$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: VLHZWrOcm8B6G9ruuixtSt18AARgjOFIwDUqV5WPw6I= Subject key identifier: 13:47:D6:DA:6A:9E:50:09:50:96:30:8F:05:AC:6B:D1:43:84:7C:07 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 01987DF78D30DDDCF91816DBED83DF4A48A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 1520 Signing time: Wed 06 Aug 2025 06:00:32 +0000 Manifest this update: Wed 06 Aug 2025 06:00:32 +0000 Manifest next update: Thu 07 Aug 2025 06:00:32 +0000 Files and hashes: 1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=) 2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=) 3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=) 4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=) 5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=) 6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: GvPCF8PWs6cr9PHUT/TjHG5IG9gGvfghN3KnODSb1Xs=) 8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=) 9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=) 10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=) 11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:f7:8d:30:dd:dc:f9:18:16:db:ed:83:df:4a:48:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Aug 6 06:00:32 2025 GMT Not After : Aug 7 06:00:32 2025 GMT Subject: CN=1347d6da6a9e50095096308f05ac6bd143847c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:a2:66:f6:42:bd:f7:e4:70:f8:b9:2d:44: 4f:22:be:c4:02:b5:9a:7b:7e:d4:a7:76:39:aa:18: 28:1b:ea:51:43:0e:a8:a7:bb:a4:75:70:5a:19:a7: 18:e0:14:a9:a7:73:dd:8f:39:04:b0:c8:b6:d2:ac: d3:8b:7b:09:a4:e3:21:2c:c3:94:6e:cf:54:55:d5: 27:d3:03:5e:08:10:f6:8d:e1:49:b5:e6:8d:0b:4c: 9c:db:01:14:79:3d:4c:f2:bf:ae:a8:77:c5:4f:71: e3:fb:a7:68:82:97:d0:f4:2f:08:af:f0:b3:b7:c6: 1e:1f:00:14:af:9e:18:c8:a1:68:83:ac:da:00:06: 59:50:9f:b2:7b:4b:ef:a0:04:18:2a:58:73:8b:1a: 4b:5d:5b:ad:8f:bc:a2:dc:41:4a:02:a3:52:b5:0f: 5e:a3:2e:5b:80:be:a5:ea:58:50:d2:fa:e6:8b:c2: b7:7c:b8:77:d4:21:0b:1f:7e:13:46:87:e8:a4:88: bc:ce:8c:05:be:f0:b6:bf:c5:e3:a0:a2:d0:0e:67: e1:5d:c5:4f:7b:6d:1e:a1:a9:74:d6:05:65:ed:a3: df:64:29:7a:f7:4a:86:64:3e:5c:07:7c:c6:45:57: bc:ff:d9:07:0a:1a:06:80:6a:fe:52:ca:5b:8b:d7: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:47:D6:DA:6A:9E:50:09:50:96:30:8F:05:AC:6B:D1:43:84:7C:07 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e4:9b:4d:d0:ac:e0:56:54:fd:5f:fd:cd:68:9a:36:c3:c4: 63:3c:36:0a:ab:28:31:e8:6c:43:d8:ed:d8:48:ed:85:9e:13: 87:ae:47:40:5e:02:f8:32:be:c7:2e:8a:03:87:4a:03:c4:ca: 00:be:e6:83:df:db:31:ba:a7:22:9a:43:16:18:ea:c9:ea:1f: d7:0b:ed:1a:7f:e3:91:d8:90:5b:12:44:4a:3b:5d:a5:7e:b7: de:b7:d0:31:18:0d:3f:03:54:64:c7:a7:63:e4:49:88:31:d9: 42:61:2c:61:98:6b:55:dd:09:f1:ef:2c:42:28:56:c4:49:49: 41:6e:02:2d:75:72:6d:64:af:09:6b:95:2b:ff:14:f5:76:73: 46:32:73:02:b3:4e:a2:2e:dc:4f:e6:7a:8e:ee:19:83:0a:00: b2:20:a5:18:52:17:fe:7d:9f:b2:22:bd:2c:a1:37:fb:e7:39: e2:f9:39:0c:e8:d2:40:39:09:bd:5c:3b:cb:e0:7a:e1:78:8b: 99:e6:31:73:7d:d6:b6:ed:b0:36:fa:0c:6f:2b:1b:7b:3c:0f: e1:aa:26:12:27:b0:66:88:88:81:20:d3:63:1f:59:7e:3d:d2: 4e:52:64:de:71:43:2f:f4:01:2d:a2:9a:d4:b7:e6:4c:8f:f5: 6d:c7:68:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9940w3dz5GBbb7YPfSkiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjUwODA2MDYwMDMyWhcNMjUwODA3MDYwMDMyWjAzMTEwLwYDVQQD EygxMzQ3ZDZkYTZhOWU1MDA5NTA5NjMwOGYwNWFjNmJkMTQzODQ3YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspSiZvZCvffkcPi5LURPIr7EArWa e37Up3Y5qhgoG+pRQw6op7ukdXBaGacY4BSpp3PdjzkEsMi20qzTi3sJpOMhLMOU bs9UVdUn0wNeCBD2jeFJteaNC0yc2wEUeT1M8r+uqHfFT3Hj+6dogpfQ9C8Ir/Cz t8YeHwAUr54YyKFog6zaAAZZUJ+ye0vvoAQYKlhzixpLXVutj7yi3EFKAqNStQ9e oy5bgL6l6lhQ0vrmi8K3fLh31CELH34TRofopIi8zowFvvC2v8XjoKLQDmfhXcVP e20eoal01gVl7aPfZCl690qGZD5cB3zGRVe8/9kHChoGgGr+Uspbi9dKIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNH1tpqnlAJUJYwjwWsa9FDhHwHMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOSbTdCs 4FZU/V/9zWiaNsPEYzw2CqsoMehsQ9jt2EjthZ4Th65HQF4C+DK+xy6KA4dKA8TK AL7mg9/bMbqnIppDFhjqyeof1wvtGn/jkdiQWxJESjtdpX633rfQMRgNPwNUZMen Y+RJiDHZQmEsYZhrVd0J8e8sQihWxElJQW4CLXVybWSvCWuVK/8U9XZzRjJzArNO oi7cT+Z6ju4ZgwoAsiClGFIX/n2fsiK9LKE3++c54vk5DOjSQDkJvVw7y+B64XiL meYxc33Wtu2wNvoMbysbezwP4aomEiewZoiIgSDTYx9Zfj3STlJk3nFDL/QBLaKa 1LfmTI/1bcdoWQ== -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:50 2025 by rpki-client