$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: vtw2TjLFReBjGZU7CKqP2U+v74sHPbt2/SIsdRurSPw= Subject key identifier: 7A:5F:61:7D:49:D6:4A:21:DD:8E:33:73:1C:6C:CE:78:2B:98:BF:6D Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019935DCA476C78BB4A0AD648279F9CC4D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0E75 Signing time: Wed 10 Sep 2025 23:01:16 +0000 Manifest this update: Wed 10 Sep 2025 23:01:16 +0000 Manifest next update: Thu 11 Sep 2025 23:01:16 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: aQMJ8cgz+JyScmv5lJkKIge/foyvp3Ivdg31oVEzw+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:35:dc:a4:76:c7:8b:b4:a0:ad:64:82:79:f9:cc:4d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Sep 10 23:01:16 2025 GMT Not After : Sep 11 23:01:16 2025 GMT Subject: CN=7a5f617d49d64a21dd8e33731c6cce782b98bf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:42:ed:7f:97:60:89:8f:b5:44:95:02:a6: 2e:d1:f4:d4:51:5a:47:24:96:1d:b0:e0:cc:11:bb: 7c:49:ca:0a:87:04:6d:d0:fd:d5:2f:c1:2f:88:f0: 01:41:bd:c2:bc:36:39:a1:8f:8d:35:59:f7:b8:37: 5b:9b:f9:82:b6:f1:81:58:ed:5e:eb:1b:2f:7b:d4: 2b:93:3f:23:67:c0:ef:4b:50:c0:08:36:ab:10:fe: c3:13:cf:f4:1e:5f:95:76:2e:9c:e3:4d:b4:d7:0e: 93:3a:91:a8:48:69:1a:0f:1f:30:d6:0c:ff:48:b2: 35:4b:2c:9e:1b:2b:9c:a4:f9:c9:4d:1a:b8:f4:6c: a5:cd:86:6f:92:5f:de:c6:86:1d:17:1e:0c:1c:1d: 93:c4:2d:46:2b:b5:3b:31:88:7e:54:a0:79:e2:3d: cd:35:e5:3e:3c:b2:d8:d6:f6:1b:de:30:9b:3d:e4: 55:e0:25:07:a5:7c:f2:94:e1:d6:1f:9e:c2:2e:5c: a3:4e:e1:c1:96:a1:ac:cb:db:bc:74:09:3b:cf:56: 9a:07:85:5b:47:2f:cb:4c:56:c0:91:b3:cf:78:9e: 88:ca:99:1c:68:69:f3:69:70:ae:f0:4b:5c:df:7d: 87:2b:1b:9c:09:b6:b1:c7:c6:d5:a8:56:c5:c4:72: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:61:7D:49:D6:4A:21:DD:8E:33:73:1C:6C:CE:78:2B:98:BF:6D X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2b:d6:9b:20:d1:b9:46:61:c3:86:67:8c:06:9d:ba:c7:da: 90:50:b3:0f:13:34:5b:35:ae:a9:fa:79:32:dc:17:c7:15:3e: 6f:87:09:e1:49:9a:71:47:bd:60:b1:1f:fd:8a:ce:12:4b:c3: 51:60:d5:d9:30:93:e7:68:4d:74:16:06:c5:67:a0:1a:5e:76: e6:3a:03:b7:67:22:e6:d2:dd:9b:f2:75:ad:6a:c5:88:47:49: 74:3c:3b:19:22:00:47:7e:18:7c:cc:2b:2c:8d:50:c2:cc:c1: 91:fb:b0:af:99:c6:50:b4:27:05:b9:f4:b0:1c:6b:4e:78:33: 87:0e:ce:ed:de:28:c6:f3:c8:b8:3a:89:9b:23:b0:f7:d7:67: e4:6b:7a:1a:a3:5d:b3:fa:7b:bf:b8:ce:28:87:96:e2:d5:3b: 37:e9:82:6d:06:f4:a6:a2:63:af:77:dc:fa:0b:6f:2b:fb:01: 68:83:68:1d:26:ba:76:1c:fa:d0:13:ac:fb:ba:90:33:bc:f9: c7:67:2a:ba:2d:32:c8:0f:6d:8c:82:53:bc:29:b5:24:3a:46: 8a:eb:31:2c:f9:be:8f:a7:f0:4b:4c:0f:38:22:89:b2:b3:91: 29:f9:59:b3:cf:e8:4d:cd:41:87:ef:2f:34:48:36:4b:36:9a: 7c:1f:5c:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk13KR2x4u0oK1kgnn5zE2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwOTEwMjMwMTE2WhcNMjUwOTExMjMwMTE2WjAzMTEwLwYDVQQD Eyg3YTVmNjE3ZDQ5ZDY0YTIxZGQ4ZTMzNzMxYzZjY2U3ODJiOThiZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxZC7X+XYImPtUSVAqYu0fTUUVpH JJYdsODMEbt8ScoKhwRt0P3VL8EviPABQb3CvDY5oY+NNVn3uDdbm/mCtvGBWO1e 6xsve9Qrkz8jZ8DvS1DACDarEP7DE8/0Hl+Vdi6c40201w6TOpGoSGkaDx8w1gz/ SLI1SyyeGyucpPnJTRq49GylzYZvkl/exoYdFx4MHB2TxC1GK7U7MYh+VKB54j3N NeU+PLLY1vYb3jCbPeRV4CUHpXzylOHWH57CLlyjTuHBlqGsy9u8dAk7z1aaB4Vb Ry/LTFbAkbPPeJ6IypkcaGnzaXCu8Etc332HKxucCbaxx8bVqFbFxHJwowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpfYX1J1koh3Y4zcxxszngrmL9tMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSvWmyDR uUZhw4ZnjAadusfakFCzDxM0WzWuqfp5MtwXxxU+b4cJ4UmacUe9YLEf/YrOEkvD UWDV2TCT52hNdBYGxWegGl525joDt2ci5tLdm/J1rWrFiEdJdDw7GSIAR34YfMwr LI1QwszBkfuwr5nGULQnBbn0sBxrTngzhw7O7d4oxvPIuDqJmyOw99dn5Gt6GqNd s/p7v7jOKIeW4tU7N+mCbQb0pqJjr3fc+gtvK/sBaINoHSa6dhz60BOs+7qQM7z5 x2cqui0yyA9tjIJTvCm1JDpGiusxLPm+j6fwS0wPOCKJsrORKflZs8/oTc1Bh+8v NEg2SzaafB9cBg== -----END CERTIFICATE-----Generated at Thu Sep 11 03:40:23 2025 by rpki-client