$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: nPUtJJ19esx6dTNqDlvp2lToklupdoqz5FD9W60DNsk= Subject key identifier: 16:A0:6F:E6:16:04:26:C7:91:31:98:F4:EF:09:40:10:34:3D:FB:C3 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 0196067804EAAEFC42EBF13D3138286E2136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 14E1 Signing time: Sat 05 Apr 2025 15:00:50 +0000 Manifest this update: Sat 05 Apr 2025 15:00:50 +0000 Manifest next update: Sun 06 Apr 2025 15:00:50 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: vrM8jyjW3da8eq9bYJarZZ+DE14frfJGEGPZALhYbVc=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:06:78:04:ea:ae:fc:42:eb:f1:3d:31:38:28:6e:21:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Apr 5 15:00:50 2025 GMT Not After : Apr 6 15:00:50 2025 GMT Subject: CN=16a06fe6160426c7913198f4ef094010343dfbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:fa:b4:8f:ae:85:ca:d9:b8:d6:dd:30:53: b1:6b:b8:1b:04:3f:0a:9f:1a:2e:fa:10:d3:78:8f: b8:d7:2b:8b:be:77:f7:80:67:9f:e5:09:9b:2f:e9: 61:94:bf:63:7e:3f:77:cc:61:84:1e:9d:d5:31:fc: 47:71:7e:f1:33:cd:bb:08:45:88:c5:4b:97:88:37: 31:3b:f8:1b:03:59:70:e4:fe:e5:2f:ec:e6:20:5a: 93:30:23:49:64:8c:13:d3:23:84:15:9b:ca:b6:e5: fd:2e:bc:cd:0f:4f:01:e6:d4:b7:08:10:6a:8a:17: 3e:43:6f:e5:36:7a:00:3c:20:7b:54:f2:a8:81:6e: f7:40:d6:36:74:29:52:cb:b9:48:22:56:3c:ad:70: e0:35:9a:b9:6f:ab:c3:00:15:37:72:49:00:53:e1: 63:01:1e:4e:f9:f5:bb:4e:76:41:47:44:9f:3f:94: 69:74:76:8b:96:c3:8a:ba:61:f3:c3:ea:9f:b7:47: 01:36:e4:22:9d:38:64:b5:19:40:39:f2:91:41:67: 15:ef:92:f7:a1:fc:2c:6c:e7:47:fd:2d:6d:56:91: e7:12:71:bc:48:71:5d:cc:d2:94:0b:77:11:ed:16: 61:82:81:f4:77:71:87:60:a3:34:47:3c:71:87:73: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:6F:E6:16:04:26:C7:91:31:98:F4:EF:09:40:10:34:3D:FB:C3 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:be:a1:83:bd:41:73:5d:74:30:84:cb:d9:57:b5:55:ee:6c: 60:12:2b:33:61:6b:cd:b3:ea:13:33:f8:5d:e0:3b:d6:33:e4: e3:96:bc:b3:de:c9:3b:dd:19:fb:ee:8c:59:f3:9f:80:e7:82: 1b:84:1f:2a:9a:cd:27:6e:c4:4c:a0:8b:06:42:13:75:77:62: 9e:f0:37:2f:26:40:87:8c:57:c3:07:5d:c0:f5:ec:7f:03:77: a8:5c:e0:46:6f:87:97:95:a9:da:b9:51:0c:c4:a2:9c:13:a4: 80:ca:0f:4c:94:84:f3:89:f0:61:cf:b7:d5:f2:e4:75:d0:71: 8c:1a:17:1d:e5:8d:40:bd:f2:67:dc:19:9e:97:97:88:3e:fb: bb:bf:7f:3b:a2:55:d5:2c:a9:45:de:d5:aa:96:64:ac:07:89: 18:0f:a8:49:2b:82:60:31:3a:f1:59:64:09:e6:bb:5b:e6:ae: f9:c9:3d:4e:38:43:5b:ad:b9:e7:ce:79:f4:23:83:b7:0d:de: 22:47:dd:a8:51:da:3c:a7:b8:75:98:be:02:d6:1d:52:da:7e: 5e:8d:37:61:13:df:6e:e1:32:d0:2a:02:6d:e4:c9:5a:01:04: 53:b1:9e:70:d8:91:17:53:da:24:a1:2b:56:0a:44:0c:a5:ab: b0:b9:71:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYGeATqrvxC6/E9MTgobiE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwNDA1MTUwMDUwWhcNMjUwNDA2MTUwMDUwWjAzMTEwLwYDVQQD EygxNmEwNmZlNjE2MDQyNmM3OTEzMTk4ZjRlZjA5NDAxMDM0M2RmYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoD6tI+uhcrZuNbdMFOxa7gbBD8K nxou+hDTeI+41yuLvnf3gGef5QmbL+lhlL9jfj93zGGEHp3VMfxHcX7xM827CEWI xUuXiDcxO/gbA1lw5P7lL+zmIFqTMCNJZIwT0yOEFZvKtuX9LrzND08B5tS3CBBq ihc+Q2/lNnoAPCB7VPKogW73QNY2dClSy7lIIlY8rXDgNZq5b6vDABU3ckkAU+Fj AR5O+fW7TnZBR0SfP5RpdHaLlsOKumHzw+qft0cBNuQinThktRlAOfKRQWcV75L3 ofwsbOdH/S1tVpHnEnG8SHFdzNKUC3cR7RZhgoH0d3GHYKM0Rzxxh3OznwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBagb+YWBCbHkTGY9O8JQBA0PfvDMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb6hg71B c110MITL2Ve1Ve5sYBIrM2FrzbPqEzP4XeA71jPk45a8s97JO90Z++6MWfOfgOeC G4QfKprNJ27ETKCLBkITdXdinvA3LyZAh4xXwwddwPXsfwN3qFzgRm+Hl5Wp2rlR DMSinBOkgMoPTJSE84nwYc+31fLkddBxjBoXHeWNQL3yZ9wZnpeXiD77u79/O6JV 1SypRd7VqpZkrAeJGA+oSSuCYDE68VlkCea7W+au+ck9TjhDW62558559CODtw3e IkfdqFHaPKe4dZi+AtYdUtp+Xo03YRPfbuEy0CoCbeTJWgEEU7GecNiRF1PaJKEr VgpEDKWrsLlxGg== -----END CERTIFICATE-----Generated at Sat Apr 5 22:44:53 2025 by rpki-client