$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: bJuy2e5MtjoLYwwvMkb4quNs0q3Xj/iudtef83r4enQ= Subject key identifier: 1E:D7:AE:07:06:17:42:76:1C:6D:F4:BE:77:4C:1B:4F:80:6F:67:F0 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019894EB4B5DAFC100A6FD70BCDD891D8C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0722 Signing time: Sun 10 Aug 2025 16:58:24 +0000 Manifest this update: Sun 10 Aug 2025 16:58:24 +0000 Manifest next update: Mon 11 Aug 2025 16:58:24 +0000 Files and hashes: 1: 42ZKqzZkMxt9TNa3kDuOPMM6iQE.roa (hash: KZlJ8qtbQIc6xsv2BWgZJQIZNypBYZKEQKWe5hueZS8=) 2: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (hash: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=) 3: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (hash: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=) 4: Q6EO3aP-jjJFw2iA2Iv66QHPMec.roa (hash: aHR2z/V+w3dsUyxS4wquU+wnGLivkjSNoIgrvTG78B0=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: iel1qziLpvRPHTvfa724bvPKVT2BkTpSYmdbZMs+sfI=) 6: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 7: RM5tveyL7IwwCTJhkjI3P9MlLys.roa (hash: KFFKSBrC9ZMfN/WLMwRRsqjcRSmKiqYliu6seaJxBqE=) 8: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 9: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 10: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 11: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 12: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 13: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 16:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:94:eb:4b:5d:af:c1:00:a6:fd:70:bc:dd:89:1d:8c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Aug 10 16:58:24 2025 GMT Not After : Aug 11 16:58:24 2025 GMT Subject: CN=1ed7ae07061742761c6df4be774c1b4f806f67f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8e:33:62:13:6f:32:71:fe:2c:de:e9:be:fb: 82:18:96:d5:7b:d0:b8:b3:27:c3:c2:4e:c9:b8:6f: 2c:b8:cf:81:38:54:25:c8:a7:67:01:a4:08:09:54: 66:cc:d4:79:04:f6:c0:ba:fe:45:97:61:0d:95:27: cf:15:33:10:72:81:50:52:ae:d3:2c:cb:73:b0:15: f8:cb:83:11:88:d7:21:e0:01:ed:90:4e:1b:a2:ce: 03:a6:65:86:fb:02:d4:61:f8:e6:64:f1:75:f9:3d: cf:b3:c0:73:c8:7e:c8:8b:7a:33:bc:18:ef:27:ea: 9d:e5:f0:9c:54:31:4e:bd:e0:2e:03:74:6b:3a:33: 8e:1e:6a:e7:33:e1:44:a5:a7:98:bf:23:4b:f9:d3: 7e:f7:a7:1c:4c:1c:db:2d:e6:16:27:41:6b:a3:4c: 7a:8c:0a:b7:15:17:88:fc:8b:a8:55:f3:8d:c7:42: 03:24:c4:c5:e1:c5:46:b0:2c:9c:c7:19:99:e0:5e: 41:1e:aa:cc:08:6e:21:f6:3d:d9:6d:2d:fd:e5:7e: cf:59:d1:ad:67:00:7a:27:d6:71:38:36:5c:d0:3a: 71:a1:26:03:62:d6:cd:e0:25:b3:19:db:d9:b8:24: 59:80:26:3f:d2:77:5d:65:b4:0b:7a:b6:a4:b7:c5: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D7:AE:07:06:17:42:76:1C:6D:F4:BE:77:4C:1B:4F:80:6F:67:F0 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ea:44:ba:61:99:a6:46:0e:b7:31:d6:99:99:35:f1:91:ac: 32:02:07:68:50:a5:e0:13:bf:64:b8:9e:59:6e:c9:0d:e2:a4: aa:62:be:b4:96:12:7e:d0:8b:6b:b3:af:67:ad:34:b8:37:c7: 8a:52:82:37:05:52:31:9b:0d:32:48:92:1a:44:2b:16:5a:4b: 91:ea:d7:99:ac:f9:25:04:26:81:38:96:be:fb:8b:a7:50:4b: 48:54:44:f3:c0:01:03:9e:4d:65:44:7e:98:ec:b0:3c:a1:72: f2:10:eb:01:7b:a4:31:33:b5:45:65:d2:91:32:9e:47:51:5d: ee:21:e6:dd:04:65:be:b0:66:58:98:cd:fe:92:88:b0:b6:e0: d2:48:05:25:a4:1f:6b:02:f4:4a:dd:c5:8a:4e:76:45:7a:cc: 97:70:b3:f3:8c:8c:b8:1a:1d:9c:14:cd:ae:0d:9b:93:ae:d9: 62:7c:ff:a7:59:0a:1e:76:12:a5:3a:3e:bb:20:c0:d4:58:57: 14:f3:26:b4:37:ca:62:32:31:89:0b:dc:dd:f1:10:47:f6:e2: 6a:9c:cf:40:12:76:f6:35:e8:eb:37:c7:45:58:fd:d9:42:0f: 42:c4:5a:c3:20:92:72:8e:a8:e8:c4:d8:0a:14:a5:cf:4b:e6: d3:cc:50:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiU60tdr8EApv1wvN2JHYwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwODEwMTY1ODI0WhcNMjUwODExMTY1ODI0WjAzMTEwLwYDVQQD EygxZWQ3YWUwNzA2MTc0Mjc2MWM2ZGY0YmU3NzRjMWI0ZjgwNmY2N2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA144zYhNvMnH+LN7pvvuCGJbVe9C4 syfDwk7JuG8suM+BOFQlyKdnAaQICVRmzNR5BPbAuv5Fl2ENlSfPFTMQcoFQUq7T LMtzsBX4y4MRiNch4AHtkE4bos4DpmWG+wLUYfjmZPF1+T3Ps8BzyH7Ii3ozvBjv J+qd5fCcVDFOveAuA3RrOjOOHmrnM+FEpaeYvyNL+dN+96ccTBzbLeYWJ0Fro0x6 jAq3FReI/IuoVfONx0IDJMTF4cVGsCycxxmZ4F5BHqrMCG4h9j3ZbS395X7PWdGt ZwB6J9ZxODZc0DpxoSYDYtbN4CWzGdvZuCRZgCY/0nddZbQLerakt8U1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7XrgcGF0J2HG30vndMG0+Ab2fwMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkupEumGZ pkYOtzHWmZk18ZGsMgIHaFCl4BO/ZLieWW7JDeKkqmK+tJYSftCLa7OvZ600uDfH ilKCNwVSMZsNMkiSGkQrFlpLkerXmaz5JQQmgTiWvvuLp1BLSFRE88ABA55NZUR+ mOywPKFy8hDrAXukMTO1RWXSkTKeR1Fd7iHm3QRlvrBmWJjN/pKIsLbg0kgFJaQf awL0St3Fik52RXrMl3Cz84yMuBodnBTNrg2bk67ZYnz/p1kKHnYSpTo+uyDA1FhX FPMmtDfKYjIxiQvc3fEQR/biapzPQBJ29jXo6zfHRVj92UIPQsRawyCSco6o6MTY ChSlz0vm08xQCQ== -----END CERTIFICATE-----Generated at Sun Aug 10 21:16:33 2025 by rpki-client