$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: dx2iIkgZHHXTpcGn60oJl5/vEMNJdjl3Fk6xjBaxTfo= Subject key identifier: 75:01:26:E9:A6:CA:B4:93:A2:04:87:B9:84:76:F8:C2:C2:FD:85:83 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019A4E18E91038895D2A2F3B89950064A03A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0D0C Signing time: Tue 04 Nov 2025 09:00:46 +0000 Manifest this update: Tue 04 Nov 2025 09:00:46 +0000 Manifest next update: Wed 05 Nov 2025 09:00:46 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: b3455BfYtnk+AiPhjzYPqCamN07g9j7JtOeHjVYMBsc=) 8: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 9: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 10: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 11: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 12: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:e9:10:38:89:5d:2a:2f:3b:89:95:00:64:a0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Nov 4 09:00:46 2025 GMT Not After : Nov 5 09:00:46 2025 GMT Subject: CN=750126e9a6cab493a20487b98476f8c2c2fd8583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:de:ab:37:3e:4e:8e:be:c9:d3:dc:d9:a5: 0a:01:bc:ee:8a:f6:19:6e:99:68:51:96:6d:04:d3: 9e:21:73:28:02:73:d8:33:68:2f:f6:d3:cf:58:d5: 18:e3:54:ea:1c:fc:42:28:28:de:f2:5b:20:65:ac: fb:28:28:d9:09:06:58:a6:08:7b:41:65:7f:6b:fc: f4:a0:89:f6:22:48:a5:d9:7c:cd:9d:84:df:70:11: df:90:97:41:f1:9f:c8:c0:cf:c5:75:d5:3a:93:1a: e2:a7:25:ad:86:96:83:4c:ab:e1:63:68:84:84:21: bb:7a:41:56:a3:a9:0b:4e:1c:9a:a4:18:7b:e2:63: 96:cc:98:54:91:1b:83:47:11:01:0b:a3:23:19:a9: 06:82:26:c8:eb:0c:f3:a8:ce:dd:09:4a:01:23:1f: 76:34:c0:7a:d9:b9:32:2d:46:46:88:50:e4:81:d0: 5f:d8:97:8a:02:ad:b9:7c:df:04:99:ab:fe:a6:a7: 8d:05:a1:dc:53:20:76:76:2f:9b:6a:a6:f2:d3:ec: 10:9e:7a:a2:94:7a:6d:a6:8b:05:55:a8:9b:82:5e: f8:2a:e7:85:b6:98:a6:b5:ae:1c:0b:44:ec:63:58: d0:35:83:5f:4c:d5:c4:50:98:2e:c7:21:b3:ee:a3: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:26:E9:A6:CA:B4:93:A2:04:87:B9:84:76:F8:C2:C2:FD:85:83 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:90:1d:dd:7b:0a:12:37:d3:3d:f3:93:10:f7:87:d2:0e:56: 86:c0:a4:d2:42:b1:f3:c1:2f:9c:72:3d:fc:e8:40:be:56:8b: dd:16:d0:98:bd:c7:56:4e:49:91:6d:7d:45:c1:5b:0b:ad:59: 9e:9d:a1:d5:8d:98:e2:07:b6:5c:31:74:4f:d4:72:c4:85:30: bb:5e:9b:d5:ee:c2:c3:19:1e:f0:ad:59:62:98:29:64:07:db: 45:aa:28:94:34:ab:a3:53:b3:67:ef:db:38:b6:df:5c:04:63: 9a:9b:07:2e:f8:22:3c:db:5b:4e:ce:e4:73:70:45:77:7b:29: 0b:ed:1c:58:ff:8d:03:03:c4:49:bc:46:38:2f:bf:5d:ec:d8: ae:34:d3:b6:8d:67:47:2d:f3:ff:5c:f7:c7:9a:3b:7a:c5:f0: 7f:4a:85:0c:fc:5b:c3:6a:6c:63:c9:0a:a5:cb:77:89:a2:c1: db:82:21:8f:f6:62:5c:d2:29:8d:6f:ad:d1:2b:a1:62:9b:f3: e1:eb:cd:b9:95:41:02:94:2a:78:26:f3:13:bc:07:91:87:e5: 10:62:e5:18:71:0e:77:1b:16:3d:3f:fb:03:2e:9e:c4:3c:f1: ed:0a:c0:bc:0e:04:01:44:e5:70:92:cf:41:14:ee:98:9e:45: 6d:cf:bf:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGOkQOIldKi87iZUAZKA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMTA0MDkwMDQ2WhcNMjUxMTA1MDkwMDQ2WjAzMTEwLwYDVQQD Eyg3NTAxMjZlOWE2Y2FiNDkzYTIwNDg3Yjk4NDc2ZjhjMmMyZmQ4NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO3eqzc+To6+ydPc2aUKAbzuivYZ bploUZZtBNOeIXMoAnPYM2gv9tPPWNUY41TqHPxCKCje8lsgZaz7KCjZCQZYpgh7 QWV/a/z0oIn2Ikil2XzNnYTfcBHfkJdB8Z/IwM/FddU6kxripyWthpaDTKvhY2iE hCG7ekFWo6kLThyapBh74mOWzJhUkRuDRxEBC6MjGakGgibI6wzzqM7dCUoBIx92 NMB62bkyLUZGiFDkgdBf2JeKAq25fN8Emav+pqeNBaHcUyB2di+baqby0+wQnnqi lHptposFVaibgl74KueFtpimta4cC0TsY1jQNYNfTNXEUJguxyGz7qMTWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUBJummyrSTogSHuYR2+MLC/YWDMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJAd3XsK EjfTPfOTEPeH0g5WhsCk0kKx88EvnHI9/OhAvlaL3RbQmL3HVk5JkW19RcFbC61Z np2h1Y2Y4ge2XDF0T9RyxIUwu16b1e7Cwxke8K1ZYpgpZAfbRaoolDSro1OzZ+/b OLbfXARjmpsHLvgiPNtbTs7kc3BFd3spC+0cWP+NAwPESbxGOC+/XezYrjTTto1n Ry3z/1z3x5o7esXwf0qFDPxbw2psY8kKpct3iaLB24Ihj/ZiXNIpjW+t0SuhYpvz 4evNuZVBApQqeCbzE7wHkYflEGLlGHEOdxsWPT/7Ay6exDzx7QrAvA4EAUTlcJLP QRTumJ5Fbc+/zg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:51:53 2025 by rpki-client