$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: rb0s4ymXhEYf2UnfLEOk1By1ONkR4BE3BMJgj5rrOgM= Subject key identifier: 84:59:DC:3B:41:FC:A8:EB:6E:78:81:4B:73:84:0A:27:5C:C3:F8:C2 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 01987D8A86915B099C7CA5F604D2F3402A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0C1A Signing time: Wed 06 Aug 2025 04:01:27 +0000 Manifest this update: Wed 06 Aug 2025 04:01:27 +0000 Manifest next update: Thu 07 Aug 2025 04:01:27 +0000 Files and hashes: 1: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=) 2: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=) 3: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 4: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 5: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 7: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 8: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: A/DOahGNou3COjmAXqU/fQ17iVZMyi7UEtrWQoRVFlk=) 10: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=) 11: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 12: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 14: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 15: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:8a:86:91:5b:09:9c:7c:a5:f6:04:d2:f3:40:2a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Aug 6 04:01:27 2025 GMT Not After : Aug 7 04:01:27 2025 GMT Subject: CN=8459dc3b41fca8eb6e78814b73840a275cc3f8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:44:1f:1f:ed:13:8f:ae:81:e1:79:ec:15: ab:15:50:1a:cf:d4:c2:88:df:78:66:60:ce:40:5b: 2d:ab:1d:68:02:22:d2:22:47:bd:46:b1:e9:80:8a: 5c:85:03:f6:fe:c6:b6:46:72:e0:37:a9:1f:41:53: a2:d3:96:35:18:5e:9f:4f:93:c1:2d:35:f0:46:11: 80:47:8f:20:cf:35:42:fc:cb:13:b7:62:db:65:34: 37:18:a3:a8:6b:11:d9:f4:6b:f1:55:b9:ec:6d:5d: 38:9c:bd:90:b7:35:72:03:fa:48:35:16:e1:7e:49: 40:a1:d0:b8:70:96:d8:bc:d7:2b:d2:86:da:59:80: fa:7a:88:6c:5e:a1:36:f4:a5:66:b2:4f:c7:74:b3: a6:b0:00:71:52:a9:eb:fd:85:ab:d9:f0:6c:92:dd: cc:ce:78:47:7b:51:53:64:48:d3:9d:1b:7f:2a:6c: 8f:f4:66:a3:5b:ca:8e:2d:73:63:b6:24:57:91:80: b2:73:9e:7f:92:6a:5c:4e:48:1c:17:fc:03:e9:e0: bf:80:2f:c8:32:93:11:df:14:b6:dd:4e:d0:77:20: ee:1b:e5:6f:28:11:1a:62:80:22:e5:7a:5a:46:5c: 0d:4d:a9:b3:d0:8d:4f:c7:19:de:a4:6d:d8:20:51: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:59:DC:3B:41:FC:A8:EB:6E:78:81:4B:73:84:0A:27:5C:C3:F8:C2 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ab:72:7a:01:fa:fa:69:df:2c:a2:35:2f:d0:9b:7e:e1:f6: 9d:7c:62:85:e4:3c:58:ec:79:79:96:93:e6:01:16:40:72:83: 58:f6:ad:57:4f:52:6d:a4:76:42:1e:68:d4:49:63:7e:4b:65: 55:1c:89:8f:ca:39:63:a2:ae:a8:25:1e:8d:b3:c2:db:02:67: 25:b1:02:82:bb:2a:85:25:3f:5f:89:09:cb:2f:35:70:87:3d: 2a:3c:04:d4:dc:e6:68:bf:f3:18:e1:51:d2:41:92:09:92:13: 3c:a7:5c:ba:ed:7b:8a:d5:52:e9:ac:a2:42:4f:67:42:5f:49: 14:10:d6:f0:10:23:a0:c9:d9:ee:14:dd:5e:87:70:a8:31:c8: 93:49:3c:c9:4b:ff:40:3c:6c:5c:28:0f:09:a6:c9:0a:51:35: 3d:d3:d5:71:5a:e2:6c:59:4c:31:c9:41:11:ae:65:fe:7b:e1: 3b:8a:8a:aa:84:59:a9:55:e1:8e:f6:6c:59:0d:a4:e5:5e:63: 98:7c:d6:d8:98:3d:5e:2e:3e:41:fb:31:f9:94:1c:24:04:d1: 7c:0c:b7:78:0b:eb:b2:2a:a0:6e:01:e5:e5:97:e7:c5:3d:99: f3:0e:18:0a:4b:ff:5d:4a:a4:d1:4c:b4:84:35:c2:61:4b:2d: 4a:85:d0:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9ioaRWwmcfKX2BNLzQCohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwODA2MDQwMTI3WhcNMjUwODA3MDQwMTI3WjAzMTEwLwYDVQQD Eyg4NDU5ZGMzYjQxZmNhOGViNmU3ODgxNGI3Mzg0MGEyNzVjYzNmOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ApEHx/tE4+ugeF57BWrFVAaz9TC iN94ZmDOQFstqx1oAiLSIke9RrHpgIpchQP2/sa2RnLgN6kfQVOi05Y1GF6fT5PB LTXwRhGAR48gzzVC/MsTt2LbZTQ3GKOoaxHZ9GvxVbnsbV04nL2QtzVyA/pINRbh fklAodC4cJbYvNcr0obaWYD6eohsXqE29KVmsk/HdLOmsABxUqnr/YWr2fBskt3M znhHe1FTZEjTnRt/KmyP9GajW8qOLXNjtiRXkYCyc55/kmpcTkgcF/wD6eC/gC/I MpMR3xS23U7QdyDuG+VvKBEaYoAi5XpaRlwNTamz0I1PxxnepG3YIFFhMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRZ3DtB/KjrbniBS3OECidcw/jCMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6tyegH6 +mnfLKI1L9CbfuH2nXxiheQ8WOx5eZaT5gEWQHKDWPatV09SbaR2Qh5o1Eljfktl VRyJj8o5Y6KuqCUejbPC2wJnJbECgrsqhSU/X4kJyy81cIc9KjwE1NzmaL/zGOFR 0kGSCZITPKdcuu17itVS6ayiQk9nQl9JFBDW8BAjoMnZ7hTdXodwqDHIk0k8yUv/ QDxsXCgPCabJClE1PdPVcVribFlMMclBEa5l/nvhO4qKqoRZqVXhjvZsWQ2k5V5j mHzW2Jg9Xi4+Qfsx+ZQcJATRfAy3eAvrsiqgbgHl5ZfnxT2Z8w4YCkv/XUqk0Uy0 hDXCYUstSoXQTQ== -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:41 2025 by rpki-client