$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: baZ5U3uEgvXlBk4kBZE4/VSHbE9KqMzPuKEC9nYwBBw= Subject key identifier: B9:8E:DE:60:C2:13:79:58:8D:D2:92:77:9B:35:A9:63:EE:13:A6:7B Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019747B09B330D7F62E9C7C4A57EEF478834 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0C25 Signing time: Sat 07 Jun 2025 00:00:45 +0000 Manifest this update: Sat 07 Jun 2025 00:00:45 +0000 Manifest next update: Sun 08 Jun 2025 00:00:45 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: HoyR8yf5uRbattYB2w9dK7kYNkb9b6I6ZAa+GqvheiA=) 6: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 7: fhK3spdizh-j08bDgQWAIWcvZm4.roa (hash: Nz0rdH67w5QKkf0wMH2IazVmlZq7Iwuz9Y5nbjtBWvw=) 8: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (hash: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=) 9: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tKgBqg_rLrlFGJvqmdrP_jnooGM.roa (hash: tpbpHr7/WtsAKH6NIHCmBsfYfjVLkAOk8pTuaYRtsII=) 12: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 13: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:b0:9b:33:0d:7f:62:e9:c7:c4:a5:7e:ef:47:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jun 7 00:00:45 2025 GMT Not After : Jun 8 00:00:45 2025 GMT Subject: CN=b98ede60c21379588dd292779b35a963ee13a67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:a8:fd:f6:91:98:3f:08:0c:65:2e:4d:95: 9b:fe:8a:a6:3f:64:9f:6d:d3:f2:72:71:f0:e6:7f: 0f:7a:58:31:63:a4:00:08:44:6d:ba:7b:3a:88:e9: 8e:95:2b:e6:a7:57:05:82:73:a1:ef:9f:73:f7:ec: c3:0e:f7:a5:cb:b4:90:4a:64:d3:5b:70:72:3b:a6: a8:36:f9:41:b9:00:7e:ad:a5:86:9c:72:bc:a2:de: 4a:1d:36:3f:32:00:80:0e:24:0a:55:f7:b6:e4:cc: 9e:00:93:98:35:f6:94:92:15:c6:b8:76:3b:41:ca: e5:c2:48:c1:bf:a0:d4:4c:08:2b:85:a2:92:9d:47: 9f:0b:46:58:c9:71:b1:e1:d2:70:56:77:ed:95:8e: e0:83:79:84:7d:c2:1b:c2:8b:46:72:e4:25:4c:f3: b4:80:9f:84:eb:b5:c6:7e:f6:e5:71:94:1a:b4:fd: be:6e:cd:df:3a:da:66:c9:0e:f3:2e:92:00:1c:8d: f1:d2:9f:de:2f:ba:ef:77:c3:f1:0a:68:6b:e4:c8: 44:61:b5:22:4a:1e:26:2f:2e:9a:76:20:4a:19:72: 8e:26:1b:6a:ff:66:3b:46:bc:e8:66:bc:1c:9d:c0: 4e:ed:b1:56:cb:92:3e:6d:eb:6c:14:bc:c7:97:e1: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8E:DE:60:C2:13:79:58:8D:D2:92:77:9B:35:A9:63:EE:13:A6:7B X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:11:fa:6b:d8:99:d4:37:3c:b0:ed:11:52:d7:56:a3:55:4a: fc:2a:f6:cf:24:5c:49:ba:55:19:fa:5a:ee:5e:b7:bf:44:ea: 0a:5c:85:29:0f:7c:9e:61:6a:0a:c9:61:ba:4c:5f:a2:ec:79: 2d:d6:b9:17:73:9c:c7:48:99:d8:51:54:3e:00:d5:ab:40:76: 95:21:45:3e:44:72:98:fd:c4:dc:26:23:b4:12:f2:97:45:07: 73:a7:e4:4c:75:31:a6:34:96:f1:b1:88:70:be:a4:59:8f:e6: 88:a7:ce:57:30:71:19:29:f8:0e:35:fc:08:3d:d1:22:a4:c0: f0:64:ab:70:64:d9:cd:1e:a3:8b:bb:b1:37:47:49:c7:2f:d9: 26:de:f8:d6:39:29:ff:bc:aa:58:c4:63:34:d3:75:17:b7:fe: 3b:4d:36:61:0d:e4:3f:ec:bf:32:86:52:e3:f8:77:92:d9:82: d5:39:e2:d3:5b:68:a1:a3:4e:9c:85:2b:c7:eb:d8:76:4d:93: dd:02:9b:d0:e7:e2:0e:71:75:bc:66:cf:a8:31:44:48:f4:cf: ee:36:b7:3a:06:1d:2a:7b:be:a9:bf:a2:73:94:00:c9:4f:b8: f2:79:e2:30:7e:19:6c:c8:e5:40:a9:65:ac:b4:16:10:bc:a9: 82:80:56:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHsJszDX9i6cfEpX7vR4g0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwNjA3MDAwMDQ1WhcNMjUwNjA4MDAwMDQ1WjAzMTEwLwYDVQQD EyhiOThlZGU2MGMyMTM3OTU4OGRkMjkyNzc5YjM1YTk2M2VlMTNhNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKKo/faRmD8IDGUuTZWb/oqmP2Sf bdPycnHw5n8PelgxY6QACERtuns6iOmOlSvmp1cFgnOh759z9+zDDvely7SQSmTT W3ByO6aoNvlBuQB+raWGnHK8ot5KHTY/MgCADiQKVfe25MyeAJOYNfaUkhXGuHY7 QcrlwkjBv6DUTAgrhaKSnUefC0ZYyXGx4dJwVnftlY7gg3mEfcIbwotGcuQlTPO0 gJ+E67XGfvblcZQatP2+bs3fOtpmyQ7zLpIAHI3x0p/eL7rvd8PxCmhr5MhEYbUi Sh4mLy6adiBKGXKOJhtq/2Y7RrzoZrwcncBO7bFWy5I+betsFLzHl+FA0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmO3mDCE3lYjdKSd5s1qWPuE6Z7MB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRH6a9iZ 1Dc8sO0RUtdWo1VK/Cr2zyRcSbpVGfpa7l63v0TqClyFKQ98nmFqCslhukxfoux5 Lda5F3Ocx0iZ2FFUPgDVq0B2lSFFPkRymP3E3CYjtBLyl0UHc6fkTHUxpjSW8bGI cL6kWY/miKfOVzBxGSn4DjX8CD3RIqTA8GSrcGTZzR6ji7uxN0dJxy/ZJt741jkp /7yqWMRjNNN1F7f+O002YQ3kP+y/MoZS4/h3ktmC1Tni01tooaNOnIUrx+vYdk2T 3QKb0OfiDnF1vGbPqDFESPTP7ja3OgYdKnu+qb+ic5QAyU+48nniMH4ZbMjlQKll rLQWELypgoBWZA== -----END CERTIFICATE-----Generated at Sat Jun 7 04:08:42 2025 by rpki-client