$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: t7tQgWo8U/xNzL6hIRbbclQTtGMQ7kGxFb43QJVNTws= Subject key identifier: A2:EE:67:B9:F1:FE:64:98:F5:78:A0:52:3A:B3:C9:F2:79:DF:79:22 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01992FA3A4FF86D77540FBBB5D190FF68B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1684 Signing time: Tue 09 Sep 2025 18:01:17 +0000 Manifest this update: Tue 09 Sep 2025 18:01:17 +0000 Manifest next update: Wed 10 Sep 2025 18:01:17 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: MpyUDAnB3s9VqkFDRoAK58o3lIid+c5uvNMrWezwr9Q=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:a3:a4:ff:86:d7:75:40:fb:bb:5d:19:0f:f6:8b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Sep 9 18:01:17 2025 GMT Not After : Sep 10 18:01:17 2025 GMT Subject: CN=a2ee67b9f1fe6498f578a0523ab3c9f279df7922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:ff:be:c1:4f:e6:0a:5d:b6:e4:99:90:ce: 90:70:39:9f:33:92:e7:19:60:4a:09:a1:e5:91:14: bc:d1:e2:03:e2:ce:dc:5d:33:81:08:51:a4:95:da: 5c:2b:54:67:81:a5:2f:fe:9a:aa:06:8f:4c:02:e8: 36:84:bc:2a:15:87:57:93:d6:e3:8c:70:2c:c3:08: 39:d5:a7:4a:71:73:b6:ca:ff:47:3b:f8:aa:77:35: 45:48:45:94:27:7b:54:b5:a2:b2:0c:64:f6:ff:e0: 63:b9:04:c8:59:0b:36:6a:f9:91:27:44:58:9d:6d: 22:1e:a1:ae:05:0e:04:b8:9e:00:02:07:07:aa:5a: 8e:52:4c:ed:0e:ac:1c:7e:33:95:56:78:60:e5:26: 63:b5:be:a5:e0:b9:c5:57:a2:a4:06:d5:bf:3f:ad: 60:37:27:b4:62:51:29:16:bc:dd:7a:6f:78:28:b8: 1c:55:83:66:3c:4b:d2:41:b7:45:fa:bc:8f:44:de: 2c:47:93:f0:0c:2a:20:2d:11:a2:e2:bb:32:f8:8a: 02:07:e5:6e:89:8b:da:74:82:d9:70:2c:1b:13:51: 4b:35:7e:62:30:9e:17:6d:f4:3c:f6:f0:97:f8:82: 1c:fd:d3:9a:86:76:90:d8:f4:86:0e:33:b9:a8:79: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:67:B9:F1:FE:64:98:F5:78:A0:52:3A:B3:C9:F2:79:DF:79:22 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0f:5f:b7:f8:b7:f1:15:74:0b:45:d4:af:22:54:b7:76:99: f8:a5:d7:d7:be:c6:c3:0d:95:f5:a7:68:da:83:aa:93:64:98: 58:3d:a5:9b:37:80:56:41:90:a8:26:5f:16:7e:aa:53:0b:d1: cf:78:35:70:30:ee:36:bd:68:7b:b3:c1:da:2d:ab:51:e5:59: 6a:72:3a:ea:ee:19:ff:83:76:8b:56:7c:da:d8:33:3e:66:75: 77:c9:5e:e2:c1:be:60:22:ad:c6:6b:c3:2b:05:65:d7:45:60: 37:f2:fe:65:71:59:4d:00:e6:07:cc:b6:74:5c:b7:70:c9:3c: b6:8b:e7:75:1e:a9:65:d6:37:a8:db:3c:82:5c:00:18:7a:1c: 74:6e:ff:d2:54:42:d9:d1:d0:2d:6b:3c:55:c2:0e:6c:3d:aa: 24:21:c0:4d:e5:ea:a1:45:4b:c7:b1:cc:35:92:e1:cc:84:2c: fc:40:52:c5:43:7b:55:a5:c9:01:1d:ca:c7:61:d3:7a:ae:9c: 1a:b5:cf:cd:52:a3:bc:02:00:76:f0:ad:01:a8:dc:30:4c:20: 4d:70:9a:ab:34:66:13:81:5f:c8:fc:f0:e0:ae:aa:41:39:aa: 68:0e:a0:86:2f:1b:64:01:ea:a6:a3:36:93:22:8a:64:b0:69: 8e:e8:7f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvo6T/htd1QPu7XRkP9ot9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwOTA5MTgwMTE3WhcNMjUwOTEwMTgwMTE3WjAzMTEwLwYDVQQD EyhhMmVlNjdiOWYxZmU2NDk4ZjU3OGEwNTIzYWIzYzlmMjc5ZGY3OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYL/vsFP5gpdtuSZkM6QcDmfM5Ln GWBKCaHlkRS80eID4s7cXTOBCFGkldpcK1RngaUv/pqqBo9MAug2hLwqFYdXk9bj jHAswwg51adKcXO2yv9HO/iqdzVFSEWUJ3tUtaKyDGT2/+BjuQTIWQs2avmRJ0RY nW0iHqGuBQ4EuJ4AAgcHqlqOUkztDqwcfjOVVnhg5SZjtb6l4LnFV6KkBtW/P61g Nye0YlEpFrzdem94KLgcVYNmPEvSQbdF+ryPRN4sR5PwDCogLRGi4rsy+IoCB+Vu iYvadILZcCwbE1FLNX5iMJ4XbfQ89vCX+IIc/dOahnaQ2PSGDjO5qHl6rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLuZ7nx/mSY9XigUjqzyfJ533kiMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQ9ft/i3 8RV0C0XUryJUt3aZ+KXX177Gww2V9ado2oOqk2SYWD2lmzeAVkGQqCZfFn6qUwvR z3g1cDDuNr1oe7PB2i2rUeVZanI66u4Z/4N2i1Z82tgzPmZ1d8le4sG+YCKtxmvD KwVl10VgN/L+ZXFZTQDmB8y2dFy3cMk8tovndR6pZdY3qNs8glwAGHocdG7/0lRC 2dHQLWs8VcIObD2qJCHATeXqoUVLx7HMNZLhzIQs/EBSxUN7VaXJAR3Kx2HTeq6c GrXPzVKjvAIAdvCtAajcMEwgTXCaqzRmE4FfyPzw4K6qQTmqaA6ghi8bZAHqpqM2 kyKKZLBpjuh/zQ== -----END CERTIFICATE-----Generated at Tue Sep 9 20:51:18 2025 by rpki-client