$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: oMld7eHGTOiD3RzknZBoD26iHUq46hOTMXRAvAYccig= Subject key identifier: 20:0D:EF:95:97:4C:CA:2A:1C:DD:02:40:31:1E:19:D9:3A:0D:64:8B Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0198D583CA5B504A81B491E80BE146CAD02C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0C49 Signing time: Sat 23 Aug 2025 06:00:40 +0000 Manifest this update: Sat 23 Aug 2025 06:00:40 +0000 Manifest next update: Sun 24 Aug 2025 06:00:40 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: P6RuBY+FeAhEOxbwuiqnbYFAB0tnhhWeR3zr6ZXnUrM=) 8: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 9: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 10: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 11: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 12: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:ca:5b:50:4a:81:b4:91:e8:0b:e1:46:ca:d0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Aug 23 06:00:40 2025 GMT Not After : Aug 24 06:00:40 2025 GMT Subject: CN=200def95974cca2a1cdd0240311e19d93a0d648b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:6d:fd:0c:7d:e6:ef:4b:46:d1:0e:ed:9c: af:c8:bb:9e:c5:9c:3c:2f:08:ce:aa:e8:e3:07:83: a8:f1:b4:52:11:ee:ca:bb:09:ee:23:1c:60:92:5c: 1e:ba:04:87:19:83:c6:07:1f:9e:90:a9:45:77:08: c4:6e:c1:72:52:a6:5d:7a:99:25:4b:f3:fe:26:84: 98:36:69:fd:5c:a7:f4:73:1f:7c:1a:70:43:9f:36: ed:5b:9d:27:cc:bb:fd:05:3f:26:50:17:3a:14:c8: f2:4d:95:ff:5a:0b:3f:b4:06:a5:e1:71:4f:45:02: f6:6a:d0:bb:28:b5:38:d7:3a:2f:c0:08:35:54:55: 64:5d:eb:15:80:8c:e6:2b:fc:1d:02:a1:2d:3d:53: 77:d5:2b:0b:f0:9c:13:71:a2:56:a2:0c:c3:70:0d: 57:2e:fa:0f:88:27:9a:dc:ab:8f:23:6f:bd:b7:e4: 74:58:b9:f1:ae:31:0c:a2:9f:14:7e:36:9f:64:05: f4:91:ac:18:d4:ee:2e:a1:f8:1d:c0:f8:01:66:4f: 7e:71:44:a1:a2:8b:c4:c5:fd:66:17:21:4c:39:d5: 32:0a:2d:ba:2e:81:9b:d0:6f:15:b0:9d:ce:b0:86: ce:c6:e9:80:68:59:51:e3:26:53:be:7a:da:a8:b1: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:EF:95:97:4C:CA:2A:1C:DD:02:40:31:1E:19:D9:3A:0D:64:8B X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:03:8b:28:7a:ef:d5:3a:3c:1d:b1:9e:25:fc:e2:a0:3e:61: b8:7a:4a:35:a3:ab:94:f6:62:63:72:40:f8:c3:96:a1:dd:ba: 46:29:8a:8c:22:7a:0f:d9:1a:01:d0:90:ac:1e:f5:21:93:e4: 59:99:0a:98:1c:30:74:e0:09:ab:82:05:7e:29:7d:45:34:e0: 1a:c5:27:c5:51:e2:f0:81:17:9f:d2:dd:d6:d5:3d:34:33:cf: 7c:b9:e4:5e:30:31:4e:24:fe:7f:30:17:c7:e5:ab:bc:4f:2d: 81:a8:9c:9e:33:c9:15:bf:de:21:69:5f:97:1f:a4:cb:c8:1b: ae:e4:31:63:fd:b1:eb:1c:a4:01:83:17:cf:3e:6e:15:e5:45: cd:8c:8a:bc:b7:9c:62:2a:35:71:d4:48:b2:f0:01:b3:5f:a9: fa:e7:1a:64:20:3a:f9:5a:aa:4f:c7:fd:48:30:a2:ca:81:cc: 4c:9f:35:a3:62:1a:1b:99:79:6a:ab:8b:36:2a:0b:de:59:ec: 12:5a:b8:19:ea:a0:7d:a7:ff:ce:20:a2:68:c8:ac:51:68:b7: d8:f1:6b:e5:9e:39:d7:51:38:25:3c:97:14:52:53:e5:28:c4: c4:2e:2d:17:53:64:ae:d9:b1:63:36:a6:33:ee:e0:8a:71:8e: 22:61:55:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg8pbUEqBtJHoC+FGytAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwODIzMDYwMDQwWhcNMjUwODI0MDYwMDQwWjAzMTEwLwYDVQQD EygyMDBkZWY5NTk3NGNjYTJhMWNkZDAyNDAzMTFlMTlkOTNhMGQ2NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrtt/Qx95u9LRtEO7ZyvyLuexZw8 LwjOqujjB4Oo8bRSEe7KuwnuIxxgklweugSHGYPGBx+ekKlFdwjEbsFyUqZdepkl S/P+JoSYNmn9XKf0cx98GnBDnzbtW50nzLv9BT8mUBc6FMjyTZX/Wgs/tAal4XFP RQL2atC7KLU41zovwAg1VFVkXesVgIzmK/wdAqEtPVN31SsL8JwTcaJWogzDcA1X LvoPiCea3KuPI2+9t+R0WLnxrjEMop8UfjafZAX0kawY1O4uofgdwPgBZk9+cUSh oovExf1mFyFMOdUyCi26LoGb0G8VsJ3OsIbOxumAaFlR4yZTvnraqLEsuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAN75WXTMoqHN0CQDEeGdk6DWSLMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwOLKHrv 1To8HbGeJfzioD5huHpKNaOrlPZiY3JA+MOWod26RimKjCJ6D9kaAdCQrB71IZPk WZkKmBwwdOAJq4IFfil9RTTgGsUnxVHi8IEXn9Ld1tU9NDPPfLnkXjAxTiT+fzAX x+WrvE8tgaicnjPJFb/eIWlflx+ky8gbruQxY/2x6xykAYMXzz5uFeVFzYyKvLec Yio1cdRIsvABs1+p+ucaZCA6+VqqT8f9SDCiyoHMTJ81o2IaG5l5aquLNioL3lns Elq4Geqgfaf/ziCiaMisUWi32PFr5Z4511E4JTyXFFJT5SjExC4tF1NkrtmxYzam M+7ginGOImFVng== -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:11 2025 by rpki-client