$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: Jx1Imae3DV8N+4lrqOlt2Z4lwFmTwJwhG4FScnKxMw8= Subject key identifier: 2A:0E:B2:06:E5:A4:9C:82:30:11:64:50:35:7E:34:2B:2E:26:5A:93 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0196C238F3F4E5155758343B5420C8F83A04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0B34 Signing time: Mon 12 May 2025 02:00:34 +0000 Manifest this update: Mon 12 May 2025 02:00:34 +0000 Manifest next update: Tue 13 May 2025 02:00:34 +0000 Files and hashes: 1: 1YZPajybnCjPvo9e6ZEIknxOsVc.roa (hash: 7DyT+f6YqW9hpDXb6w0agZ4XnunJXCtadxyfpuK6CA0=) 2: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=) 3: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=) 4: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 5: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 7: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 8: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: Dewt9c04MFlYB7TJKhXWmc9supTfO01Rykpjy/ktzY8=) 10: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=) 11: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 12: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 13: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 14: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c2:38:f3:f4:e5:15:57:58:34:3b:54:20:c8:f8:3a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: May 12 02:00:34 2025 GMT Not After : May 13 02:00:34 2025 GMT Subject: CN=2a0eb206e5a49c8230116450357e342b2e265a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:88:f9:df:ce:80:37:c8:f0:49:90:f2:12: df:af:e5:67:a5:69:64:fc:0d:7d:ef:64:70:a5:b9: 03:20:bc:50:12:97:2c:39:71:d0:33:e1:48:a8:48: 4a:1b:21:3a:bd:ea:37:15:e9:24:59:5c:38:70:0b: 02:26:de:bd:17:d3:12:61:4f:cf:55:db:4d:c0:c8: b7:e6:02:ad:5c:ee:94:8d:6c:06:28:83:ab:c2:32: 54:bc:31:11:4e:80:45:3c:df:6d:64:47:76:8e:ff: 70:d6:09:c7:ff:07:b8:bd:21:04:24:24:b4:65:f8: 12:02:1e:9d:75:e2:91:df:44:5a:d6:c8:22:91:b5: c4:e6:2e:d6:32:b2:58:bd:b4:e8:cf:a4:f7:6e:6f: 66:82:ea:fa:82:6e:79:a7:db:86:4e:19:4e:26:5a: 84:af:b3:9d:7c:c5:db:c3:cf:69:a9:14:b9:bf:15: 44:04:19:10:92:fb:55:49:06:9f:af:a1:df:e5:7e: d1:4c:0d:41:9f:01:09:bf:ce:88:f1:e8:77:60:f3: fb:c1:98:59:c4:b0:84:a1:09:99:b6:eb:f9:8f:e1: db:d9:b5:e2:5d:dc:50:f0:65:ad:db:57:ef:90:54: de:4a:3a:ed:c7:e1:19:b3:88:c4:20:29:b6:39:5c: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0E:B2:06:E5:A4:9C:82:30:11:64:50:35:7E:34:2B:2E:26:5A:93 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:07:f8:86:3a:14:68:5a:75:7c:ad:b5:9e:b8:4d:97:31:0e: 21:cf:f5:a1:22:fa:9d:84:30:45:b7:b4:ba:ad:c3:ad:45:1f: 46:f2:64:ee:08:16:1f:8f:d0:b6:b6:49:67:7d:8d:e3:7a:31: cf:76:42:f8:49:56:ed:f0:7b:09:84:78:b8:21:56:8e:61:6d: 30:9f:fb:74:5f:1e:7a:53:3c:b7:93:6c:31:9c:fa:42:5a:24: b6:9c:4b:4d:cc:a2:3f:5a:86:77:75:4e:34:48:32:3e:fa:44: f9:74:27:ca:3e:c8:48:69:c6:73:1e:1b:4b:ab:e2:42:b6:26: ef:c9:02:04:7a:51:49:32:5b:e6:17:55:c4:72:d3:85:df:5e: e7:b3:16:46:e6:fb:8e:45:44:c3:c4:92:99:36:a8:3c:3b:8c: 06:75:94:4b:3e:0d:14:28:90:fb:e3:a2:4b:7e:f8:e6:49:89: 3c:69:61:9b:18:12:f1:47:e5:f5:82:4f:a8:0b:08:10:4c:88: 5d:6e:e3:e0:8a:61:e6:26:20:b4:85:51:8f:b4:48:7d:b6:15: 0b:ea:20:4b:0e:55:6d:9d:85:a0:70:f8:e5:75:47:31:ee:20: 5d:99:d3:6d:d6:2f:68:c9:15:a6:4d:46:35:60:86:86:e0:62: e1:f2:ae:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbCOPP05RVXWDQ7VCDI+DoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUwNTEyMDIwMDM0WhcNMjUwNTEzMDIwMDM0WjAzMTEwLwYDVQQD EygyYTBlYjIwNmU1YTQ5YzgyMzAxMTY0NTAzNTdlMzQyYjJlMjY1YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HiI+d/OgDfI8EmQ8hLfr+VnpWlk /A1972RwpbkDILxQEpcsOXHQM+FIqEhKGyE6veo3FekkWVw4cAsCJt69F9MSYU/P VdtNwMi35gKtXO6UjWwGKIOrwjJUvDERToBFPN9tZEd2jv9w1gnH/we4vSEEJCS0 ZfgSAh6ddeKR30Ra1sgikbXE5i7WMrJYvbToz6T3bm9mgur6gm55p9uGThlOJlqE r7OdfMXbw89pqRS5vxVEBBkQkvtVSQafr6Hf5X7RTA1BnwEJv86I8eh3YPP7wZhZ xLCEoQmZtuv5j+Hb2bXiXdxQ8GWt21fvkFTeSjrtx+EZs4jEICm2OVxtswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoOsgblpJyCMBFkUDV+NCsuJlqTMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQf4hjoU aFp1fK21nrhNlzEOIc/1oSL6nYQwRbe0uq3DrUUfRvJk7ggWH4/QtrZJZ32N43ox z3ZC+ElW7fB7CYR4uCFWjmFtMJ/7dF8eelM8t5NsMZz6QloktpxLTcyiP1qGd3VO NEgyPvpE+XQnyj7ISGnGcx4bS6viQrYm78kCBHpRSTJb5hdVxHLThd9e57MWRub7 jkVEw8SSmTaoPDuMBnWUSz4NFCiQ++OiS3745kmJPGlhmxgS8Ufl9YJPqAsIEEyI XW7j4Iph5iYgtIVRj7RIfbYVC+ogSw5VbZ2FoHD45XVHMe4gXZnTbdYvaMkVpk1G NWCGhuBi4fKubA== -----END CERTIFICATE-----Generated at Mon May 12 05:25:04 2025 by rpki-client