$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: 2hv0JVa6WN4MXweM3MT7wJ1RBC8mzMBWuL+cqWdpeRg= Subject key identifier: C9:EF:8A:38:37:C1:D1:29:4F:65:18:24:1A:8A:D0:70:33:A8:BF:42 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019607FA485814B0B9E8AF4ADAF4744CD86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 05CC Signing time: Sat 05 Apr 2025 22:02:45 +0000 Manifest this update: Sat 05 Apr 2025 22:02:45 +0000 Manifest next update: Sun 06 Apr 2025 22:02:45 +0000 Files and hashes: 1: 1gCNF0infgdQK7vG9hr6sTtscNI.roa (hash: gWiE0Pg38BFsOepEyhUFjPHlaQuFw5fcis0anm8dYRU=) 2: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (hash: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=) 3: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: M5vWm2YBgJ3CatE4wy/6/xU135t2z/ZDQ9b8grd2mSw=) 4: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 5: SlSinHUbXT415BsCEUMFcSa5FDE.roa (hash: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=) 6: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 7: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 8: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 9: exgV4-G6gQtu_8vaWBNpG7xgV8Q.roa (hash: //bllkCMRWL+aJP9INeCpZFfDYkgdrMmr+a8Ed3cnLI=) 10: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 11: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 12: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:07:fa:48:58:14:b0:b9:e8:af:4a:da:f4:74:4c:d8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Apr 5 22:02:45 2025 GMT Not After : Apr 6 22:02:45 2025 GMT Subject: CN=c9ef8a3837c1d1294f6518241a8ad07033a8bf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:1f:b7:8a:f9:6e:0d:aa:7f:4a:40:3d:67: da:90:8e:9c:7a:3a:f6:67:ec:86:34:29:01:77:6d: 12:40:22:59:da:be:e2:db:d4:5d:80:8e:83:ac:e4: d9:d4:d8:ab:88:7d:8a:c1:0b:3e:2c:c4:f3:eb:16: ec:fd:21:23:98:b9:49:d3:19:cb:1c:0d:56:20:d4: f7:92:e9:da:20:70:b2:cf:37:fe:51:b1:78:a4:4d: 0e:ba:53:8f:64:2b:67:bc:fe:64:38:ef:84:c0:bd: 84:a1:f4:aa:a6:91:3a:67:31:43:e7:a7:6c:d2:10: f1:e9:c1:21:2c:a4:b7:6c:65:52:a3:25:f1:fc:db: 0c:f8:fc:99:72:72:6f:05:4f:fc:ff:eb:bb:45:ab: d8:a8:8f:1d:d1:1c:62:06:3a:e5:71:79:81:f5:98: 44:01:da:d1:88:1c:c9:6b:ea:13:2b:07:22:6c:59: 72:25:4a:c9:b9:9a:21:1e:ff:1f:50:60:b6:94:50: 06:a4:70:7e:db:bb:32:fe:c7:b2:3a:2d:0e:6a:41: fa:d3:5b:de:a9:a1:0b:09:62:50:89:12:26:a9:b8: 18:80:fc:f7:a4:7b:3e:38:63:2f:de:2d:0d:a2:c6: 5e:15:1e:41:83:54:9d:f0:ea:9b:ae:35:36:94:58: 1f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:8A:38:37:C1:D1:29:4F:65:18:24:1A:8A:D0:70:33:A8:BF:42 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:00:3f:d9:6b:da:1d:f2:11:62:61:d7:ab:12:a1:f6:f9:8d: e8:23:97:cb:cc:8d:64:8e:76:a7:7d:d7:54:15:c2:66:b5:e2: 2f:e0:d6:43:e4:94:ff:66:bf:06:ac:bb:c2:ad:4b:01:8c:bf: b7:46:42:19:96:5e:65:65:9a:1d:fc:82:24:10:9b:c5:a0:01: 4c:fc:47:ed:86:44:65:5a:2e:9a:93:8f:e5:7f:12:19:7d:4b: 96:d3:13:a3:ba:53:51:f0:08:31:7a:eb:b0:cb:be:b8:ff:55: bb:2b:db:74:b9:f6:84:36:dd:17:dc:dd:ef:67:09:bc:93:0b: f7:64:37:d2:b5:89:9a:d4:fd:7a:fd:37:93:7c:75:75:bf:46: e1:58:54:09:5c:d6:42:05:91:ff:bd:4b:55:84:af:b1:19:99: 56:45:f7:27:3e:db:17:9f:b7:26:59:a3:9c:ba:4c:5f:21:f9: db:b4:08:be:b1:30:b3:e1:b1:bd:a4:e4:ca:6f:a5:25:41:89: 43:21:de:76:07:b0:88:a0:3a:19:f0:27:35:ee:32:d7:99:96: e8:ee:bb:e0:ca:b4:dc:b7:69:cf:a0:94:0f:c0:0d:4c:2c:3e: 31:6b:59:f9:ec:f7:82:63:ce:c7:9f:5b:25:a0:df:7b:f9:96: 18:01:f5:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYH+khYFLC56K9K2vR0TNhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwNDA1MjIwMjQ1WhcNMjUwNDA2MjIwMjQ1WjAzMTEwLwYDVQQD EyhjOWVmOGEzODM3YzFkMTI5NGY2NTE4MjQxYThhZDA3MDMzYThiZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaUft4r5bg2qf0pAPWfakI6cejr2 Z+yGNCkBd20SQCJZ2r7i29RdgI6DrOTZ1NiriH2KwQs+LMTz6xbs/SEjmLlJ0xnL HA1WINT3kunaIHCyzzf+UbF4pE0OulOPZCtnvP5kOO+EwL2EofSqppE6ZzFD56ds 0hDx6cEhLKS3bGVSoyXx/NsM+PyZcnJvBU/8/+u7RavYqI8d0RxiBjrlcXmB9ZhE AdrRiBzJa+oTKwcibFlyJUrJuZohHv8fUGC2lFAGpHB+27sy/seyOi0OakH601ve qaELCWJQiRImqbgYgPz3pHs+OGMv3i0NosZeFR5Bg1Sd8OqbrjU2lFgfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnvijg3wdEpT2UYJBqK0HAzqL9CMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwA/2Wva HfIRYmHXqxKh9vmN6COXy8yNZI52p33XVBXCZrXiL+DWQ+SU/2a/Bqy7wq1LAYy/ t0ZCGZZeZWWaHfyCJBCbxaABTPxH7YZEZVoumpOP5X8SGX1LltMTo7pTUfAIMXrr sMu+uP9VuyvbdLn2hDbdF9zd72cJvJML92Q30rWJmtT9ev03k3x1db9G4VhUCVzW QgWR/71LVYSvsRmZVkX3Jz7bF5+3JlmjnLpMXyH527QIvrEws+GxvaTkym+lJUGJ QyHedgewiKA6GfAnNe4y15mW6O674Mq03Ldpz6CUD8ANTCw+MWtZ+ez3gmPOx59b JaDfe/mWGAH16Q== -----END CERTIFICATE-----Generated at Sun Apr 6 04:03:52 2025 by rpki-client