$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: kUcc/q8ifretCQLqBUK3XNtBiNUHGCmu8L4DJrCmMb8= Subject key identifier: BA:B1:A5:08:8C:65:C7:7B:42:38:53:06:09:D6:E3:EF:C3:2C:4F:56 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0199288E8958DB636B4913B3795A0E450ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0C74 Signing time: Mon 08 Sep 2025 09:00:53 +0000 Manifest this update: Mon 08 Sep 2025 09:00:53 +0000 Manifest next update: Tue 09 Sep 2025 09:00:53 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: twAap4Na/hItn9WC9ALH9J0qJPEeS5Vvo3pYsLpYlg8=) 8: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 9: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 10: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 11: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 12: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:28:8e:89:58:db:63:6b:49:13:b3:79:5a:0e:45:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Sep 8 09:00:53 2025 GMT Not After : Sep 9 09:00:53 2025 GMT Subject: CN=bab1a5088c65c77b4238530609d6e3efc32c4f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:67:20:21:9e:8a:9e:d1:05:13:34:b3:91:50: 61:fa:1f:3d:c9:a1:9f:42:ef:72:86:a7:1a:a8:08: 79:27:d8:16:62:bf:c5:de:9d:a0:f3:f3:4f:41:fa: 85:4e:a0:26:90:42:8d:7c:56:7a:96:5e:f5:89:51: b3:e7:f1:40:20:9f:99:79:ff:7a:dd:57:8d:42:5d: 3c:62:1a:58:dc:02:a3:b9:0b:d8:82:ec:c6:01:de: fb:83:df:ad:1e:43:eb:e3:c3:99:d4:cb:6b:68:8d: 01:9d:b7:2c:4a:df:84:d4:db:70:77:16:19:9e:f4: 66:b2:a3:99:ba:a4:43:66:34:a2:d9:74:c9:ec:b3: e4:15:1a:0e:e8:31:d5:67:f3:f1:3c:3a:6e:31:33: 16:48:17:bf:a8:1e:f1:74:1e:66:bf:4d:52:5e:93: e0:86:0d:b1:e2:1c:6c:34:64:5c:4f:5c:b8:a8:92: c5:21:43:f0:4b:4a:b1:c7:bf:01:f5:d2:55:6e:20: ef:cc:61:ba:ea:f9:0c:ef:98:2e:18:e1:4a:fd:52: fa:dd:d3:df:0a:ea:04:c6:98:7c:3f:8a:dd:42:ea: cd:28:8e:ff:87:e4:bc:d5:49:b1:29:30:fa:a1:fd: a0:0d:93:17:2b:07:bd:74:7d:b2:85:ee:4e:2d:3a: b9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B1:A5:08:8C:65:C7:7B:42:38:53:06:09:D6:E3:EF:C3:2C:4F:56 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7f:36:aa:0e:b3:64:c5:0c:25:62:20:2f:63:17:97:18:95: b2:ce:5b:54:d3:ca:40:80:2d:f9:9a:21:ae:6b:0d:cc:0a:92: fe:5c:ec:13:ba:a7:d8:28:9c:3c:e4:00:41:9b:e6:02:2b:13: 29:03:47:d1:c2:6e:07:c4:c2:6a:2c:fd:2b:d4:90:01:5c:8b: c2:f9:8e:21:53:e8:2c:ff:8e:09:ae:15:90:67:c6:28:18:a5: fd:a4:70:d7:6d:00:ff:40:b2:b6:f5:04:3e:2f:bd:3d:88:f7: 9e:75:c7:fc:33:44:ce:a3:14:81:f1:ae:bb:0b:1c:5b:0c:19: c0:3d:a2:02:40:a8:f4:de:29:33:e5:37:a5:db:5e:a5:07:a7: 4b:cb:15:27:f3:cd:5e:ca:11:4e:a3:6d:af:25:1f:62:99:a8: 26:5e:02:a1:e7:b0:83:c9:09:ca:2f:8b:75:60:b8:b2:ff:72: da:7a:0f:b0:2f:16:d9:1f:f4:84:f7:59:43:3e:e8:ae:d2:91: eb:ae:86:79:43:b0:1a:cd:3a:24:e5:b1:16:71:ec:06:38:27: 06:b0:cf:09:d6:6d:95:fc:70:58:b3:5f:e6:bc:72:b6:6e:2e: 01:e0:cf:b3:65:06:27:a8:ae:9e:cd:54:77:2d:54:ce:a2:d4: d6:62:5e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkojolY22NrSROzeVoORQrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwOTA4MDkwMDUzWhcNMjUwOTA5MDkwMDUzWjAzMTEwLwYDVQQD EyhiYWIxYTUwODhjNjVjNzdiNDIzODUzMDYwOWQ2ZTNlZmMzMmM0ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GcgIZ6KntEFEzSzkVBh+h89yaGf Qu9yhqcaqAh5J9gWYr/F3p2g8/NPQfqFTqAmkEKNfFZ6ll71iVGz5/FAIJ+Zef96 3VeNQl08YhpY3AKjuQvYguzGAd77g9+tHkPr48OZ1MtraI0BnbcsSt+E1NtwdxYZ nvRmsqOZuqRDZjSi2XTJ7LPkFRoO6DHVZ/PxPDpuMTMWSBe/qB7xdB5mv01SXpPg hg2x4hxsNGRcT1y4qJLFIUPwS0qxx78B9dJVbiDvzGG66vkM75guGOFK/VL63dPf CuoExph8P4rdQurNKI7/h+S81UmxKTD6of2gDZMXKwe9dH2yhe5OLTq5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqxpQiMZcd7QjhTBgnW4+/DLE9WMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH82qg6z ZMUMJWIgL2MXlxiVss5bVNPKQIAt+ZohrmsNzAqS/lzsE7qn2CicPOQAQZvmAisT KQNH0cJuB8TCaiz9K9SQAVyLwvmOIVPoLP+OCa4VkGfGKBil/aRw120A/0CytvUE Pi+9PYj3nnXH/DNEzqMUgfGuuwscWwwZwD2iAkCo9N4pM+U3pdtepQenS8sVJ/PN XsoRTqNtryUfYpmoJl4Coeewg8kJyi+LdWC4sv9y2noPsC8W2R/0hPdZQz7ortKR 666GeUOwGs06JOWxFnHsBjgnBrDPCdZtlfxwWLNf5rxytm4uAeDPs2UGJ6iuns1U dy1UzqLU1mJeqA== -----END CERTIFICATE-----Generated at Mon Sep 8 14:06:31 2025 by rpki-client