$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: Yz7A3vUgEEv/264WVOoqDUF/+a5A2SZif63U1RY7Wc8= Subject key identifier: FB:42:BC:24:D0:36:28:A9:F1:2E:37:93:BE:B4:2B:FE:7A:DF:F8:C7 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 01976C99186BF402AEF13B33192F374E4716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1611 Signing time: Sat 14 Jun 2025 04:01:01 +0000 Manifest this update: Sat 14 Jun 2025 04:01:01 +0000 Manifest next update: Sun 15 Jun 2025 04:01:01 +0000 Files and hashes: 1: 66Xx5jDxNG0NmEQTOBPZWLsuDKU.roa (hash: YRP6vRA01LYM57+OEVE980SXFAryoZ4goaiztW4UpGM=) 2: 9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa (hash: Oql2v+O9dkhZ+7DYGfNZ3rdk/RuxC5q8FGZSbg+O9ds=) 3: B4tXNlare14cowDjlo4rc0k_Zys.roa (hash: LEb0l/0l4H7UFoxjjJjVz7LmnnvIxt4/UaJwY97TnpU=) 4: FJI79V-E-Y8UfKwl5_2LUDC0vxk.roa (hash: s16fEPA86b4JhDOB7SlXoJoOFthluuA5WBAQi1o/CVQ=) 5: I1gXlx046mNGwZ1Ahc41ozPoiSc.roa (hash: Tz5OeewMV1usaK3mD/N1zYSxy42INKdmwhHFFgrv9M0=) 6: NDiuqs_F6U9vhyoOyITvy1edxEE.roa (hash: JmO6c3RyiGwLx214FmPPWsfWGCX/kkf39Cg5s9Tt4H4=) 7: PKaqbyS2JUmUFWkanNtnUVOeb0k.roa (hash: XnxdB7QCFZRrLjw5gBqAaLpQdzzFZf/2WrRe2aVUvEM=) 8: WWTHjuXP-hTM6s4kv4UB1sZumBk.roa (hash: 5/7bb2uZROWFeHu9uoqvJqUFYOsZ2Pi3Cof+OpFAoMI=) 9: g8OvlCg4M_LLYJ6bBQfa3qDygtM.roa (hash: /qXBTOslZR34Pb+CWF3w3swrkdRrWHLjJPxnYymdULY=) 10: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: Ra4hKjNdpxUy1EyTjU7EXYTWzeQdmEnO5EaT7uHY0Fs=) 11: hqbCZvBXzB77KHtqHXMD1fWA6kY.roa (hash: GUn5Uq/ONwTDRfgsRO2JjkxvZemRk4JP3fq+QqdcYLA=) 12: sel0Pjdv_dXk3SBzodZnhOMFOK8.roa (hash: /3JEX9WN7+Xu1r9ZBKcIYhcWh19ks1nzbzFN0VRMlhM=) 13: vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa (hash: FcifxZKaLaj+zYPf8uRmVdxTjjrSLXukIUCG3S6YYo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:99:18:6b:f4:02:ae:f1:3b:33:19:2f:37:4e:47:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jun 14 04:01:01 2025 GMT Not After : Jun 15 04:01:01 2025 GMT Subject: CN=fb42bc24d03628a9f12e3793beb42bfe7adff8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:6a:41:53:13:5a:86:96:fc:bd:93:cc:bb: 43:cf:0e:bc:e0:ac:eb:28:06:72:15:19:b1:f6:00: e0:c2:b5:d8:2d:a5:30:2d:3a:b0:0d:00:b8:fc:64: 74:77:51:db:71:ac:9c:65:ef:8e:ef:db:a7:ec:0c: 43:bb:2c:84:4f:14:ee:d4:02:0e:7c:96:0f:03:f2: af:e8:1f:d2:e2:83:96:9c:a9:b8:2c:cb:65:96:23: 87:89:c1:15:c1:7e:74:bb:25:25:bf:68:da:ab:7a: d4:f7:34:a7:c7:47:86:18:d8:66:cd:b8:6f:59:3f: e2:f4:87:65:44:bd:00:fe:23:06:e4:c1:58:f1:8c: c2:80:93:43:4d:c8:91:d0:9c:0f:df:51:1f:8a:d6: 