$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: njvUzmSrnMv/qopVgd4LMJJcw2cG6WEfw0QV0DTr4B8= Subject key identifier: BC:61:AA:78:E9:C1:5F:07:73:0C:C5:56:38:9D:FA:82:47:A6:70:B6 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019A1F1ABCC3C22D943AD701A7F97221CEA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1700 Signing time: Sun 26 Oct 2025 06:00:37 +0000 Manifest this update: Sun 26 Oct 2025 06:00:37 +0000 Manifest next update: Mon 27 Oct 2025 06:00:37 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: 2c058I13yf6m4kSCLftnl7COTsHirX3PsugkoFYncDo=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:1a:bc:c3:c2:2d:94:3a:d7:01:a7:f9:72:21:ce:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Oct 26 06:00:37 2025 GMT Not After : Oct 27 06:00:37 2025 GMT Subject: CN=bc61aa78e9c15f07730cc556389dfa8247a670b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:6e:60:8b:f1:55:4f:57:a6:5e:db:16:f7: bb:ff:11:80:0b:76:3e:7a:96:06:b1:da:38:c2:19: d9:c5:37:05:c4:b5:78:86:c8:e8:ed:70:a7:18:c8: 87:1b:f1:98:d4:06:bb:26:f2:71:ae:96:ab:e4:30: 1a:92:c4:dc:64:ff:e0:c8:17:a6:78:6f:d6:3d:33: da:01:21:b4:71:2c:3e:5b:b0:3f:e6:f2:f2:d2:3e: f4:1e:ff:85:f6:a3:53:85:78:27:ef:b2:1e:cf:05: 7f:cc:88:e6:06:f6:42:7b:27:b2:ba:20:a4:d4:35: 13:76:23:ef:ed:4f:7f:9b:1d:81:de:16:25:88:d8: d4:44:38:c0:7d:b7:86:8a:28:f2:d9:31:1d:25:9b: 68:14:cb:45:23:96:d1:2b:ee:ab:88:27:ce:9e:7f: f3:dd:50:69:d7:2d:8d:ee:71:f0:28:e2:30:14:ac: 60:e8:0d:8e:53:5a:eb:9f:2c:4b:e9:fc:f6:b3:aa: 87:c6:c6:3a:77:f7:cd:af:72:1c:9d:d3:1d:94:fe: cd:69:ad:37:3e:19:ec:04:52:b1:41:84:3c:db:3d: 8c:30:24:73:78:1f:88:38:a4:4d:31:d9:d5:82:4b: 36:cd:39:7e:76:2a:00:69:94:b9:42:37:f8:31:75: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:AA:78:E9:C1:5F:07:73:0C:C5:56:38:9D:FA:82:47:A6:70:B6 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d6:ba:4a:93:fb:fc:f6:06:6b:d3:bb:ff:1a:e7:f9:21:16: 76:f8:a5:53:71:98:97:91:f5:67:42:67:72:92:06:28:e0:c8: 6c:15:58:82:57:ae:57:6c:73:a3:7d:6e:30:7b:e0:8a:54:b9: ee:0a:b7:f6:10:4f:02:d7:56:98:2d:a1:cb:cb:6c:48:18:80: 5b:73:1c:f9:46:33:9b:c9:17:68:1b:af:4e:37:0d:96:47:6d: fe:6c:c1:86:7f:f5:a1:b4:dc:46:c3:0c:de:f6:1b:c6:14:86: 34:9d:f0:62:67:0b:92:40:9d:9d:fb:e4:ab:db:d9:b0:22:5f: 34:0b:9d:fc:38:d5:fb:43:18:52:83:8c:b1:be:99:50:df:71: dd:35:95:f0:f8:25:7d:59:5c:14:97:52:be:6a:c0:5d:12:c6: 5c:cc:a3:46:73:58:ff:9e:bb:0a:62:d3:0e:f4:05:53:29:77: 2c:37:bb:28:79:ef:10:2e:e5:50:c7:2c:3c:f1:c0:c4:94:de: df:e6:cc:a3:c9:90:f8:2e:69:63:a6:8e:c2:06:3e:f5:da:1c: 32:eb:c1:09:5c:e5:97:ec:8f:06:7c:aa:b8:44:ba:88:c6:83: 2b:ef:c3:5b:6e:34:48:0f:4a:74:e6:10:36:5f:d9:8b:52:e6: e2:4b:24:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofGrzDwi2UOtcBp/lyIc6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMDI2MDYwMDM3WhcNMjUxMDI3MDYwMDM3WjAzMTEwLwYDVQQD EyhiYzYxYWE3OGU5YzE1ZjA3NzMwY2M1NTYzODlkZmE4MjQ3YTY3MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy9uYIvxVU9Xpl7bFve7/xGAC3Y+ epYGsdo4whnZxTcFxLV4hsjo7XCnGMiHG/GY1Aa7JvJxrpar5DAaksTcZP/gyBem eG/WPTPaASG0cSw+W7A/5vLy0j70Hv+F9qNThXgn77IezwV/zIjmBvZCeyeyuiCk 1DUTdiPv7U9/mx2B3hYliNjURDjAfbeGiijy2TEdJZtoFMtFI5bRK+6riCfOnn/z 3VBp1y2N7nHwKOIwFKxg6A2OU1rrnyxL6fz2s6qHxsY6d/fNr3IcndMdlP7Naa03 PhnsBFKxQYQ82z2MMCRzeB+IOKRNMdnVgks2zTl+dioAaZS5Qjf4MXXDcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxhqnjpwV8HcwzFVjid+oJHpnC2MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAota6SpP7 /PYGa9O7/xrn+SEWdvilU3GYl5H1Z0JncpIGKODIbBVYgleuV2xzo31uMHvgilS5 7gq39hBPAtdWmC2hy8tsSBiAW3Mc+UYzm8kXaBuvTjcNlkdt/mzBhn/1obTcRsMM 3vYbxhSGNJ3wYmcLkkCdnfvkq9vZsCJfNAud/DjV+0MYUoOMsb6ZUN9x3TWV8Pgl fVlcFJdSvmrAXRLGXMyjRnNY/567CmLTDvQFUyl3LDe7KHnvEC7lUMcsPPHAxJTe 3+bMo8mQ+C5pY6aOwgY+9docMuvBCVzll+yPBnyquES6iMaDK+/DW240SA9KdOYQ Nl/Zi1Lm4kskIA== -----END CERTIFICATE-----Generated at Sun Oct 26 07:35:04 2025 by rpki-client