$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: JApr5cVv+Bw37jMqbaLdwjV/9u+CLYdb01/rIOGsIgk= Subject key identifier: B6:3C:AD:FD:26:E5:8A:6E:D4:FB:AC:61:73:CF:80:2F:91:FA:6D:CE Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019EC111AF81954DD364F476176BF30F4C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0F60 Signing time: Sat 13 Jun 2026 13:00:22 +0000 Manifest this update: Sat 13 Jun 2026 13:00:22 +0000 Manifest next update: Sun 14 Jun 2026 13:00:22 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: 0GhtL5ZWNEi/7mguHF9nGUcK2JIBq1l5LrMacOSYnGE=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: lugW21gGeuaGm697DyxmwJljgS0.roa (hash: 6BTNi4ybARb+KthdQDA3auPtDeLT+Nu/WzRIV+1kw6c=) 10: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 11: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 12: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:11:af:81:95:4d:d3:64:f4:76:17:6b:f3:0f:4c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jun 13 13:00:22 2026 GMT Not After : Jun 14 13:00:22 2026 GMT Subject: CN=b63cadfd26e58a6ed4fbac6173cf802f91fa6dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:4d:77:80:c1:a5:40:90:4c:89:6d:32:03: f4:f3:16:8b:42:90:4f:68:a8:05:ba:a1:37:be:51: fa:f4:b8:62:72:96:bd:b4:e6:e3:c6:1a:14:c1:28: 62:dc:a8:01:89:75:11:4f:5b:49:55:49:d8:e9:d1: 19:fb:91:bb:7b:3a:cb:03:1b:b4:60:34:61:d0:46: 7d:db:e0:3b:f5:52:e8:42:60:de:36:83:e3:4b:ae: f9:7d:9b:6a:c1:0c:45:9f:5f:01:b9:da:f9:ef:c6: 9e:dd:1a:6d:11:2f:c5:b2:b2:de:9b:64:9e:90:70: 56:19:08:67:7f:df:60:87:ee:aa:08:44:05:c4:1f: be:b2:5f:33:25:2b:a9:56:06:b5:cf:7e:ab:dd:1a: 0b:f1:9d:c6:7a:27:db:4b:f1:85:db:ed:a0:74:bc: c5:1a:50:55:18:5f:fa:8e:1c:07:e0:56:d4:85:da: 9a:de:13:03:6c:65:16:17:ce:06:77:6c:af:4c:d1: d7:ac:84:dc:71:19:1f:d9:a4:1d:db:55:14:14:ea: 21:6a:78:cd:76:dc:82:57:66:1b:ac:d2:a6:5b:e8: dc:81:59:06:ad:74:a0:e5:f9:a3:a4:f1:ee:3a:84: 82:f4:6f:9c:b7:2d:aa:5f:a3:33:62:51:89:08:9e: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:AD:FD:26:E5:8A:6E:D4:FB:AC:61:73:CF:80:2F:91:FA:6D:CE X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4a:0a:67:c4:41:cd:4e:cf:f2:64:b0:a4:b3:39:24:c5:87: 94:76:43:ee:17:8b:67:04:eb:64:29:e2:16:54:5a:94:76:f4: 1a:a5:d2:a9:11:b9:64:8b:46:4d:a6:f2:1c:35:ff:09:6d:67: 84:38:5b:e4:cc:e3:7a:fd:ac:71:46:0e:d5:b4:e3:e8:45:be: 65:b4:2e:a6:3e:4e:7b:79:cf:9d:0f:ee:31:24:04:0c:1f:f8: f0:3b:ab:bb:03:86:6a:45:f7:16:5d:62:78:44:b7:3a:c2:63: 6a:19:4b:f3:fa:2e:a3:ab:53:4c:d9:ac:40:4b:e0:d3:32:39: 5e:61:7a:b6:69:11:ed:8a:8f:ea:3e:74:09:55:b1:2c:49:2d: 5a:8a:15:c9:55:3d:85:70:96:80:1d:d5:30:03:db:0a:bd:f8: 4c:5a:fc:46:a8:96:a5:bc:65:df:b3:68:a6:a4:fa:6c:5f:4a: c1:55:4e:7b:1e:e9:2d:0b:82:6f:6f:3e:8e:0e:49:38:34:d6: 59:62:03:fd:a7:4e:10:41:34:75:bf:f8:3e:aa:0b:1b:d6:8d: a5:53:12:fa:f4:cf:ea:50:81:bb:b7:0a:7f:f8:f3:50:f3:e1: 0f:ce:a9:b4:20:e1:c5:c2:e4:fd:05:c0:b9:23:2d:f9:f9:5b: cd:2f:eb:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BEa+BlU3TZPR2F2vzD0xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwNjEzMTMwMDIyWhcNMjYwNjE0MTMwMDIyWjAzMTEwLwYDVQQD EyhiNjNjYWRmZDI2ZTU4YTZlZDRmYmFjNjE3M2NmODAyZjkxZmE2ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvFNd4DBpUCQTIltMgP08xaLQpBP aKgFuqE3vlH69Lhicpa9tObjxhoUwShi3KgBiXURT1tJVUnY6dEZ+5G7ezrLAxu0 YDRh0EZ92+A79VLoQmDeNoPjS675fZtqwQxFn18Budr578ae3RptES/FsrLem2Se kHBWGQhnf99gh+6qCEQFxB++sl8zJSupVga1z36r3RoL8Z3GeifbS/GF2+2gdLzF GlBVGF/6jhwH4FbUhdqa3hMDbGUWF84Gd2yvTNHXrITccRkf2aQd21UUFOohanjN dtyCV2YbrNKmW+jcgVkGrXSg5fmjpPHuOoSC9G+cty2qX6MzYlGJCJ4OqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY8rf0m5Ypu1PusYXPPgC+R+m3OMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0oKZ8RB zU7P8mSwpLM5JMWHlHZD7heLZwTrZCniFlRalHb0GqXSqRG5ZItGTabyHDX/CW1n hDhb5Mzjev2scUYO1bTj6EW+ZbQupj5Oe3nPnQ/uMSQEDB/48DuruwOGakX3Fl1i eES3OsJjahlL8/ouo6tTTNmsQEvg0zI5XmF6tmkR7YqP6j50CVWxLEktWooVyVU9 hXCWgB3VMAPbCr34TFr8RqiWpbxl37NopqT6bF9KwVVOex7pLQuCb28+jg5JODTW WWID/adOEEE0db/4PqoLG9aNpVMS+vTP6lCBu7cKf/jzUPPhD86ptCDhxcLk/QXA uSMt+flbzS/rEQ== -----END CERTIFICATE-----Generated at Sat Jun 13 19:12:54 2026 by rpki-client