$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: 74VFd0cI1ZhJV8nLpjsYxhHf5NTBvq416FFy7lzB7Zc= Subject key identifier: 2E:54:9C:A6:AD:11:28:5B:04:C9:05:D8:A3:00:16:5C:34:02:FE:37 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0196730B30966AD469E5BEB9B8D189404634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0B09 Signing time: Sat 26 Apr 2025 17:00:35 +0000 Manifest this update: Sat 26 Apr 2025 17:00:35 +0000 Manifest next update: Sun 27 Apr 2025 17:00:35 +0000 Files and hashes: 1: 8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa (hash: 2x+7TMLohOium2m4btHhUYg1HhvZTp1KUAyfNFsWp/s=) 2: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=) 3: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=) 4: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 5: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 7: Rg-rwznqAAZZCpXiUsH9yNT4n6M.roa (hash: R0tTH3SJW7iuGtYToatlEGOWh2QhWznFnYDn8BYzsO4=) 8: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: wxekGZq73/CkTStU23wGAcyfyPKYQhIwOYIso2OMoYI=) 10: ecGl7SXxfvzyrf_IROWG6PeXN6I.roa (hash: BeofmFT3DEwetEcQFY4kjdzbj6TWwwJHMUHk5ZEuYcY=) 11: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=) 12: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 14: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:30:96:6a:d4:69:e5:be:b9:b8:d1:89:40:46:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Apr 26 17:00:35 2025 GMT Not After : Apr 27 17:00:35 2025 GMT Subject: CN=2e549ca6ad11285b04c905d8a300165c3402fe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:1a:8d:f9:8c:0a:37:3e:4a:aa:25:53:2f: 83:cf:6e:5c:4f:a5:21:85:da:15:17:b7:07:1b:4a: 38:db:7f:43:72:ff:4f:be:fd:03:6f:5d:c6:d0:ff: 90:36:18:15:03:dc:e8:b9:d3:f1:96:03:35:01:54: e0:7e:65:49:97:ef:f6:2a:8b:75:f5:1d:d6:4e:9a: 80:dc:6d:3b:70:7c:61:74:53:c7:f4:7e:90:fc:c4: 82:0b:6c:df:a5:e9:96:59:f0:fc:34:9f:0a:7b:dd: 34:a5:b7:a3:10:d6:98:b9:6d:56:df:67:9a:b4:4a: bd:0a:94:a3:b5:3a:d1:eb:54:22:fa:7b:a1:c2:1e: ed:08:69:80:56:d7:3b:28:65:ad:9c:04:c6:3f:bc: 3a:97:1b:c2:d4:49:9b:3c:b1:fd:6a:27:d7:73:3e: 69:86:a0:65:d0:b3:6d:66:68:55:a4:c0:fe:b2:d9: 75:8a:4a:c0:7e:fd:db:e1:b8:45:76:16:72:6c:fe: 68:2e:67:ab:33:6b:ce:70:a3:00:8f:ef:55:17:4b: 30:f7:4c:0c:5f:91:dc:9a:0d:38:ab:a1:b1:7c:b0: 8d:ed:a6:9b:8a:5a:de:e9:61:3e:aa:45:bf:60:61: 99:b9:8f:a5:28:a7:1a:78:4a:05:d8:19:32:d9:24: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:9C:A6:AD:11:28:5B:04:C9:05:D8:A3:00:16:5C:34:02:FE:37 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0e:bf:d1:57:50:4c:d3:25:23:81:49:48:2f:17:74:86:8b: 07:5b:4a:36:a3:27:d1:d3:01:1c:56:7f:a5:06:ba:6e:47:6a: e6:4b:1a:2b:ed:70:81:65:01:8d:ae:e1:08:49:7e:6c:02:cc: a5:7c:92:00:18:da:d5:c1:77:2c:8e:49:68:0e:d8:de:e3:79: 64:e7:aa:0f:7c:69:87:c1:a7:86:40:9f:49:bd:93:ca:ea:f8: 77:03:f0:53:2a:bc:40:65:c7:38:ae:16:e0:d4:31:44:f7:da: af:40:71:b6:96:d3:66:d3:af:ad:93:fa:07:e3:84:3a:fe:0f: 19:3c:dc:b5:03:41:3a:9a:7a:7d:5c:af:9a:10:b9:04:a2:0a: c7:85:86:eb:ff:25:ae:e1:4e:ce:0d:09:4c:b0:96:55:78:33: 73:1c:02:bb:67:d0:bc:b1:74:31:7b:1d:08:a0:fb:47:8d:67: ee:8a:91:c7:31:fa:6f:2d:09:83:be:2e:0f:08:16:45:9e:d2: 31:48:f1:70:e6:24:d6:42:a9:3e:c9:91:5c:07:f8:88:d8:a9: ec:03:36:96:1b:3f:91:42:39:06:8c:12:dd:cb:92:1a:4a:e3: 11:a6:8f:c2:fe:2f:c7:bb:30:74:88:ba:9e:01:46:d7:58:9a: 78:dc:4f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzCzCWatRp5b65uNGJQEY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwNDI2MTcwMDM1WhcNMjUwNDI3MTcwMDM1WjAzMTEwLwYDVQQD EygyZTU0OWNhNmFkMTEyODViMDRjOTA1ZDhhMzAwMTY1YzM0MDJmZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzQajfmMCjc+SqolUy+Dz25cT6Uh hdoVF7cHG0o4239Dcv9Pvv0Db13G0P+QNhgVA9zoudPxlgM1AVTgfmVJl+/2Kot1 9R3WTpqA3G07cHxhdFPH9H6Q/MSCC2zfpemWWfD8NJ8Ke900pbejENaYuW1W32ea tEq9CpSjtTrR61Qi+nuhwh7tCGmAVtc7KGWtnATGP7w6lxvC1EmbPLH9aifXcz5p hqBl0LNtZmhVpMD+stl1ikrAfv3b4bhFdhZybP5oLmerM2vOcKMAj+9VF0sw90wM X5Hcmg04q6GxfLCN7aabilre6WE+qkW/YGGZuY+lKKcaeEoF2Bky2STmsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5UnKatEShbBMkF2KMAFlw0Av43MB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ6/0VdQ TNMlI4FJSC8XdIaLB1tKNqMn0dMBHFZ/pQa6bkdq5ksaK+1wgWUBja7hCEl+bALM pXySABja1cF3LI5JaA7Y3uN5ZOeqD3xph8GnhkCfSb2Tyur4dwPwUyq8QGXHOK4W 4NQxRPfar0BxtpbTZtOvrZP6B+OEOv4PGTzctQNBOpp6fVyvmhC5BKIKx4WG6/8l ruFOzg0JTLCWVXgzcxwCu2fQvLF0MXsdCKD7R41n7oqRxzH6by0Jg74uDwgWRZ7S MUjxcOYk1kKpPsmRXAf4iNip7AM2lhs/kUI5BowS3cuSGkrjEaaPwv4vx7swdIi6 ngFG11iaeNxPmg== -----END CERTIFICATE-----Generated at Sat Apr 26 22:30:43 2025 by rpki-client