$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: AwcRJNj+Xl8jOtPUmkBIG91VtiWbBef/G2gWUqp85rg= Subject key identifier: 50:5E:DB:6E:37:3C:E8:61:F7:35:51:47:53:23:36:A9:D2:6D:8B:52 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 01992DECCEEB8816D813B1E62146FABE0AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 136D Signing time: Tue 09 Sep 2025 10:01:58 +0000 Manifest this update: Tue 09 Sep 2025 10:01:58 +0000 Manifest next update: Wed 10 Sep 2025 10:01:58 +0000 Files and hashes: 1: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (hash: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=) 2: 1kiSbohRr3DLBAGP7UHbBG1rZGI.roa (hash: +KzQv3frkKk0smX2lTMNafbc9D/i8E7/YRETWzys+5A=) 3: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (hash: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=) 4: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: yA2wFSlSzQ1DW3SAuMpX872zfJuV3DbtUJ3tWKrLyc8=) 5: RDVOZW0UxeOOo7Unbh2MipHSdPM.roa (hash: 94K2Vc3NoNRsb9y/z9il9oZ+KJqogAaFq7eP5p6Zgzo=) 6: W5ixjo4d4_VqPLLjckRxmssp8ls.roa (hash: vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=) 7: hdBLVcan7hGut9vR1h003tddzSM.roa (hash: 1p8uvwOtpy6HlpY1Oww00qifRwsGP9qPBMfTzFkvp50=) 8: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (hash: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=) 9: wmzktH16uEfmYs7Ckc3dao51MRc.roa (hash: zS1KTekpI17HXhBWLbwC9k96nIyI57xYUz2t6mQxVEg=) 10: xYEQMDtud0ldRy5RnoaHTXCkHzQ.roa (hash: 6ajqkJ7APWGzI98xN5aw+rOCIWaTMdbchCCuX8jNGJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:ec:ce:eb:88:16:d8:13:b1:e6:21:46:fa:be:0a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Sep 9 10:01:58 2025 GMT Not After : Sep 10 10:01:58 2025 GMT Subject: CN=505edb6e373ce861f7355147532336a9d26d8b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:de:2d:6e:5e:59:83:8f:5a:de:88:39:b1: 24:30:51:ed:90:86:30:bd:f9:c3:14:2e:fc:a7:a0: a0:c1:7b:df:3d:2c:a6:e6:02:87:d1:af:a3:cd:63: 6b:e8:e4:ff:8e:44:10:e5:66:4b:c8:d2:82:b5:df: 34:84:89:34:88:4a:2d:bb:30:54:0d:3e:8b:45:7d: b3:90:ec:3f:23:a0:39:cb:f4:8b:5b:c6:0a:50:4f: 5a:94:7a:3d:28:49:24:4c:4c:23:cf:89:32:77:1e: 11:69:84:e8:d0:2d:d1:9c:02:ab:5d:4d:0f:8f:54: f8:38:52:72:79:f8:88:cb:54:bd:3d:c2:c9:da:ea: 93:bf:2c:52:e8:14:88:5b:db:fe:af:39:e7:e6:36: 0f:de:6c:c2:dc:a8:b1:d6:ca:d4:4c:52:58:23:a2: 51:2e:67:08:50:1b:1c:aa:7c:94:13:97:4b:24:70: c2:67:17:e0:92:49:eb:61:d2:a1:b4:b2:b0:54:f0: 70:91:ec:45:ee:ab:a7:93:f9:d4:16:2e:55:72:46: 78:ee:04:7f:db:db:c2:07:65:24:ea:77:3e:3b:06: cc:78:85:48:b1:c1:bc:db:85:d3:00:41:c9:ed:46: c2:85:66:58:31:86:24:3c:6f:2f:c3:8f:a9:8f:4a: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5E:DB:6E:37:3C:E8:61:F7:35:51:47:53:23:36:A9:D2:6D:8B:52 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5c:9e:df:4d:3d:aa:fa:8d:ca:63:e3:a1:f9:85:38:a7:16: db:81:be:35:6e:18:38:da:5f:c2:29:cf:02:8d:10:ed:f0:c3: f9:63:9e:e6:3b:68:dc:a1:0d:a5:ed:31:d1:a9:e2:74:80:cf: c7:c4:74:7c:37:f9:fc:d0:df:16:5d:f4:ab:d2:29:8a:da:48: f5:88:31:92:5b:23:27:73:a5:76:66:3b:7e:e7:cc:ce:d9:a0: f1:16:c9:8d:0f:d9:58:84:1f:bf:ab:24:dc:3a:94:3b:33:0d: 84:04:9b:b1:b2:ae:e2:80:6d:be:97:a9:4d:50:82:67:83:3e: 59:8b:cb:e0:85:1b:37:17:d5:f9:86:ee:fc:4e:09:be:7a:56: 73:1b:fb:9f:31:41:30:60:40:26:ec:67:7a:13:79:eb:2f:7d: 2b:90:c3:da:c9:9f:e0:c7:d4:f0:d3:b3:e5:e6:f1:57:75:36: ca:37:fe:75:60:6d:12:54:f9:2c:d3:45:b7:d9:48:29:20:24: 60:f5:b7:e7:89:c7:bf:f6:91:ee:0d:72:72:42:d7:1a:fa:45: d8:1e:df:63:4b:81:8e:bc:6d:7d:d2:75:1b:9e:79:aa:65:fc: 4d:0a:03:d6:29:61:20:d4:24:1f:91:17:73:3c:03:9e:24:33: 25:99:b6:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkt7M7riBbYE7HmIUb6vgrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjUwOTA5MTAwMTU4WhcNMjUwOTEwMTAwMTU4WjAzMTEwLwYDVQQD Eyg1MDVlZGI2ZTM3M2NlODYxZjczNTUxNDc1MzIzMzZhOWQyNmQ4YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJfeLW5eWYOPWt6IObEkMFHtkIYw vfnDFC78p6CgwXvfPSym5gKH0a+jzWNr6OT/jkQQ5WZLyNKCtd80hIk0iEotuzBU DT6LRX2zkOw/I6A5y/SLW8YKUE9alHo9KEkkTEwjz4kydx4RaYTo0C3RnAKrXU0P j1T4OFJyefiIy1S9PcLJ2uqTvyxS6BSIW9v+rznn5jYP3mzC3Kix1srUTFJYI6JR LmcIUBscqnyUE5dLJHDCZxfgkknrYdKhtLKwVPBwkexF7qunk/nUFi5VckZ47gR/ 29vCB2Uk6nc+OwbMeIVIscG824XTAEHJ7UbChWZYMYYkPG8vw4+pj0ofmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBe2243POhh9zVRR1MjNqnSbYtSMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFye3009 qvqNymPjofmFOKcW24G+NW4YONpfwinPAo0Q7fDD+WOe5jto3KENpe0x0anidIDP x8R0fDf5/NDfFl30q9IpitpI9YgxklsjJ3OldmY7fufMztmg8RbJjQ/ZWIQfv6sk 3DqUOzMNhASbsbKu4oBtvpepTVCCZ4M+WYvL4IUbNxfV+Ybu/E4JvnpWcxv7nzFB MGBAJuxnehN56y99K5DD2smf4MfU8NOz5ebxV3U2yjf+dWBtElT5LNNFt9lIKSAk YPW354nHv/aR7g1yckLXGvpF2B7fY0uBjrxtfdJ1G555qmX8TQoD1ilhINQkH5EX czwDniQzJZm2pQ== -----END CERTIFICATE-----Generated at Tue Sep 9 17:31:42 2025 by rpki-client