$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: FCgXY/QBxMsX0ZifVnckYyzeiXMRTsm34ZYfSDWo+x8= Subject key identifier: 1F:0C:F3:AD:4F:AF:B4:7C:FD:3A:86:17:0E:5C:66:A8:81:90:32:52 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0197C048D959ABA3D679917AB08818F07C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0BB8 Signing time: Mon 30 Jun 2025 10:01:29 +0000 Manifest this update: Mon 30 Jun 2025 10:01:29 +0000 Manifest next update: Tue 01 Jul 2025 10:01:29 +0000 Files and hashes: 1: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=) 2: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=) 3: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 4: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 5: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 7: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 8: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: PMJPYFDliSnOvSEY+6kEWdJ+lFTIIwy/L6osyRE1/48=) 10: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=) 11: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 12: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 14: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 15: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c0:48:d9:59:ab:a3:d6:79:91:7a:b0:88:18:f0:7c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jun 30 10:01:29 2025 GMT Not After : Jul 1 10:01:29 2025 GMT Subject: CN=1f0cf3ad4fafb47cfd3a86170e5c66a881903252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:50:f4:b8:82:0f:f0:d5:8b:3a:0b:dd:d4: c3:83:cd:2b:eb:0c:e6:2e:44:cb:0c:66:a0:9d:98: 61:55:1f:5f:88:b6:7c:d9:b9:95:13:51:0f:c9:81: d8:f6:4a:86:37:27:80:bf:72:98:b8:3f:76:b5:04: 1f:b2:ad:6a:bf:a0:4e:52:09:b6:c3:d4:48:2a:2d: 5e:ef:d0:51:7a:fa:87:4a:56:50:8e:1d:b4:36:78: d4:ec:29:57:ff:5a:f2:93:94:cf:02:3b:6c:62:d7: b6:0c:2f:c9:b6:2f:ac:c6:8b:67:35:50:25:83:7d: de:73:87:c8:5a:91:96:e0:4d:6e:39:c3:c0:23:80: 07:de:50:8d:6a:84:eb:13:c0:55:6e:25:bf:b0:74: 1e:38:fd:c0:b0:d5:a9:5c:07:71:04:8d:fd:ee:30: 43:47:40:8a:41:5a:50:36:b8:20:0a:cf:9d:70:8d: 43:6a:bb:8a:d3:b4:7f:1c:fc:fc:ec:d3:b3:84:80: 0b:e7:68:a8:a8:1f:d2:51:5c:96:26:17:2e:ff:18: 2e:f9:22:1c:1f:ee:70:09:7f:dc:59:6c:83:58:46: 6a:a4:4a:3a:2a:da:21:76:4e:73:a8:e9:1f:94:3c: 6e:35:78:0c:11:57:e3:52:1c:00:63:f5:98:72:85: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0C:F3:AD:4F:AF:B4:7C:FD:3A:86:17:0E:5C:66:A8:81:90:32:52 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:19:71:a6:56:a6:01:3c:19:69:e1:b5:4f:9b:80:24:01:c3: 4f:ff:6f:c2:d7:0a:f0:32:47:62:5d:d9:5c:66:04:7b:e7:32: 0c:61:d9:08:4a:74:54:1f:35:3a:af:b4:c2:71:46:3a:26:7c: 43:1a:ff:15:0b:9c:45:98:35:4f:6a:69:2d:73:77:3f:5d:c1: 22:31:b5:27:3a:1b:35:8c:3b:0b:7c:fe:56:15:fb:30:d7:85: 1e:61:32:14:f5:28:42:5a:91:5c:00:4a:c6:c3:95:41:f9:bd: bc:00:96:74:74:7c:aa:b7:ab:5b:5c:79:7a:8e:a2:32:5b:4c: 64:82:dd:72:5a:26:9b:81:3e:51:e2:f6:33:ff:8a:8b:bd:c7: aa:30:cf:71:e5:29:8f:51:d1:6d:1f:be:5c:62:1e:50:e3:10: 0d:b8:34:c7:87:cb:4e:d9:81:a8:42:b7:61:e0:00:d9:e5:75: b2:ab:09:2e:c1:3a:80:88:e6:0c:bd:77:f0:fd:45:9c:3d:5f: aa:f0:5b:91:9a:5b:3c:76:4f:51:7d:2c:53:16:e6:74:33:6d: 17:32:ba:fb:66:f0:bb:71:a2:c9:e4:da:27:45:37:6b:41:2f: 7d:ff:05:67:a0:81:13:e8:4e:74:d0:d8:f9:ca:bf:3f:58:c8: 06:12:7f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfASNlZq6PWeZF6sIgY8HxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwNjMwMTAwMTI5WhcNMjUwNzAxMTAwMTI5WjAzMTEwLwYDVQQD EygxZjBjZjNhZDRmYWZiNDdjZmQzYTg2MTcwZTVjNjZhODgxOTAzMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIRQ9LiCD/DVizoL3dTDg80r6wzm LkTLDGagnZhhVR9fiLZ82bmVE1EPyYHY9kqGNyeAv3KYuD92tQQfsq1qv6BOUgm2 w9RIKi1e79BRevqHSlZQjh20NnjU7ClX/1ryk5TPAjtsYte2DC/Jti+sxotnNVAl g33ec4fIWpGW4E1uOcPAI4AH3lCNaoTrE8BVbiW/sHQeOP3AsNWpXAdxBI397jBD R0CKQVpQNrggCs+dcI1DaruK07R/HPz87NOzhIAL52ioqB/SUVyWJhcu/xgu+SIc H+5wCX/cWWyDWEZqpEo6Ktohdk5zqOkflDxuNXgMEVfjUhwAY/WYcoVGOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8M861Pr7R8/TqGFw5cZqiBkDJSMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhlxplam ATwZaeG1T5uAJAHDT/9vwtcK8DJHYl3ZXGYEe+cyDGHZCEp0VB81Oq+0wnFGOiZ8 Qxr/FQucRZg1T2ppLXN3P13BIjG1JzobNYw7C3z+VhX7MNeFHmEyFPUoQlqRXABK xsOVQfm9vACWdHR8qrerW1x5eo6iMltMZILdclomm4E+UeL2M/+Ki73HqjDPceUp j1HRbR++XGIeUOMQDbg0x4fLTtmBqEK3YeAA2eV1sqsJLsE6gIjmDL138P1FnD1f qvBbkZpbPHZPUX0sUxbmdDNtFzK6+2bwu3GiyeTaJ0U3a0Evff8FZ6CBE+hOdNDY +cq/P1jIBhJ/Xw== -----END CERTIFICATE-----Generated at Mon Jun 30 15:07:51 2025 by rpki-client