$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: xpsWgnL4FJCkKgpS2ViC5xq0m83sDTcoQN6pZPNrv5A= Subject key identifier: FD:A3:63:B3:ED:1F:49:2E:47:6F:42:64:98:13:25:7A:48:F3:4C:9F Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019E90CA3268D4A209248CACB03618F80FCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0F46 Signing time: Thu 04 Jun 2026 04:00:30 +0000 Manifest this update: Thu 04 Jun 2026 04:00:30 +0000 Manifest next update: Fri 05 Jun 2026 04:00:30 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: VKs9XCHj8rRrKGLTE5CIokI9aGp6v67jwzPo0r85cbI=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:90:ca:32:68:d4:a2:09:24:8c:ac:b0:36:18:f8:0f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jun 4 04:00:30 2026 GMT Not After : Jun 5 04:00:30 2026 GMT Subject: CN=fda363b3ed1f492e476f42649813257a48f34c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4c:a5:5c:65:78:1c:49:82:08:8b:f0:b5:b1: e8:b3:ed:df:92:aa:1a:3c:a5:49:ad:91:f5:82:30: c0:ed:3a:de:89:56:c3:7d:24:b0:5f:5f:48:53:9a: 6a:df:48:e1:0b:7c:ba:18:3e:e2:54:8e:29:21:c9: 49:a0:17:34:ce:3e:da:b8:33:05:0a:57:ff:cb:ab: 90:e5:ac:ef:c0:ec:77:88:47:60:3f:18:2b:17:23: 67:d7:29:ec:60:21:47:99:0c:f9:b8:52:19:73:54: fa:12:05:22:0a:c8:8e:15:b0:e4:8a:e7:ac:c9:65: d5:e4:69:0b:5f:3c:08:d4:01:fb:5e:05:57:f7:4e: ed:9a:c6:41:e5:15:ac:e3:1f:c1:2e:f8:36:04:f7: c4:6a:e1:fb:0c:9c:b1:b9:1b:56:56:28:13:99:42: a4:a1:56:82:9b:bd:88:a4:f7:f5:b9:7b:24:20:d1: 56:1a:bf:9b:13:e8:69:33:54:7e:a8:68:55:8d:05: 57:90:04:d0:2d:cc:81:94:5e:fc:dc:6c:2c:93:03: 07:79:b5:45:f2:82:2e:73:e6:c4:27:d3:69:9f:0c: 1c:45:30:df:1a:a5:a8:35:1e:8a:78:1e:90:48:9a: ba:1a:f8:f3:a3:c2:4a:cc:63:bc:f6:6b:fa:d2:96: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A3:63:B3:ED:1F:49:2E:47:6F:42:64:98:13:25:7A:48:F3:4C:9F X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:76:60:2b:01:50:26:ae:c3:13:bb:d6:ef:c2:4f:60:6c:da: 38:86:72:5b:28:3c:69:40:0b:7c:10:48:f6:15:07:0f:58:78: ee:15:3e:1d:e7:18:ce:44:2f:e3:84:09:61:11:d3:90:b2:a5: db:3e:d9:9b:9f:74:7c:84:69:b4:22:46:6c:bf:e0:59:cc:b3: 87:77:d8:42:e6:94:b2:6e:ff:c5:f8:74:a9:31:2c:60:b5:ae: 14:6d:76:0d:7e:ff:a1:52:1e:6b:05:03:e1:33:20:0c:d5:cc: 29:7c:38:8d:a7:c7:f0:46:9f:22:cf:72:d3:bd:83:4e:db:a0: 23:26:89:8f:1c:b2:7f:6a:9d:8a:47:dd:17:b8:0e:bf:b9:be: d4:20:eb:59:2f:a2:b9:11:ad:03:89:26:25:1a:0f:0a:45:ac: 79:7d:f6:e0:c9:e5:22:9f:38:85:95:ac:27:3c:3e:e7:16:44: 06:16:fd:9f:3e:38:4a:5f:ae:1b:5e:4d:8d:61:50:43:97:68: b1:4d:b4:c9:98:e5:f2:54:b8:20:e6:79:01:75:1a:09:97:95: 34:ae:f7:a2:72:c3:36:3a:cb:1d:4d:b9:a9:99:f2:db:cf:6a: 07:dd:d3:a6:81:0e:74:4a:2a:3d:bc:7a:fe:d3:9a:9f:13:4a: 24:8b:48:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6QyjJo1KIJJIyssDYY+A/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwNjA0MDQwMDMwWhcNMjYwNjA1MDQwMDMwWjAzMTEwLwYDVQQD EyhmZGEzNjNiM2VkMWY0OTJlNDc2ZjQyNjQ5ODEzMjU3YTQ4ZjM0YzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80ylXGV4HEmCCIvwtbHos+3fkqoa PKVJrZH1gjDA7TreiVbDfSSwX19IU5pq30jhC3y6GD7iVI4pIclJoBc0zj7auDMF Clf/y6uQ5azvwOx3iEdgPxgrFyNn1ynsYCFHmQz5uFIZc1T6EgUiCsiOFbDkiues yWXV5GkLXzwI1AH7XgVX907tmsZB5RWs4x/BLvg2BPfEauH7DJyxuRtWVigTmUKk oVaCm72IpPf1uXskINFWGr+bE+hpM1R+qGhVjQVXkATQLcyBlF783GwskwMHebVF 8oIuc+bEJ9NpnwwcRTDfGqWoNR6KeB6QSJq6Gvjzo8JKzGO89mv60pYwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2jY7PtH0kuR29CZJgTJXpI80yfMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHZgKwFQ Jq7DE7vW78JPYGzaOIZyWyg8aUALfBBI9hUHD1h47hU+HecYzkQv44QJYRHTkLKl 2z7Zm590fIRptCJGbL/gWcyzh3fYQuaUsm7/xfh0qTEsYLWuFG12DX7/oVIeawUD 4TMgDNXMKXw4jafH8EafIs9y072DTtugIyaJjxyyf2qdikfdF7gOv7m+1CDrWS+i uRGtA4kmJRoPCkWseX324MnlIp84hZWsJzw+5xZEBhb9nz44Sl+uG15NjWFQQ5do sU20yZjl8lS4IOZ5AXUaCZeVNK73onLDNjrLHU25qZny289qB93TpoEOdEoqPbx6 /tOanxNKJItIBw== -----END CERTIFICATE-----Generated at Thu Jun 4 12:04:21 2026 by rpki-client