$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: 69UtlasQdwM4FgcNWp89soA7d9rfp7ANNaTM/biewVM= Subject key identifier: 82:9C:1C:F1:18:2C:86:67:B1:49:D7:AE:5B:83:BD:EA:EE:89:0C:95 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019A1F516C14D334A105CC07EC283411AFE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 13EA Signing time: Sun 26 Oct 2025 07:00:20 +0000 Manifest this update: Sun 26 Oct 2025 07:00:20 +0000 Manifest next update: Mon 27 Oct 2025 07:00:20 +0000 Files and hashes: 1: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (hash: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=) 2: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (hash: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=) 3: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (hash: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=) 4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: p3bzUQfZw4ZAhcJ8CxO1lrvaCbEEYA9atKW4nhjI8eo=) 5: RDVOZW0UxeOOo7Unbh2MipHSdPM.roa (hash: 94K2Vc3NoNRsb9y/z9il9oZ+KJqogAaFq7eP5p6Zgzo=) 6: W5ixjo4d4_VqPLLjckRxmssp8ls.roa (hash: vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=) 7: hdBLVcan7hGut9vR1h003tddzSM.roa (hash: 1p8uvwOtpy6HlpY1Oww00qifRwsGP9qPBMfTzFkvp50=) 8: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (hash: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=) 9: wmzktH16uEfmYs7Ckc3dao51MRc.roa (hash: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=) 10: xYEQMDtud0ldRy5RnoaHTXCkHzQ.roa (hash: 6ajqkJ7APWGzI98xN5aw+rOCIWaTMdbchCCuX8jNGJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:51:6c:14:d3:34:a1:05:cc:07:ec:28:34:11:af:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Oct 26 07:00:20 2025 GMT Not After : Oct 27 07:00:20 2025 GMT Subject: CN=829c1cf1182c8667b149d7ae5b83bdeaee890c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:98:cc:07:8d:72:0f:b5:cb:27:7c:8b:91: b1:a7:de:00:17:40:12:09:13:f4:88:ae:68:e9:db: 6d:55:4a:6c:ce:c2:c4:9c:ed:33:bb:34:33:db:57: 63:2e:57:64:63:bf:b2:7e:20:99:00:43:c1:5a:7c: 43:c4:d8:96:fb:39:7d:0e:4c:1e:5e:54:d2:d2:25: 4a:ae:24:7e:7f:32:9e:b2:f5:3e:e7:46:3e:b2:ce: 98:02:db:52:4f:40:5d:13:60:bf:b3:d6:54:bc:61: c3:b1:05:52:58:d0:e3:18:17:27:a2:8d:eb:27:31: f4:d1:48:97:3e:88:fc:03:88:da:b0:7c:01:7f:7a: c0:92:c8:6d:3f:7d:96:a4:34:48:be:c6:28:a0:2c: e1:bd:0f:a7:22:ca:0f:70:b7:35:96:1d:20:f7:fc: 78:39:c0:bc:da:7e:14:9c:f9:5a:16:eb:2a:8b:ac: b1:09:4e:c5:24:5e:4c:4d:2c:3e:8b:17:26:f5:71: 3c:11:9e:13:f5:3d:2d:05:0b:6c:64:f7:74:3f:18: f0:8e:fd:da:fb:fc:1a:d1:83:e5:d3:e8:bb:de:e4: 5f:f7:8c:32:2e:4f:e0:7a:e5:51:19:bd:ec:af:03: c5:4b:aa:8f:a0:f2:34:4a:dd:80:9a:36:2d:5f:17: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:1C:F1:18:2C:86:67:B1:49:D7:AE:5B:83:BD:EA:EE:89:0C:95 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b6:c4:37:f4:6b:3c:ed:63:82:70:5f:40:10:3e:e0:7e:57: 18:e3:2a:e4:e3:57:d3:25:a2:55:84:36:0a:f6:36:ee:9f:c7: cb:a0:34:90:cc:5b:fe:35:0b:71:f2:a3:78:31:66:5b:c9:c0: 6a:25:f4:7e:47:ce:d9:47:4d:3b:13:26:06:71:28:3c:30:73: 35:21:47:67:fd:aa:ac:fe:e5:14:56:7c:60:a1:26:91:b3:fb: a5:5a:2d:a3:63:ec:72:64:af:28:4c:36:37:67:86:11:4e:73: 8f:2e:b9:ff:c8:a4:bc:6f:39:60:23:f7:24:34:b8:f5:70:e1: 3a:6c:14:91:5d:17:20:e3:68:35:a0:b1:8f:ee:b9:bc:d9:1a: 79:fd:5a:d5:aa:a5:b5:7f:10:33:b6:99:28:60:58:9c:fb:cf: d7:d7:e8:90:8a:aa:27:bb:18:a8:2c:39:14:c2:44:18:4f:e2: 79:d2:42:69:d9:26:89:57:cb:7c:92:fc:e2:18:2c:cd:dd:de: cc:3a:16:43:a0:96:f3:07:0a:d8:8b:d0:dd:6b:c7:25:1c:39: 8e:e2:e6:b1:1d:eb:85:4c:a2:ad:d7:37:96:23:f2:8f:3c:86: b4:2b:4e:27:6a:90:72:55:31:a1:47:88:d6:05:84:f3:a4:4e: 89:df:d5:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofUWwU0zShBcwH7Cg0Ea/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjUxMDI2MDcwMDIwWhcNMjUxMDI3MDcwMDIwWjAzMTEwLwYDVQQD Eyg4MjljMWNmMTE4MmM4NjY3YjE0OWQ3YWU1YjgzYmRlYWVlODkwYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2mYzAeNcg+1yyd8i5Gxp94AF0AS CRP0iK5o6dttVUpszsLEnO0zuzQz21djLldkY7+yfiCZAEPBWnxDxNiW+zl9Dkwe XlTS0iVKriR+fzKesvU+50Y+ss6YAttST0BdE2C/s9ZUvGHDsQVSWNDjGBcnoo3r JzH00UiXPoj8A4jasHwBf3rAkshtP32WpDRIvsYooCzhvQ+nIsoPcLc1lh0g9/x4 OcC82n4UnPlaFusqi6yxCU7FJF5MTSw+ixcm9XE8EZ4T9T0tBQtsZPd0Pxjwjv3a +/wa0YPl0+i73uRf94wyLk/geuVRGb3srwPFS6qPoPI0St2AmjYtXxewgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKcHPEYLIZnsUnXrluDveruiQyVMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7bEN/Rr PO1jgnBfQBA+4H5XGOMq5ONX0yWiVYQ2CvY27p/Hy6A0kMxb/jULcfKjeDFmW8nA aiX0fkfO2UdNOxMmBnEoPDBzNSFHZ/2qrP7lFFZ8YKEmkbP7pVoto2PscmSvKEw2 N2eGEU5zjy65/8ikvG85YCP3JDS49XDhOmwUkV0XIONoNaCxj+65vNkaef1a1aql tX8QM7aZKGBYnPvP19fokIqqJ7sYqCw5FMJEGE/iedJCadkmiVfLfJL84hgszd3e zDoWQ6CW8wcK2IvQ3WvHJRw5juLmsR3rhUyirdc3liPyjzyGtCtOJ2qQclUxoUeI 1gWE86ROid/V7w== -----END CERTIFICATE-----Generated at Sun Oct 26 11:28:43 2025 by rpki-client