$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: qZRERuJeu8zMYFfQv3/Mh4vvo++QxhmSm3N8BStrqkk= Subject key identifier: B5:BA:2B:8E:04:FE:92:3F:33:A1:73:72:AF:F4:39:F9:D4:33:46:E9 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019696050B44634010771FCCAAA7C46B4E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0959 Signing time: Sat 03 May 2025 12:00:35 +0000 Manifest this update: Sat 03 May 2025 12:00:35 +0000 Manifest next update: Sun 04 May 2025 12:00:35 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: FJpBbsk2IkGalAh7LYKoqxBbmE8heqEYbxtMXFuN7Ng=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:96:05:0b:44:63:40:10:77:1f:cc:aa:a7:c4:6b:4e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: May 3 12:00:35 2025 GMT Not After : May 4 12:00:35 2025 GMT Subject: CN=b5ba2b8e04fe923f33a17372aff439f9d43346e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:ad:53:86:80:13:c0:06:d7:63:49:96:0a: 4d:9e:aa:fc:f9:3e:70:8b:72:d2:83:62:f5:1f:1b: fd:f4:34:19:ef:fb:36:87:94:cb:f7:65:ec:02:88: 39:e6:8c:5c:15:96:c0:bb:8f:59:e6:ee:d3:2c:1c: 96:29:25:7c:3a:a4:31:bd:42:87:17:d6:1c:0c:26: 8f:ad:38:d1:9d:c4:95:e3:df:02:93:eb:f2:9a:a3: 70:45:44:dd:d7:fd:1f:aa:48:7d:39:0d:ef:bf:52: 7a:3d:2c:76:f3:57:c1:ed:cb:19:40:b2:07:6c:59: 06:56:dc:d8:22:89:f0:7f:52:5d:0c:8c:c4:70:55: 8d:07:68:0d:d8:0f:43:d3:c9:b0:47:c1:ed:10:ea: 9f:65:e1:1b:95:4f:13:58:3b:c5:32:e4:42:9f:7a: ab:af:ce:11:b4:d4:a7:99:df:c0:4e:bf:8d:7c:c7: 52:f5:66:71:e1:b4:c7:35:cd:db:d3:12:7e:b6:4f: 60:c8:d1:1d:f2:df:2d:9b:ea:e8:48:df:68:a4:dc: 6a:98:19:19:2a:5f:4a:0c:1e:ac:07:0a:ce:2e:9b: e2:bb:9f:ab:66:a9:1c:95:3b:44:41:83:20:64:f7: 6f:87:35:6c:15:43:1d:38:03:6d:9d:a7:13:4c:c1: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:2B:8E:04:FE:92:3F:33:A1:73:72:AF:F4:39:F9:D4:33:46:E9 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3d:65:17:46:85:c9:d0:fd:9f:39:a9:41:ee:68:8e:88:c4: 4f:bb:c8:f7:7d:b1:89:9f:1f:0c:5a:66:a0:db:08:1c:5f:7a: 59:0f:6d:17:1f:47:06:2f:3c:d9:46:fb:b3:9d:0b:9a:fa:f3: 1d:3e:92:17:2d:2c:07:d8:46:81:5e:34:fd:0e:89:66:e7:ae: 7a:83:62:86:58:3f:a1:75:84:96:b6:0d:e0:bd:a2:4c:8c:21: 70:13:fa:65:87:1a:5b:72:18:bc:2d:54:3c:7d:a7:3d:3b:19: e0:40:c0:d4:45:14:65:9d:4a:13:15:a5:e9:56:72:28:f0:22: 28:96:26:4c:35:29:44:e0:70:f0:ac:58:08:5d:89:3f:84:45: 53:d1:02:63:2f:30:6f:dc:81:35:ea:05:c4:27:1e:0b:dd:ab: e2:7a:96:47:77:ec:d2:4d:f7:94:25:36:8d:37:82:a4:fe:a7: 75:0b:7d:f4:46:15:d7:7c:79:7b:a8:1f:f1:90:51:c0:1e:a3: fa:3b:4a:db:d1:0c:78:c2:56:0d:57:02:6d:18:6e:be:a5:1c: e1:de:d2:44:be:8d:be:0a:f9:7c:89:e4:ef:c4:86:a9:7e:63: a8:81:ab:18:1f:fb:7c:42:a9:68:e4:7e:01:99:fb:91:af:90: 09:63:f7:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaWBQtEY0AQdx/MqqfEa04DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwNTAzMTIwMDM1WhcNMjUwNTA0MTIwMDM1WjAzMTEwLwYDVQQD EyhiNWJhMmI4ZTA0ZmU5MjNmMzNhMTczNzJhZmY0MzlmOWQ0MzM0NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCmtU4aAE8AG12NJlgpNnqr8+T5w i3LSg2L1Hxv99DQZ7/s2h5TL92XsAog55oxcFZbAu49Z5u7TLByWKSV8OqQxvUKH F9YcDCaPrTjRncSV498Ck+vymqNwRUTd1/0fqkh9OQ3vv1J6PSx281fB7csZQLIH bFkGVtzYIonwf1JdDIzEcFWNB2gN2A9D08mwR8HtEOqfZeEblU8TWDvFMuRCn3qr r84RtNSnmd/ATr+NfMdS9WZx4bTHNc3b0xJ+tk9gyNEd8t8tm+roSN9opNxqmBkZ Kl9KDB6sBwrOLpviu5+rZqkclTtEQYMgZPdvhzVsFUMdOANtnacTTMEegwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW6K44E/pI/M6Fzcq/0OfnUM0bpMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoD1lF0aF ydD9nzmpQe5ojojET7vI932xiZ8fDFpmoNsIHF96WQ9tFx9HBi882Ub7s50Lmvrz HT6SFy0sB9hGgV40/Q6JZueueoNihlg/oXWElrYN4L2iTIwhcBP6ZYcaW3IYvC1U PH2nPTsZ4EDA1EUUZZ1KExWl6VZyKPAiKJYmTDUpROBw8KxYCF2JP4RFU9ECYy8w b9yBNeoFxCceC92r4nqWR3fs0k33lCU2jTeCpP6ndQt99EYV13x5e6gf8ZBRwB6j +jtK29EMeMJWDVcCbRhuvqUc4d7SRL6Nvgr5fInk78SGqX5jqIGrGB/7fEKpaOR+ AZn7ka+QCWP3iw== -----END CERTIFICATE-----Generated at Sat May 3 13:38:20 2025 by rpki-client