$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: hsYRvSMrbGhN1O8qSfjSl8akj/lusKmXFkEsV93OX6M= Subject key identifier: 18:ED:33:43:4A:AA:6F:23:30:98:91:BF:6F:84:40:42:AE:50:9A:07 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0197469E354935141F86A1FF4499017EA8D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0B79 Signing time: Fri 06 Jun 2025 19:01:02 +0000 Manifest this update: Fri 06 Jun 2025 19:01:02 +0000 Manifest next update: Sat 07 Jun 2025 19:01:02 +0000 Files and hashes: 1: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=) 2: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=) 3: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 4: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 5: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 7: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 8: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: LdI7ZNHUj0CUR4oxHPmwHP9ZI4C6b02YNpZIh4JbBNU=) 10: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=) 11: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 12: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 14: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 15: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:9e:35:49:35:14:1f:86:a1:ff:44:99:01:7e:a8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jun 6 19:01:02 2025 GMT Not After : Jun 7 19:01:02 2025 GMT Subject: CN=18ed33434aaa6f23309891bf6f844042ae509a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:1e:ba:c1:5a:93:43:c9:e1:74:d2:5d:3a: b6:b4:90:61:60:eb:b0:fc:a0:4d:55:86:9a:80:26: 97:46:ee:5a:02:a1:bf:42:14:6b:e8:5b:4d:2d:f5: 05:aa:3d:8a:d4:f4:18:31:34:84:cf:f9:b0:cf:82: b4:e5:89:5e:2b:d0:ee:f3:c7:ba:91:41:51:8f:e4: 5e:d8:1c:40:0c:83:e5:ab:9f:fd:bc:5f:56:b9:47: 5e:db:81:ac:e1:6d:e6:25:d1:ed:18:6f:6c:96:de: ef:6d:01:fb:de:ae:db:cc:08:ec:3c:26:e5:bc:83: c7:10:74:ca:36:06:7e:0e:6a:b3:f3:48:36:20:43: 73:21:42:5e:91:0a:ec:15:05:de:fd:34:a4:c7:a3: 91:36:db:04:9c:54:7e:93:9f:32:4a:ca:f8:a9:df: 01:ad:33:07:12:21:88:b9:8b:01:39:75:0e:a9:63: 65:4d:f3:57:a4:77:b0:ad:bf:56:65:12:0e:f6:ca: ff:c7:20:d2:91:98:ec:bc:2a:62:f6:74:31:30:dc: d9:6b:a6:f5:69:49:8e:ea:73:4f:f1:5d:c2:f0:60: 40:71:12:6c:97:ef:ac:cc:f5:9d:bf:fc:d8:a8:43: 14:5a:21:14:e1:5f:83:8d:8f:ae:05:26:34:b0:59: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:ED:33:43:4A:AA:6F:23:30:98:91:BF:6F:84:40:42:AE:50:9A:07 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c2:e7:39:af:51:b3:ff:f2:a6:61:6d:ca:29:69:ed:bd:ca: 9f:1b:a4:51:17:fe:e9:ae:35:19:ed:a3:8a:36:58:b3:0b:d2: 67:19:d4:64:a0:ad:a7:0c:2c:09:71:78:91:9b:5e:14:05:61: 56:e8:79:7e:85:8d:7f:08:0d:3f:d4:7a:36:f1:ef:9d:fd:6b: 32:98:db:87:a0:51:a4:97:a0:2b:f9:74:04:2d:44:1b:17:19: 4c:52:61:d0:77:79:3c:89:4c:34:d4:d0:51:7a:a6:bf:36:35: b7:8c:59:ee:6a:91:a7:7b:70:4f:ff:8a:de:58:1a:3f:82:0f: cc:4a:eb:ca:8d:b3:79:ca:22:0d:fe:77:7e:f4:89:6f:b5:fe: ec:e9:f6:9f:1c:8a:ac:a5:cb:3d:61:e2:a4:31:8a:12:bc:85: 83:45:95:88:b0:62:41:6d:c7:3a:48:7f:92:99:39:7b:91:10: c2:9d:5a:16:65:bf:81:3a:9e:66:7f:e3:5f:99:2b:aa:f2:04: 35:b1:5b:a4:e6:e5:87:87:23:06:f4:bc:fd:39:24:81:a3:ed: e7:d0:4f:0d:46:3d:be:e8:e4:ef:b2:cc:9e:b9:33:1b:84:3f: 6e:79:bd:3c:1b:ef:eb:03:c3:5d:99:11:34:4e:42:bc:55:61: af:1d:08:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGnjVJNRQfhqH/RJkBfqjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwNjA2MTkwMTAyWhcNMjUwNjA3MTkwMTAyWjAzMTEwLwYDVQQD EygxOGVkMzM0MzRhYWE2ZjIzMzA5ODkxYmY2Zjg0NDA0MmFlNTA5YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v4eusFak0PJ4XTSXTq2tJBhYOuw /KBNVYaagCaXRu5aAqG/QhRr6FtNLfUFqj2K1PQYMTSEz/mwz4K05YleK9Du88e6 kUFRj+Re2BxADIPlq5/9vF9WuUde24Gs4W3mJdHtGG9slt7vbQH73q7bzAjsPCbl vIPHEHTKNgZ+Dmqz80g2IENzIUJekQrsFQXe/TSkx6ORNtsEnFR+k58ySsr4qd8B rTMHEiGIuYsBOXUOqWNlTfNXpHewrb9WZRIO9sr/xyDSkZjsvCpi9nQxMNzZa6b1 aUmO6nNP8V3C8GBAcRJsl++szPWdv/zYqEMUWiEU4V+DjY+uBSY0sFl5BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjtM0NKqm8jMJiRv2+EQEKuUJoHMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcLnOa9R s//ypmFtyilp7b3KnxukURf+6a41Ge2jijZYswvSZxnUZKCtpwwsCXF4kZteFAVh Vuh5foWNfwgNP9R6NvHvnf1rMpjbh6BRpJegK/l0BC1EGxcZTFJh0Hd5PIlMNNTQ UXqmvzY1t4xZ7mqRp3twT/+K3lgaP4IPzErryo2zecoiDf53fvSJb7X+7On2nxyK rKXLPWHipDGKEryFg0WViLBiQW3HOkh/kpk5e5EQwp1aFmW/gTqeZn/jX5krqvIE NbFbpOblh4cjBvS8/TkkgaPt59BPDUY9vujk77LMnrkzG4Q/bnm9PBvv6wPDXZkR NE5CvFVhrx0Irw== -----END CERTIFICATE-----Generated at Sat Jun 7 03:23:49 2025 by rpki-client