$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: BbFTeH+cDecQ3LUmcHGObl+IIBNDdYoI/dXo+VhvKiM= Subject key identifier: BE:6E:87:92:27:76:94:E7:F0:93:97:B0:CD:9C:57:F6:45:82:23:C2 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 01983DD016A5FB1B703ADD289BE6BBBFAD27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0BF9 Signing time: Thu 24 Jul 2025 19:01:44 +0000 Manifest this update: Thu 24 Jul 2025 19:01:44 +0000 Manifest next update: Fri 25 Jul 2025 19:01:44 +0000 Files and hashes: 1: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=) 2: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=) 3: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 4: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 5: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 7: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 8: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: ApaxrYov0MRE2Makj6UW2xrEwG9yC7F3TOcYHoLTSMc=) 10: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=) 11: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 12: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 14: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 15: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 19:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3d:d0:16:a5:fb:1b:70:3a:dd:28:9b:e6:bb:bf:ad:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jul 24 19:01:44 2025 GMT Not After : Jul 25 19:01:44 2025 GMT Subject: CN=be6e8792277694e7f09397b0cd9c57f6458223c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:5b:10:b3:14:33:af:2c:e4:cc:ea:c3:5e: 14:05:f2:05:39:06:43:d7:cd:68:3f:53:1a:6b:4b: 0e:40:2a:aa:9d:9f:a5:ff:d7:93:7b:1d:9d:18:52: ef:e5:29:88:b4:24:aa:b0:a7:e2:ac:55:c1:13:52: 1a:0d:0f:91:80:a0:00:a0:3f:68:b2:48:e2:5e:e0: 02:d5:94:eb:fb:0c:79:c5:9f:82:fc:26:0d:30:fd: 9b:52:bd:42:60:e3:59:64:07:fc:16:4f:17:42:da: a2:86:04:44:6a:85:4d:b8:ef:4d:f7:8f:86:81:90: 47:8f:d8:87:7f:ef:6d:30:c4:e2:0c:25:4a:7e:c3: 75:ef:c3:cc:4d:2b:03:d0:ca:83:1b:ff:87:4a:bc: 32:40:7e:b3:df:39:6f:75:48:4f:49:0c:fc:2d:bb: d1:f7:80:ec:d0:f7:d6:ac:a2:08:0d:c4:96:17:c2: 42:cd:82:7e:7c:dd:dc:15:22:cb:fc:30:87:8a:5d: a8:91:76:a6:2e:bf:59:a9:a0:9c:49:cf:6a:ea:6f: 20:fc:cb:4b:22:d2:de:a6:2c:9d:0c:e4:67:df:15: a8:37:b6:0a:62:bf:34:88:18:64:79:b1:e0:d0:48: ee:5d:15:a4:5d:39:0e:6d:a0:37:7a:2f:fa:80:f0: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6E:87:92:27:76:94:E7:F0:93:97:B0:CD:9C:57:F6:45:82:23:C2 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:96:a2:15:cd:c1:4c:0c:e2:fa:c4:fc:8f:17:04:9a:97:b4: a1:44:9f:05:5c:45:94:a1:1e:96:09:0a:04:36:57:d8:72:bc: 9b:8f:3b:6a:ee:d4:97:45:c0:45:28:62:49:9b:9d:2d:7e:d8: 11:7b:bf:db:53:53:cd:83:dd:19:93:86:e7:67:d3:73:5b:34: d4:f9:a5:02:f2:9e:f4:de:83:60:90:79:da:e2:86:c5:04:f0: 60:b5:87:d8:36:6f:ed:e4:18:5f:00:ab:7b:5f:45:01:6b:2d: 59:d7:ec:db:77:e4:39:c9:bc:5c:8c:08:97:5a:2d:12:dd:b8: 6e:c5:29:30:b3:9e:e8:ab:23:99:ee:b8:f2:01:5a:83:12:02: c7:0f:a9:bc:14:32:0a:c1:ff:73:9b:ed:83:74:07:7d:88:0b: ce:2d:ae:e8:72:45:c5:59:d3:b7:b5:9b:73:47:bf:40:07:50: 3a:01:9c:d1:b8:08:96:86:e8:df:e2:0d:6d:14:0b:c2:af:11: 83:41:9e:e8:f1:38:ae:34:a0:43:10:d0:4e:94:12:54:83:db: 7f:5a:0b:03:22:e4:f8:0b:c5:0c:4f:5b:93:9a:3c:26:1c:56: 9d:33:0e:55:bd:39:ca:96:55:52:76:47:89:29:0c:d0:11:77: ab:c0:83:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg90Bal+xtwOt0om+a7v60nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwNzI0MTkwMTQ0WhcNMjUwNzI1MTkwMTQ0WjAzMTEwLwYDVQQD EyhiZTZlODc5MjI3NzY5NGU3ZjA5Mzk3YjBjZDljNTdmNjQ1ODIyM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfdbELMUM68s5Mzqw14UBfIFOQZD 181oP1Maa0sOQCqqnZ+l/9eTex2dGFLv5SmItCSqsKfirFXBE1IaDQ+RgKAAoD9o skjiXuAC1ZTr+wx5xZ+C/CYNMP2bUr1CYONZZAf8Fk8XQtqihgREaoVNuO9N94+G gZBHj9iHf+9tMMTiDCVKfsN178PMTSsD0MqDG/+HSrwyQH6z3zlvdUhPSQz8LbvR 94Ds0PfWrKIIDcSWF8JCzYJ+fN3cFSLL/DCHil2okXamLr9ZqaCcSc9q6m8g/MtL ItLepiydDORn3xWoN7YKYr80iBhkebHg0EjuXRWkXTkObaA3ei/6gPB3ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5uh5IndpTn8JOXsM2cV/ZFgiPCMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpaiFc3B TAzi+sT8jxcEmpe0oUSfBVxFlKEelgkKBDZX2HK8m487au7Ul0XARShiSZudLX7Y EXu/21NTzYPdGZOG52fTc1s01PmlAvKe9N6DYJB52uKGxQTwYLWH2DZv7eQYXwCr e19FAWstWdfs23fkOcm8XIwIl1otEt24bsUpMLOe6Ksjme648gFagxICxw+pvBQy CsH/c5vtg3QHfYgLzi2u6HJFxVnTt7Wbc0e/QAdQOgGc0bgIlobo3+INbRQLwq8R g0Ge6PE4rjSgQxDQTpQSVIPbf1oLAyLk+AvFDE9bk5o8JhxWnTMOVb05ypZVUnZH iSkM0BF3q8CDMQ== -----END CERTIFICATE-----Generated at Fri Jul 25 01:01:31 2025 by rpki-client