$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: eainSwAXzTiSZs9XJat8JX52o0eG1chbZIE+cnjlOdY= Subject key identifier: B9:60:34:D0:DA:CA:CF:40:82:18:ED:40:F1:68:43:6F:AB:C9:20:97 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01A0D34B49348030ADE06E55EAB3F67E24EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0B70 Signing time: Thu 24 Sep 2026 12:02:01 +0000 Manifest this update: Thu 24 Sep 2026 12:02:01 +0000 Manifest next update: Fri 25 Sep 2026 12:02:01 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: CKoKV9SSWeY0CC35RGZW3-Sowvk.roa (hash: CNoybL/dDEh4vogvIRKGBoOMFZRqcXzTkYgL2z5M9bM=) 5: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 6: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 7: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: I4YdAlqsQXeZv/RvT/vvP1j97NpaBHpQDPa8euyrSG4=) 8: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa (hash: ifAnSGVO73NRoAKq59gXyGui7/GMr2OJw5wHm+/+JP8=) 14: rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa (hash: kSyIl9GbSnFUvQKXxkb/qMKrsJ6GBbvNU0EjtITFE2w=) 15: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 12:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:4b:49:34:80:30:ad:e0:6e:55:ea:b3:f6:7e:24:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Sep 24 12:02:01 2026 GMT Not After : Sep 25 12:02:01 2026 GMT Subject: CN=b96034d0dacacf408218ed40f168436fabc92097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:a6:38:79:76:91:ae:98:5c:57:5f:14:81: b7:c4:9d:db:a9:9f:fb:35:4f:11:45:5e:8d:c3:e0: d1:de:94:a4:90:90:3a:e8:b0:39:81:12:67:57:3d: 22:96:38:b1:b5:e3:a2:cc:38:79:08:28:ab:11:76: b7:ab:0f:bd:a9:bf:0e:f1:59:22:60:b3:75:dc:cf: 41:90:40:87:9b:8f:1a:3b:01:eb:20:60:97:5c:82: 6b:25:f5:c1:97:35:72:fb:74:05:72:70:56:32:a4: 0d:f8:b9:e3:91:63:11:50:44:36:01:82:d1:7d:7e: d7:29:33:20:b3:c9:5b:3f:19:ff:d6:c8:db:b9:e0: b5:62:c3:b2:e3:fc:6a:fe:14:b3:11:e0:b8:c0:0d: 21:dc:57:31:34:ea:1a:83:be:87:a3:93:90:33:11: b3:93:45:ad:06:97:87:a8:3b:62:df:9e:14:d0:6e: 33:28:66:a2:8c:36:a9:bc:d3:93:ff:60:47:7f:09: 71:76:e2:5b:85:a2:27:89:fa:a7:62:3c:32:6c:25: 3a:ab:24:08:d5:70:cc:8c:ec:fb:94:88:e8:51:4f: b9:11:be:62:0f:59:cb:2b:79:9f:c5:27:9f:94:29: 24:3e:ce:e9:9e:34:73:4d:4e:82:46:ad:b3:72:4c: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:60:34:D0:DA:CA:CF:40:82:18:ED:40:F1:68:43:6F:AB:C9:20:97 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e5:4b:2f:63:33:cb:89:3b:19:21:c9:a7:de:0b:1b:6a:3a: ab:f6:00:17:cf:25:f9:4e:4b:99:34:49:03:9f:03:7c:4c:e9: e0:c9:99:43:17:41:29:cc:1a:23:5e:6a:a2:9c:2d:43:92:15: 1b:54:3c:42:e9:47:69:eb:60:40:e5:e2:86:92:24:3a:93:e1: fd:27:5a:cb:ed:b0:b9:f5:08:3b:fd:2a:b8:c2:ff:4d:7d:ee: ae:f3:ae:14:90:6a:a5:be:05:3b:c0:8f:c6:2c:62:3b:eb:f4: c5:89:60:5a:70:1c:39:59:92:59:94:ca:0e:04:dc:50:83:8f: dc:38:76:96:34:a9:08:92:8f:1a:0c:76:17:d5:45:69:0b:0b: ec:33:89:50:15:5b:4c:61:26:35:bd:6c:de:8e:03:90:7a:c7: bb:20:87:34:35:3b:d3:ac:50:50:ee:8e:ba:78:0d:14:5f:de: 01:15:3b:45:4e:f8:6a:83:2c:7f:fb:f3:38:44:0e:eb:61:b4: 98:ca:66:2e:9e:f1:f7:08:b2:f4:73:6e:ef:b2:a7:a2:60:1e: da:93:7e:9a:6f:35:8b:54:b1:56:ae:dc:35:13:cb:a2:57:10: b2:63:b1:7d:c4:ca:b9:91:67:1d:03:61:58:8a:14:ae:32:69: 4d:f0:03:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTS0k0gDCt4G5V6rP2fiTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwOTI0MTIwMjAxWhcNMjYwOTI1MTIwMjAxWjAzMTEwLwYDVQQD EyhiOTYwMzRkMGRhY2FjZjQwODIxOGVkNDBmMTY4NDM2ZmFiYzkyMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCmOHl2ka6YXFdfFIG3xJ3bqZ/7 NU8RRV6Nw+DR3pSkkJA66LA5gRJnVz0iljixteOizDh5CCirEXa3qw+9qb8O8Vki YLN13M9BkECHm48aOwHrIGCXXIJrJfXBlzVy+3QFcnBWMqQN+LnjkWMRUEQ2AYLR fX7XKTMgs8lbPxn/1sjbueC1YsOy4/xq/hSzEeC4wA0h3FcxNOoag76Ho5OQMxGz k0WtBpeHqDti354U0G4zKGaijDapvNOT/2BHfwlxduJbhaInifqnYjwybCU6qyQI 1XDMjOz7lIjoUU+5Eb5iD1nLK3mfxSeflCkkPs7pnjRzTU6CRq2zckwyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlgNNDays9AghjtQPFoQ2+rySCXMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeVLL2Mz y4k7GSHJp94LG2o6q/YAF88l+U5LmTRJA58DfEzp4MmZQxdBKcwaI15qopwtQ5IV G1Q8QulHaetgQOXihpIkOpPh/Sday+2wufUIO/0quML/TX3urvOuFJBqpb4FO8CP xixiO+v0xYlgWnAcOVmSWZTKDgTcUIOP3Dh2ljSpCJKPGgx2F9VFaQsL7DOJUBVb TGEmNb1s3o4DkHrHuyCHNDU706xQUO6OungNFF/eARU7RU74aoMsf/vzOEQO62G0 mMpmLp7x9wiy9HNu77KnomAe2pN+mm81i1SxVq7cNRPLolcQsmOxfcTKuZFnHQNh WIoUrjJpTfADwA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:22:33 2026 by rpki-client