$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: TSDggsqUH+875xlR/r5tvqEvnNVoAJzLtzKi9eMdUGY= Subject key identifier: 4F:99:6A:A4:4F:77:8E:3D:05:BD:42:98:5C:EB:57:F0:B8:0D:08:25 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01A0DCF30463D117055A8875541718BD6D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0B75 Signing time: Sat 26 Sep 2026 09:01:48 +0000 Manifest this update: Sat 26 Sep 2026 09:01:48 +0000 Manifest next update: Sun 27 Sep 2026 09:01:48 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: CKoKV9SSWeY0CC35RGZW3-Sowvk.roa (hash: CNoybL/dDEh4vogvIRKGBoOMFZRqcXzTkYgL2z5M9bM=) 5: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 6: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 7: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: QP8xqRR01d23f+ednKS42QaQvsGIA51fMK7GWvDOCDc=) 8: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa (hash: ifAnSGVO73NRoAKq59gXyGui7/GMr2OJw5wHm+/+JP8=) 14: rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa (hash: kSyIl9GbSnFUvQKXxkb/qMKrsJ6GBbvNU0EjtITFE2w=) 15: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:f3:04:63:d1:17:05:5a:88:75:54:17:18:bd:6d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Sep 26 09:01:48 2026 GMT Not After : Sep 27 09:01:48 2026 GMT Subject: CN=4f996aa44f778e3d05bd42985ceb57f0b80d0825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:a2:9d:87:90:dd:02:4d:9a:ea:1f:7f:c8: 75:8e:ae:e7:18:d4:9b:fd:ff:13:f3:7f:cd:d6:f7: 25:34:7b:3f:39:91:a1:b0:e7:89:48:38:37:4c:36: 77:b3:f2:41:41:a1:56:4f:ee:06:11:24:14:d6:79: d4:b5:61:de:24:f1:c2:0e:7e:1c:5c:9c:79:dd:83: cc:ca:cf:4d:39:44:ff:23:fd:bd:b9:7a:38:fd:d7: 81:41:ab:51:2c:0b:6c:2c:9e:c7:83:40:28:a6:c2: 46:0c:a7:46:b5:3f:a8:20:cd:fe:72:2a:8b:19:27: b4:dc:ad:35:69:92:42:b9:fa:3f:ac:94:ac:d3:4b: 1b:10:dc:ca:99:b8:a8:15:0c:09:d8:1f:09:a7:9e: 55:17:f7:fe:fb:eb:9a:2c:89:71:a4:d6:1e:47:67: cb:aa:74:5f:44:ed:2a:95:23:ff:87:cd:f9:ed:e6: f9:3b:12:52:fd:b5:57:7b:a0:14:66:aa:45:7a:66: 02:ff:f2:e0:32:e8:76:ed:93:5e:c0:e8:60:1e:0a: a7:a6:08:e4:f7:a1:c8:dc:23:2e:1b:79:bc:58:48: 04:74:a7:98:85:88:7d:ac:03:70:b3:3d:16:14:f0: 2f:87:f2:f7:1c:dc:d7:8a:f9:91:89:7f:a2:34:ee: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:6A:A4:4F:77:8E:3D:05:BD:42:98:5C:EB:57:F0:B8:0D:08:25 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cb:d4:81:08:38:10:13:af:82:45:6d:ed:4a:2a:4b:fb:e2: db:15:d3:2f:ad:04:80:62:6c:ef:67:03:d4:48:33:0f:0c:3d: bc:ed:d2:e8:d1:71:59:7e:34:b6:7e:5b:5b:fa:41:27:94:cd: 86:53:6f:0b:25:c1:d0:7d:64:9d:21:df:e4:1a:f6:4c:76:39: f1:b0:15:ba:b0:3f:81:5e:4c:03:74:16:48:2b:e9:2a:8c:0d: 1e:d6:43:36:67:0f:f7:31:9f:f8:5e:c8:a9:95:c6:c4:71:19: 1d:0e:c9:51:a8:c4:12:41:27:93:25:0e:4c:17:dd:99:10:82: 1e:e2:61:ec:1a:bc:30:39:70:00:b6:b9:0b:94:82:97:e1:b2: 30:37:86:3e:43:9b:f6:69:ab:26:2a:6c:6b:f5:09:89:c1:76: a4:2e:7e:2d:cb:c2:c8:23:4a:68:4e:3f:2b:c7:8f:9b:c3:98: 2e:51:4d:c1:f4:56:2e:77:b5:5b:cf:2d:87:74:6f:16:14:1c: 80:b4:b3:fd:5b:e9:33:a5:ed:01:1b:d6:2f:31:23:ab:3e:ca: c0:ba:c8:eb:ca:70:de:bc:e4:ec:04:53:c9:9f:aa:7b:23:c5: d2:ae:a9:88:c3:cd:41:33:0c:06:12:79:86:79:73:fb:0c:c3: b9:fe:4a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDc8wRj0RcFWoh1VBcYvW1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwOTI2MDkwMTQ4WhcNMjYwOTI3MDkwMTQ4WjAzMTEwLwYDVQQD Eyg0Zjk5NmFhNDRmNzc4ZTNkMDViZDQyOTg1Y2ViNTdmMGI4MGQwODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sminYeQ3QJNmuoff8h1jq7nGNSb /f8T83/N1vclNHs/OZGhsOeJSDg3TDZ3s/JBQaFWT+4GESQU1nnUtWHeJPHCDn4c XJx53YPMys9NOUT/I/29uXo4/deBQatRLAtsLJ7Hg0AopsJGDKdGtT+oIM3+ciqL GSe03K01aZJCufo/rJSs00sbENzKmbioFQwJ2B8Jp55VF/f+++uaLIlxpNYeR2fL qnRfRO0qlSP/h8357eb5OxJS/bVXe6AUZqpFemYC//LgMuh27ZNewOhgHgqnpgjk 96HI3CMuG3m8WEgEdKeYhYh9rANwsz0WFPAvh/L3HNzXivmRiX+iNO5/KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+ZaqRPd449Bb1CmFzrV/C4DQglMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8vUgQg4 EBOvgkVt7UoqS/vi2xXTL60EgGJs72cD1EgzDww9vO3S6NFxWX40tn5bW/pBJ5TN hlNvCyXB0H1knSHf5Br2THY58bAVurA/gV5MA3QWSCvpKowNHtZDNmcP9zGf+F7I qZXGxHEZHQ7JUajEEkEnkyUOTBfdmRCCHuJh7Bq8MDlwALa5C5SCl+GyMDeGPkOb 9mmrJipsa/UJicF2pC5+LcvCyCNKaE4/K8ePm8OYLlFNwfRWLne1W88th3RvFhQc gLSz/VvpM6XtARvWLzEjqz7KwLrI68pw3rzk7ARTyZ+qeyPF0q6piMPNQTMMBhJ5 hnlz+wzDuf5K1w== -----END CERTIFICATE-----Generated at Sat Sep 26 18:47:49 2026 by rpki-client