$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: KQZLJb30M4rBO7Ua/eolY3AYcCboF3t7a4kAGIfibkE= Subject key identifier: 30:E8:99:8B:A3:9B:26:73:33:36:87:B6:3A:91:98:5E:95:59:EE:61 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019EB57B3DE227B4277530A7F336623DDAA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0A52 Signing time: Thu 11 Jun 2026 07:00:13 +0000 Manifest this update: Thu 11 Jun 2026 07:00:13 +0000 Manifest next update: Fri 12 Jun 2026 07:00:13 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: I8m970j/ZnPEZs0JcP6bg9QbuC7IHiW6TFaoWV0O5J0=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YRLmUoiyriHbBZz8cKLyi9qEJ78.roa (hash: 2dbD8JRE13NWzX1L2KBuix9ycJyQxpH9mx7PA8Rx7lQ=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b5:7b:3d:e2:27:b4:27:75:30:a7:f3:36:62:3d:da:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jun 11 07:00:13 2026 GMT Not After : Jun 12 07:00:13 2026 GMT Subject: CN=30e8998ba39b2673333687b63a91985e9559ee61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:70:ac:66:d5:ce:3e:41:8b:c5:84:b9:c7: 2b:e0:cb:c4:0e:70:db:13:af:f7:81:c5:40:93:db: 4e:ed:6f:00:a5:80:c3:09:cc:c8:25:93:3d:15:c0: e9:94:79:4b:2e:06:e2:ce:7c:db:0a:58:ae:cd:98: 58:6c:f1:bf:65:fd:d3:32:39:62:ba:8e:a2:37:9a: 2f:bf:6f:5a:26:11:49:4a:4f:62:c4:2f:39:67:77: 40:c2:5c:02:cc:e7:72:4c:85:b4:ee:d6:1e:1b:83: 47:fc:40:6d:19:8d:d5:92:f7:6f:07:cf:41:87:7e: c7:b7:03:c4:43:35:66:6f:2e:b7:a3:4d:c0:56:22: 23:2c:50:48:2b:6e:ba:84:16:26:6d:44:d1:85:2f: ff:64:49:51:d6:51:0c:bf:0d:e4:7e:01:47:a6:38: a6:3a:90:d8:75:a1:c5:41:51:e5:36:f5:db:77:4f: fb:36:60:e2:65:2f:b3:30:97:2b:7b:09:5d:5b:29: 71:c0:c7:a1:1f:05:6b:e6:6a:33:99:18:56:2d:19: 57:0c:3c:ed:50:7a:dd:18:d0:1f:e2:1d:01:fe:04: 37:e9:7d:94:10:eb:2e:5f:35:22:87:54:d5:01:98: 9b:c6:53:2c:85:fc:22:1b:88:09:21:d6:aa:20:37: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:99:8B:A3:9B:26:73:33:36:87:B6:3A:91:98:5E:95:59:EE:61 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:8f:9f:34:7e:c3:2f:fa:ab:98:77:a8:12:d7:6f:0b:8c: e9:cf:77:5b:11:67:e8:57:b9:f6:a5:e6:cc:73:3e:b2:61:f7: e4:6d:64:62:c9:a6:f9:b8:64:ad:a9:23:3b:85:5f:3f:49:02: fb:70:d0:6d:8a:75:07:cd:15:05:6e:e2:70:2f:c8:eb:2a:1c: b0:f9:33:8e:5e:d3:2b:ff:ca:9c:dd:ff:57:2a:81:8c:ce:97: a2:a7:98:c2:d7:4f:41:70:9c:83:4f:a2:3d:dc:3c:f4:d5:3c: c1:9b:9e:d4:8c:96:00:a5:2e:bf:88:74:5e:60:52:ee:f1:af: 41:ae:a1:d7:eb:d0:ae:90:bf:22:e2:41:31:9e:ac:5d:92:65: c4:3c:ab:76:c4:cd:d1:f1:09:98:80:53:43:92:a5:6e:be:c9: 49:b6:fb:bd:38:6f:7a:47:0b:14:fe:ec:9c:d4:89:35:b2:69: 8e:52:57:52:00:ff:d4:3e:c6:54:68:b7:a7:78:66:64:5f:e0: ce:02:38:97:3d:60:b1:63:64:2c:9a:d9:6e:c1:b0:5d:55:03: 52:3d:b6:44:0f:2d:eb:b7:6b:f6:f0:32:73:0c:9d:2c:fb:99: a9:d9:cd:44:54:d9:5a:31:c0:b5:a5:fd:14:d0:ca:aa:3a:94: 69:78:e7:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ61ez3iJ7QndTCn8zZiPdqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNjExMDcwMDEzWhcNMjYwNjEyMDcwMDEzWjAzMTEwLwYDVQQD EygzMGU4OTk4YmEzOWIyNjczMzMzNjg3YjYzYTkxOTg1ZTk1NTllZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR5wrGbVzj5Bi8WEuccr4MvEDnDb E6/3gcVAk9tO7W8ApYDDCczIJZM9FcDplHlLLgbiznzbCliuzZhYbPG/Zf3TMjli uo6iN5ovv29aJhFJSk9ixC85Z3dAwlwCzOdyTIW07tYeG4NH/EBtGY3VkvdvB89B h37HtwPEQzVmby63o03AViIjLFBIK266hBYmbUTRhS//ZElR1lEMvw3kfgFHpjim OpDYdaHFQVHlNvXbd0/7NmDiZS+zMJcrewldWylxwMehHwVr5mozmRhWLRlXDDzt UHrdGNAf4h0B/gQ36X2UEOsuXzUih1TVAZibxlMshfwiG4gJIdaqIDchvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDomYujmyZzMzaHtjqRmF6VWe5hMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtOPnzR+ wy/6q5h3qBLXbwuM6c93WxFn6Fe59qXmzHM+smH35G1kYsmm+bhkrakjO4VfP0kC +3DQbYp1B80VBW7icC/I6yocsPkzjl7TK//KnN3/VyqBjM6XoqeYwtdPQXCcg0+i Pdw89NU8wZue1IyWAKUuv4h0XmBS7vGvQa6h1+vQrpC/IuJBMZ6sXZJlxDyrdsTN 0fEJmIBTQ5Klbr7JSbb7vThvekcLFP7snNSJNbJpjlJXUgD/1D7GVGi3p3hmZF/g zgI4lz1gsWNkLJrZbsGwXVUDUj22RA8t67dr9vAycwydLPuZqdnNRFTZWjHAtaX9 FNDKqjqUaXjnZA== -----END CERTIFICATE-----Generated at Thu Jun 11 14:23:15 2026 by rpki-client