$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: 3GbZChWTa+q5N/EAJFYICQostO9kL2T1t9OMCwHmzQE= Subject key identifier: D9:26:60:17:C9:5E:57:25:7E:01:BF:89:73:2E:5F:10:F1:72:A1:76 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019E1ED9F39BE2DF9BCDEB44C3C9040FF315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0F0B Signing time: Wed 13 May 2026 01:01:00 +0000 Manifest this update: Wed 13 May 2026 01:01:00 +0000 Manifest next update: Thu 14 May 2026 01:01:00 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: vIbWjbSNeTRCK6rpv8XKR1I1P4DoMGJRmWSsoc8yZow=) 7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:d9:f3:9b:e2:df:9b:cd:eb:44:c3:c9:04:0f:f3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: May 13 01:01:00 2026 GMT Not After : May 14 01:01:00 2026 GMT Subject: CN=d9266017c95e57257e01bf89732e5f10f172a176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:46:e0:e7:8b:b5:d8:c5:9a:21:6b:52:b7: 7a:8f:65:b9:fe:01:27:28:1a:35:16:24:85:12:f2: 92:91:05:de:34:ae:38:f2:db:ad:87:71:f5:72:25: da:ab:a6:ce:b8:00:6b:52:2e:81:18:6b:e0:4f:8f: 47:44:ef:23:40:26:f1:ee:43:62:fa:45:fb:fd:1f: fd:1b:35:10:bd:b4:32:74:6d:59:b7:6a:a8:47:17: f9:be:44:ec:8d:a9:33:61:7d:60:c4:6d:4a:1f:e1: be:31:23:0c:40:28:0a:f3:ba:9d:19:46:78:48:9c: 0d:18:00:c9:41:41:14:e4:09:e0:bb:e9:25:0a:06: 3f:10:1b:19:e2:1b:98:71:87:9c:28:5b:d4:47:9e: 88:86:39:91:e0:6c:d4:4f:a2:12:50:2c:52:85:ff: 78:64:51:7e:43:00:3f:2a:26:c3:34:62:59:91:56: fc:fc:48:2f:8d:27:3b:77:82:d9:c0:c8:1c:7f:5e: 1a:34:95:0c:f2:ab:29:d9:cf:82:5e:ca:d2:2f:b0: d4:e9:13:91:69:6b:ab:dc:74:e6:7f:fd:d7:74:a2: 26:53:a6:ef:ff:76:21:80:f4:66:62:ba:a0:aa:d7: ae:3c:bc:db:9d:68:82:31:35:87:5d:3c:40:7c:14: 2c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:26:60:17:C9:5E:57:25:7E:01:BF:89:73:2E:5F:10:F1:72:A1:76 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:33:99:75:a4:c0:5b:81:43:6e:31:8b:e3:6e:3a:97:93:4f: 69:bb:f8:0f:2f:c5:ef:b0:34:65:20:27:5a:56:45:b3:b4:5c: 73:a2:89:35:74:25:18:d5:11:4b:29:4c:e4:64:7b:7e:65:ff: bd:f5:f8:43:1b:b9:a2:fb:c0:af:ea:6c:cd:3f:a3:be:84:29: 6c:9b:d6:82:73:c4:5a:b4:b2:66:41:96:c5:1a:e0:42:6d:4e: 7a:c3:95:6b:68:0f:3d:a3:6c:be:a3:87:e1:86:b1:42:93:0d: 97:fc:c1:fe:c6:12:c5:cd:e5:c7:c3:e8:5f:fb:57:43:65:ea: e5:1e:16:56:98:69:3d:5b:f8:19:15:9a:34:0c:6b:24:71:1d: a9:68:17:47:08:80:ec:6e:55:8b:d7:a2:d2:dd:22:d4:00:9d: 37:5b:34:1f:9c:c7:b9:c4:87:a9:6b:62:0e:eb:66:b7:a7:08: 67:14:db:39:a4:d0:4b:8e:a8:27:6b:8e:5c:53:3c:1c:95:68: 64:02:32:35:ce:cc:63:31:59:e1:82:31:85:85:b5:87:f1:f8: 71:e1:a8:b3:5d:84:63:81:d7:19:76:21:b5:cc:1f:a8:69:b2: ab:81:d1:02:36:82:9c:ec:f5:01:ea:7e:78:26:d2:ea:f9:8e: 06:df:05:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4e2fOb4t+bzetEw8kED/MVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwNTEzMDEwMTAwWhcNMjYwNTE0MDEwMTAwWjAzMTEwLwYDVQQD EyhkOTI2NjAxN2M5NWU1NzI1N2UwMWJmODk3MzJlNWYxMGYxNzJhMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gRG4OeLtdjFmiFrUrd6j2W5/gEn KBo1FiSFEvKSkQXeNK448tuth3H1ciXaq6bOuABrUi6BGGvgT49HRO8jQCbx7kNi +kX7/R/9GzUQvbQydG1Zt2qoRxf5vkTsjakzYX1gxG1KH+G+MSMMQCgK87qdGUZ4 SJwNGADJQUEU5Angu+klCgY/EBsZ4huYcYecKFvUR56IhjmR4GzUT6ISUCxShf94 ZFF+QwA/KibDNGJZkVb8/EgvjSc7d4LZwMgcf14aNJUM8qsp2c+CXsrSL7DU6ROR aWur3HTmf/3XdKImU6bv/3YhgPRmYrqgqteuPLzbnWiCMTWHXTxAfBQs3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkmYBfJXlclfgG/iXMuXxDxcqF2MB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATOZdaTA W4FDbjGL4246l5NPabv4Dy/F77A0ZSAnWlZFs7Rcc6KJNXQlGNURSylM5GR7fmX/ vfX4Qxu5ovvAr+pszT+jvoQpbJvWgnPEWrSyZkGWxRrgQm1OesOVa2gPPaNsvqOH 4YaxQpMNl/zB/sYSxc3lx8PoX/tXQ2Xq5R4WVphpPVv4GRWaNAxrJHEdqWgXRwiA 7G5Vi9ei0t0i1ACdN1s0H5zHucSHqWtiDutmt6cIZxTbOaTQS46oJ2uOXFM8HJVo ZAIyNc7MYzFZ4YIxhYW1h/H4ceGos12EY4HXGXYhtcwfqGmyq4HRAjaCnOz1Aep+ eCbS6vmOBt8FeQ== -----END CERTIFICATE-----Generated at Wed May 13 07:59:03 2026 by rpki-client