$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft File: 1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json) Hash identifier: YNI4qN3xIllBgQ32WXq0jHzBJeKB9h9PR9gsEMbK/g8= Subject key identifier: C6:09:A8:A6:74:4E:EC:A6:7E:9D:61:84:37:56:75:73:55:5A:FC:54 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 0199239F212C34A47BAB0EC0782BC1557588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft Manifest number: 05D5 Signing time: Sun 07 Sep 2025 10:00:55 +0000 Manifest this update: Sun 07 Sep 2025 10:00:55 +0000 Manifest next update: Mon 08 Sep 2025 10:00:55 +0000 Files and hashes: 1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: jBrOnHu43DypndEOQV1qVC6wgIMiFrmZnyO8yLVfW/g=) 2: 3DdGyZ0sJgCFJ_ULmwJJ2lo2rx0.roa (hash: 5TUTGezCbgzJ7wN19EdaLXS+J99Zo28HoH4eIqxrvxk=) 3: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=) 4: 9B7naTDbTfBC3f0Su46QWyrhOAU.roa (hash: EuLTR97eLUOnyJBm+T95P0s0ZZVOErLTXd4saTTHgqg=) 5: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=) 6: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=) 7: LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa (hash: I7tPfrwHzB0UAJOseFDltlGuyXCQ69zHCcehJNGrXZI=) 8: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=) 9: OEVx3wt-afSCjQoq4CCBGEYZ0-0.roa (hash: RZxMVkxGx/ioX0a/f6t/tDg0YGbR5g3ZOXjOM4aJF6g=) 10: TN5asrP-O_svuOzye5lJGogWzMo.roa (hash: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=) 11: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (hash: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=) 12: VEzRmKCthg0N9znr0nEC6lBX2SE.roa (hash: uFDhugUUw1ANaPXsl+IH/rhPDlcZVp0gQ5Plq/UIw9k=) 13: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=) 14: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=) 15: im8w3Xx-iUAQD6wX6N09-EJJW8c.roa (hash: /qbFQ2xM1Cro7Sw3CCIT5woLdLgqxh07N/rM/Vszw70=) 16: krwPzjnTtCEOQgP9EXp1WO-kgx0.roa (hash: Jq2f8YMj3fJWLcxBtjZ9CHuZ6W1PxUoBmS3CD2sax2Q=) 17: uJPBnwCQe4pWBPSakttM1tJFVcw.roa (hash: SlkGHJE+y8/3ykMchDghQk+vAt9Ko0/kJI2Pi7OwLbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:9f:21:2c:34:a4:7b:ab:0e:c0:78:2b:c1:55:75:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Sep 7 10:00:55 2025 GMT Not After : Sep 8 10:00:55 2025 GMT Subject: CN=c609a8a6744eeca67e9d618437567573555afc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:bc:6f:51:9a:e5:0f:f2:7c:fa:df:4a:25: e2:78:a4:25:88:9d:57:30:fd:e4:8a:27:ab:23:7f: 5f:67:9e:51:3c:67:f6:95:1c:91:e7:06:9f:0a:58: 25:ce:e5:02:2d:95:36:df:c9:98:f6:5b:62:9e:be: 6f:f4:31:1d:cb:93:99:bf:ce:56:ff:14:f0:b6:a8: b4:03:e3:ff:ed:2d:9c:fc:f7:ad:5f:3a:4b:e4:39: a7:04:51:ea:d8:af:ff:07:1e:4c:18:8d:3b:ed:b7: 