$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: /f3dkAFdDDAXKCbbkCBWmw0en1efetD/3zj14jttHAU= Subject key identifier: AD:27:D6:0D:BD:8D:54:43:AB:1C:1F:B4:A1:DB:65:6B:22:94:8C:EC Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019A0CDD47D057669C2B64D14B1096982AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 07E6 Signing time: Wed 22 Oct 2025 17:00:19 +0000 Manifest this update: Wed 22 Oct 2025 17:00:19 +0000 Manifest next update: Thu 23 Oct 2025 17:00:19 +0000 Files and hashes: 1: 42ZKqzZkMxt9TNa3kDuOPMM6iQE.roa (hash: KZlJ8qtbQIc6xsv2BWgZJQIZNypBYZKEQKWe5hueZS8=) 2: 6I6NZ7Uz_TEzo4c7mpQn5IFLlJU.roa (hash: XAlY6TRVmuvKKhEzSQ3f//wHwevvxSSOB6gcMSv0z7w=) 3: FSPUqW6f1bt6Ln_O_GZY8ELfTV0.roa (hash: 39sdJjk3vkgTas0mAKaVPbVq8zhDKwE42Ih8tHp8ZqQ=) 4: Q6EO3aP-jjJFw2iA2Iv66QHPMec.roa (hash: aHR2z/V+w3dsUyxS4wquU+wnGLivkjSNoIgrvTG78B0=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: 7P3EK9qlkVzF3TwM3kdTCRTkBBUAhn5qHXzRY31CHag=) 6: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 7: RM5tveyL7IwwCTJhkjI3P9MlLys.roa (hash: KFFKSBrC9ZMfN/WLMwRRsqjcRSmKiqYliu6seaJxBqE=) 8: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 9: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 10: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 11: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 12: ltogBTKKP3YwW6qX9EFNQHqYqDY.roa (hash: 0g4YXtPVFTAZDoNyfjazoEulAUnVYgi84dLEleZkwWE=) 13: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 14: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 13:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0c:dd:47:d0:57:66:9c:2b:64:d1:4b:10:96:98:2a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Oct 22 17:00:19 2025 GMT Not After : Oct 23 17:00:19 2025 GMT Subject: CN=ad27d60dbd8d5443ab1c1fb4a1db656b22948cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:3d:0a:33:3b:37:71:a2:90:a1:6c:47:07: 6d:4d:3a:42:01:c0:6f:8a:7e:b3:b8:0c:75:3f:0a: 17:66:8f:5c:ac:d8:c6:c3:49:ee:5f:87:01:4c:05: 68:94:22:2f:f6:9c:81:ba:87:35:60:2c:d1:b2:b4: 41:57:2c:03:4a:e5:de:a9:86:ad:71:45:27:e6:7a: 85:29:ea:e2:73:5b:6b:b7:95:6d:97:57:f1:fd:18: 0a:49:92:45:f2:1f:60:5d:3c:a6:05:02:93:d2:18: 6a:6f:cc:c3:90:3e:76:27:08:8a:28:6e:19:25:42: 17:a5:48:6a:db:e2:b0:e7:1a:cb:51:d7:fe:91:43: 5f:da:1e:a9:ae:83:52:92:23:47:d2:c9:9a:0f:2d: 1b:37:ea:22:ec:5b:94:92:bc:19:2d:d1:c5:18:d8: b9:09:19:6b:18:72:a6:17:29:d1:d0:eb:33:3c:48: 