$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: gFaizVD/FOQnTGWvBsYvoZ4aNutPH8sJH37T5fMpcbI= Subject key identifier: 00:F1:71:AC:97:FD:40:04:3C:67:98:ED:92:3D:2A:E2:9C:93:E9:CC Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 01987306998C0565C834C8B78DB9D0C72EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 1579 Signing time: Mon 04 Aug 2025 03:01:08 +0000 Manifest this update: Mon 04 Aug 2025 03:01:08 +0000 Manifest next update: Tue 05 Aug 2025 03:01:08 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 4: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=) 5: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 6: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: /yX4B5TJHmz+BS1NY9EThPZf7sysLGaQb6SUWYj7pUg=) 7: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 8: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 9: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 10: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 11: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=) 12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:06:99:8c:05:65:c8:34:c8:b7:8d:b9:d0:c7:2e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Aug 4 03:01:08 2025 GMT Not After : Aug 5 03:01:08 2025 GMT Subject: CN=00f171ac97fd40043c6798ed923d2ae29c93e9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:91:37:2c:ba:98:05:69:0d:18:d8:b9:12: 7d:22:ea:3d:c2:4a:b6:6c:c9:12:4f:0b:cd:8f:09: 36:79:60:52:be:63:fa:4c:de:8a:88:e8:09:4a:5e: bc:ec:3b:1b:95:96:f1:bb:08:f0:1d:5e:2b:3d:0b: 14:32:41:70:da:ce:fe:ba:36:fb:01:f1:d8:f0:84: fe:70:f5:e5:12:82:d1:68:5e:cf:11:45:03:15:d9: fb:f1:95:1d:24:41:71:d2:5a:25:fd:ce:5c:df:ce: 95:99:0c:56:27:3e:d6:12:41:a3:d4:2b:c7:2c:2d: af:a9:79:c4:8c:ea:99:00:d6:b4:19:4e:bb:22:67: ad:fd:cd:87:c7:de:f7:a0:3a:c7:24:20:8c:20:79: c2:41:e5:1e:92:91:ed:2b:b4:ac:1c:af:77:8d:d6: d3:09:2d:24:4e:cf:0d:d9:5e:06:31:e6:97:d6:c0: 8c:ab:3c:20:8e:b5:ae:96:47:9b:1d:ff:1f:7b:eb: af:89:a0:a9:10:d0:77:fc:40:fc:09:b3:f7:0d:59: f7:76:b5:7b:81:f0:ae:99:0c:0c:32:2a:d2:0e:d4: 59:ea:cf:77:d2:44:55:12:c0:b3:a5:88:cb:9f:58: 08:05:30:39:aa:8c:7f:bc:9b:df:ba:9e:2d:2e:23: cb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F1:71:AC:97:FD:40:04:3C:67:98:ED:92:3D:2A:E2:9C:93:E9:CC X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4f:c9:3e:09:74:ad:7f:95:93:ef:4c:7f:e7:c8:04:b0:70: 40:68:b5:8c:b3:f6:3b:f7:90:b1:6b:eb:a1:dd:15:18:31:15: bf:c9:ca:b6:1d:cf:fe:55:72:09:52:3b:96:8a:64:8b:c6:88: c8:38:95:94:56:c8:0a:3f:a9:6b:d5:1f:2e:ba:1d:22:d6:9c: 46:94:ba:61:62:d5:21:df:5c:2b:a5:b4:8e:6d:28:88:27:09: 77:f6:48:96:3c:c8:8e:df:43:1a:74:92:68:c2:c6:2e:c6:3d: 34:41:28:dc:5b:b7:cf:9b:71:97:46:71:4c:78:e4:f5:c0:4e: a6:93:7a:98:4a:bd:9e:09:33:01:17:7b:ae:24:0d:2b:56:64: 1d:2f:07:e7:f5:61:1e:63:6f:d3:17:26:3d:db:8a:5b:08:45: 72:26:85:b5:cc:a8:b7:15:29:ce:d3:7d:1b:f1:bf:0b:7c:d6: ef:2c:65:1d:a7:86:ab:8f:b8:7a:8e:79:92:75:08:b9:bc:99: 0f:e8:bb:87:f2:5d:af:e5:b6:11:7d:dc:cc:88:80:b8:fd:f5: 24:75:8f:70:69:ba:f7:03:3a:17:27:2e:b8:66:34:9c:1c:55: 11:7b:7f:eb:77:3b:76:66:5f:f2:5a:39:46:05:a7:fe:30:c3: 94:d8:3b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzBpmMBWXINMi3jbnQxy7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUwODA0MDMwMTA4WhcNMjUwODA1MDMwMTA4WjAzMTEwLwYDVQQD EygwMGYxNzFhYzk3ZmQ0MDA0M2M2Nzk4ZWQ5MjNkMmFlMjljOTNlOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aWRNyy6mAVpDRjYuRJ9Iuo9wkq2 bMkSTwvNjwk2eWBSvmP6TN6KiOgJSl687DsblZbxuwjwHV4rPQsUMkFw2s7+ujb7 AfHY8IT+cPXlEoLRaF7PEUUDFdn78ZUdJEFx0lol/c5c386VmQxWJz7WEkGj1CvH LC2vqXnEjOqZANa0GU67Imet/c2Hx973oDrHJCCMIHnCQeUekpHtK7SsHK93jdbT CS0kTs8N2V4GMeaX1sCMqzwgjrWulkebHf8fe+uviaCpENB3/ED8CbP3DVn3drV7 gfCumQwMMirSDtRZ6s930kRVEsCzpYjLn1gIBTA5qox/vJvfup4tLiPLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADxcayX/UAEPGeY7ZI9KuKck+nMMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk/JPgl0 rX+Vk+9Mf+fIBLBwQGi1jLP2O/eQsWvrod0VGDEVv8nKth3P/lVyCVI7lopki8aI yDiVlFbICj+pa9UfLrodItacRpS6YWLVId9cK6W0jm0oiCcJd/ZIljzIjt9DGnSS aMLGLsY9NEEo3Fu3z5txl0ZxTHjk9cBOppN6mEq9ngkzARd7riQNK1ZkHS8H5/Vh HmNv0xcmPduKWwhFciaFtcyotxUpztN9G/G/C3zW7yxlHaeGq4+4eo55knUIubyZ D+i7h/Jdr+W2EX3czIiAuP31JHWPcGm69wM6FycuuGY0nBxVEXt/63c7dmZf8lo5 RgWn/jDDlNg7dw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:04:14 2025 by rpki-client