80:2d:7f:e7:59:25:2e:72:67:50:3a:5e:4e:f1:ff: 4f:cd:cf:74:c2:92:d8:02:74:e6:a5:5c:bd:33:9d: 12:63:bd:96:8f:23:ea:5e:4f:8f:03:79:c7:c2:e9: 0c:c1:15:b7:75:63:4c:c6:36:49:53:4c:05:cc:9f: 22:5d:fc:00:f4:13:62:e8:99:cb:03:65:00:ac:f5: 31:4d:f6:05:3c:3b:3d:31:f8:52:5a:2d:31:2a:4f: 48:28:81:c6:ed:10:ef:09:4c:7f:67:86:67:c1:8a: 3c:e6:e7:90:be:1d:86:6e:ca:fb:95:08:ef:f9:35: cf:15:22:46:99:c9:6a:5f:76:5b:8b:56:37:dc:ad: 56:09:f1:50:09:ce:37:1b:9c:09:b6:f2:20:6f:cc: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:A8:A6:74:4E:EC:A6:7E:9D:61:84:37:56:75:73:55:5A:FC:54 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:09:85:52:e7:14:a4:50:8d:cb:8b:d3:1f:a8:bc:d0:8f:a7: 60:5a:8a:91:11:9d:ec:31:46:2e:b1:95:67:56:b7:9e:ea:95: 8f:1f:e4:78:de:cc:16:55:ea:b4:4c:43:d1:ac:36:8b:65:94: 59:83:d7:b4:99:e8:d2:55:73:5d:3a:3a:0c:e3:2b:20:e0:8b: 78:5b:73:1f:d3:65:59:ee:bf:bf:48:9c:e8:97:a7:6c:fe:ef: 6b:f7:a8:85:7f:8f:4f:57:30:30:b7:8e:1b:d6:fd:91:64:24: 1d:76:1e:eb:6a:44:40:23:80:51:37:bd:3e:bc:b8:99:21:07: fe:8e:2b:89:fb:6e:9f:f7:82:15:dd:39:03:64:63:44:3c:ef: cb:ac:7e:64:e2:37:fc:05:a0:ba:e7:36:07:06:d9:82:58:cc: b9:d6:74:62:9a:d2:49:6f:f9:64:a2:23:38:9f:23:bc:bb:de: 23:59:69:5d:67:0b:2a:9e:01:57:09:49:99:da:12:65:de:4b: a1:17:8a:e7:3f:58:ee:5c:5b:1b:82:1d:53:60:1f:5b:da:9a: 7a:d9:62:d7:09:71:5a:93:bf:bb:bb:58:c8:fd:b9:0a:f5:78: 02:68:b6:cc:a6:c5:57:2e:d4:eb:4b:19:f5:67:b0:46:81:30: 96:17:1e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjnyEsNKR7qw7AeCvBVXWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUwOTA3MTAwMDU1WhcNMjUwOTA4MTAwMDU1WjAzMTEwLwYDVQQD EyhjNjA5YThhNjc0NGVlY2E2N2U5ZDYxODQzNzU2NzU3MzU1NWFmYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JO8b1Ga5Q/yfPrfSiXieKQliJ1X MP3kiierI39fZ55RPGf2lRyR5wafClglzuUCLZU238mY9ltinr5v9DEdy5OZv85W /xTwtqi0A+P/7S2c/PetXzpL5DmnBFHq2K//Bx5MGI077beALX/nWSUucmdQOl5O 8f9Pzc90wpLYAnTmpVy9M50SY72WjyPqXk+PA3nHwukMwRW3dWNMxjZJU0wFzJ8i XfwA9BNi6JnLA2UArPUxTfYFPDs9MfhSWi0xKk9IKIHG7RDvCUx/Z4ZnwYo85ueQ vh2Gbsr7lQjv+TXPFSJGmclqX3Zbi1Y33K1WCfFQCc43G5wJtvIgb8wVIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYJqKZ0Tuymfp1hhDdWdXNVWvxUMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAmFUucU pFCNy4vTH6i80I+nYFqKkRGd7DFGLrGVZ1a3nuqVjx/keN7MFlXqtExD0aw2i2WU WYPXtJno0lVzXTo6DOMrIOCLeFtzH9NlWe6/v0ic6JenbP7va/eohX+PT1cwMLeO G9b9kWQkHXYe62pEQCOAUTe9Pry4mSEH/o4riftun/eCFd05A2RjRDzvy6x+ZOI3 /AWguuc2BwbZgljMudZ0YprSSW/5ZKIjOJ8jvLveI1lpXWcLKp4BVwlJmdoSZd5L oReK5z9Y7lxbG4IdU2AfW9qaetli1wlxWpO/u7tYyP25CvV4Ami2zKbFVy7U60sZ 9WewRoEwlhcegA== -----END CERTIFICATE-----Generated at Sun Sep 7 15:20:44 2025 by rpki-client