$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: TDetK057MVmFdPXbaSweVoJL/hif6lyIuNnTJrNFX2M= Subject key identifier: 76:ED:E4:66:4D:54:DB:25:76:30:8B:F7:AB:D3:75:A4:75:25:3C:22 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01984407EB48168F3D0BDD6E0799AF350729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 160A Signing time: Sat 26 Jul 2025 00:00:26 +0000 Manifest this update: Sat 26 Jul 2025 00:00:26 +0000 Manifest next update: Sun 27 Jul 2025 00:00:26 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: ooEeGHZYl0M5Vxk9V/O0YU1NULGKgSENMiHkaj6pr7k=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:07:eb:48:16:8f:3d:0b:dd:6e:07:99:af:35:07:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jul 26 00:00:26 2025 GMT Not After : Jul 27 00:00:26 2025 GMT Subject: CN=76ede4664d54db2576308bf7abd375a475253c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:10:57:3e:13:21:25:d2:2b:07:1f:a0:65: b7:2a:4c:91:c1:ee:43:4f:fe:fc:73:f6:3a:98:2c: 8e:ee:4a:96:1b:c4:01:73:6b:92:b3:50:af:d2:25: b2:a3:bb:7d:22:97:12:6a:71:10:1d:73:b9:39:c5: 8b:16:ab:83:e4:2a:71:be:8f:e6:26:34:94:ac:f1: 6b:b6:19:44:0a:81:aa:12:6e:a4:99:8f:ec:47:b6: 20:c5:75:67:ca:e6:f1:ef:d3:ef:bd:20:2d:a7:05: 5b:25:99:9c:d1:15:d5:d7:bd:44:ef:c4:3a:a7:9a: ce:a9:91:85:8b:2e:09:67:f9:fb:0e:07:63:a3:a9: a7:60:ca:bb:65:fa:b5:d9:1c:61:ac:89:9a:f5:d3: 4f:ee:e9:0c:e0:4b:84:47:7e:dc:1d:cd:65:be:06: 1e:7f:eb:fa:bb:d2:db:56:69:8d:d5:99:a7:6e:4f: 47:0d:61:3a:56:90:2b:2d:8e:52:aa:62:f3:c8:cd: 80:0a:52:77:bc:c0:b5:0e:1e:f9:62:80:0a:e6:f6: 4b:9e:eb:7f:18:67:71:5d:ec:e7:20:a3:a9:2d:71: c4:e9:7e:90:c1:89:61:82:69:e0:81:1e:dd:c8:31: 18:56:dd:9e:58:32:02:9a:ee:27:73:ef:32:64:0f: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:ED:E4:66:4D:54:DB:25:76:30:8B:F7:AB:D3:75:A4:75:25:3C:22 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c5:fc:fe:be:fc:18:3e:ce:95:4f:18:8f:71:07:3b:d6:ff: 41:b9:9d:e5:01:3b:66:c8:fa:7a:a2:dd:81:f8:19:af:c6:eb: ac:47:74:fd:36:90:e9:86:be:9c:30:38:57:cb:c9:ed:da:56: d6:8f:eb:3e:d9:3e:c4:c0:ee:ff:b3:5f:da:26:27:6b:27:7d: d2:be:ab:fe:4e:e9:4b:c9:e3:e2:29:06:ed:83:be:0e:1f:0c: d8:25:4a:c2:2d:90:36:39:45:a7:20:79:a9:17:00:ca:2e:a3: f0:42:68:21:2e:79:c9:67:4d:91:e6:8d:47:d8:68:81:57:52: 9d:ba:87:bd:74:fd:1b:e1:77:0f:1a:9d:81:57:ec:e2:ca:2e: 76:86:5e:d8:c5:1c:c4:fb:9e:2a:be:1b:ae:34:25:99:de:14: 00:f5:60:5b:cf:4f:f6:25:11:ba:bf:ae:e2:82:cd:c2:e0:1a: d9:ec:a1:50:73:23:9f:6d:6f:16:e6:c3:d6:bd:ba:7e:61:e7: ea:57:b5:4f:4c:f4:9c:b4:5b:4a:06:18:f4:f4:88:20:6a:aa: 56:e3:9b:b1:7a:d0:a8:25:8c:a9:a7:62:f7:67:a7:c5:c6:b0: f0:0e:92:6a:a4:5d:66:ec:fb:c2:8b:43:33:32:92:6f:9b:d7: c9:f5:8b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhEB+tIFo89C91uB5mvNQcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwNzI2MDAwMDI2WhcNMjUwNzI3MDAwMDI2WjAzMTEwLwYDVQQD Eyg3NmVkZTQ2NjRkNTRkYjI1NzYzMDhiZjdhYmQzNzVhNDc1MjUzYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJUQVz4TISXSKwcfoGW3KkyRwe5D T/78c/Y6mCyO7kqWG8QBc2uSs1Cv0iWyo7t9IpcSanEQHXO5OcWLFquD5Cpxvo/m JjSUrPFrthlECoGqEm6kmY/sR7YgxXVnyubx79PvvSAtpwVbJZmc0RXV171E78Q6 p5rOqZGFiy4JZ/n7Dgdjo6mnYMq7Zfq12RxhrIma9dNP7ukM4EuER37cHc1lvgYe f+v6u9LbVmmN1Zmnbk9HDWE6VpArLY5SqmLzyM2AClJ3vMC1Dh75YoAK5vZLnut/ GGdxXeznIKOpLXHE6X6QwYlhgmnggR7dyDEYVt2eWDICmu4nc+8yZA+DFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbt5GZNVNsldjCL96vTdaR1JTwiMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsX8/r78 GD7OlU8Yj3EHO9b/Qbmd5QE7Zsj6eqLdgfgZr8brrEd0/TaQ6Ya+nDA4V8vJ7dpW 1o/rPtk+xMDu/7Nf2iYnayd90r6r/k7pS8nj4ikG7YO+Dh8M2CVKwi2QNjlFpyB5 qRcAyi6j8EJoIS55yWdNkeaNR9hogVdSnbqHvXT9G+F3DxqdgVfs4soudoZe2MUc xPueKr4brjQlmd4UAPVgW89P9iURur+u4oLNwuAa2eyhUHMjn21vFubD1r26fmHn 6le1T0z0nLRbSgYY9PSIIGqqVuObsXrQqCWMqadi92enxcaw8A6SaqRdZuz7wotD MzKSb5vXyfWLdA== -----END CERTIFICATE-----Generated at Sat Jul 26 06:48:52 2025 by rpki-client