$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: iddA18eev4eihDj6sMw5Zo9fPi1iAssm5FKpj0R7JO0= Subject key identifier: 0C:BD:37:03:16:BB:E1:67:CA:C8:ED:4B:D0:EA:20:2B:16:92:50:A9 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019A1C19C746EE1C280D871573D5D71093DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 1451 Signing time: Sat 25 Oct 2025 16:00:42 +0000 Manifest this update: Sat 25 Oct 2025 16:00:42 +0000 Manifest next update: Sun 26 Oct 2025 16:00:42 +0000 Files and hashes: 1: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 2: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: Lc1Y7vERvubSn20oAdI2e3pu258l339n69H1xAHu7gI=) 4: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 5: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 6: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=) 7: ZCVtB8725E04xja-A_7tFv0UGbA.roa (hash: G23IAdwlc1DMlMrfpBBsuDs0R5mxQSfAIypWEkTSgDc=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:19:c7:46:ee:1c:28:0d:87:15:73:d5:d7:10:93:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Oct 25 16:00:42 2025 GMT Not After : Oct 26 16:00:42 2025 GMT Subject: CN=0cbd370316bbe167cac8ed4bd0ea202b169250a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:67:2b:d5:b8:4c:71:a0:fe:e7:e9:7b:1b: c2:7e:e4:53:fd:1a:a9:4e:2d:4d:14:17:24:10:94: d8:da:99:4e:66:fa:85:ce:87:8e:49:d8:4c:0a:e0: 2f:0e:ce:1a:65:df:d8:97:02:c8:3d:e9:db:55:a1: f4:5e:54:9d:68:19:8d:a6:d6:1c:44:d3:7d:27:ab: 39:ba:38:77:b2:6d:e2:51:e8:15:73:25:e4:f6:3d: e1:3a:4d:f7:b7:bc:16:93:62:77:dd:2d:cf:66:e6: 91:04:67:dd:2d:0e:16:89:ef:08:f5:1a:85:4a:ef: 05:08:66:da:81:b8:51:6c:5b:b1:b0:3e:00:17:5d: 06:41:85:9d:4c:0c:24:6d:93:90:f2:3a:b2:ab:39: f2:57:1f:ff:a2:f9:84:78:74:1d:87:85:18:0d:98: a7:4b:3d:45:0f:61:73:39:40:eb:d0:1e:3e:35:1d: 4c:49:46:4d:64:cf:3d:bf:0e:8f:34:cb:59:1c:05: c9:e6:4e:ee:c5:f6:bb:f5:de:94:f5:98:1e:3b:14: ee:3f:fd:4b:db:0d:50:45:f1:8c:30:04:34:fa:ae: 28:2c:18:80:a4:55:66:64:a0:7f:65:11:84:86:b7: 85:db:72:2f:ed:8b:36:5e:aa:d9:98:e7:19:37:77: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BD:37:03:16:BB:E1:67:CA:C8:ED:4B:D0:EA:20:2B:16:92:50:A9 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:15:6d:27:c5:b3:84:b5:03:85:fd:86:9e:6f:59:54:4e:58: cc:2b:ff:2b:e3:2e:a8:15:21:52:e1:70:30:8f:0d:62:51:c9: eb:5e:f8:da:12:57:93:70:c7:21:cd:59:83:60:58:1b:b6:a9: 87:e5:52:15:06:b3:a0:1c:ae:6f:d2:da:50:19:96:b4:ee:b1: 13:ee:54:90:d6:32:2b:6d:39:f0:07:af:6d:d0:98:c8:2b:94: 49:28:c9:0f:bd:5a:8c:b5:3f:ea:91:dd:46:aa:71:a7:06:7b: 75:3b:4c:43:48:75:3e:46:c9:b6:f7:6d:a5:2e:ed:49:f4:d8: a1:cc:52:a6:ed:e0:17:46:24:13:9f:b4:94:b7:d1:6e:98:e2: aa:cc:7f:ec:4f:25:43:58:c5:e1:95:b3:a5:71:d3:c3:84:2e: 27:e5:c7:b5:03:3d:3d:97:a7:88:89:f9:1b:f9:3b:65:8d:6a: 66:a7:2a:bc:6e:a0:d8:d0:51:89:bf:95:bb:29:96:2b:39:22: 7e:e1:b8:e5:7a:6c:8d:36:c7:78:86:3e:1f:52:ed:7e:90:36: 67:22:bd:fa:dc:2b:ef:cf:23:95:59:c0:6c:d9:fe:0b:0c:9b: 8c:17:13:a1:86:f6:4f:e6:31:56:14:74:4c:d4:89:cb:05:89: 1b:91:a8:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocGcdG7hwoDYcVc9XXEJPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMDI1MTYwMDQyWhcNMjUxMDI2MTYwMDQyWjAzMTEwLwYDVQQD EygwY2JkMzcwMzE2YmJlMTY3Y2FjOGVkNGJkMGVhMjAyYjE2OTI1MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLVnK9W4THGg/ufpexvCfuRT/Rqp Ti1NFBckEJTY2plOZvqFzoeOSdhMCuAvDs4aZd/YlwLIPenbVaH0XlSdaBmNptYc RNN9J6s5ujh3sm3iUegVcyXk9j3hOk33t7wWk2J33S3PZuaRBGfdLQ4Wie8I9RqF Su8FCGbagbhRbFuxsD4AF10GQYWdTAwkbZOQ8jqyqznyVx//ovmEeHQdh4UYDZin Sz1FD2FzOUDr0B4+NR1MSUZNZM89vw6PNMtZHAXJ5k7uxfa79d6U9ZgeOxTuP/1L 2w1QRfGMMAQ0+q4oLBiApFVmZKB/ZRGEhreF23Iv7Ys2XqrZmOcZN3dlhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy9NwMWu+FnysjtS9DqICsWklCpMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhVtJ8Wz hLUDhf2Gnm9ZVE5YzCv/K+MuqBUhUuFwMI8NYlHJ61742hJXk3DHIc1Zg2BYG7ap h+VSFQazoByub9LaUBmWtO6xE+5UkNYyK2058AevbdCYyCuUSSjJD71ajLU/6pHd RqpxpwZ7dTtMQ0h1PkbJtvdtpS7tSfTYocxSpu3gF0YkE5+0lLfRbpjiqsx/7E8l Q1jF4ZWzpXHTw4QuJ+XHtQM9PZeniIn5G/k7ZY1qZqcqvG6g2NBRib+VuymWKzki fuG45XpsjTbHeIY+H1LtfpA2ZyK9+twr788jlVnAbNn+CwybjBcToYb2T+YxVhR0 TNSJywWJG5GopA== -----END CERTIFICATE-----Generated at Sun Oct 26 02:33:21 2025 by rpki-client