$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: KC0PpauM0LNh9kV9XUheizyCt5itgZvwa2tB9meqQAk= Subject key identifier: BF:A6:19:D5:8E:28:9F:74:59:44:72:99:9F:BD:29:40:1A:B6:83:62 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01A0860B22D5D8AC769D0318F6FD1C539095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0B48 Signing time: Wed 09 Sep 2026 12:01:11 +0000 Manifest this update: Wed 09 Sep 2026 12:01:11 +0000 Manifest next update: Thu 10 Sep 2026 12:01:11 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: CKoKV9SSWeY0CC35RGZW3-Sowvk.roa (hash: CNoybL/dDEh4vogvIRKGBoOMFZRqcXzTkYgL2z5M9bM=) 5: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 6: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 7: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: C3gU6EycgISK8JYK8fJJyse7WJpg3hUGqLk1saiZ+DA=) 8: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa (hash: ifAnSGVO73NRoAKq59gXyGui7/GMr2OJw5wHm+/+JP8=) 14: rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa (hash: kSyIl9GbSnFUvQKXxkb/qMKrsJ6GBbvNU0EjtITFE2w=) 15: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:86:0b:22:d5:d8:ac:76:9d:03:18:f6:fd:1c:53:90:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Sep 9 12:01:11 2026 GMT Not After : Sep 10 12:01:11 2026 GMT Subject: CN=bfa619d58e289f74594472999fbd29401ab68362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:22:67:34:71:37:c2:4b:51:55:c4:d1:fc: cd:2f:22:68:80:8e:3c:23:ad:a3:f5:aa:13:83:cc: d1:a1:11:00:54:67:d5:71:27:fa:93:db:e8:66:a9: 74:70:63:12:2c:ba:34:a5:80:43:72:5b:c8:d0:d9: 29:6c:01:c6:4e:bb:a7:ad:ab:62:53:f9:7f:dc:fb: 71:f6:cc:93:88:e7:b4:51:de:74:ae:29:8f:97:57: 3d:10:e8:90:41:71:17:67:0e:e8:38:d9:dc:11:e5: 7b:e3:ff:ae:60:71:61:36:27:a8:32:92:4f:da:3e: de:18:45:ac:08:9d:9f:10:20:50:f0:13:71:e7:42: 43:31:84:86:56:4e:be:c2:ad:70:36:ac:b2:08:7d: dc:01:ed:cb:4b:7b:83:4b:c7:f6:88:b7:97:49:af: 15:27:c7:18:54:c7:eb:d5:56:97:0b:92:15:a8:91: 9c:9d:ee:68:a2:bf:67:50:cc:5e:cd:46:d6:e0:91: 40:de:f3:8a:da:78:31:c5:5a:b7:9d:48:31:df:85: 71:5d:eb:64:5d:98:d0:81:ec:34:f1:d2:ff:fc:28: 23:8b:b1:62:d6:ef:77:f7:e4:17:e8:4e:cf:ca:31: 20:03:34:20:10:64:37:38:56:07:0d:7b:23:61:ea: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A6:19:D5:8E:28:9F:74:59:44:72:99:9F:BD:29:40:1A:B6:83:62 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:be:e9:38:7d:ac:d1:81:46:96:03:41:ed:44:7b:99:d3:24: 75:d6:05:45:19:42:66:66:5e:fd:f0:a3:74:12:71:fa:62:a5: 2c:f5:f8:e4:d2:1b:6e:e3:0b:22:e9:f5:7f:88:02:91:52:5d: 5c:7c:d9:73:7a:bc:35:70:e7:9b:62:4b:7a:40:49:1a:84:9f: 5e:5f:75:7f:df:9c:da:95:ac:0c:76:5e:83:70:27:b6:e9:01: 89:ad:62:5a:37:e2:01:18:7c:70:a0:07:f3:64:15:ad:2b:a2: 84:51:69:4f:02:bd:25:38:69:7f:b3:9c:8f:35:c8:eb:37:72: c1:62:53:99:95:11:1a:e5:37:ba:d2:68:1c:69:ae:77:2e:32: dd:4a:3c:63:d1:38:1e:8f:cd:06:d4:93:fc:74:84:cb:91:b6: b8:82:5a:ad:4e:40:e1:f3:13:64:6f:96:ec:29:5a:b2:28:5d: c3:df:64:5e:37:58:1b:01:96:88:51:9b:0c:51:99:e6:ce:b6: b2:9c:7d:b8:15:00:ad:c4:65:c4:36:7b:5b:5e:4a:e7:00:f0: dc:32:bb:33:42:45:b4:94:4f:c9:95:14:99:e5:d1:9f:9f:ee: ed:7f:bf:3b:43:26:10:df:00:8e:1c:a9:d0:cf:56:8a:e7:38: 41:33:b3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCGCyLV2Kx2nQMY9v0cU5CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwOTA5MTIwMTExWhcNMjYwOTEwMTIwMTExWjAzMTEwLwYDVQQD EyhiZmE2MTlkNThlMjg5Zjc0NTk0NDcyOTk5ZmJkMjk0MDFhYjY4MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKkiZzRxN8JLUVXE0fzNLyJogI48 I62j9aoTg8zRoREAVGfVcSf6k9voZql0cGMSLLo0pYBDclvI0NkpbAHGTrunrati U/l/3Ptx9syTiOe0Ud50rimPl1c9EOiQQXEXZw7oONncEeV74/+uYHFhNieoMpJP 2j7eGEWsCJ2fECBQ8BNx50JDMYSGVk6+wq1wNqyyCH3cAe3LS3uDS8f2iLeXSa8V J8cYVMfr1VaXC5IVqJGcne5oor9nUMxezUbW4JFA3vOK2ngxxVq3nUgx34VxXetk XZjQgew08dL//Cgji7Fi1u939+QX6E7PyjEgAzQgEGQ3OFYHDXsjYeriQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+mGdWOKJ90WURymZ+9KUAatoNiMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAib7pOH2s 0YFGlgNB7UR7mdMkddYFRRlCZmZe/fCjdBJx+mKlLPX45NIbbuMLIun1f4gCkVJd XHzZc3q8NXDnm2JLekBJGoSfXl91f9+c2pWsDHZeg3AntukBia1iWjfiARh8cKAH 82QVrSuihFFpTwK9JThpf7OcjzXI6zdywWJTmZURGuU3utJoHGmudy4y3Uo8Y9E4 Ho/NBtST/HSEy5G2uIJarU5A4fMTZG+W7Clasihdw99kXjdYGwGWiFGbDFGZ5s62 spx9uBUArcRlxDZ7W15K5wDw3DK7M0JFtJRPyZUUmeXRn5/u7X+/O0MmEN8Ajhyp 0M9Wiuc4QTOz8g== -----END CERTIFICATE-----Generated at Wed Sep 9 22:26:02 2026 by rpki-client