$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: 183U6YvgAiU2u0l5AToHmqrhkdnxerbZurkrcBmeL4g= Subject key identifier: 25:C0:81:52:02:87:50:75:55:E4:09:D7:33:55:6B:D2:60:95:37:71 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019748F9FC5A16C29E2C898803A2DCF85E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 12D4 Signing time: Sat 07 Jun 2025 06:00:32 +0000 Manifest this update: Sat 07 Jun 2025 06:00:32 +0000 Manifest next update: Sun 08 Jun 2025 06:00:32 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: I6sCxqxE9j+y68AZtLFZWO9pZ+NGCiFPncRkQb2laVo=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:f9:fc:5a:16:c2:9e:2c:89:88:03:a2:dc:f8:5e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jun 7 06:00:32 2025 GMT Not After : Jun 8 06:00:32 2025 GMT Subject: CN=25c081520287507555e409d733556bd260953771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:42:c4:89:05:63:a1:9d:5c:84:10:bf:f7: d3:be:7d:16:fd:09:05:a5:bd:f5:cf:e6:b5:41:44: 14:e0:fb:a2:72:ec:0b:ab:66:8e:7e:21:63:58:6c: d2:53:d7:54:10:3f:c0:02:b4:e1:59:90:a0:44:2a: 70:78:58:f5:a3:a7:48:f0:e9:4e:38:fd:05:d9:df: c0:be:da:44:fb:36:d1:b5:23:38:91:26:48:19:77: aa:08:b3:26:2d:1f:33:1b:e9:af:b1:49:ea:d7:de: bc:bc:78:d8:e7:02:35:cd:de:dd:d4:a5:2e:b7:77: 7e:9c:63:ef:72:dc:40:4f:dd:10:67:fd:a9:db:3a: 4b:8e:55:79:99:22:40:77:84:92:c6:f0:19:66:9f: cb:27:fb:a7:f4:f0:a0:d2:5c:59:34:f1:4d:12:2c: 02:02:ca:ad:cd:e3:38:7b:6f:6c:ae:2f:57:7b:cd: e3:2a:44:86:7e:c8:42:2c:1c:b6:29:7a:f1:6a:6e: 2c:51:1d:80:85:03:16:e6:b6:0b:bf:c5:bc:2a:db: 02:99:f1:fb:85:e1:27:aa:1d:c9:6c:5f:20:a2:a0: 7e:02:83:b2:eb:cc:a4:9e:04:c4:90:2c:2f:88:0d: 0e:16:86:bc:40:f8:a6:44:63:ac:36:23:61:d7:37: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C0:81:52:02:87:50:75:55:E4:09:D7:33:55:6B:D2:60:95:37:71 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:2e:fb:87:5b:e9:d2:ae:7b:6f:9d:18:2f:2d:5b:0a:3b:0e: de:7e:d4:b3:02:51:67:e0:39:8a:46:2e:b9:fc:27:13:7f:bf: a0:14:38:db:d1:c4:f5:05:ba:ff:5e:cc:3a:33:0c:c3:03:df: 2e:83:00:d3:fc:a1:cf:f6:fb:6e:5b:98:82:93:c6:74:21:6b: a5:99:67:36:ec:f1:ad:08:40:a2:8f:ef:79:d2:93:8e:c6:23: b5:06:cf:8d:c6:b2:24:10:7c:1d:95:8b:b9:c1:8f:fd:a1:89: 33:6c:a4:56:21:80:5c:bd:54:1a:4b:d7:6e:34:b3:23:e2:e0: 4e:3e:3f:4a:d0:34:6e:b5:35:28:a9:01:a9:0f:39:81:b4:b0: 6d:b2:ed:08:90:5c:37:ea:a0:66:42:6d:5a:08:02:72:1c:46: 3f:d8:41:1a:69:32:5d:f6:b0:f2:3f:30:0c:e5:de:56:cc:1f: 36:47:e2:00:48:94:10:52:3e:5e:e3:20:b8:60:e9:2e:ee:ff: cb:0c:c8:db:b2:f0:92:8b:c8:8d:3e:77:47:f3:e9:df:c1:a1: f2:07:9d:d0:17:42:93:06:33:5f:82:4b:ff:4c:ee:12:d6:d0: 9d:01:ce:e9:82:3e:e8:e8:33:f7:e4:e7:e9:18:f8:39:2d:01: ea:be:ec:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdI+fxaFsKeLImIA6Lc+F59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNjA3MDYwMDMyWhcNMjUwNjA4MDYwMDMyWjAzMTEwLwYDVQQD EygyNWMwODE1MjAyODc1MDc1NTVlNDA5ZDczMzU1NmJkMjYwOTUzNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswRCxIkFY6GdXIQQv/fTvn0W/QkF pb31z+a1QUQU4PuicuwLq2aOfiFjWGzSU9dUED/AArThWZCgRCpweFj1o6dI8OlO OP0F2d/AvtpE+zbRtSM4kSZIGXeqCLMmLR8zG+mvsUnq1968vHjY5wI1zd7d1KUu t3d+nGPvctxAT90QZ/2p2zpLjlV5mSJAd4SSxvAZZp/LJ/un9PCg0lxZNPFNEiwC AsqtzeM4e29sri9Xe83jKkSGfshCLBy2KXrxam4sUR2AhQMW5rYLv8W8KtsCmfH7 heEnqh3JbF8goqB+AoOy68ykngTEkCwviA0OFoa8QPimRGOsNiNh1zehVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXAgVICh1B1VeQJ1zNVa9JglTdxMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxy77h1vp 0q57b50YLy1bCjsO3n7UswJRZ+A5ikYuufwnE3+/oBQ429HE9QW6/17MOjMMwwPf LoMA0/yhz/b7bluYgpPGdCFrpZlnNuzxrQhAoo/vedKTjsYjtQbPjcayJBB8HZWL ucGP/aGJM2ykViGAXL1UGkvXbjSzI+LgTj4/StA0brU1KKkBqQ85gbSwbbLtCJBc N+qgZkJtWggCchxGP9hBGmkyXfaw8j8wDOXeVswfNkfiAEiUEFI+XuMguGDpLu7/ ywzI27LwkovIjT53R/Pp38Gh8ged0BdCkwYzX4JL/0zuEtbQnQHO6YI+6Ogz9+Tn 6Rj4OS0B6r7sFg== -----END CERTIFICATE-----Generated at Sat Jun 7 10:21:46 2025 by rpki-client