$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: CSJIRlqP869xVqjkpTyeiKr+ygXrLA+O51x9ZTv3JZ0= Subject key identifier: DE:0D:62:31:8F:19:69:E2:3F:B3:7D:23:1C:6B:EB:21:F5:8D:3D:D7 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 0199FCFD20D752F00DDD1BE63125BD722A99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0CE2 Signing time: Sun 19 Oct 2025 15:01:11 +0000 Manifest this update: Sun 19 Oct 2025 15:01:11 +0000 Manifest next update: Mon 20 Oct 2025 15:01:11 +0000 Files and hashes: 1: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=) 2: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=) 3: PCoVAxyqz9TAN_OHc9-rGOoSoDc.roa (hash: kmwgradFR+BPDpRCPleGl6YoiLf1qQrMjZOX3usBZX4=) 4: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=) 5: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=) 6: WjXiOPfv4uGAwR5BI6A1tRRTDVc.roa (hash: L/XRv6LVY4HIRmeMRXyHEL+O2bAs0KfexcOko34uJ6w=) 7: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: zT7ZencVY0nTJSLqxKgtzt4B9iupVoBEdvd3E0WWr8I=) 8: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=) 9: qTTergxDeV9PAn74EwkjtHgbn2o.roa (hash: LFYDt+uYMND5224RZAEk1RWxDOCG+EkRnKKIkEZ5Cic=) 10: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=) 11: thHe50oP3aD4DeIzaKHwDUEfUjk.roa (hash: LIxx/2ay6AWgn4/0xKTrdYZFW/BS/DQAVegSd9MMNKc=) 12: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:20:d7:52:f0:0d:dd:1b:e6:31:25:bd:72:2a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Oct 19 15:01:11 2025 GMT Not After : Oct 20 15:01:11 2025 GMT Subject: CN=de0d62318f1969e23fb37d231c6beb21f58d3dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:eb:e1:2c:96:58:13:d8:6c:68:d0:22:2a: 1a:8a:19:ab:b4:bd:de:35:38:03:69:a8:ba:97:b7: ce:2e:08:00:2b:65:a6:8d:9f:d3:e6:fc:6c:98:03: 35:6a:f1:e7:8a:3e:c6:96:68:89:ac:61:62:73:87: bc:cc:85:81:f6:93:08:3e:28:78:00:22:30:f3:7b: 0d:71:90:fd:81:a5:0b:f4:c7:e8:48:20:8f:92:22: ed:dc:d6:92:94:3b:2f:dc:b4:5c:09:76:7b:92:92: c9:fa:b1:64:ff:9c:d1:07:5d:a0:1b:8a:70:1d:28: a4:8a:2a:b8:14:91:a4:8a:0a:2a:b9:46:91:c4:26: 01:16:98:53:f7:c6:9e:38:d1:19:1f:be:93:e5:41: 63:d0:01:21:f3:73:5f:e4:d9:7e:ea:71:97:a5:40: f3:c3:f8:9b:77:7c:ba:ea:13:b4:89:3d:e3:23:0e: 9d:88:db:b6:17:38:e9:db:db:74:a8:e3:a6:57:e3: bf:f9:b0:c0:b0:76:ba:55:cf:af:19:b7:fc:79:2e: 3b:f7:61:a6:de:4f:99:6f:73:a5:cb:c6:00:dd:6a: b0:fe:4f:9a:53:cc:44:3a:9c:b2:b1:7a:94:63:da: 6d:07:78:fe:5e:d1:2c:8f:e7:76:df:4a:b0:fc:f2: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0D:62:31:8F:19:69:E2:3F:B3:7D:23:1C:6B:EB:21:F5:8D:3D:D7 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:56:97:74:41:b8:56:73:f1:bf:17:95:73:ce:0d:14:5c:7e: 60:d8:8e:b3:d4:18:c2:71:d6:02:0c:17:a1:b2:b2:3e:b2:77: e3:2e:01:35:da:15:0e:c9:43:31:aa:1c:fc:33:d2:e0:48:74: bc:7c:58:df:63:62:97:97:b2:0d:b1:84:3e:f1:76:79:8a:00: d5:23:2c:e5:2b:b6:da:e8:3b:42:1c:d6:06:28:ae:88:40:f6: 0b:02:83:31:ae:d1:7c:9a:6f:87:c7:23:a0:bf:6d:20:60:a9: cf:74:7f:0c:81:51:98:07:1a:22:4f:de:a0:e2:d9:8f:77:7c: cf:c8:a4:9c:4d:65:3b:27:58:a2:9b:51:d3:6b:af:5e:20:6f: 4e:4e:75:82:e1:1b:92:ae:78:e6:e5:81:98:f0:85:22:83:36: 1e:b6:90:16:9d:e3:e7:4a:f1:b3:44:57:fc:0a:65:60:29:53: 99:5e:fa:15:b2:ec:6c:44:d2:f4:62:ae:9f:6d:d1:ac:99:4a: e3:75:14:a6:ba:73:0f:45:4f:53:44:c0:f3:0c:73:94:a0:aa: 8c:53:f5:2b:b0:26:b3:66:a2:33:d9:57:2e:d7:c4:1e:16:c9: 8b:8c:0a:10:d1:77:91:b5:44:8e:9d:04:cf:b8:94:05:3d:19: e3:c4:14:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/SDXUvAN3RvmMSW9ciqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMDE5MTUwMTExWhcNMjUxMDIwMTUwMTExWjAzMTEwLwYDVQQD EyhkZTBkNjIzMThmMTk2OWUyM2ZiMzdkMjMxYzZiZWIyMWY1OGQzZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY7r4SyWWBPYbGjQIioaihmrtL3e NTgDaai6l7fOLggAK2WmjZ/T5vxsmAM1avHnij7GlmiJrGFic4e8zIWB9pMIPih4 ACIw83sNcZD9gaUL9MfoSCCPkiLt3NaSlDsv3LRcCXZ7kpLJ+rFk/5zRB12gG4pw HSikiiq4FJGkigoquUaRxCYBFphT98aeONEZH76T5UFj0AEh83Nf5Nl+6nGXpUDz w/ibd3y66hO0iT3jIw6diNu2Fzjp29t0qOOmV+O/+bDAsHa6Vc+vGbf8eS4792Gm 3k+Zb3Oly8YA3Wqw/k+aU8xEOpyysXqUY9ptB3j+XtEsj+d230qw/PItJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4NYjGPGWniP7N9Ixxr6yH1jT3XMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1aXdEG4 VnPxvxeVc84NFFx+YNiOs9QYwnHWAgwXobKyPrJ34y4BNdoVDslDMaoc/DPS4Eh0 vHxY32Nil5eyDbGEPvF2eYoA1SMs5Su22ug7QhzWBiiuiED2CwKDMa7RfJpvh8cj oL9tIGCpz3R/DIFRmAcaIk/eoOLZj3d8z8iknE1lOydYoptR02uvXiBvTk51guEb kq545uWBmPCFIoM2HraQFp3j50rxs0RX/AplYClTmV76FbLsbETS9GKun23RrJlK 43UUprpzD0VPU0TA8wxzlKCqjFP1K7Ams2aiM9lXLtfEHhbJi4wKENF3kbVEjp0E z7iUBT0Z48QUwA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:47 2025 by rpki-client