52:6d:d2:a5:95:d2:c1:dc:de:16:27:8f:42:7b:9f: 15:26:2b:a3:fb:70:1b:0f:92:67:80:56:fb:96:13: 00:7e:40:17:c5:4d:a3:51:f2:ac:78:95:56:78:7c: bc:ef:06:e7:09:4b:4f:0a:5e:7c:34:cf:79:db:78: bb:25:5a:34:7f:45:ac:4f:cb:a2:25:3b:3e:02:ff: 1b:4a:5a:78:7a:a5:19:27:48:43:89:33:f9:bd:29: b2:84:22:84:e6:24:2d:75:ef:5c:4c:e1:0f:69:e3: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:BC:24:D0:36:28:A9:F1:2E:37:93:BE:B4:2B:FE:7A:DF:F8:C7 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:70:b0:2e:71:04:9b:70:a3:07:b8:09:96:de:92:6a:8e:04: 74:ee:e3:74:0b:bc:47:60:1b:5e:bf:a3:47:af:19:b8:74:f4: 75:eb:2e:4a:04:f8:83:e6:05:57:25:b1:a1:7a:d3:ce:25:21: 4a:69:d5:d2:1d:17:9b:b1:6f:51:b4:96:15:cc:06:28:a4:1a: ce:58:19:fc:71:c7:3b:38:5c:0d:5e:b3:6d:96:4e:04:41:2e: 14:79:3b:dd:09:c8:ce:98:fb:c3:b2:a7:9b:0e:d2:f5:45:2e: 3f:f1:51:5c:6a:25:50:77:ed:ef:8c:d0:c7:4d:b9:64:db:c9: 57:98:ab:2f:ba:31:ab:a3:62:af:12:e9:d7:6c:76:92:cd:bb: e2:4a:92:dd:2c:06:34:5d:ee:40:4c:a0:e6:2b:ea:f4:4d:63: 21:9f:07:29:1a:88:31:c1:2b:89:9e:02:fc:f1:21:c9:1f:54: 6b:d2:49:fe:8b:27:90:a6:c8:4c:38:71:2a:af:43:d0:82:44: 6f:18:12:f8:fe:37:34:34:8f:4f:50:46:06:17:f2:0e:8b:1f: 9e:55:a7:54:91:fd:53:0c:8d:08:30:e9:0f:58:4c:b8:63:59: fe:bb:84:f2:d5:28:b7:1b:be:20:ce:48:dc:19:65:a5:2d:82: 4f:12:4b:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsmRhr9AKu8TszGS83TkcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUwNjE0MDQwMTAxWhcNMjUwNjE1MDQwMTAxWjAzMTEwLwYDVQQD EyhmYjQyYmMyNGQwMzYyOGE5ZjEyZTM3OTNiZWI0MmJmZTdhZGZmOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujFqQVMTWoaW/L2TzLtDzw684Kzr KAZyFRmx9gDgwrXYLaUwLTqwDQC4/GR0d1HbcaycZe+O79un7AxDuyyETxTu1AIO fJYPA/Kv6B/S4oOWnKm4LMtlliOHicEVwX50uyUlv2jaq3rU9zSnx0eGGNhmzbhv WT/i9IdlRL0A/iMG5MFY8YzCgJNDTciR0JwP31EfitZSbdKlldLB3N4WJ49Ce58V Jiuj+3AbD5JngFb7lhMAfkAXxU2jUfKseJVWeHy87wbnCUtPCl58NM9523i7JVo0 f0WsT8uiJTs+Av8bSlp4eqUZJ0hDiTP5vSmyhCKE5iQtde9cTOEPaeOMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtCvCTQNiip8S43k760K/563/jHMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXCwLnEE m3CjB7gJlt6Sao4EdO7jdAu8R2AbXr+jR68ZuHT0desuSgT4g+YFVyWxoXrTziUh SmnV0h0Xm7FvUbSWFcwGKKQazlgZ/HHHOzhcDV6zbZZOBEEuFHk73QnIzpj7w7Kn mw7S9UUuP/FRXGolUHft74zQx025ZNvJV5irL7oxq6NirxLp12x2ks274kqS3SwG NF3uQEyg5ivq9E1jIZ8HKRqIMcEriZ4C/PEhyR9Ua9JJ/osnkKbITDhxKq9D0IJE bxgS+P43NDSPT1BGBhfyDosfnlWnVJH9UwyNCDDpD1hMuGNZ/ruE8tUotxu+IM5I 3BllpS2CTxJLMw== -----END CERTIFICATE-----Generated at Sat Jun 14 09:43:07 2025 by rpki-client