$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: tjulnmX+lrS4ywOwk2Gk61UXJm2Pew+gMz1411M0f30= Subject key identifier: 26:51:47:97:FD:2F:2D:EE:4E:DA:26:B0:75:CD:51:E0:F8:5C:09:25 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019789599D57A6EE11FB6543ACAC723E44F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 09D7 Signing time: Thu 19 Jun 2025 18:00:40 +0000 Manifest this update: Thu 19 Jun 2025 18:00:40 +0000 Manifest next update: Fri 20 Jun 2025 18:00:40 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: PKcfyRWhnAR5+tEqV824+LnqwCN6DjUzznvIdPFFVTY=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:89:59:9d:57:a6:ee:11:fb:65:43:ac:ac:72:3e:44:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jun 19 18:00:40 2025 GMT Not After : Jun 20 18:00:40 2025 GMT Subject: CN=26514797fd2f2dee4eda26b075cd51e0f85c0925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b4:dd:95:3c:e0:1f:79:2d:a7:79:e3:bf:27: 88:88:c8:ef:a8:4c:af:7a:eb:8c:cb:ea:6c:b4:69: 84:f5:19:a3:cf:53:7c:40:d7:d0:4d:01:77:fc:42: b6:90:44:cd:d7:3a:9a:3b:62:8f:dd:12:e9:38:eb: f9:18:2e:f6:37:49:94:58:67:89:87:33:ef:06:5b: 31:4b:b7:f5:b7:29:43:22:25:e8:78:5a:57:03:39: 63:40:08:f1:ff:9a:d3:db:aa:c0:99:34:c2:73:04: d5:1e:1e:e9:15:11:58:e4:a5:2b:76:55:87:e8:e0: b6:c2:c5:9c:56:0a:c1:3c:7a:5d:19:a7:4f:60:cb: 6c:d2:8e:72:26:09:33:fa:43:45:a9:a7:12:11:91: b9:d1:02:cc:9c:98:c5:4d:70:8c:57:54:77:14:c3: da:b1:bd:43:1d:6c:9e:f4:81:55:57:3b:3e:51:c1: 7c:0d:1f:f3:b8:35:44:6f:c3:20:34:ca:ca:67:dd: 21:11:2e:45:fe:9c:01:3f:23:70:14:64:2a:15:b1: 46:5a:56:37:e8:4e:e1:00:18:cd:d6:10:f9:e2:c8: 49:32:e9:76:c0:21:4d:f2:a0:4e:14:37:6f:44:51: 55:75:4b:83:2b:21:16:63:10:75:ed:cf:d7:d6:0f: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:51:47:97:FD:2F:2D:EE:4E:DA:26:B0:75:CD:51:E0:F8:5C:09:25 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:64:af:62:4b:3a:6a:f2:52:bf:05:e3:46:80:45:c9:76:33: 86:53:1a:61:f8:8b:36:bf:17:2f:99:ff:dc:88:ac:af:1d:63: 76:a7:04:82:c5:5c:36:61:b3:d4:a1:10:3c:04:ce:f4:6e:36: fd:15:65:0b:00:15:cf:87:85:24:c6:f0:41:13:79:19:14:77: 3f:07:43:e8:8b:a1:f3:e3:de:0c:9b:ca:c8:25:59:7d:9e:f5: c5:83:dd:a7:62:7d:c6:13:cf:1c:29:b2:9b:80:fa:67:34:60: 4b:f3:36:5f:9a:62:aa:e3:d4:25:6d:e4:87:18:0a:95:cc:b6: e9:55:ac:41:b2:b8:62:ec:d2:c4:6c:e1:d5:86:5f:14:b1:ba: 2d:6e:9e:94:4d:f1:67:65:b6:27:7c:8f:e9:e2:c4:5e:f4:db: 10:2f:7f:7c:32:5b:70:e9:ba:51:b4:18:e9:8b:3d:e3:98:f1: 9a:da:fb:cd:fe:81:ac:16:8a:9b:0f:66:ef:c5:52:19:fb:b7: 56:6a:41:40:0c:0b:21:1d:0c:6e:a6:34:3a:86:bc:04:42:85: bf:35:46:5d:c5:b5:b8:29:6c:81:e1:b2:33:95:70:8d:99:dd: 5d:d4:bb:7f:a4:af:b5:e3:60:9e:d6:e9:78:6a:bf:a0:a2:a0: ce:a7:92:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeJWZ1Xpu4R+2VDrKxyPkT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwNjE5MTgwMDQwWhcNMjUwNjIwMTgwMDQwWjAzMTEwLwYDVQQD EygyNjUxNDc5N2ZkMmYyZGVlNGVkYTI2YjA3NWNkNTFlMGY4NWMwOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bTdlTzgH3ktp3njvyeIiMjvqEyv euuMy+pstGmE9Rmjz1N8QNfQTQF3/EK2kETN1zqaO2KP3RLpOOv5GC72N0mUWGeJ hzPvBlsxS7f1tylDIiXoeFpXAzljQAjx/5rT26rAmTTCcwTVHh7pFRFY5KUrdlWH 6OC2wsWcVgrBPHpdGadPYMts0o5yJgkz+kNFqacSEZG50QLMnJjFTXCMV1R3FMPa sb1DHWye9IFVVzs+UcF8DR/zuDVEb8MgNMrKZ90hES5F/pwBPyNwFGQqFbFGWlY3 6E7hABjN1hD54shJMul2wCFN8qBOFDdvRFFVdUuDKyEWYxB17c/X1g98oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZRR5f9Ly3uTtomsHXNUeD4XAklMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA22SvYks6 avJSvwXjRoBFyXYzhlMaYfiLNr8XL5n/3Iisrx1jdqcEgsVcNmGz1KEQPATO9G42 /RVlCwAVz4eFJMbwQRN5GRR3PwdD6Iuh8+PeDJvKyCVZfZ71xYPdp2J9xhPPHCmy m4D6ZzRgS/M2X5piquPUJW3khxgKlcy26VWsQbK4YuzSxGzh1YZfFLG6LW6elE3x Z2W2J3yP6eLEXvTbEC9/fDJbcOm6UbQY6Ys945jxmtr7zf6BrBaKmw9m78VSGfu3 VmpBQAwLIR0MbqY0Ooa8BEKFvzVGXcW1uClsgeGyM5VwjZndXdS7f6SvteNgntbp eGq/oKKgzqeSJw== -----END CERTIFICATE-----Generated at Fri Jun 20 01:43:24 2025 by rpki-client