37:de:73:21:24:e2:49:28:6c:6e:e9:9d:68:bb:03: 94:36:0d:5c:80:19:63:a0:cc:f4:12:25:69:0f:b4: 5a:7a:86:bc:90:18:f9:50:c4:3a:a9:74:cc:bc:ef: f8:e2:20:48:f1:48:24:dd:1e:3d:d4:b2:ab:3a:b0: 7a:9f:4d:c6:3e:13:ff:a5:ed:bb:20:98:d5:ff:12: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:27:D6:0D:BD:8D:54:43:AB:1C:1F:B4:A1:DB:65:6B:22:94:8C:EC X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7f:84:9a:fc:22:ef:64:8f:a8:8b:48:80:64:ce:31:81:8d: 29:4e:7b:90:50:75:5c:17:c0:c9:2c:48:fc:61:b8:fb:43:a2: d4:ca:00:a8:8a:f1:70:34:22:b9:97:a3:99:70:5e:0a:ab:6c: a9:c7:d6:13:1e:5d:89:ee:6b:63:cb:22:63:e8:56:84:71:57: 74:c9:24:ea:d0:d3:c7:e3:e8:f4:16:28:43:5e:36:72:c8:e4: f1:37:ce:3f:36:a6:fd:4f:42:5e:17:e8:7e:8b:1a:3e:9e:b7: b4:71:a4:60:b8:96:2e:7a:28:70:03:c3:54:10:fb:ed:e8:15: 72:1e:ff:2a:00:be:03:0d:f4:41:36:34:47:d7:99:93:90:ed: 1c:17:7c:a0:ea:c1:2f:74:05:be:41:c2:ee:0e:37:4f:47:3d: 27:e0:ad:57:4d:cc:2c:d3:69:d1:e2:57:f2:12:bd:40:81:18: fc:49:b2:14:cb:a5:57:08:7b:01:bf:5c:27:db:7d:1a:fc:c7: 04:d4:8b:57:f1:92:0b:54:26:c3:76:89:44:1e:49:64:58:3b: 27:e0:50:e2:11:c3:51:a1:d2:06:c5:20:76:2e:09:41:1a:eb: 8e:7e:15:27:f1:8d:a2:a3:6a:08:0f:a8:9c:27:96:38:06:d8: f8:b5:b6:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoM3UfQV2acK2TRSxCWmCqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUxMDIyMTcwMDE5WhcNMjUxMDIzMTcwMDE5WjAzMTEwLwYDVQQD EyhhZDI3ZDYwZGJkOGQ1NDQzYWIxYzFmYjRhMWRiNjU2YjIyOTQ4Y2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqU9CjM7N3GikKFsRwdtTTpCAcBv in6zuAx1PwoXZo9crNjGw0nuX4cBTAVolCIv9pyBuoc1YCzRsrRBVywDSuXeqYat cUUn5nqFKeric1trt5Vtl1fx/RgKSZJF8h9gXTymBQKT0hhqb8zDkD52JwiKKG4Z JUIXpUhq2+Kw5xrLUdf+kUNf2h6proNSkiNH0smaDy0bN+oi7FuUkrwZLdHFGNi5 CRlrGHKmFynR0OszPEg33nMhJOJJKGxu6Z1ouwOUNg1cgBljoMz0EiVpD7Raeoa8 kBj5UMQ6qXTMvO/44iBI8Ugk3R491LKrOrB6n03GPhP/pe27IJjV/xIzKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0n1g29jVRDqxwftKHbZWsilIzsMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIH+Emvwi 72SPqItIgGTOMYGNKU57kFB1XBfAySxI/GG4+0Oi1MoAqIrxcDQiuZejmXBeCqts qcfWEx5die5rY8siY+hWhHFXdMkk6tDTx+Po9BYoQ142csjk8TfOPzam/U9CXhfo fosaPp63tHGkYLiWLnoocAPDVBD77egVch7/KgC+Aw30QTY0R9eZk5DtHBd8oOrB L3QFvkHC7g43T0c9J+CtV03MLNNp0eJX8hK9QIEY/EmyFMulVwh7Ab9cJ9t9GvzH BNSLV/GSC1Qmw3aJRB5JZFg7J+BQ4hHDUaHSBsUgdi4JQRrrjn4VJ/GNoqNqCA+o nCeWOAbY+LW2Dw== -----END CERTIFICATE-----Generated at Wed Oct 22 19:49:37 2025 by rpki-client