$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: zgfTyxEVa5TyVFlIillmjonH2t2+RiZMAF0wavbspsI= Subject key identifier: 9B:8C:74:00:DD:68:24:7A:4A:62:05:96:95:A0:2E:8F:D9:75:89:F8 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019D25BA80B5FD35CED74068076B3594B0C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0E8A Signing time: Wed 25 Mar 2026 16:01:12 +0000 Manifest this update: Wed 25 Mar 2026 16:01:12 +0000 Manifest next update: Thu 26 Mar 2026 16:01:12 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: MWlGJNlhARLJ/BwAgGbJA/epSyUczFCbUBWdXuo9joo=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:80:b5:fd:35:ce:d7:40:68:07:6b:35:94:b0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Mar 25 16:01:12 2026 GMT Not After : Mar 26 16:01:12 2026 GMT Subject: CN=9b8c7400dd68247a4a62059695a02e8fd97589f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:58:58:0f:d0:b3:bc:3e:1f:f3:40:81:7b: 11:3d:63:78:7d:40:c0:f5:e6:19:ae:50:c1:5a:e5: b8:c0:4c:6a:8d:ee:d5:5f:af:f5:d6:c4:10:b7:a6: 11:61:39:f7:e0:03:1b:07:9d:ae:3b:08:47:c5:4b: 35:4c:d2:89:ec:3d:64:61:74:8b:dd:29:c0:1a:e1: c5:5b:b9:76:f4:98:fc:35:23:5f:bb:fe:47:17:70: 2b:dc:de:3b:2f:2d:65:bf:41:08:b2:3f:d5:34:6f: 7a:f3:56:23:e1:be:a6:ca:3e:e9:bf:18:7a:ed:9a: 7d:3a:52:26:05:a5:ab:36:11:3d:9f:17:3a:ab:3f: 77:71:97:da:3b:44:b5:53:3b:8b:0c:7f:72:d2:60: 60:9c:ca:d9:0d:75:30:14:f9:41:2d:e4:3f:f0:e4: df:31:76:55:f5:ad:61:ad:5f:9f:b6:39:b9:cf:84: 0f:f0:40:55:93:55:73:62:51:6d:c1:16:35:44:16: 86:fe:dc:71:32:24:22:7d:dc:26:06:3e:6b:13:62: cf:2d:38:b7:d3:33:d3:1f:47:4d:d5:92:8e:77:45: 78:13:58:57:dc:cd:68:0b:cc:73:1f:ce:c8:c8:00: 63:68:14:60:33:63:da:fb:e1:6e:c1:8b:7c:9b:70: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:74:00:DD:68:24:7A:4A:62:05:96:95:A0:2E:8F:D9:75:89:F8 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1b:88:8d:70:a5:e8:43:70:66:17:bd:96:e4:1d:32:f4:ae: 4a:58:e4:20:89:3a:5b:78:d1:ff:5d:d0:31:e5:54:ad:4e:d9: a8:83:24:4c:b2:72:4e:b0:d3:79:5b:d1:61:ea:31:73:2e:96: da:f4:d7:cc:06:2f:0c:f6:4d:6b:91:b6:cd:54:5b:08:59:36: c9:f9:fe:b3:59:fa:98:30:81:c0:2d:b4:3a:f0:b6:16:87:5c: ec:13:cc:6d:a1:f2:b6:cb:e7:9d:76:d1:aa:2d:55:2c:6e:c3: fc:53:79:71:65:3f:ec:1a:ca:48:a3:0a:55:de:30:34:8e:9c: c1:08:6a:2f:1e:4b:52:34:2a:8b:77:45:f7:e7:90:35:93:c1: 6e:f5:d3:fc:92:77:b0:dc:98:9f:6e:6c:5b:ca:d6:e5:68:87: ae:69:39:9e:0f:0d:16:c2:b3:ee:1c:30:8a:da:7b:1f:41:3b: ce:c7:9f:d6:49:4e:34:a6:d3:f1:83:b7:54:f1:a1:f6:f7:8d: 0e:1d:b2:a5:dd:c6:5a:7f:40:a6:c7:15:0c:ed:dc:9b:95:af: 9d:52:61:2a:a0:91:ee:6a:79:46:bf:4a:9d:6c:a1:81:65:fc: 89:3b:81:ee:c8:3b:c8:2c:9d:ef:21:ec:f0:8a:8e:68:35:cb: ab:17:bf:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0luoC1/TXO10BoB2s1lLDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMzI1MTYwMTEyWhcNMjYwMzI2MTYwMTEyWjAzMTEwLwYDVQQD Eyg5YjhjNzQwMGRkNjgyNDdhNGE2MjA1OTY5NWEwMmU4ZmQ5NzU4OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6JYWA/Qs7w+H/NAgXsRPWN4fUDA 9eYZrlDBWuW4wExqje7VX6/11sQQt6YRYTn34AMbB52uOwhHxUs1TNKJ7D1kYXSL 3SnAGuHFW7l29Jj8NSNfu/5HF3Ar3N47Ly1lv0EIsj/VNG9681Yj4b6myj7pvxh6 7Zp9OlImBaWrNhE9nxc6qz93cZfaO0S1UzuLDH9y0mBgnMrZDXUwFPlBLeQ/8OTf MXZV9a1hrV+ftjm5z4QP8EBVk1VzYlFtwRY1RBaG/txxMiQifdwmBj5rE2LPLTi3 0zPTH0dN1ZKOd0V4E1hX3M1oC8xzH87IyABjaBRgM2Pa++FuwYt8m3BKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuMdADdaCR6SmIFlpWgLo/ZdYn4MB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBuIjXCl 6ENwZhe9luQdMvSuSljkIIk6W3jR/13QMeVUrU7ZqIMkTLJyTrDTeVvRYeoxcy6W 2vTXzAYvDPZNa5G2zVRbCFk2yfn+s1n6mDCBwC20OvC2Fodc7BPMbaHytsvnnXbR qi1VLG7D/FN5cWU/7BrKSKMKVd4wNI6cwQhqLx5LUjQqi3dF9+eQNZPBbvXT/JJ3 sNyYn25sW8rW5WiHrmk5ng8NFsKz7hwwitp7H0E7zsef1klONKbT8YO3VPGh9veN Dh2ypd3GWn9ApscVDO3cm5WvnVJhKqCR7mp5Rr9KnWyhgWX8iTuB7sg7yCyd7yHs 8IqOaDXLqxe/8g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:30 2026 by rpki-client