$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: nkXIfrgjEZiwljIbW3OcA5yPt6q/3O5o4yr51mVXq/A= Subject key identifier: 36:A9:6B:26:D6:23:FD:69:E0:40:F9:96:09:EC:8C:93:2D:2C:F2:BA Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 0198D4745EE7B02322D0FC89048A97CC1755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0743 Signing time: Sat 23 Aug 2025 01:04:12 +0000 Manifest this update: Sat 23 Aug 2025 01:04:12 +0000 Manifest next update: Sun 24 Aug 2025 01:04:12 +0000 Files and hashes: 1: 42ZKqzZkMxt9TNa3kDuOPMM6iQE.roa (hash: KZlJ8qtbQIc6xsv2BWgZJQIZNypBYZKEQKWe5hueZS8=) 2: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (hash: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=) 3: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (hash: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=) 4: Q6EO3aP-jjJFw2iA2Iv66QHPMec.roa (hash: aHR2z/V+w3dsUyxS4wquU+wnGLivkjSNoIgrvTG78B0=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: OTMKfG4P2OmwDED2+/vhYZpOVHCiKO/ceAuaUi8LS2c=) 6: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 7: RM5tveyL7IwwCTJhkjI3P9MlLys.roa (hash: KFFKSBrC9ZMfN/WLMwRRsqjcRSmKiqYliu6seaJxBqE=) 8: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 9: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 10: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 11: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 12: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 13: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:74:5e:e7:b0:23:22:d0:fc:89:04:8a:97:cc:17:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Aug 23 01:04:12 2025 GMT Not After : Aug 24 01:04:12 2025 GMT Subject: CN=36a96b26d623fd69e040f99609ec8c932d2cf2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:7e:55:51:24:4a:59:c4:63:b1:8a:6c:1d: 56:80:f1:21:45:74:68:52:cf:68:c0:a6:73:e5:83: 3e:66:8f:5a:12:32:39:b3:26:88:c5:c9:35:40:6b: 56:a1:81:77:7f:f5:8f:29:2a:16:77:2c:58:f3:d5: aa:cd:2f:e3:db:c1:e3:86:02:83:ee:5f:fb:f1:c6: fd:7e:6b:4b:b0:80:e8:19:a3:e1:34:c3:66:dc:50: 82:40:62:61:20:e7:8d:3e:fe:bc:db:11:4e:d3:00: 58:bb:29:69:f3:b4:30:10:0e:e3:e0:d5:07:25:ab: 47:59:54:dd:b9:65:63:2b:d9:bf:b8:37:4a:7d:37: 8d:cd:ec:2c:d2:27:c6:d1:8b:e2:ca:0d:bc:02:6a: 13:7a:02:93:8c:da:3a:10:36:c3:e2:c1:85:c0:0f: fc:91:74:87:e4:44:25:84:42:38:38:64:54:13:d6: d5:65:0a:e6:1e:ae:fc:29:c0:de:0a:b0:18:e4:18: 4a:87:de:41:3c:51:a8:87:9a:da:88:a1:57:2e:62: 88:1c:89:ff:4b:c9:ad:bf:ea:a0:a7:4a:a7:bd:44: b7:01:52:0f:91:4b:50:fd:eb:44:a2:c1:98:30:91: 06:7b:e2:fc:29:6c:d4:09:f3:8f:74:64:d1:ad:b6: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A9:6B:26:D6:23:FD:69:E0:40:F9:96:09:EC:8C:93:2D:2C:F2:BA X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:15:64:5b:42:e3:ef:44:6a:9d:74:ea:51:1b:87:11:93: f4:af:7f:75:49:27:04:78:95:67:d4:94:98:1b:15:83:a8:ae: 55:65:97:23:f7:c3:d8:8d:2c:08:af:e7:57:fa:dd:3c:b0:3e: 39:ae:f4:34:a7:5b:70:18:c0:bc:08:89:17:6c:2e:0d:6d:69: 2b:30:9f:42:2b:4b:28:9a:0b:d0:0e:2e:8d:73:95:0b:d0:ad: cb:67:7f:0c:72:d0:c6:6a:fe:f5:56:cf:0c:12:5f:6a:09:41: e6:72:49:dc:af:1f:38:dd:98:9f:d9:fb:20:be:7d:52:f9:bf: ee:a8:e6:38:11:83:0e:40:08:81:f9:4a:fc:9c:ef:34:0e:cf: 57:b2:43:ac:f9:29:47:c4:97:86:62:b3:c0:73:18:73:7e:ba: c8:21:39:9f:b1:af:3f:9a:d5:f4:fa:92:06:4a:13:d2:bf:00: af:08:f9:3d:00:7f:17:60:84:cd:76:88:65:93:06:5b:29:db: 22:99:bd:90:22:dc:d2:c6:81:ff:b4:c7:f1:f1:1e:bf:75:74: cb:1d:99:15:b1:2d:c8:97:d6:db:94:ea:ed:b9:a5:63:84:fb: c8:af:01:75:2e:7a:85:7b:58:6b:22:e0:e4:53:a5:35:1d:ad: 4d:4b:44:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUdF7nsCMi0PyJBIqXzBdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwODIzMDEwNDEyWhcNMjUwODI0MDEwNDEyWjAzMTEwLwYDVQQD EygzNmE5NmIyNmQ2MjNmZDY5ZTA0MGY5OTYwOWVjOGM5MzJkMmNmMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNV+VVEkSlnEY7GKbB1WgPEhRXRo Us9owKZz5YM+Zo9aEjI5syaIxck1QGtWoYF3f/WPKSoWdyxY89WqzS/j28HjhgKD 7l/78cb9fmtLsIDoGaPhNMNm3FCCQGJhIOeNPv682xFO0wBYuylp87QwEA7j4NUH JatHWVTduWVjK9m/uDdKfTeNzews0ifG0Yviyg28AmoTegKTjNo6EDbD4sGFwA/8 kXSH5EQlhEI4OGRUE9bVZQrmHq78KcDeCrAY5BhKh95BPFGoh5raiKFXLmKIHIn/ S8mtv+qgp0qnvUS3AVIPkUtQ/etEosGYMJEGe+L8KWzUCfOPdGTRrbaeVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDapaybWI/1p4ED5lgnsjJMtLPK6MB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0QVZFtC 4+9Eap106lEbhxGT9K9/dUknBHiVZ9SUmBsVg6iuVWWXI/fD2I0sCK/nV/rdPLA+ Oa70NKdbcBjAvAiJF2wuDW1pKzCfQitLKJoL0A4ujXOVC9Cty2d/DHLQxmr+9VbP DBJfaglB5nJJ3K8fON2Yn9n7IL59Uvm/7qjmOBGDDkAIgflK/JzvNA7PV7JDrPkp R8SXhmKzwHMYc366yCE5n7GvP5rV9PqSBkoT0r8Arwj5PQB/F2CEzXaIZZMGWynb Ipm9kCLc0saB/7TH8fEev3V0yx2ZFbEtyJfW25Tq7bmlY4T7yK8BdS56hXtYayLg 5FOlNR2tTUtEUw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:06 2025 by rpki-client