$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: 5GH9VoathpiYW8A2TcuZdkKCs5kykhyfRH0peevuI7s= Subject key identifier: 0E:D5:23:85:91:5E:C1:82:DA:E0:5C:4D:DE:12:D1:AB:D0:92:09:A6 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 0199FB7CF24CE92986C8FDC1B6FBA01BD81F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 07DD Signing time: Sun 19 Oct 2025 08:01:33 +0000 Manifest this update: Sun 19 Oct 2025 08:01:33 +0000 Manifest next update: Mon 20 Oct 2025 08:01:33 +0000 Files and hashes: 1: 42ZKqzZkMxt9TNa3kDuOPMM6iQE.roa (hash: KZlJ8qtbQIc6xsv2BWgZJQIZNypBYZKEQKWe5hueZS8=) 2: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (hash: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=) 3: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (hash: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=) 4: Q6EO3aP-jjJFw2iA2Iv66QHPMec.roa (hash: aHR2z/V+w3dsUyxS4wquU+wnGLivkjSNoIgrvTG78B0=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: t8iraFd5lH11K7aYqjMjfCwf6KGx0Yqe+zYIONSXVLs=) 6: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 7: RM5tveyL7IwwCTJhkjI3P9MlLys.roa (hash: KFFKSBrC9ZMfN/WLMwRRsqjcRSmKiqYliu6seaJxBqE=) 8: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 9: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 10: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 11: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 12: ltogBTKKP3YwW6qX9EFNQHqYqDY.roa (hash: 0g4YXtPVFTAZDoNyfjazoEulAUnVYgi84dLEleZkwWE=) 13: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 14: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:f2:4c:e9:29:86:c8:fd:c1:b6:fb:a0:1b:d8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Oct 19 08:01:33 2025 GMT Not After : Oct 20 08:01:33 2025 GMT Subject: CN=0ed52385915ec182dae05c4dde12d1abd09209a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:77:d1:95:c9:9e:58:a1:a5:d6:29:85:dd: 82:9c:b3:1c:bb:79:c3:06:ba:e2:0e:f6:da:9d:0c: 35:e5:dc:44:27:db:34:16:45:41:6d:c9:89:18:c0: ef:98:72:68:17:73:cd:0b:53:56:b2:64:81:72:55: fa:47:d0:75:29:8e:83:01:96:85:2d:b5:e6:f4:21: d3:b8:b8:6a:80:68:05:42:f8:75:03:04:2f:da:73: 86:e8:6c:c0:31:a2:b7:71:09:a5:5b:57:5b:ca:49: 8b:ee:f6:76:63:f1:3a:a5:fa:80:7a:8a:df:41:3a: 4b:29:04:63:c1:ea:26:d8:73:8d:3a:cc:a7:2f:e8: 43:4c:cb:b7:e1:5a:bf:61:7d:05:49:06:d9:15:87: 99:6f:5e:a9:9f:85:18:93:e2:25:44:5f:47:d1:d2: 01:87:27:4d:da:03:87:d0:5d:36:32:e1:f7:74:cd: d7:da:1b:d4:03:4a:e8:ae:66:29:82:ae:b7:05:a3: d8:77:b3:79:a9:70:a7:74:74:9c:9c:77:62:d5:01: c4:44:d2:47:23:23:2e:10:28:a5:45:60:2d:fb:57: 36:f1:ff:13:5a:c6:43:1d:4e:f2:ad:dd:2b:01:8d: 64:e1:3d:c1:76:7f:c0:5d:46:01:d5:3a:4e:cb:e6: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D5:23:85:91:5E:C1:82:DA:E0:5C:4D:DE:12:D1:AB:D0:92:09:A6 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b6:bb:a2:74:de:d8:d5:6f:15:47:da:bf:5d:84:3b:ca:b0: 49:d8:8a:52:ef:cb:f7:03:b6:5f:99:49:21:90:ab:94:31:f2: 2f:2e:ff:b0:4a:8e:e3:f7:6e:21:3c:97:68:f6:57:99:02:39: b5:08:4a:59:8f:da:8d:64:cf:87:b0:34:b9:e8:a6:c6:ab:48: cb:51:3c:ef:df:c5:ab:98:ea:9e:95:d3:ba:f1:98:14:f6:55: ea:53:e7:b4:51:57:81:75:88:75:f6:65:0d:3d:e6:64:d4:71: ac:03:01:dc:ba:bf:df:e5:96:35:90:ff:0f:1a:1b:97:f4:b8: 94:3f:35:5b:30:1a:ee:da:d2:00:7c:e8:05:f0:47:e6:74:8e: b3:45:b4:e5:ad:9b:e1:ee:23:c2:56:79:f3:c2:55:8d:81:c0: 19:58:5c:f4:6a:ac:e0:2c:ec:dc:53:f2:1a:64:4e:ad:1e:66: a8:66:fc:75:2b:38:ad:bb:d1:89:b9:4a:04:36:bf:97:74:59: e9:bf:49:36:1c:07:ba:83:67:1f:55:97:89:91:02:d4:3c:bf: 42:b7:e0:5e:f5:33:e6:c0:bd:bd:b5:3f:1d:16:2c:4a:7d:c1: ff:7d:41:c3:c2:1e:3e:11:3b:66:3a:bd:38:5c:ce:20:bf:f9: ca:3b:a4:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fPJM6SmGyP3BtvugG9gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUxMDE5MDgwMTMzWhcNMjUxMDIwMDgwMTMzWjAzMTEwLwYDVQQD EygwZWQ1MjM4NTkxNWVjMTgyZGFlMDVjNGRkZTEyZDFhYmQwOTIwOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE930ZXJnlihpdYphd2CnLMcu3nD BrriDvbanQw15dxEJ9s0FkVBbcmJGMDvmHJoF3PNC1NWsmSBclX6R9B1KY6DAZaF LbXm9CHTuLhqgGgFQvh1AwQv2nOG6GzAMaK3cQmlW1dbykmL7vZ2Y/E6pfqAeorf QTpLKQRjweom2HONOsynL+hDTMu34Vq/YX0FSQbZFYeZb16pn4UYk+IlRF9H0dIB hydN2gOH0F02MuH3dM3X2hvUA0rormYpgq63BaPYd7N5qXCndHScnHdi1QHERNJH IyMuECilRWAt+1c28f8TWsZDHU7yrd0rAY1k4T3Bdn/AXUYB1TpOy+aAXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7VI4WRXsGC2uBcTd4S0avQkgmmMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLa7onTe 2NVvFUfav12EO8qwSdiKUu/L9wO2X5lJIZCrlDHyLy7/sEqO4/duITyXaPZXmQI5 tQhKWY/ajWTPh7A0ueimxqtIy1E879/Fq5jqnpXTuvGYFPZV6lPntFFXgXWIdfZl DT3mZNRxrAMB3Lq/3+WWNZD/Dxobl/S4lD81WzAa7trSAHzoBfBH5nSOs0W05a2b 4e4jwlZ588JVjYHAGVhc9Gqs4Czs3FPyGmROrR5mqGb8dSs4rbvRiblKBDa/l3RZ 6b9JNhwHuoNnH1WXiZEC1Dy/QrfgXvUz5sC9vbU/HRYsSn3B/31Bw8IePhE7Zjq9 OFzOIL/5yjuk6A== -----END CERTIFICATE-----Generated at Sun Oct 19 18:05:45 2025 by rpki-client