$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: CAWbSJoeKiS9pGKBq5o7MD4hP0heSj5FftYO6Q+LZjM= Subject key identifier: BA:60:5B:CB:6E:CE:5D:4E:C6:62:F1:2D:C9:C5:C8:13:C8:D2:4B:D6 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 0197451D9E38A18F4D30A959B6DFA4023915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1586 Signing time: Fri 06 Jun 2025 12:00:58 +0000 Manifest this update: Fri 06 Jun 2025 12:00:58 +0000 Manifest next update: Sat 07 Jun 2025 12:00:58 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: s9AT+Nm2UVgtbKzwZboPmGOQyv/6Qk+WjKT9WTRQgrA=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:1d:9e:38:a1:8f:4d:30:a9:59:b6:df:a4:02:39:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jun 6 12:00:58 2025 GMT Not After : Jun 7 12:00:58 2025 GMT Subject: CN=ba605bcb6ece5d4ec662f12dc9c5c813c8d24bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:27:75:b3:f3:ca:43:05:da:cb:43:f5:2a: a9:f5:4d:07:03:a0:1f:59:5c:5b:e3:48:0f:c6:55: f8:32:49:7d:81:f9:47:20:59:e8:e1:28:c8:ca:81: 0f:30:f2:ca:52:58:9d:4f:43:4e:fb:8e:71:82:4b: b6:d2:55:fc:f8:c3:1f:30:f8:01:11:e2:13:a7:cc: 89:e7:2b:9a:27:e8:93:91:04:77:b9:6d:79:c5:31: 39:2a:ec:ee:3e:16:76:fb:e5:43:23:88:60:df:07: 28:03:07:ee:0d:93:1e:bf:9c:8d:98:57:7f:e7:32: 07:48:fa:44:9e:23:62:14:df:93:66:d2:6d:2b:ef: ab:4f:bd:7f:4e:06:47:dd:61:61:81:4d:4c:d1:fb: e3:57:c3:e5:33:fd:95:1b:0a:32:94:4a:4a:a8:e4: 7a:16:5d:95:d0:f0:22:b4:db:69:13:81:a0:ba:5c: ea:fb:e0:ce:6a:71:f6:54:66:4f:13:87:73:c8:bc: 67:67:c7:ae:f8:03:90:69:ea:95:fd:23:23:97:9c: 5e:98:5e:a5:23:39:29:a0:ce:4f:ac:49:29:d0:3a: 75:3d:1f:dd:a9:da:15:cf:69:d8:95:c3:e9:ea:2b: 79:7b:6b:c5:88:21:9f:1f:7d:c3:7f:fc:93:f0:24: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:5B:CB:6E:CE:5D:4E:C6:62:F1:2D:C9:C5:C8:13:C8:D2:4B:D6 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4f:ad:a8:a5:9e:ee:7f:14:da:ee:5b:71:3c:ba:e9:be:ca: f8:a8:f2:da:44:f7:95:1b:1c:95:4a:f6:b7:ec:1e:a3:8d:6c: 22:b2:eb:8e:12:f7:f8:1f:ba:ab:26:10:e7:f2:af:54:ef:65: 7e:89:a5:f7:68:0a:23:b9:83:74:9c:5f:49:6d:76:4c:1d:ef: ab:11:6a:72:e8:5a:4e:2d:4b:ed:4f:97:fb:06:a0:2c:74:8b: 93:26:5e:1c:f3:38:7c:d8:ed:c6:6e:6a:4a:4f:e4:ca:34:97: 4f:97:ad:ca:a0:6e:16:da:09:46:ab:ac:11:2d:e0:eb:c1:0b: e3:80:78:34:fa:af:58:a9:09:70:93:ed:74:0c:51:ac:a6:b4: 11:76:d5:79:75:d2:28:ea:d9:36:6f:01:4a:36:1d:ca:e2:2f: 7b:0c:1e:56:bb:41:02:2b:a3:a0:a4:95:8d:27:8b:2a:51:1f: a2:b1:27:2a:1a:e5:4a:60:09:26:1c:fd:3a:e6:2c:3e:13:0f: 6b:e1:7a:a4:b8:dc:1d:5e:9e:7f:2e:4d:f2:a1:7d:76:02:ce: 6d:8e:35:58:39:de:38:66:bb:96:fe:ee:69:3b:bb:8a:39:8f: d2:a4:f9:de:37:a5:17:48:b8:ae:43:a0:e5:0d:13:f0:ae:45: 92:6a:0f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFHZ44oY9NMKlZtt+kAjkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwNjA2MTIwMDU4WhcNMjUwNjA3MTIwMDU4WjAzMTEwLwYDVQQD EyhiYTYwNWJjYjZlY2U1ZDRlYzY2MmYxMmRjOWM1YzgxM2M4ZDI0YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTIndbPzykMF2stD9Sqp9U0HA6Af WVxb40gPxlX4Mkl9gflHIFno4SjIyoEPMPLKUlidT0NO+45xgku20lX8+MMfMPgB EeITp8yJ5yuaJ+iTkQR3uW15xTE5KuzuPhZ2++VDI4hg3wcoAwfuDZMev5yNmFd/ 5zIHSPpEniNiFN+TZtJtK++rT71/TgZH3WFhgU1M0fvjV8PlM/2VGwoylEpKqOR6 Fl2V0PAitNtpE4Ggulzq++DOanH2VGZPE4dzyLxnZ8eu+AOQaeqV/SMjl5xemF6l IzkpoM5PrEkp0Dp1PR/dqdoVz2nYlcPp6it5e2vFiCGfH33Df/yT8CS+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpgW8tuzl1OxmLxLcnFyBPI0kvWMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE+tqKWe 7n8U2u5bcTy66b7K+Kjy2kT3lRsclUr2t+weo41sIrLrjhL3+B+6qyYQ5/KvVO9l foml92gKI7mDdJxfSW12TB3vqxFqcuhaTi1L7U+X+wagLHSLkyZeHPM4fNjtxm5q Sk/kyjSXT5etyqBuFtoJRqusES3g68EL44B4NPqvWKkJcJPtdAxRrKa0EXbVeXXS KOrZNm8BSjYdyuIvewweVrtBAiujoKSVjSeLKlEforEnKhrlSmAJJhz9OuYsPhMP a+F6pLjcHV6efy5N8qF9dgLObY41WDneOGa7lv7uaTu7ijmP0qT53jelF0i4rkOg 5Q0T8K5FkmoP2A== -----END CERTIFICATE-----Generated at Fri Jun 6 19:04:58 2025 by rpki-client