$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: VO5WIX+SfGu8+oil8o5ufSeiVMN0B2Zll80/mPFKKZg= Subject key identifier: ED:E3:4B:63:D8:44:58:CD:12:81:05:4E:FE:0C:CC:19:F7:5C:F1:A5 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019A1D2C4E9AFA1DB1422676C7551ABAB078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 16FF Signing time: Sat 25 Oct 2025 21:00:34 +0000 Manifest this update: Sat 25 Oct 2025 21:00:34 +0000 Manifest next update: Sun 26 Oct 2025 21:00:34 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: FPMcD4Cpj21iU7uCp/IVQtswG27svcJkcojcEvP5lW8=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 20:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:2c:4e:9a:fa:1d:b1:42:26:76:c7:55:1a:ba:b0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Oct 25 21:00:34 2025 GMT Not After : Oct 26 21:00:34 2025 GMT Subject: CN=ede34b63d84458cd1281054efe0ccc19f75cf1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:e7:93:03:bf:60:01:00:f6:34:6d:6a:0c: 1c:eb:69:24:ef:c4:92:36:1f:39:87:e4:2f:b5:5b: ac:65:85:e6:31:cd:9b:48:89:71:14:34:22:54:a1: 5f:9c:ff:23:8e:b8:fd:92:3e:be:de:89:d9:98:8d: c4:47:cc:42:87:2f:94:b3:77:29:92:73:cc:22:c1: 05:fd:e0:cf:6b:1d:58:99:2a:87:7f:c0:bf:bf:3a: bc:70:38:6c:55:5a:d6:29:32:b2:2b:90:24:db:b0: 98:5d:6a:67:a0:b6:72:c4:ef:d2:4e:b9:84:96:ca: 2b:fc:4c:8c:d1:f5:27:d0:d4:f0:1c:1c:6b:82:9c: 8b:6c:50:cf:63:8f:1b:af:28:4d:d2:fa:3e:74:9c: 2d:6c:20:5c:df:42:92:8d:ef:b7:23:15:64:f9:d5: d6:79:3b:aa:6f:ea:c4:ec:ab:79:bf:ec:db:04:13: f9:7b:47:51:47:cc:e0:8f:ea:db:5d:b3:59:92:04: cc:12:48:3e:c6:83:79:e3:3d:0e:ee:f5:81:1a:5f: ca:1e:d0:1b:c9:b1:b0:63:43:bb:de:9c:b9:c3:e3: 1d:97:a6:72:dd:9d:00:ec:e7:18:a9:3c:3b:f8:c9: e3:da:68:77:e6:68:11:2f:b9:1f:19:a9:6a:b0:61: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E3:4B:63:D8:44:58:CD:12:81:05:4E:FE:0C:CC:19:F7:5C:F1:A5 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3c:96:da:16:3a:fd:d6:7d:b3:e3:07:b7:9d:e1:e0:6a:a5: 3e:83:f5:80:cd:00:18:73:83:6c:53:35:56:71:19:c3:5a:26: 07:c2:0b:cb:1f:86:85:24:de:6b:03:a0:9b:ca:37:e5:c3:69: 49:27:ee:29:4f:c9:67:27:b7:6e:5b:50:15:09:e1:da:39:74: 78:28:3d:04:8c:8b:b3:da:d0:15:c6:95:e2:9a:76:35:98:ef: da:dc:64:ac:22:40:34:b4:17:14:39:0e:b2:f4:c8:cc:18:02: 8d:66:e9:ab:84:3d:95:b7:57:b9:a2:04:79:11:fb:74:d7:96: fd:52:98:ae:be:67:52:92:88:e2:c9:0b:7c:37:72:e6:06:3b: 64:7c:c6:26:44:63:4e:c3:38:b1:5a:0b:ba:36:1f:d8:36:dd: 03:af:12:26:a3:fc:09:ed:62:dc:ca:19:32:bc:c5:5e:a9:5b: ca:18:b3:1e:8f:37:01:49:e4:bf:04:89:ac:bf:68:e3:99:75: c3:cf:58:b6:81:cd:86:d2:76:ac:a2:f2:fb:18:16:e6:6d:77: 7a:2d:84:71:0e:1d:37:74:46:b0:16:4e:09:2c:36:4a:78:fd: 05:fc:84:1f:29:7c:fa:e5:c1:58:63:c7:01:eb:16:15:e5:b5: e5:04:36:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodLE6a+h2xQiZ2x1UaurB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMDI1MjEwMDM0WhcNMjUxMDI2MjEwMDM0WjAzMTEwLwYDVQQD EyhlZGUzNGI2M2Q4NDQ1OGNkMTI4MTA1NGVmZTBjY2MxOWY3NWNmMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/TnkwO/YAEA9jRtagwc62kk78SS Nh85h+QvtVusZYXmMc2bSIlxFDQiVKFfnP8jjrj9kj6+3onZmI3ER8xChy+Us3cp knPMIsEF/eDPax1YmSqHf8C/vzq8cDhsVVrWKTKyK5Ak27CYXWpnoLZyxO/STrmE lsor/EyM0fUn0NTwHBxrgpyLbFDPY48bryhN0vo+dJwtbCBc30KSje+3IxVk+dXW eTuqb+rE7Kt5v+zbBBP5e0dRR8zgj+rbXbNZkgTMEkg+xoN54z0O7vWBGl/KHtAb ybGwY0O73py5w+Mdl6Zy3Z0A7OcYqTw7+Mnj2mh35mgRL7kfGalqsGH3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3jS2PYRFjNEoEFTv4MzBn3XPGlMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzyW2hY6 /dZ9s+MHt53h4GqlPoP1gM0AGHODbFM1VnEZw1omB8ILyx+GhSTeawOgm8o35cNp SSfuKU/JZye3bltQFQnh2jl0eCg9BIyLs9rQFcaV4pp2NZjv2txkrCJANLQXFDkO svTIzBgCjWbpq4Q9lbdXuaIEeRH7dNeW/VKYrr5nUpKI4skLfDdy5gY7ZHzGJkRj TsM4sVoLujYf2DbdA68SJqP8Ce1i3MoZMrzFXqlbyhizHo83AUnkvwSJrL9o45l1 w89YtoHNhtJ2rKLy+xgW5m13ei2EcQ4dN3RGsBZOCSw2Snj9BfyEHyl8+uXBWGPH AesWFeW15QQ27A== -----END CERTIFICATE-----Generated at Sun Oct 26 05:41:50 2025 by rpki-client