$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: 4R6eFvDxcYn0DoxUHPWkwD6Bv9Yo9RpGETmU1pABeGY= Subject key identifier: 8F:C3:16:D6:C5:E4:AC:44:69:93:14:03:5D:E9:64:B6:F6:51:A9:95 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 01984C2F579773D83A6FB1F474AAE6BD0747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0DFC Signing time: Sun 27 Jul 2025 14:00:27 +0000 Manifest this update: Sun 27 Jul 2025 14:00:27 +0000 Manifest next update: Mon 28 Jul 2025 14:00:27 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: NXWVhUAmWfQV0+d+oMB2pDTPYFIOdYHWy8Y7nkJK9KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4c:2f:57:97:73:d8:3a:6f:b1:f4:74:aa:e6:bd:07:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jul 27 14:00:27 2025 GMT Not After : Jul 28 14:00:27 2025 GMT Subject: CN=8fc316d6c5e4ac44699314035de964b6f651a995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:37:96:43:56:aa:b4:75:8a:53:07:58:bf: d3:72:ee:da:d2:53:86:b4:0a:aa:3c:52:93:a2:7f: 73:c3:17:6c:24:ca:82:98:6e:05:c2:85:f4:60:40: bf:93:89:3a:ab:3d:3d:5e:19:12:c6:d4:5f:40:cc: 8f:cf:c2:2a:eb:f7:40:42:7c:fd:c6:b2:a4:e8:27: f7:c9:4f:12:19:0c:8d:d2:c4:ea:d3:ac:76:cd:70: 99:53:2b:6a:2c:73:2e:cf:33:44:6b:bb:33:a7:82: 61:6d:65:14:5e:a6:ab:be:85:70:55:f4:11:d1:a5: 91:0d:bc:f6:db:d2:d1:69:8b:d6:e8:92:6e:5b:70: 59:2b:2c:61:68:99:01:ab:6c:e6:f7:73:59:09:49: 16:7b:72:42:83:4e:ee:4e:27:ba:5b:4a:a6:a6:ef: 99:ed:a7:5a:19:d5:34:dd:44:e1:6e:f9:1c:8e:dc: 38:c1:99:ab:dc:c5:76:ce:69:06:b5:db:29:81:39: 9b:eb:a3:79:a9:3b:15:f2:7e:4f:a6:85:35:56:f1: 46:67:6d:12:52:0a:03:7e:91:39:a8:09:22:1a:a5: a3:cc:66:2a:95:66:31:be:17:2c:d9:ce:88:e9:d1: a8:b4:c5:fa:32:b5:ae:ba:c4:04:10:72:4b:f5:c0: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:16:D6:C5:E4:AC:44:69:93:14:03:5D:E9:64:B6:F6:51:A9:95 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:35:74:56:fc:9a:ae:99:64:6d:8c:b8:5d:7f:9f:e8:da:64: 98:08:bd:11:a9:a8:95:27:4b:71:b0:75:ef:02:c4:04:15:4b: be:ab:31:c6:32:50:a0:69:93:69:f7:ca:cd:8f:41:e9:e3:fb: a9:69:77:e0:3a:e2:cc:ba:fa:fd:61:80:0d:ac:03:6e:95:3b: 5c:4c:4b:5d:4d:3b:73:a8:00:22:1b:7d:06:27:68:22:c8:63: 28:cc:f7:85:16:e3:9b:40:01:de:70:37:77:e2:99:4a:c9:ac: 27:1a:0f:e6:f7:e7:49:8a:ad:cd:77:d3:f5:43:9e:16:8b:1d: 14:40:15:d6:db:8f:de:a6:75:9d:b1:80:b7:fb:9a:38:03:50: d0:60:72:3b:85:bc:88:32:6c:ae:c5:9f:26:6a:31:25:92:84: 4e:ee:32:62:e1:d3:f2:7f:89:96:83:e1:40:3a:3e:c6:32:c3: de:23:c9:80:3d:12:e3:33:16:eb:59:69:3d:09:9b:b0:0f:12: 5f:55:13:ab:bf:ed:cf:83:4e:5a:a8:a5:2f:09:b4:5a:61:aa: b8:74:28:0f:db:31:f6:83:00:f7:5b:19:68:a5:2a:6e:87:2c: b9:e2:60:70:e5:72:c8:6a:51:b6:c4:98:bb:0c:08:a0:95:d0: 77:26:06:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhML1eXc9g6b7H0dKrmvQdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNzI3MTQwMDI3WhcNMjUwNzI4MTQwMDI3WjAzMTEwLwYDVQQD Eyg4ZmMzMTZkNmM1ZTRhYzQ0Njk5MzE0MDM1ZGU5NjRiNmY2NTFhOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdk3lkNWqrR1ilMHWL/Tcu7a0lOG tAqqPFKTon9zwxdsJMqCmG4FwoX0YEC/k4k6qz09XhkSxtRfQMyPz8Iq6/dAQnz9 xrKk6Cf3yU8SGQyN0sTq06x2zXCZUytqLHMuzzNEa7szp4JhbWUUXqarvoVwVfQR 0aWRDbz229LRaYvW6JJuW3BZKyxhaJkBq2zm93NZCUkWe3JCg07uTie6W0qmpu+Z 7adaGdU03UThbvkcjtw4wZmr3MV2zmkGtdspgTmb66N5qTsV8n5PpoU1VvFGZ20S UgoDfpE5qAkiGqWjzGYqlWYxvhcs2c6I6dGotMX6MrWuusQEEHJL9cDn5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/DFtbF5KxEaZMUA13pZLb2UamVMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDV0Vvya rplkbYy4XX+f6NpkmAi9EamolSdLcbB17wLEBBVLvqsxxjJQoGmTaffKzY9B6eP7 qWl34DrizLr6/WGADawDbpU7XExLXU07c6gAIht9BidoIshjKMz3hRbjm0AB3nA3 d+KZSsmsJxoP5vfnSYqtzXfT9UOeFosdFEAV1tuP3qZ1nbGAt/uaOANQ0GByO4W8 iDJsrsWfJmoxJZKETu4yYuHT8n+JloPhQDo+xjLD3iPJgD0S4zMW61lpPQmbsA8S X1UTq7/tz4NOWqilLwm0WmGquHQoD9sx9oMA91sZaKUqbocsueJgcOVyyGpRtsSY uwwIoJXQdyYG+g== -----END CERTIFICATE-----Generated at Sun Jul 27 22:14:28 2025 by rpki-client