLJrM+ J3YkO+9pk9eUOoQfIQy9kT234hi7nzmC2bwt1vHpQMLxfyTSsssakiZ5z6BHYVgz QHpqiBW1gfjURDm7vfWqGWtBI9MNSUzvQY6I4qrnCBgZ1EogjCPequVV8O7YW9qz ipaqUIswdXOElpH68PFi+W9IGZGqH9sAaFBuvrpy/6wCY6ZF5bO7Zt4/G2XzBXpE G3rCTkiIELZN1woebPQAeO4PmXyCbk22lVGhz28vlaxZ7uci90kjZTk40c2N+P+W ygq+Uzi2eg8wLEQD8E5lcwK7z8/VDFuVPjZf5aRg+qtr7e/dSbE23XaUtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqGJckjXhwPMC8lW+lUUlL8azQyMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuq8Y/OU rwSUgcCgaPoRNECNOr47Cwr9epyGu/U9DYrdRGahpWmQEZ7B4gl6WtZ9PDAKAog0 ivqDUUfcCpkheEfnkiLXuQ8Csg5/8ZtXtCtLjKxQqur/ej35DiCMcvJrkdZeDTkp uqkfFJUYLI/aj7RYPi0IoSUzbA9Fmkx19q4KJYLGXwHbJyewsEM4EdU0yuRVFI7v giux3ZDoRcwaRjicYW0VC2QD16KJQuJrow/kfU5BHZ/PZDIIlvND5wu8/usSxV4i etFFVxEWNIdSrDiVKyYiFr5HGfRFypiDi9JA7j90JgKq5kRumrUq0uuAejh+LuQz Zp641b2M3dsYLA== -----END CERTIFICATE-----Generated at Wed Jul 23 23:21:06 2025 by rpki-client