$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: byBwD66YWHCLDepHhBDpayjEFBp97YE4O32d2WiDbB0= Subject key identifier: D2:09:95:07:66:69:ED:61:0E:50:CC:D1:54:67:4C:F3:91:63:7B:A3 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019EBF232594989CB0CA1C452F0A15988E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0A57 Signing time: Sat 13 Jun 2026 04:00:12 +0000 Manifest this update: Sat 13 Jun 2026 04:00:12 +0000 Manifest next update: Sun 14 Jun 2026 04:00:12 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: iCFudt0HgEvQtTSmnnzrN2N8zGimcKMcatYE3L8iIE4=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YRLmUoiyriHbBZz8cKLyi9qEJ78.roa (hash: 2dbD8JRE13NWzX1L2KBuix9ycJyQxpH9mx7PA8Rx7lQ=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:23:25:94:98:9c:b0:ca:1c:45:2f:0a:15:98:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jun 13 04:00:12 2026 GMT Not After : Jun 14 04:00:12 2026 GMT Subject: CN=d20995076669ed610e50ccd154674cf391637ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:7c:10:3b:8b:0c:86:f2:32:65:0a:eb:5d: 6c:41:1c:9d:7f:54:f5:07:b8:4d:b9:92:1f:ef:6a: 67:9d:34:14:a6:8b:2c:3e:e7:0e:28:78:cc:d5:42: 6d:b1:ea:91:ff:a6:4b:36:18:a2:74:ce:41:ab:e4: 86:9c:53:62:df:e9:ea:2d:c9:9a:2b:38:9a:f4:73: 8a:f7:13:72:1f:8f:36:de:54:b0:e3:71:81:83:9e: 1e:ac:21:8e:72:a8:87:de:f1:2d:12:f1:6b:af:5d: 8a:a1:64:96:e8:e2:a6:9e:95:e4:15:d7:bc:1f:d4: 0b:de:e8:42:89:df:9e:bf:52:a9:d0:f5:d1:df:c2: 33:12:93:06:09:6d:99:8b:d0:2d:8e:74:bf:6c:67: f4:84:00:8e:89:dc:2d:df:05:b9:a6:a1:62:cd:a5: 70:d3:fe:36:19:5f:96:4b:28:b4:23:78:b7:3b:03: af:12:20:db:76:81:3b:62:19:42:54:67:77:70:dc: a6:ad:28:df:ac:97:7b:8d:fc:26:d5:62:ab:22:8a: a4:cb:9a:cd:4f:94:2b:ec:de:10:25:0f:9f:5f:5e: b1:9e:1c:05:c0:52:1b:04:14:89:89:ff:4e:cd:5b: d4:53:8e:4c:f1:dd:32:10:fa:02:8f:ca:40:c1:90: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:95:07:66:69:ED:61:0E:50:CC:D1:54:67:4C:F3:91:63:7B:A3 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:65:0a:9d:e4:6f:c5:a0:fc:a9:b9:34:21:24:15:2b:c7:eb: 6a:b3:19:ac:1a:7c:ca:a0:53:9e:25:d6:41:14:2e:36:cd:01: c2:e7:cd:bb:c4:a4:4e:3f:ac:5b:c4:13:5d:44:ab:ec:3b:60: 65:45:29:aa:c0:ef:01:2a:df:f1:f3:e6:92:6f:62:4b:95:44: 5d:99:13:8d:f8:ea:40:61:4d:3f:b3:7c:07:a2:c3:dd:24:28: 0f:14:3b:d4:6c:36:11:f1:60:e0:80:d6:36:8c:55:97:72:70: 85:b9:2c:ac:4b:4a:d9:0b:5f:70:bc:85:fd:4a:42:a4:e4:4b: 23:53:7d:30:df:96:b0:d9:a6:cb:68:75:89:f4:a2:fd:33:17: 0f:d2:8d:e0:ff:57:dd:82:f5:d9:3e:f3:b7:1a:bb:9a:c9:2c: 7b:a0:2c:8a:58:18:e0:af:59:8e:ec:7e:b3:ed:65:4b:d5:74: e9:84:64:34:12:fc:f5:0c:53:7e:09:87:30:de:a4:43:b5:84: af:0d:71:0a:40:78:bc:ba:9b:a6:a0:59:56:27:a8:f7:2f:e6: f9:30:54:98:57:b0:8b:fc:00:d8:9b:6d:c2:cd:a6:f1:64:97: 62:77:07:ae:be:98:b7:aa:4c:27:15:03:d2:f3:72:87:73:43: 27:72:5f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/IyWUmJywyhxFLwoVmI5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNjEzMDQwMDEyWhcNMjYwNjE0MDQwMDEyWjAzMTEwLwYDVQQD EyhkMjA5OTUwNzY2NjllZDYxMGU1MGNjZDE1NDY3NGNmMzkxNjM3YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltV8EDuLDIbyMmUK611sQRydf1T1 B7hNuZIf72pnnTQUpossPucOKHjM1UJtseqR/6ZLNhiidM5Bq+SGnFNi3+nqLcma Kzia9HOK9xNyH4823lSw43GBg54erCGOcqiH3vEtEvFrr12KoWSW6OKmnpXkFde8 H9QL3uhCid+ev1Kp0PXR38IzEpMGCW2Zi9AtjnS/bGf0hACOidwt3wW5pqFizaVw 0/42GV+WSyi0I3i3OwOvEiDbdoE7YhlCVGd3cNymrSjfrJd7jfwm1WKrIoqky5rN T5Qr7N4QJQ+fX16xnhwFwFIbBBSJif9OzVvUU45M8d0yEPoCj8pAwZA6LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIJlQdmae1hDlDM0VRnTPORY3ujMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmUKneRv xaD8qbk0ISQVK8frarMZrBp8yqBTniXWQRQuNs0BwufNu8SkTj+sW8QTXUSr7Dtg ZUUpqsDvASrf8fPmkm9iS5VEXZkTjfjqQGFNP7N8B6LD3SQoDxQ71Gw2EfFg4IDW NoxVl3JwhbksrEtK2QtfcLyF/UpCpORLI1N9MN+WsNmmy2h1ifSi/TMXD9KN4P9X 3YL12T7ztxq7mskse6AsilgY4K9Zjux+s+1lS9V06YRkNBL89QxTfgmHMN6kQ7WE rw1xCkB4vLqbpqBZVieo9y/m+TBUmFewi/wA2Jttws2m8WSXYncHrr6Yt6pMJxUD 0vNyh3NDJ3Jfug== -----END CERTIFICATE-----Generated at Sat Jun 13 10:33:22 2026 by rpki-client