$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: URuU8qmFQIJG0VpzKTz5uUBmAwJ/62ZKOxrIyzdUpOU= Subject key identifier: EA:07:A9:88:22:F8:1C:BE:76:CE:EE:E6:84:20:EE:ED:F7:B2:D0:6E Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019893DB00F2B02F4EBE2E535B13CFFA631D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0A61 Signing time: Sun 10 Aug 2025 12:01:00 +0000 Manifest this update: Sun 10 Aug 2025 12:01:00 +0000 Manifest next update: Mon 11 Aug 2025 12:01:00 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: 6AnpdhsHnCq9jKa7GhXjtHflWiwiSpMCqFKLtc2ffLQ=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:93:db:00:f2:b0:2f:4e:be:2e:53:5b:13:cf:fa:63:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Aug 10 12:01:00 2025 GMT Not After : Aug 11 12:01:00 2025 GMT Subject: CN=ea07a98822f81cbe76ceeee68420eeedf7b2d06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:15:c5:40:ec:49:43:5c:5c:43:5d:46:1f:4c: 75:ed:14:d3:9d:7f:71:6a:34:aa:66:55:bb:10:db: d4:da:3c:7c:95:e5:53:03:c8:81:cb:57:57:36:be: 04:c5:91:e1:0a:1b:c6:6c:89:cb:b0:85:8e:46:02: 55:d5:10:54:6d:f3:6c:de:b7:ef:87:13:54:c2:e4: ed:05:ce:c5:d2:b7:85:aa:e7:29:75:4d:74:15:c8: 07:6f:2e:70:7c:03:25:82:8a:9e:d7:6c:4d:a4:ef: 10:9a:f5:5d:2e:b2:95:a2:ce:9d:5c:43:62:4c:0c: 80:6f:3f:7a:c4:65:c9:a8:87:5f:73:6e:48:43:13: 51:04:65:f2:95:9d:53:89:ac:6c:3a:3d:91:5d:c6: 22:bc:94:cb:5e:34:67:dc:a3:78:1a:27:3c:f1:24: ef:94:f7:fd:7e:84:a0:87:42:a5:a7:4f:ba:fd:4b: ff:42:0f:61:7e:36:1e:f3:4d:23:6c:80:d4:75:20: 8d:0c:a5:b7:58:54:c2:a9:eb:28:9a:13:12:0b:a7: 5b:3f:68:fd:4d:7b:97:f5:28:26:d0:41:58:45:13: 26:01:0d:7e:c4:37:e8:31:ed:5a:ce:c9:f1:a7:af: e7:a6:60:5d:7a:ab:dd:85:0e:70:e4:00:ee:61:3c: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:07:A9:88:22:F8:1C:BE:76:CE:EE:E6:84:20:EE:ED:F7:B2:D0:6E X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:37:d8:e6:84:a6:91:f1:78:64:b9:b8:37:a8:19:61:e3:9c: fa:f7:f3:b7:a8:fe:e7:44:b6:61:91:9f:13:79:6b:08:03:50: d5:54:d0:1b:61:45:7e:3a:38:22:3d:41:74:d4:16:c2:16:1d: 57:eb:ea:10:e3:ce:7d:de:70:75:81:ac:19:f0:c3:42:fc:be: 7f:fb:c6:97:5c:21:8a:39:56:7f:d3:56:f0:1e:8f:95:15:77: 00:73:0b:23:8c:4e:fb:30:57:26:7f:39:19:9f:2a:b9:47:8e: f4:28:a8:84:f9:83:ee:90:01:0c:a6:56:b0:0d:a6:ce:88:eb: 91:c2:2e:ac:31:b6:39:d3:b0:62:3d:aa:19:5d:ec:42:49:5f: 1c:c3:b2:70:a5:a4:79:4d:36:d2:53:3a:4b:a4:f5:90:ad:3c: 21:89:6c:db:71:80:97:25:07:4d:1b:06:14:df:07:34:e9:65: a1:c4:33:25:66:67:62:b6:ed:5d:6d:cf:59:2f:89:15:42:73: 21:76:89:20:03:26:a9:47:4c:14:2e:35:c3:66:85:e8:48:57: 8a:b3:dc:87:2e:3a:ab:ce:5f:00:d3:ac:76:9e:5b:21:39:44: 88:cb:14:bb:8f:48:f6:72:c6:36:5d:18:b3:9e:90:52:f2:74: e9:68:78:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiT2wDysC9Ovi5TWxPP+mMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwODEwMTIwMTAwWhcNMjUwODExMTIwMTAwWjAzMTEwLwYDVQQD EyhlYTA3YTk4ODIyZjgxY2JlNzZjZWVlZTY4NDIwZWVlZGY3YjJkMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxXFQOxJQ1xcQ11GH0x17RTTnX9x ajSqZlW7ENvU2jx8leVTA8iBy1dXNr4ExZHhChvGbInLsIWORgJV1RBUbfNs3rfv hxNUwuTtBc7F0reFqucpdU10FcgHby5wfAMlgoqe12xNpO8QmvVdLrKVos6dXENi TAyAbz96xGXJqIdfc25IQxNRBGXylZ1TiaxsOj2RXcYivJTLXjRn3KN4Gic88STv lPf9foSgh0Klp0+6/Uv/Qg9hfjYe800jbIDUdSCNDKW3WFTCqesomhMSC6dbP2j9 TXuX9Sgm0EFYRRMmAQ1+xDfoMe1azsnxp6/npmBdeqvdhQ5w5ADuYTw+ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoHqYgi+By+ds7u5oQg7u33stBuMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTfY5oSm kfF4ZLm4N6gZYeOc+vfzt6j+50S2YZGfE3lrCANQ1VTQG2FFfjo4Ij1BdNQWwhYd V+vqEOPOfd5wdYGsGfDDQvy+f/vGl1whijlWf9NW8B6PlRV3AHMLI4xO+zBXJn85 GZ8quUeO9CiohPmD7pABDKZWsA2mzojrkcIurDG2OdOwYj2qGV3sQklfHMOycKWk eU020lM6S6T1kK08IYls23GAlyUHTRsGFN8HNOllocQzJWZnYrbtXW3PWS+JFUJz IXaJIAMmqUdMFC41w2aF6EhXirPchy46q85fANOsdp5bITlEiMsUu49I9nLGNl0Y s56QUvJ06Wh4Cw== -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:15 2025 by rpki-client