$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: /6TvGwUsOdLPG3JnOj0rfFYTpbn/ThpexpI/9A/dW3k= Subject key identifier: BB:E0:46:4B:04:17:23:5E:E8:4D:E3:C3:D0:93:06:B4:D1:33:DA:53 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 0197CD282B15F313CEA1D70CAA537831E29A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 06B8 Signing time: Wed 02 Jul 2025 22:00:51 +0000 Manifest this update: Wed 02 Jul 2025 22:00:51 +0000 Manifest next update: Thu 03 Jul 2025 22:00:51 +0000 Files and hashes: 1: 1-33FGIXffxFw1fm_nzqbjQkgU-8.roa (hash: jy2UTrHMk2ALLRF7WklEtaHYe9J31jM3B2a7AkefrRE=) 2: 27z3zvbcVWqs_7POg5QhQc8T7vw.roa (hash: J37O++pYx5afq4v2icLHbQpLACT+N5czdMSBRJ0zZSc=) 3: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (hash: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=) 4: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: CNufR2Wo0eZsU2exV5zn3DsTtlPCmcXhFtyv+1q5EhE=) 5: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 6: SlSinHUbXT415BsCEUMFcSa5FDE.roa (hash: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=) 7: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 8: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 9: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 10: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 11: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 12: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cd:28:2b:15:f3:13:ce:a1:d7:0c:aa:53:78:31:e2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jul 2 22:00:51 2025 GMT Not After : Jul 3 22:00:51 2025 GMT Subject: CN=bbe0464b0417235ee84de3c3d09306b4d133da53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:a4:eb:00:fd:69:a1:79:f2:7b:cb:72:c9: 0a:52:30:aa:d7:e8:7f:08:62:f2:d2:de:05:7f:c5: f1:56:5e:5f:8c:41:8d:7c:90:24:cd:dd:a4:2c:f9: d6:cd:d5:58:a3:42:d2:b3:b9:97:bc:d1:ef:e3:17: ba:8b:09:1f:e4:ad:6c:aa:b4:c4:0e:c2:51:50:d4: 72:d1:59:35:42:d8:76:49:9f:6e:f7:65:b7:87:23: 8f:75:27:9c:ba:ea:9a:e7:07:6b:89:e7:42:62:eb: c1:c6:4a:1d:6a:27:6d:91:52:d1:6d:7c:cc:46:73: 5c:4c:ff:9d:d9:f6:6c:7e:08:32:c9:42:b5:3c:bc: f8:94:5e:e7:0f:53:21:f9:45:d7:8b:5f:33:93:ac: 4f:31:1d:c6:67:89:fe:58:64:c2:84:e9:55:9f:6b: 8c:f9:b5:40:f3:84:dd:4a:d4:2e:3c:07:c6:d6:ae: b0:cc:10:dd:aa:0b:33:2b:e2:90:05:8f:e5:fa:34: 9e:9e:31:20:cd:35:ca:12:d0:72:2f:52:9d:4e:f6: d4:24:f2:4d:ba:73:56:ee:11:71:56:9e:78:7a:b3: ce:47:08:6d:13:9e:46:52:33:a2:72:f8:ae:cc:36: d9:a4:4d:d9:dd:f6:86:43:4c:ce:73:6a:1d:5a:f6: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:46:4B:04:17:23:5E:E8:4D:E3:C3:D0:93:06:B4:D1:33:DA:53 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bb:c5:bc:5f:39:67:7f:e9:64:7d:6e:64:60:9b:22:67:6a: a6:f9:99:84:b7:9a:7b:b8:8f:e9:a1:13:ea:54:f7:de:a9:5b: e9:9f:fe:05:47:84:e8:c3:61:be:74:b5:92:66:51:90:03:f0: 81:cd:e1:de:a4:ed:c1:24:c5:7c:24:77:3a:13:bc:5a:5c:78: 90:3b:f5:20:95:28:98:ba:d9:de:10:46:73:dd:28:12:00:b0: e4:44:fa:33:25:e9:34:d2:65:e0:67:6c:af:83:3f:ef:c8:8a: 4a:c9:ad:d6:a9:ff:1b:cf:de:f8:6d:c1:d6:0a:d1:38:26:fd: e4:4e:1a:ca:af:bd:2e:83:0b:7f:2d:dc:b1:81:f4:64:6e:db: 87:0b:12:ea:4f:e8:2e:08:78:79:bf:e4:62:f7:d3:79:95:54: fd:c0:f0:5b:70:e2:c3:0f:29:12:fd:39:69:74:f3:ef:8c:08: af:e1:53:72:ba:f7:00:0c:82:c9:63:e9:bb:54:f0:19:3f:3e: 5b:50:bf:f6:8e:72:57:a2:50:02:69:2a:3a:f7:ee:10:10:dd: 79:a6:9e:96:cf:e5:48:fa:f5:48:1c:84:8d:03:fb:fb:99:c5: 71:1f:5a:2b:a7:12:31:b4:b9:80:e1:6c:59:91:2c:f1:2c:f7: 98:8b:2f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfNKCsV8xPOodcMqlN4MeKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwNzAyMjIwMDUxWhcNMjUwNzAzMjIwMDUxWjAzMTEwLwYDVQQD EyhiYmUwNDY0YjA0MTcyMzVlZTg0ZGUzYzNkMDkzMDZiNGQxMzNkYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Sk6wD9aaF58nvLcskKUjCq1+h/ CGLy0t4Ff8XxVl5fjEGNfJAkzd2kLPnWzdVYo0LSs7mXvNHv4xe6iwkf5K1sqrTE DsJRUNRy0Vk1Qth2SZ9u92W3hyOPdSecuuqa5wdriedCYuvBxkodaidtkVLRbXzM RnNcTP+d2fZsfggyyUK1PLz4lF7nD1Mh+UXXi18zk6xPMR3GZ4n+WGTChOlVn2uM +bVA84TdStQuPAfG1q6wzBDdqgszK+KQBY/l+jSenjEgzTXKEtByL1KdTvbUJPJN unNW7hFxVp54erPORwhtE55GUjOicviuzDbZpE3Z3faGQ0zOc2odWvYuLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvgRksEFyNe6E3jw9CTBrTRM9pTMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLvFvF85 Z3/pZH1uZGCbImdqpvmZhLeae7iP6aET6lT33qlb6Z/+BUeE6MNhvnS1kmZRkAPw gc3h3qTtwSTFfCR3OhO8Wlx4kDv1IJUomLrZ3hBGc90oEgCw5ET6MyXpNNJl4Gds r4M/78iKSsmt1qn/G8/e+G3B1grROCb95E4ayq+9LoMLfy3csYH0ZG7bhwsS6k/o Lgh4eb/kYvfTeZVU/cDwW3Diww8pEv05aXTz74wIr+FTcrr3AAyCyWPpu1TwGT8+ W1C/9o5yV6JQAmkqOvfuEBDdeaaels/lSPr1SByEjQP7+5nFcR9aK6cSMbS5gOFs WZEs8Sz3mIsvFQ== -----END CERTIFICATE-----Generated at Thu Jul 3 06:37:08 2025 by rpki-client