$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: HR1gjT4HqLPqBTblmkQaLcUIhB61JZWnus2Sko8b+Jg= Subject key identifier: E7:DF:26:A4:EA:45:35:4F:A0:1F:55:C6:9E:D8:56:CF:C3:49:8B:4E Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019927E9D504A736DCDDF2B67FC4E3EAE117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 13CC Signing time: Mon 08 Sep 2025 06:00:59 +0000 Manifest this update: Mon 08 Sep 2025 06:00:59 +0000 Manifest next update: Tue 09 Sep 2025 06:00:59 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: T6H3T0RdKzDMo7Y5syCUCvijC8uVIKY0iT2CKwk3+J0=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:e9:d5:04:a7:36:dc:dd:f2:b6:7f:c4:e3:ea:e1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Sep 8 06:00:59 2025 GMT Not After : Sep 9 06:00:59 2025 GMT Subject: CN=e7df26a4ea45354fa01f55c69ed856cfc3498b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:87:84:31:d7:7c:60:68:11:ab:e8:c2:a2: 46:5b:46:7f:b8:e7:5c:55:b8:e2:5b:50:ae:e5:ff: 02:da:87:af:e6:41:70:48:a8:ab:ff:2e:c9:6a:ff: 3d:b0:cd:74:a6:2f:9c:f0:6d:3f:a8:30:e6:26:25: 28:1e:05:0f:18:f4:85:2a:88:aa:7c:09:7e:65:3a: d1:09:e7:7e:d7:ab:10:38:b0:5e:6f:d0:c0:68:4a: 20:db:30:63:eb:75:ea:83:35:cb:b1:41:e7:9d:37: 22:1b:f9:81:37:45:5f:78:b6:1a:17:25:be:37:9a: ab:95:50:5d:78:4b:5e:5f:d2:48:16:c2:f5:69:4b: 4e:f5:93:7f:07:53:50:79:13:af:4d:ab:5f:c7:02: 6a:e9:a6:24:a6:d1:23:77:be:ae:49:ba:99:d2:10: 76:09:90:3a:32:75:25:25:2e:5b:7e:7d:9a:d0:29: fa:6e:ea:5d:1b:1a:53:b9:4f:16:97:13:a1:7d:c8: fb:0e:08:98:ca:5f:b1:a7:bf:6c:b0:a2:f8:aa:f1: 16:c3:10:df:47:cc:ce:48:41:e5:80:bc:6f:c1:e5: 41:a4:ab:d3:95:18:a4:f0:58:cf:ac:33:d8:4a:2b: 6c:c1:56:73:ee:89:00:4e:d7:7d:f7:15:55:c5:b3: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DF:26:A4:EA:45:35:4F:A0:1F:55:C6:9E:D8:56:CF:C3:49:8B:4E X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:7e:4f:b6:10:0c:9a:fb:fd:e1:37:40:57:e0:40:98:7b: 5f:96:98:40:91:eb:8b:c3:58:f4:c2:90:07:2e:9d:82:55:28: d1:04:09:b1:17:b7:78:e6:da:35:7c:d7:08:19:8d:27:8f:ff: d6:08:ae:6e:29:79:12:20:54:de:e5:80:69:6d:39:f9:6c:47: 44:97:2f:12:ad:d8:09:c4:6a:f9:5d:5b:e6:67:af:c4:bd:6a: 64:00:75:b3:2b:ea:e4:68:c4:8c:72:24:79:9a:80:11:4c:15: 11:82:33:b4:51:f8:2c:be:9b:c5:cf:b1:c2:6c:bd:ce:fd:d6: dd:f1:4f:25:59:80:f1:02:40:3d:0f:15:eb:88:eb:c3:93:e0: 74:39:95:43:0f:c9:22:0b:11:31:f1:e9:cf:55:b1:5a:72:42: ce:e9:a4:f7:f4:6a:e3:7c:a6:c9:cd:72:f9:d9:4d:ff:f3:4f: d6:f7:a8:ae:04:ef:4d:b0:e0:89:53:e7:a4:58:b0:65:b5:13: 9d:1a:5d:5e:0f:9a:7e:8b:bc:09:85:d6:84:bb:d0:14:e1:b7: 07:ae:0b:cc:05:06:5c:37:6d:1b:87:b2:6a:a0:9e:80:da:2d: 9a:d7:28:ce:22:e8:15:bf:b4:f8:8b:fe:c7:96:01:8a:86:3c: 93:76:13:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkn6dUEpzbc3fK2f8Tj6uEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwOTA4MDYwMDU5WhcNMjUwOTA5MDYwMDU5WjAzMTEwLwYDVQQD EyhlN2RmMjZhNGVhNDUzNTRmYTAxZjU1YzY5ZWQ4NTZjZmMzNDk4YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GuHhDHXfGBoEavowqJGW0Z/uOdc VbjiW1Cu5f8C2oev5kFwSKir/y7Jav89sM10pi+c8G0/qDDmJiUoHgUPGPSFKoiq fAl+ZTrRCed+16sQOLBeb9DAaEog2zBj63XqgzXLsUHnnTciG/mBN0VfeLYaFyW+ N5qrlVBdeEteX9JIFsL1aUtO9ZN/B1NQeROvTatfxwJq6aYkptEjd76uSbqZ0hB2 CZA6MnUlJS5bfn2a0Cn6bupdGxpTuU8WlxOhfcj7DgiYyl+xp79ssKL4qvEWwxDf R8zOSEHlgLxvweVBpKvTlRik8FjPrDPYSitswVZz7okATtd99xVVxbPyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOffJqTqRTVPoB9Vxp7YVs/DSYtOMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYl+T7YQ DJr7/eE3QFfgQJh7X5aYQJHri8NY9MKQBy6dglUo0QQJsRe3eObaNXzXCBmNJ4// 1giubil5EiBU3uWAaW05+WxHRJcvEq3YCcRq+V1b5mevxL1qZAB1syvq5GjEjHIk eZqAEUwVEYIztFH4LL6bxc+xwmy9zv3W3fFPJVmA8QJAPQ8V64jrw5PgdDmVQw/J IgsRMfHpz1WxWnJCzumk9/Rq43ymyc1y+dlN//NP1veorgTvTbDgiVPnpFiwZbUT nRpdXg+afou8CYXWhLvQFOG3B64LzAUGXDdtG4eyaqCegNotmtcoziLoFb+0+Iv+ x5YBioY8k3YT5A== -----END CERTIFICATE-----Generated at Mon Sep 8 10:02:09 2025 by rpki-client