$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: zNedQlTwH+nvsjd+YraMN/0LKxtZncUClbfXD+vzOf4= Subject key identifier: 15:57:C1:02:B9:FA:F0:FF:55:8D:84:EC:53:47:BC:46:74:9D:10:1F Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 0196D7E50C834C4EF17D26C315ECCACBA8BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0639 Signing time: Fri 16 May 2025 07:00:34 +0000 Manifest this update: Fri 16 May 2025 07:00:34 +0000 Manifest next update: Sat 17 May 2025 07:00:34 +0000 Files and hashes: 1: 1-33FGIXffxFw1fm_nzqbjQkgU-8.roa (hash: jy2UTrHMk2ALLRF7WklEtaHYe9J31jM3B2a7AkefrRE=) 2: 27z3zvbcVWqs_7POg5QhQc8T7vw.roa (hash: J37O++pYx5afq4v2icLHbQpLACT+N5czdMSBRJ0zZSc=) 3: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (hash: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=) 4: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: qWGMn+/J2HRdFGUCegEJyF6pO50/8LN1KNMKT8rWseU=) 5: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 6: SlSinHUbXT415BsCEUMFcSa5FDE.roa (hash: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=) 7: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 8: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 9: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 10: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 11: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 12: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 May 2025 07:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:d7:e5:0c:83:4c:4e:f1:7d:26:c3:15:ec:ca:cb:a8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: May 16 07:00:34 2025 GMT Not After : May 17 07:00:34 2025 GMT Subject: CN=1557c102b9faf0ff558d84ec5347bc46749d101f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:1e:cb:c1:9e:72:8d:0c:52:a3:b1:58:70: 88:e5:dc:e6:a7:3d:bf:52:e6:1e:9e:63:6a:6b:91: 07:8a:ab:94:de:40:32:3f:56:b4:80:fd:26:bf:de: 1e:d7:d2:63:8f:01:97:2e:7b:3a:ca:dd:dc:d2:f4: d3:8d:4b:9c:96:52:b0:06:63:a5:53:b1:8b:7b:03: 92:78:f4:86:42:4f:92:2e:19:dd:7c:78:46:23:44: 89:99:d2:7b:1e:23:d2:1e:9c:6a:68:73:4c:ec:4f: 65:89:5a:5d:fd:7f:08:bc:3a:91:da:ab:fc:c3:66: 6a:5c:cb:0e:ce:c2:02:63:18:be:2c:99:51:51:36: c2:3f:66:97:ba:45:59:53:77:0c:27:65:d5:76:33: 32:15:6b:d4:b7:33:45:8a:6c:32:5c:df:9a:99:59: ea:46:f9:e0:7c:81:b2:d3:a2:45:04:2e:9c:99:2d: 68:cd:ea:56:75:4b:0e:74:54:ae:57:02:6f:ff:d3: d8:81:ba:78:61:f3:7d:ce:81:32:fc:23:7b:11:a0: c8:a7:b2:24:4f:19:70:1b:e3:fe:87:9e:14:4e:1b: 37:91:da:da:2c:ad:70:ce:4a:3e:a3:96:80:35:87: 3b:e7:cd:dd:79:b8:54:4b:1b:3a:68:bb:81:b8:3a: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:57:C1:02:B9:FA:F0:FF:55:8D:84:EC:53:47:BC:46:74:9D:10:1F X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:53:47:69:a1:45:bf:3b:eb:5a:b0:72:62:be:d1:32:1c:4a: 99:98:51:5f:56:0c:75:58:f0:54:23:06:d5:58:06:08:0f:bd: a1:95:d9:32:75:cf:08:99:3c:ce:18:f1:b3:bd:ea:77:ec:f6: 24:e0:98:c7:d1:d0:74:42:2c:9c:1a:04:9e:5a:39:64:e3:bd: bc:d7:fc:99:29:12:d0:c9:94:c1:82:a6:cb:f8:1e:19:73:25: 86:2e:57:b2:79:ab:79:1c:93:e3:95:b7:fa:c1:5c:ac:1b:91: 81:14:2b:4e:06:f1:05:af:bd:fd:56:8e:f7:90:5d:51:c3:e3: f0:1c:1d:a3:dc:90:09:8c:fb:fe:2e:9e:7e:4a:7d:a1:71:1d: 37:ed:9e:09:5f:67:9f:9d:ff:01:66:cc:fa:0f:d1:d0:c2:3b: 86:ee:ad:d8:2b:d8:3a:60:b9:e8:f0:77:41:c9:5b:e4:00:82: bf:c7:46:74:dc:f3:3a:05:cd:28:c4:04:15:ef:22:ad:d7:23: eb:55:10:b0:87:12:ea:29:46:05:75:c8:30:ba:fd:73:96:82: 6d:a4:c3:8d:d8:d0:52:9d:a7:40:71:ff:55:b4:50:5a:83:ec: 8a:11:5c:2b:fd:51:22:cb:ce:f9:86:66:1a:c4:5a:73:e5:af: 60:d6:c9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbX5QyDTE7xfSbDFezKy6i/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwNTE2MDcwMDM0WhcNMjUwNTE3MDcwMDM0WjAzMTEwLwYDVQQD EygxNTU3YzEwMmI5ZmFmMGZmNTU4ZDg0ZWM1MzQ3YmM0Njc0OWQxMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVUey8Geco0MUqOxWHCI5dzmpz2/ UuYenmNqa5EHiquU3kAyP1a0gP0mv94e19JjjwGXLns6yt3c0vTTjUucllKwBmOl U7GLewOSePSGQk+SLhndfHhGI0SJmdJ7HiPSHpxqaHNM7E9liVpd/X8IvDqR2qv8 w2ZqXMsOzsICYxi+LJlRUTbCP2aXukVZU3cMJ2XVdjMyFWvUtzNFimwyXN+amVnq RvngfIGy06JFBC6cmS1ozepWdUsOdFSuVwJv/9PYgbp4YfN9zoEy/CN7EaDIp7Ik TxlwG+P+h54UThs3kdraLK1wzko+o5aANYc7583debhUSxs6aLuBuDpHnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVXwQK5+vD/VY2E7FNHvEZ0nRAfMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklNHaaFF vzvrWrByYr7RMhxKmZhRX1YMdVjwVCMG1VgGCA+9oZXZMnXPCJk8zhjxs73qd+z2 JOCYx9HQdEIsnBoEnlo5ZOO9vNf8mSkS0MmUwYKmy/geGXMlhi5XsnmreRyT45W3 +sFcrBuRgRQrTgbxBa+9/VaO95BdUcPj8Bwdo9yQCYz7/i6efkp9oXEdN+2eCV9n n53/AWbM+g/R0MI7hu6t2CvYOmC56PB3Qclb5ACCv8dGdNzzOgXNKMQEFe8irdcj 61UQsIcS6ilGBXXIMLr9c5aCbaTDjdjQUp2nQHH/VbRQWoPsihFcK/1RIsvO+YZm GsRac+WvYNbJrA== -----END CERTIFICATE-----Generated at Fri May 16 13:14:39 2025 by rpki-client