$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: 6zZ0kFCtmlZH6kQymNiIUJXjdKYgm03j+4NK6r97Bbc= Subject key identifier: 9D:F7:58:B2:F8:BA:2D:37:3F:FA:ED:19:17:06:EB:DC:E6:3B:57:30 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019A255352178514E91113117B978336A68B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0EF1 Signing time: Mon 27 Oct 2025 11:00:08 +0000 Manifest this update: Mon 27 Oct 2025 11:00:08 +0000 Manifest next update: Tue 28 Oct 2025 11:00:08 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 47M6KEzcDRZQC8W3dRILCpyF6355tC37QIK2TGoy7bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:53:52:17:85:14:e9:11:13:11:7b:97:83:36:a6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Oct 27 11:00:08 2025 GMT Not After : Oct 28 11:00:08 2025 GMT Subject: CN=9df758b2f8ba2d373ffaed191706ebdce63b5730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:08:1a:0b:3f:84:d6:06:67:e9:ea:f0:48: 89:7a:8e:00:bc:e5:75:02:27:b6:b4:74:fe:51:3a: 37:72:e5:3e:6b:d4:d8:64:3c:da:ff:70:b7:51:63: c6:c5:df:06:a5:3e:dc:8a:40:ae:d1:67:8d:1e:21: 01:65:f5:37:a1:2b:a0:e1:b3:7e:42:fa:fa:11:e6: 91:82:0a:49:2b:94:9d:1d:86:36:86:1f:d0:0b:60: b1:92:71:b7:9f:c6:cc:8b:0d:4e:f4:b7:33:81:7f: 60:29:61:d2:86:66:6a:38:de:99:2d:1f:a8:85:f1: a5:b4:a1:de:02:de:44:49:76:f5:db:df:1e:18:d4: 41:30:33:c5:48:bd:4c:f7:9e:7f:47:c7:1a:6d:27: 8d:c4:18:2b:7c:76:49:17:23:9e:fb:5a:14:09:fe: 78:33:21:e2:40:69:bb:9b:f6:11:af:2e:e7:f4:c7: 23:ac:4b:f1:14:7e:fe:f7:c2:03:44:9e:e8:ad:37: 01:30:f2:f5:29:20:0e:5b:1c:d4:64:13:4c:b0:44: ff:cd:d2:f2:e8:69:9c:f4:df:91:0b:98:ec:a8:c6: 1c:b5:6f:7c:e4:3f:00:70:17:42:9c:ef:31:d3:da: b7:5c:76:75:79:79:81:b6:ae:6f:05:fb:bc:49:5b: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F7:58:B2:F8:BA:2D:37:3F:FA:ED:19:17:06:EB:DC:E6:3B:57:30 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3d:fd:8f:b0:82:08:3c:31:b8:bf:7e:24:a0:7d:88:5b:7d: d7:4c:db:56:2d:8e:e1:38:e4:fb:db:32:b9:4c:b3:90:32:3d: ab:4c:fe:db:f0:da:c8:74:d0:a8:87:7a:70:7a:13:da:d9:ef: bd:e5:c6:34:ce:cb:86:54:5b:98:8c:44:c0:ed:d0:d1:bb:d5: dc:b0:9b:0e:a9:c4:4a:3c:a8:65:83:45:88:c8:a8:a4:e9:33: 50:de:09:8e:8b:13:04:9b:2c:8c:51:91:f3:0e:b6:a4:2e:52: 80:21:49:52:67:d8:a7:68:f4:0c:f0:ef:f8:ef:13:a3:74:b8: 33:d5:39:70:af:c5:d3:57:ab:93:ae:dd:f9:8a:2f:6b:cd:72: 3f:4b:ca:e3:35:30:ae:32:46:b5:ca:74:8c:54:33:42:9e:fa: a2:68:33:4b:94:a2:19:99:e1:57:6c:39:ce:15:3d:ce:71:d2: 0d:a3:fa:6d:36:6d:bf:98:36:19:0d:be:80:66:1a:e9:2a:ec: f6:67:03:52:b9:90:74:51:63:75:58:33:e0:74:a4:2f:0e:f2: b1:fb:07:a7:3b:96:4c:53:8c:2c:dd:59:c0:5b:5a:e5:a7:86: d3:a4:e1:d8:39:fa:72:c0:25:37:e8:fc:ca:f2:e8:13:35:f4: d8:6f:ee:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZolU1IXhRTpERMRe5eDNqaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUxMDI3MTEwMDA4WhcNMjUxMDI4MTEwMDA4WjAzMTEwLwYDVQQD Eyg5ZGY3NThiMmY4YmEyZDM3M2ZmYWVkMTkxNzA2ZWJkY2U2M2I1NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04EIGgs/hNYGZ+nq8EiJeo4AvOV1 Aie2tHT+UTo3cuU+a9TYZDza/3C3UWPGxd8GpT7cikCu0WeNHiEBZfU3oSug4bN+ Qvr6EeaRggpJK5SdHYY2hh/QC2CxknG3n8bMiw1O9LczgX9gKWHShmZqON6ZLR+o hfGltKHeAt5ESXb1298eGNRBMDPFSL1M955/R8cabSeNxBgrfHZJFyOe+1oUCf54 MyHiQGm7m/YRry7n9McjrEvxFH7+98IDRJ7orTcBMPL1KSAOWxzUZBNMsET/zdLy 6Gmc9N+RC5jsqMYctW985D8AcBdCnO8x09q3XHZ1eXmBtq5vBfu8SVspLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ33WLL4ui03P/rtGRcG69zmO1cwMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFD39j7CC CDwxuL9+JKB9iFt910zbVi2O4Tjk+9syuUyzkDI9q0z+2/DayHTQqId6cHoT2tnv veXGNM7LhlRbmIxEwO3Q0bvV3LCbDqnESjyoZYNFiMiopOkzUN4JjosTBJssjFGR 8w62pC5SgCFJUmfYp2j0DPDv+O8To3S4M9U5cK/F01erk67d+Yova81yP0vK4zUw rjJGtcp0jFQzQp76omgzS5SiGZnhV2w5zhU9znHSDaP6bTZtv5g2GQ2+gGYa6Srs 9mcDUrmQdFFjdVgz4HSkLw7ysfsHpzuWTFOMLN1ZwFta5aeG06Th2Dn6csAlN+j8 yvLoEzX02G/uKQ== -----END CERTIFICATE-----Generated at Mon Oct 27 13:52:13 2025 by rpki-client