$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: yFR6hIN02vS806uoAONDsrpQBGmQhcnF4qg4hAyMh+4= Subject key identifier: 00:D5:34:F6:4C:BA:CD:A0:C2:13:73:FE:4B:C4:6A:BE:5D:D4:AC:D7 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019A1429585C9832EFBCC3477A0E7E01736C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0CEE Signing time: Fri 24 Oct 2025 03:00:45 +0000 Manifest this update: Fri 24 Oct 2025 03:00:45 +0000 Manifest next update: Sat 25 Oct 2025 03:00:45 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: EEdfqbkajQePqoC0qgzQPGl/VBUVVVtx5RqPOC5TFx8=) 8: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 9: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 10: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 11: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 12: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:14:29:58:5c:98:32:ef:bc:c3:47:7a:0e:7e:01:73:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Oct 24 03:00:45 2025 GMT Not After : Oct 25 03:00:45 2025 GMT Subject: CN=00d534f64cbacda0c21373fe4bc46abe5dd4acd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:e6:b3:92:2a:3d:4e:f1:dd:2c:e2:70:5a: da:ca:0d:46:12:60:d5:5d:86:1b:26:5c:32:90:c9: f8:87:87:dd:cb:bd:1c:83:1c:c3:f8:cf:3c:69:4c: 09:40:df:d2:cf:1d:ab:30:ba:48:2b:60:2e:5a:4e: c7:25:4b:76:ff:5b:55:4e:3f:54:a0:ae:a4:83:98: de:2e:ab:75:df:9d:04:2c:d8:0b:09:3f:83:fe:cb: 71:c4:04:58:f9:35:78:89:98:fb:3e:4f:59:38:18: bc:13:ac:cc:6f:81:43:3d:81:d4:7d:c3:ae:91:1f: 25:15:b1:d8:58:4e:d1:42:50:54:a5:6e:ab:58:91: 0f:32:99:eb:d5:22:9d:df:c8:83:33:fa:f1:16:a0: 6f:bc:79:2a:6a:66:0b:6b:24:85:64:07:71:b3:08: b1:b6:53:5e:7c:cf:c2:63:35:80:ec:fb:69:29:aa: ee:1e:aa:ea:25:c4:c5:f9:92:05:c4:ef:b7:f5:3b: 4b:ce:05:96:4b:a1:b3:06:76:5c:c1:95:2e:ee:c2: 3a:cd:0a:0b:36:d6:3f:5f:d2:a9:bc:17:77:f3:80: da:8f:e3:06:7d:60:5e:a7:d7:a2:78:fa:0c:03:89: a4:15:3e:1b:ed:24:ae:50:96:72:32:c6:c4:6d:bc: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:34:F6:4C:BA:CD:A0:C2:13:73:FE:4B:C4:6A:BE:5D:D4:AC:D7 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fb:08:a7:8e:7b:39:b2:90:55:90:93:18:38:cc:32:b6:7c: 95:fa:57:b5:04:51:79:97:24:66:cf:a4:3e:59:4d:1e:b2:9e: ff:c3:3b:12:85:2e:14:43:db:7d:12:eb:98:e0:fc:d4:78:73: b6:0e:99:05:4e:91:47:f8:dd:86:a3:fd:69:95:df:a2:51:9c: 76:05:76:0b:1f:0b:41:02:2a:fc:61:2c:fe:96:66:fa:a7:c9: 71:4f:e2:d6:3b:3a:b7:46:6f:e3:63:08:4f:fa:1c:be:fa:9b: 77:60:95:bb:59:a2:41:26:0e:12:39:bf:25:ca:15:7b:98:04: 5a:15:ff:3a:ac:2e:cd:88:0f:da:9b:22:ad:cb:32:82:fc:b4: e3:c5:5a:74:cf:d7:85:f1:9d:4f:d8:46:e0:6d:db:66:95:67: cf:42:c5:25:14:65:b4:a8:14:99:35:74:f7:f7:66:3e:d7:20: 62:69:a8:df:10:c2:28:c9:15:e3:1d:9b:37:57:29:1e:76:1f: 8f:da:10:3b:9e:c3:b5:eb:2c:12:3c:48:4b:53:a6:d7:05:68: 2b:6f:0a:16:a4:f0:5d:19:2f:3a:e4:41:eb:c1:25:11:12:31: f8:56:a4:1c:46:b5:74:26:a7:b1:c7:cf:e3:10:39:d1:39:eb: 80:f7:03:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoUKVhcmDLvvMNHeg5+AXNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMDI0MDMwMDQ1WhcNMjUxMDI1MDMwMDQ1WjAzMTEwLwYDVQQD EygwMGQ1MzRmNjRjYmFjZGEwYzIxMzczZmU0YmM0NmFiZTVkZDRhY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxvms5IqPU7x3SzicFrayg1GEmDV XYYbJlwykMn4h4fdy70cgxzD+M88aUwJQN/Szx2rMLpIK2AuWk7HJUt2/1tVTj9U oK6kg5jeLqt1350ELNgLCT+D/stxxARY+TV4iZj7Pk9ZOBi8E6zMb4FDPYHUfcOu kR8lFbHYWE7RQlBUpW6rWJEPMpnr1SKd38iDM/rxFqBvvHkqamYLaySFZAdxswix tlNefM/CYzWA7PtpKaruHqrqJcTF+ZIFxO+39TtLzgWWS6GzBnZcwZUu7sI6zQoL NtY/X9KpvBd384Daj+MGfWBep9eiePoMA4mkFT4b7SSuUJZyMsbEbbwKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADVNPZMus2gwhNz/kvEar5d1KzXMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/sIp457 ObKQVZCTGDjMMrZ8lfpXtQRReZckZs+kPllNHrKe/8M7EoUuFEPbfRLrmOD81Hhz tg6ZBU6RR/jdhqP9aZXfolGcdgV2Cx8LQQIq/GEs/pZm+qfJcU/i1js6t0Zv42MI T/ocvvqbd2CVu1miQSYOEjm/JcoVe5gEWhX/OqwuzYgP2psircsygvy048VadM/X hfGdT9hG4G3bZpVnz0LFJRRltKgUmTV09/dmPtcgYmmo3xDCKMkV4x2bN1cpHnYf j9oQO57DtessEjxIS1Om1wVoK28KFqTwXRkvOuRB68ElERIx+FakHEa1dCanscfP 4xA50TnrgPcDow== -----END CERTIFICATE-----Generated at Fri Oct 24 06:47:47 2025 by rpki-client