$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: 0Q4T6KJHbiGRDrqhTN8h97UthJqSxdIk/ybHhf6bnPk= Subject key identifier: FD:D8:1D:E3:56:A9:7D:3A:F1:EA:69:B2:7F:4A:D2:70:BE:3E:41:0A Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01973A630F90C04C6CB8B4B852560472CDF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 066C Signing time: Wed 04 Jun 2025 10:00:59 +0000 Manifest this update: Wed 04 Jun 2025 10:00:59 +0000 Manifest next update: Thu 05 Jun 2025 10:00:59 +0000 Files and hashes: 1: 1-33FGIXffxFw1fm_nzqbjQkgU-8.roa (hash: jy2UTrHMk2ALLRF7WklEtaHYe9J31jM3B2a7AkefrRE=) 2: 27z3zvbcVWqs_7POg5QhQc8T7vw.roa (hash: J37O++pYx5afq4v2icLHbQpLACT+N5czdMSBRJ0zZSc=) 3: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (hash: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=) 4: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: RnoZp/qloRIvCi25z/QYUfBaENqZUzu38v8dQzh2dic=) 5: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=) 6: SlSinHUbXT415BsCEUMFcSa5FDE.roa (hash: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=) 7: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=) 8: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=) 9: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=) 10: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=) 11: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=) 12: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3a:63:0f:90:c0:4c:6c:b8:b4:b8:52:56:04:72:cd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jun 4 10:00:59 2025 GMT Not After : Jun 5 10:00:59 2025 GMT Subject: CN=fdd81de356a97d3af1ea69b27f4ad270be3e410a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5e:d5:11:7a:29:52:1a:b3:42:ca:83:fe:66: 3b:b8:4c:39:ee:c5:08:e7:9e:37:a4:42:5b:96:87: e7:ce:6b:5d:e8:dd:02:92:3b:66:1b:1a:2d:3b:c3: 13:78:90:73:c6:41:67:64:fb:e8:34:d7:cf:d2:93: a0:fa:29:ab:8b:59:c5:e3:42:8b:64:01:65:81:79: df:19:a0:79:81:6d:da:63:bd:f8:13:b1:55:8a:a3: 7e:60:61:08:67:a6:6d:e7:e3:15:f8:98:05:0a:14: 4b:da:24:1b:77:6c:4e:dd:f7:93:f1:fd:1e:27:3c: 29:d9:10:ff:66:e5:87:c8:9f:be:0b:72:f8:a0:77: 6e:1a:ee:42:05:eb:f5:c6:64:5b:14:2b:0d:16:0c: 93:1c:9f:a3:68:f2:fe:bf:ff:ba:ad:98:09:b5:b9: 69:47:bc:9b:be:7c:4d:00:bc:16:c3:32:e5:ac:80: 6c:b3:a6:b7:79:4d:7d:91:0f:35:b9:23:56:c6:e2: 88:2e:0b:79:d5:44:ba:cc:10:7a:a2:f2:18:82:6c: 6c:c4:68:06:b4:49:c5:9e:9a:3c:0e:ac:af:7c:b2: da:e0:78:56:4e:16:71:4a:09:e5:3f:ef:5c:e2:e3: 0b:2b:e2:51:40:d4:93:08:5b:27:0c:bc:50:95:6c: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:1D:E3:56:A9:7D:3A:F1:EA:69:B2:7F:4A:D2:70:BE:3E:41:0A X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6f:d5:f4:9f:04:80:1f:e1:20:bb:2f:45:df:90:e2:f9:ff: 63:ac:8e:ac:60:6b:3b:2e:e7:10:c6:da:b0:56:2b:26:0e:01: 76:07:e2:40:f5:74:fc:0b:3d:27:1c:1c:09:8d:ae:1f:99:fc: 9d:62:31:30:9f:12:f9:f6:19:cb:3e:32:70:c6:ed:0e:e4:1d: f3:62:e5:f1:b2:db:ee:dc:7b:d8:fb:c3:03:b8:27:1d:cb:7b: ca:04:b8:f3:fd:5a:b7:cb:da:a5:8b:5f:cc:5e:e1:3b:b0:d8: 29:d9:c8:7b:47:b7:70:bf:7a:46:7c:24:47:c6:cf:cb:dc:6f: 9c:de:d0:c4:a6:31:88:18:c6:6d:06:13:dd:73:ed:73:dd:da: 79:c6:a4:7a:7d:af:9e:57:d0:45:a2:7a:f6:5e:83:5a:e3:13: aa:2e:82:9b:fe:8d:d0:15:ed:a4:5b:4c:e5:5a:ed:09:29:b9: 45:63:ca:28:0c:45:96:d5:1a:27:00:26:fb:27:85:3f:d6:2d: d5:04:f0:e9:b5:8d:7d:22:0b:95:6b:a4:80:d0:d4:1a:60:ee: 5d:04:c4:c2:3b:82:6f:22:7f:cb:12:a4:32:a1:cb:74:8d:1a: 4d:6f:0b:d3:c3:2e:18:b8:88:5c:2c:9a:4a:93:4a:f1:3a:20: 15:cd:51:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc6Yw+QwExsuLS4UlYEcs3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjUwNjA0MTAwMDU5WhcNMjUwNjA1MTAwMDU5WjAzMTEwLwYDVQQD EyhmZGQ4MWRlMzU2YTk3ZDNhZjFlYTY5YjI3ZjRhZDI3MGJlM2U0MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF7VEXopUhqzQsqD/mY7uEw57sUI 5543pEJblofnzmtd6N0CkjtmGxotO8MTeJBzxkFnZPvoNNfP0pOg+imri1nF40KL ZAFlgXnfGaB5gW3aY734E7FViqN+YGEIZ6Zt5+MV+JgFChRL2iQbd2xO3feT8f0e Jzwp2RD/ZuWHyJ++C3L4oHduGu5CBev1xmRbFCsNFgyTHJ+jaPL+v/+6rZgJtblp R7ybvnxNALwWwzLlrIBss6a3eU19kQ81uSNWxuKILgt51US6zBB6ovIYgmxsxGgG tEnFnpo8DqyvfLLa4HhWThZxSgnlP+9c4uMLK+JRQNSTCFsnDLxQlWzzIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3YHeNWqX068eppsn9K0nC+PkEKMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2/V9J8E gB/hILsvRd+Q4vn/Y6yOrGBrOy7nEMbasFYrJg4BdgfiQPV0/As9JxwcCY2uH5n8 nWIxMJ8S+fYZyz4ycMbtDuQd82Ll8bLb7tx72PvDA7gnHct7ygS48/1at8vapYtf zF7hO7DYKdnIe0e3cL96RnwkR8bPy9xvnN7QxKYxiBjGbQYT3XPtc93aecaken2v nlfQRaJ69l6DWuMTqi6Cm/6N0BXtpFtM5VrtCSm5RWPKKAxFltUaJwAm+yeFP9Yt 1QTw6bWNfSILlWukgNDUGmDuXQTEwjuCbyJ/yxKkMqHLdI0aTW8L08MuGLiIXCya SpNK8TogFc1RYA== -----END CERTIFICATE-----Generated at Wed Jun 4 12:28:53 2025 by rpki-client