$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: 5/it/AVOpokc+j2K8fpGXD/acvXBn4xXBkSHQPKV88Q= Subject key identifier: 5E:F6:9D:C6:BF:02:A3:38:CD:C2:6D:1F:95:CD:91:47:6F:84:FF:BF Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 0199225590BA94782EFC57D53153415393AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0D1C Signing time: Sun 07 Sep 2025 04:00:56 +0000 Manifest this update: Sun 07 Sep 2025 04:00:56 +0000 Manifest next update: Mon 08 Sep 2025 04:00:56 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: 9m9mtB31v30Dny5l8N85VcMTiNgVkdon57sYID4Jt8g=) 6: XmW1bZIMAH1eUiD8pIh2qe-nzi4.roa (hash: OGkNzBo8j0AN5nV1X1VDsvF/YywJ3+cRgQIpDFVours=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 9: oFP6X1Pf78VGMK8HY0EDx01ApW0.roa (hash: lDBxCCacRhN6uDAJG81pMtyRTm9VBKmLlVEk7CNfFXw=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:55:90:ba:94:78:2e:fc:57:d5:31:53:41:53:93:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Sep 7 04:00:56 2025 GMT Not After : Sep 8 04:00:56 2025 GMT Subject: CN=5ef69dc6bf02a338cdc26d1f95cd91476f84ffbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:11:af:ae:a5:ae:31:6c:c7:74:b3:b8:01: 1e:2d:ef:50:d3:f2:e4:b6:17:a0:15:84:40:c3:69: 2e:44:5e:81:d2:dd:06:8d:c4:8a:93:b6:7b:ab:60: a4:a9:10:bc:47:a1:3e:cc:02:98:9f:f6:15:b9:2c: 49:67:59:ed:49:da:b8:11:47:86:21:0a:90:34:c6: 74:28:95:40:18:a7:ad:c5:aa:6e:b0:bb:e3:f4:ea: 45:b8:ff:c3:97:66:63:21:15:d8:60:1f:65:af:5f: 71:8f:4a:b9:f7:fd:67:2d:fc:4b:3a:99:2d:9c:7e: ad:1a:fb:bf:50:5e:aa:f9:bc:ab:03:e4:e3:1d:36: 7e:65:0d:40:48:64:27:c0:04:70:c8:d3:e0:39:53: d8:88:3b:fd:be:c8:cc:9c:8e:a7:0e:84:1a:79:d7: 41:5a:20:64:cb:99:ec:1b:54:0c:f6:19:f4:e1:bf: 99:0a:89:18:8f:78:f1:4a:f6:d8:6e:8a:b0:5d:db: 75:66:77:c3:f7:ce:8f:9b:ad:81:7c:68:f6:6c:96: 95:59:89:c2:e4:8c:1a:e6:7c:d5:6b:bf:e3:6d:7e: 83:0e:6d:21:20:e2:a2:e2:54:c2:98:40:43:66:48: b9:83:5a:9b:a4:68:59:96:3c:ad:57:6f:02:e8:b9: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F6:9D:C6:BF:02:A3:38:CD:C2:6D:1F:95:CD:91:47:6F:84:FF:BF X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:65:5e:cc:74:09:2b:1d:4e:7d:61:49:fb:e1:82:64:f2:1c: 6f:ad:67:83:93:2e:10:60:7a:c0:83:7b:97:9a:b7:96:f0:03: 81:d8:13:fa:26:95:f6:cc:6b:33:10:e1:0a:e1:cc:a6:3f:43: b2:ca:cb:b2:45:01:5d:8a:c2:74:1c:da:8b:cb:07:3e:80:9f: c5:07:7a:cf:0e:f0:88:3f:fb:f2:73:cb:f9:38:f6:c4:a4:b1: 69:fc:16:46:5c:83:44:9b:bb:d5:75:b3:ab:58:cb:b1:3f:17: 65:25:e3:2c:f1:5c:b8:52:a6:f9:12:d1:83:7d:28:7d:f3:cb: 5b:63:37:94:c3:38:02:0a:19:50:9e:0a:04:2a:98:a5:6f:10: ef:a5:c5:96:12:f9:a8:f8:6a:de:6e:23:c6:26:75:63:03:74: 1d:d8:02:02:fa:fe:97:fe:84:5b:01:c1:09:66:14:6d:6c:be: 67:8f:56:cb:d2:43:48:90:5a:b5:d9:0d:9a:50:47:66:b1:84: 09:8c:78:46:eb:55:64:ea:3d:5b:21:9b:76:c5:53:76:14:c5: 56:ef:c1:13:dc:60:5a:e0:8c:90:7e:93:3c:10:a3:60:43:a0: d8:26:ce:fe:5e:34:27:41:a3:04:32:1b:61:48:df:4b:02:40: 85:96:f4:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiVZC6lHgu/FfVMVNBU5OqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwOTA3MDQwMDU2WhcNMjUwOTA4MDQwMDU2WjAzMTEwLwYDVQQD Eyg1ZWY2OWRjNmJmMDJhMzM4Y2RjMjZkMWY5NWNkOTE0NzZmODRmZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0oRr66lrjFsx3SzuAEeLe9Q0/Lk thegFYRAw2kuRF6B0t0GjcSKk7Z7q2CkqRC8R6E+zAKYn/YVuSxJZ1ntSdq4EUeG IQqQNMZ0KJVAGKetxapusLvj9OpFuP/Dl2ZjIRXYYB9lr19xj0q59/1nLfxLOpkt nH6tGvu/UF6q+byrA+TjHTZ+ZQ1ASGQnwARwyNPgOVPYiDv9vsjMnI6nDoQaeddB WiBky5nsG1QM9hn04b+ZCokYj3jxSvbYboqwXdt1ZnfD986Pm62BfGj2bJaVWYnC 5Iwa5nzVa7/jbX6DDm0hIOKi4lTCmEBDZki5g1qbpGhZljytV28C6LnWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF72nca/AqM4zcJtH5XNkUdvhP+/MB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmVezHQJ Kx1OfWFJ++GCZPIcb61ng5MuEGB6wIN7l5q3lvADgdgT+iaV9sxrMxDhCuHMpj9D ssrLskUBXYrCdBzai8sHPoCfxQd6zw7wiD/78nPL+Tj2xKSxafwWRlyDRJu71XWz q1jLsT8XZSXjLPFcuFKm+RLRg30offPLW2M3lMM4AgoZUJ4KBCqYpW8Q76XFlhL5 qPhq3m4jxiZ1YwN0HdgCAvr+l/6EWwHBCWYUbWy+Z49Wy9JDSJBatdkNmlBHZrGE CYx4RutVZOo9WyGbdsVTdhTFVu/BE9xgWuCMkH6TPBCjYEOg2CbO/l40J0GjBDIb YUjfSwJAhZb0LA== -----END CERTIFICATE-----Generated at Sun Sep 7 13:53:50 2025 by rpki-client