$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: 79B1CSF9rBSElT7uTNq+BipHJBH3497c3bzu7NrE8FI= Subject key identifier: A0:ED:F8:83:69:86:DB:1C:72:09:A9:DB:37:7C:10:0C:DD:3E:E1:F2 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019A4E86ACCD6D1D46F2783B9ADA7E0ED135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0808 Signing time: Tue 04 Nov 2025 11:00:40 +0000 Manifest this update: Tue 04 Nov 2025 11:00:40 +0000 Manifest next update: Wed 05 Nov 2025 11:00:40 +0000 Files and hashes: 1: 42ZKqzZkMxt9TNa3kDuOPMM6iQE.roa (hash: KZlJ8qtbQIc6xsv2BWgZJQIZNypBYZKEQKWe5hueZS8=) 2: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (hash: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=) 3: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (hash: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=) 4: Q6EO3aP-jjJFw2iA2Iv66QHPMec.roa (hash: aHR2z/V+w3dsUyxS4wquU+wnGLivkjSNoIgrvTG78B0=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: p0Za6bUd/iMpNs8HpTZCSoMLk3oCGNeEryczqO+32eg=) 6: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 7: RM5tveyL7IwwCTJhkjI3P9MlLys.roa (hash: KFFKSBrC9ZMfN/WLMwRRsqjcRSmKiqYliu6seaJxBqE=) 8: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 9: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 10: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 11: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 12: ltogBTKKP3YwW6qX9EFNQHqYqDY.roa (hash: 0g4YXtPVFTAZDoNyfjazoEulAUnVYgi84dLEleZkwWE=) 13: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 14: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:ac:cd:6d:1d:46:f2:78:3b:9a:da:7e:0e:d1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Nov 4 11:00:40 2025 GMT Not After : Nov 5 11:00:40 2025 GMT Subject: CN=a0edf8836986db1c7209a9db377c100cdd3ee1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b3:f0:b9:9c:d7:43:ab:4c:cd:34:f6:0a:43: 35:54:aa:65:0b:87:4f:68:00:e4:34:ab:de:27:35: d0:8b:1d:9f:d2:22:c6:53:37:e0:ff:c8:7e:29:48: 18:4c:a7:21:2c:e4:50:99:fe:c3:07:35:48:08:c2: 91:05:45:93:a8:e6:77:d3:17:8d:81:03:8f:a9:e5: d0:83:fb:db:d1:1f:e9:57:bc:64:9d:18:50:84:97: c6:a8:20:06:bf:28:75:ee:c0:16:18:49:cf:7f:ff: 8b:6e:03:0c:f7:0b:98:fd:6e:8b:04:0a:16:f0:10: 0b:15:1e:89:de:5c:e4:89:b7:04:2a:aa:8e:14:33: b9:84:26:e3:1f:5f:aa:16:5e:67:ed:70:02:d0:8a: 7c:f5:5c:b0:92:6b:f7:86:91:dc:b8:29:c8:08:be: 4d:e7:1e:90:73:12:27:07:d6:fd:10:47:81:83:6a: 5c:65:b5:8c:19:f5:46:88:ce:16:fc:45:29:4b:22: f9:1a:85:cb:96:4d:6d:15:b1:50:a7:ca:60:ce:9f: d0:46:f9:07:f5:8d:e4:8d:3f:f8:77:84:3a:b7:76: ca:1c:87:f6:1a:d4:95:e5:de:45:eb:a2:b6:55:bd: cb:3b:3b:21:9d:3e:ce:6e:cb:00:da:e1:54:aa:db: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:F8:83:69:86:DB:1C:72:09:A9:DB:37:7C:10:0C:DD:3E:E1:F2 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:70:90:0a:03:65:98:c9:84:2d:f2:23:69:b4:fb:04:f2: 41:0c:9d:9f:fd:a6:e0:96:54:66:e1:e2:39:47:29:f5:1a:b8: c4:e6:b9:85:d2:e3:cf:3e:cf:12:56:e8:9f:02:f0:99:e4:0b: a6:ee:f9:e5:ca:00:86:13:08:7a:63:85:fa:b2:8b:d0:6f:47: 1c:22:4a:d9:ba:4c:e1:bb:67:b7:0b:80:d5:61:3d:09:63:0f: 44:98:eb:15:fd:21:58:c6:89:0f:1a:65:ed:70:5f:db:70:fd: 8f:a3:ef:85:79:35:19:ef:d4:ba:53:2f:61:40:7c:c7:63:98: f3:c1:28:44:e4:7a:31:ca:de:82:2f:b3:f5:28:5a:dd:6f:a0: dd:99:2d:ff:b9:c1:8c:cb:7d:37:80:c1:eb:0d:d4:72:0a:1d: 3a:3c:1b:1b:58:26:5d:28:b7:2e:6b:57:82:c9:30:9d:f3:dd: 40:e5:b7:82:e1:61:bb:96:01:a2:95:f1:03:78:08:fb:4b:8f: 6e:e9:18:ce:2d:07:34:92:bf:e4:6e:8c:6b:55:85:89:11:c5: d8:1f:bc:5c:ce:4a:c1:0e:52:bc:a6:e6:69:b2:b4:34:2b:98: 0c:b6:16:b4:1b:9e:d2:82:2e:35:e5:0e:21:a9:89:e4:0e:39: e3:53:f3:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhqzNbR1G8ng7mtp+DtE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUxMTA0MTEwMDQwWhcNMjUxMTA1MTEwMDQwWjAzMTEwLwYDVQQD EyhhMGVkZjg4MzY5ODZkYjFjNzIwOWE5ZGIzNzdjMTAwY2RkM2VlMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67PwuZzXQ6tMzTT2CkM1VKplC4dP aADkNKveJzXQix2f0iLGUzfg/8h+KUgYTKchLORQmf7DBzVICMKRBUWTqOZ30xeN gQOPqeXQg/vb0R/pV7xknRhQhJfGqCAGvyh17sAWGEnPf/+LbgMM9wuY/W6LBAoW 8BALFR6J3lzkibcEKqqOFDO5hCbjH1+qFl5n7XAC0Ip89Vywkmv3hpHcuCnICL5N 5x6QcxInB9b9EEeBg2pcZbWMGfVGiM4W/EUpSyL5GoXLlk1tFbFQp8pgzp/QRvkH 9Y3kjT/4d4Q6t3bKHIf2GtSV5d5F66K2Vb3LOzshnT7ObssA2uFUqtvlMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDt+INphtsccgmp2zd8EAzdPuHyMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbhwkAoD ZZjJhC3yI2m0+wTyQQydn/2m4JZUZuHiOUcp9Rq4xOa5hdLjzz7PElbonwLwmeQL pu755coAhhMIemOF+rKL0G9HHCJK2bpM4btntwuA1WE9CWMPRJjrFf0hWMaJDxpl 7XBf23D9j6PvhXk1Ge/UulMvYUB8x2OY88EoROR6Mcregi+z9Sha3W+g3Zkt/7nB jMt9N4DB6w3UcgodOjwbG1gmXSi3LmtXgskwnfPdQOW3guFhu5YBopXxA3gI+0uP bukYzi0HNJK/5G6Ma1WFiRHF2B+8XM5KwQ5SvKbmabK0NCuYDLYWtBue0oIuNeUO IamJ5A4541Pzcg== -----END CERTIFICATE-----Generated at Tue Nov 4 15:11:54 2025 by rpki-client