$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: 6xQ+zJ/kauNhoszCqVZfgujNHj9FR/Hj488LVq8pOh4= Subject key identifier: 3F:60:5A:9A:DC:5D:CF:4C:82:A2:34:B0:20:32:60:48:78:D5:73:23 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01978B7F080E77445B8D31D4325669BA00E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0696 Signing time: Fri 20 Jun 2025 04:00:47 +0000 Manifest this update: Fri 20 Jun 2025 04:00:47 +0000 Manifest next update: Sat 21 Jun 2025 04:00:47 +0000 Files and hashes: 1: 1-33FGIXffxFw1fm_nzqbjQkgU-8.roa (hash: jy2UTrHMk2ALLRF7WklEtaHYe9J31jM3B2a7AkefrRE=) 2: 27z3zvbcVWqs_7POg5QhQc8T7vw.roa (hash: J37O++pYx5afq4v2icLHbQpLACT+N5czdMSBRJ0zZSc=) 3: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (hash: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=) 4: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: QPHIzDdGtcEOehBnhP+pJWUXQTRBm0Xm5X2HnERk9lA=) 5: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 6: SlSinHUbXT415BsCEUMFcSa5FDE.roa (hash: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=) 7: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 8: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 9: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 10: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 11: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 12: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Jun 2025 04:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:8b:7f:08:0e:77:44:5b:8d:31:d4:32:56:69:ba:00:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jun 20 04:00:47 2025 GMT Not After : Jun 21 04:00:47 2025 GMT Subject: CN=3f605a9adc5dcf4c82a234b02032604878d57323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:24:fe:db:78:7b:3c:11:b6:7e:8c:49:dc: 81:fe:f2:66:e4:63:ec:b9:3a:75:57:a3:01:2b:9b: 16:ad:ec:e7:a5:9b:08:ba:42:a0:9e:b4:ac:52:34: 33:87:ec:17:27:d2:30:76:ce:5f:7e:9a:6e:32:93: 9e:eb:82:89:97:33:f9:44:de:e0:d2:96:48:a9:48: 83:22:1c:de:48:99:89:b0:b9:0d:93:bd:12:eb:f5: ed:b2:60:85:a2:d9:12:4a:cf:86:ae:71:9d:b3:71: 0e:d4:dc:ba:bb:69:e0:b3:03:94:9e:94:13:7b:5c: ea:4b:5b:c7:e0:cb:fd:2b:f0:4c:91:a6:b6:79:c5: cb:3b:27:a9:13:61:21:e5:d4:e4:72:38:63:22:6d: 53:d9:79:be:f6:54:59:34:2c:dd:34:32:dd:f3:16: 32:fd:76:33:e7:b3:50:18:8f:51:c0:48:2c:95:b7: 45:76:dc:fc:1b:71:f0:b5:37:99:c1:a6:7c:3c:76: 57:15:d1:56:dd:23:e5:a6:06:2e:8f:2e:73:8b:e3: f4:e2:73:16:12:32:e8:19:a0:34:48:ec:cb:10:bf: c6:e6:da:31:1c:49:d1:bc:7c:99:85:27:a6:ac:88: d6:f9:df:0f:90:57:8d:c8:9b:d7:83:9d:86:12:93: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:60:5A:9A:DC:5D:CF:4C:82:A2:34:B0:20:32:60:48:78:D5:73:23 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:64:ed:a0:63:8b:36:41:61:00:78:b2:94:c5:56:c7:19:8c: d0:be:e3:ba:d8:43:df:05:ec:bd:bd:58:47:f8:6f:3d:60:51: 00:87:86:54:ee:4d:6a:17:ae:65:6a:42:a5:04:ee:a8:27:fe: 1f:54:98:85:2d:e3:67:87:a1:dd:df:f2:e1:7d:78:74:3b:4a: dd:c1:9b:ce:08:cd:fe:52:4d:bf:10:5f:43:1c:34:1b:91:96: 6f:b2:5d:a4:2e:f1:fd:4b:79:3f:41:46:b3:37:fa:b5:05:fc: 84:b4:93:d3:01:c6:44:77:3b:37:9f:5b:b3:44:f0:e5:ed:67: 72:36:19:e9:d7:90:88:6a:54:7e:99:02:25:6d:22:55:18:7b: c4:d6:77:da:a4:13:54:9c:68:33:7c:b2:26:40:c3:56:6c:e3: 18:a6:29:0b:6d:b0:00:1b:9c:0d:63:73:46:a1:50:36:45:28: b5:9d:60:b5:69:68:3a:d9:dd:15:94:33:75:57:9f:52:f4:16: f9:43:72:74:4f:48:ee:3d:60:95:fe:f8:76:d6:12:59:82:ed: bd:0b:2e:f2:9b:fc:4f:37:53:b7:90:2a:60:15:91:7a:08:c6: b4:03:65:2e:85:ac:6b:79:8e:87:b5:17:95:a7:ef:bf:26:a2: 91:8e:75:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeLfwgOd0RbjTHUMlZpugDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwNjIwMDQwMDQ3WhcNMjUwNjIxMDQwMDQ3WjAzMTEwLwYDVQQD EygzZjYwNWE5YWRjNWRjZjRjODJhMjM0YjAyMDMyNjA0ODc4ZDU3MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ4k/tt4ezwRtn6MSdyB/vJm5GPs uTp1V6MBK5sWreznpZsIukKgnrSsUjQzh+wXJ9Iwds5ffppuMpOe64KJlzP5RN7g 0pZIqUiDIhzeSJmJsLkNk70S6/XtsmCFotkSSs+GrnGds3EO1Ny6u2ngswOUnpQT e1zqS1vH4Mv9K/BMkaa2ecXLOyepE2Eh5dTkcjhjIm1T2Xm+9lRZNCzdNDLd8xYy /XYz57NQGI9RwEgslbdFdtz8G3HwtTeZwaZ8PHZXFdFW3SPlpgYujy5zi+P04nMW EjLoGaA0SOzLEL/G5toxHEnRvHyZhSemrIjW+d8PkFeNyJvXg52GEpMsIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9gWprcXc9MgqI0sCAyYEh41XMjMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmTtoGOL NkFhAHiylMVWxxmM0L7juthD3wXsvb1YR/hvPWBRAIeGVO5NaheuZWpCpQTuqCf+ H1SYhS3jZ4eh3d/y4X14dDtK3cGbzgjN/lJNvxBfQxw0G5GWb7JdpC7x/Ut5P0FG szf6tQX8hLST0wHGRHc7N59bs0Tw5e1ncjYZ6deQiGpUfpkCJW0iVRh7xNZ32qQT VJxoM3yyJkDDVmzjGKYpC22wABucDWNzRqFQNkUotZ1gtWloOtndFZQzdVefUvQW +UNydE9I7j1glf74dtYSWYLtvQsu8pv8TzdTt5AqYBWRegjGtANlLoWsa3mOh7UX lafvvyaikY51Sw== -----END CERTIFICATE-----Generated at Fri Jun 20 14:55:50 2025 by rpki-client