$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: P6KYveZ/NVhpmCQwYooXSeQM0dW/mjOJCsSaKtXoN2U= Subject key identifier: 81:DA:79:21:37:70:2E:D9:16:38:0C:3B:2A:2F:F0:C5:89:93:25:11 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 0198752BDB6E15A72F7E622916C86A027834 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 169A Signing time: Mon 04 Aug 2025 13:01:05 +0000 Manifest this update: Mon 04 Aug 2025 13:01:05 +0000 Manifest next update: Tue 05 Aug 2025 13:01:05 +0000 Files and hashes: 1: 66Xx5jDxNG0NmEQTOBPZWLsuDKU.roa (hash: YRP6vRA01LYM57+OEVE980SXFAryoZ4goaiztW4UpGM=) 2: 9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa (hash: Oql2v+O9dkhZ+7DYGfNZ3rdk/RuxC5q8FGZSbg+O9ds=) 3: B4tXNlare14cowDjlo4rc0k_Zys.roa (hash: LEb0l/0l4H7UFoxjjJjVz7LmnnvIxt4/UaJwY97TnpU=) 4: FJI79V-E-Y8UfKwl5_2LUDC0vxk.roa (hash: s16fEPA86b4JhDOB7SlXoJoOFthluuA5WBAQi1o/CVQ=) 5: I1gXlx046mNGwZ1Ahc41ozPoiSc.roa (hash: Tz5OeewMV1usaK3mD/N1zYSxy42INKdmwhHFFgrv9M0=) 6: NDiuqs_F6U9vhyoOyITvy1edxEE.roa (hash: JmO6c3RyiGwLx214FmPPWsfWGCX/kkf39Cg5s9Tt4H4=) 7: PKaqbyS2JUmUFWkanNtnUVOeb0k.roa (hash: XnxdB7QCFZRrLjw5gBqAaLpQdzzFZf/2WrRe2aVUvEM=) 8: WWTHjuXP-hTM6s4kv4UB1sZumBk.roa (hash: 5/7bb2uZROWFeHu9uoqvJqUFYOsZ2Pi3Cof+OpFAoMI=) 9: g8OvlCg4M_LLYJ6bBQfa3qDygtM.roa (hash: /qXBTOslZR34Pb+CWF3w3swrkdRrWHLjJPxnYymdULY=) 10: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: pnDY6lvZvUwli90RjAcduodwIcqhJ28fynB9D2067tM=) 11: hqbCZvBXzB77KHtqHXMD1fWA6kY.roa (hash: GUn5Uq/ONwTDRfgsRO2JjkxvZemRk4JP3fq+QqdcYLA=) 12: sel0Pjdv_dXk3SBzodZnhOMFOK8.roa (hash: /3JEX9WN7+Xu1r9ZBKcIYhcWh19ks1nzbzFN0VRMlhM=) 13: vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa (hash: FcifxZKaLaj+zYPf8uRmVdxTjjrSLXukIUCG3S6YYo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:2b:db:6e:15:a7:2f:7e:62:29:16:c8:6a:02:78:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Aug 4 13:01:05 2025 GMT Not After : Aug 5 13:01:05 2025 GMT Subject: CN=81da792137702ed916380c3b2a2ff0c589932511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:9c:32:b5:a8:e6:4d:d6:5e:65:79:26:fc: 9b:18:97:2a:ae:72:a9:37:fb:38:5b:d6:17:0c:76: 55:4a:72:15:a5:f7:0d:fc:8f:93:c9:1f:4c:8e:9d: 56:de:ba:44:eb:0f:89:88:9a:93:ba:b4:e7:3c:ca: fb:4f:3b:4c:03:ae:7b:b6:73:d4:a4:eb:54:ac:88: d0:8a:5c:06:cb:40:81:3a:fa:81:38:84:04:de:b8: 91:df:1a:f4:73:46:a1:cc:1b:43:83:84:75:ce:a5: aa:c0:75:f0:54:e5:61:b0:2f:9e:89:86:03:ad:8e: 66:7e:ed:a6:db:c0:9a:a1:ae:64:ca:c7:55:02:ac: 55:f6:a1:8d:f1:d0:9f:9b:76:20:22:77:f1:6b:8a: bd:0d:0f:4b:a9:43:5a:2c:a6:b2:d3:db:6c:d5:34: 6e:d5:54:f1:98:be:de:a9:74:1e:98:0e:30:fe:c4: f3:2b:5b:f0:e6:74:d8:c4:a7:35:f9:9d:3c:91:4d: cc:5e:fd:70:0c:48:4e:7f:65:72:50:02:0f:2d:cf: d8:04:2c:38:d9:ae:cd:5c:b2:7d:38:73:47:01:09: cd:0c:fd:ac:8b:88:95:63:84:91:71:0c:82:6b:05: 79:ca:28:ca:55:a0:00:19:1c:6a:cd:17:95:99:46: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:79:21:37:70:2E:D9:16:38:0C:3B:2A:2F:F0:C5:89:93:25:11 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e8:3f:98:94:c4:82:7f:07:6a:83:06:19:e9:75:b8:fb:d4: ca:44:06:33:7a:86:41:05:aa:0c:27:b4:b9:b0:47:0f:41:96: e1:88:4b:d0:3c:3b:4a:8d:3c:14:c8:70:f5:af:3f:86:0b:6e: 6d:06:81:4f:e1:31:ea:39:45:ed:41:39:e5:b3:97:50:bc:4f: 22:25:2f:97:48:b6:67:f5:91:34:8f:53:c8:99:82:98:b0:06: e8:ab:e5:37:7c:54:e2:ea:ed:a3:75:81:9a:fb:46:0d:28:bd: 10:eb:e2:d9:40:ba:82:85:b3:fe:6b:89:b9:2c:e8:9b:7e:09: af:99:1e:7a:24:ff:6d:4e:57:1c:8d:66:0c:10:59:72:60:33: a0:6d:9b:f4:71:13:00:8b:9a:6a:b4:ff:4f:fe:d5:cb:3b:43: 3d:30:2c:71:54:7b:bf:36:a9:40:f3:9a:ca:d7:d1:78:cf:a3: a3:de:b9:d7:9f:06:ac:b5:f9:d6:74:7e:cf:2b:12:c7:55:49: 0d:85:fb:bb:4a:77:a9:5e:6a:5d:97:23:89:60:19:07:bc:f1: 7e:54:b0:34:99:1a:26:3a:c9:1c:b4:30:19:7e:a0:b9:1c:d3: 45:58:3c:34:cb:ce:fb:cd:1f:6f:67:b8:8f:bb:0f:ee:44:30: 42:44:4d:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1K9tuFacvfmIpFshqAng0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUwODA0MTMwMTA1WhcNMjUwODA1MTMwMTA1WjAzMTEwLwYDVQQD Eyg4MWRhNzkyMTM3NzAyZWQ5MTYzODBjM2IyYTJmZjBjNTg5OTMyNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMCcMrWo5k3WXmV5JvybGJcqrnKp N/s4W9YXDHZVSnIVpfcN/I+TyR9Mjp1W3rpE6w+JiJqTurTnPMr7TztMA657tnPU pOtUrIjQilwGy0CBOvqBOIQE3riR3xr0c0ahzBtDg4R1zqWqwHXwVOVhsC+eiYYD rY5mfu2m28Caoa5kysdVAqxV9qGN8dCfm3YgInfxa4q9DQ9LqUNaLKay09ts1TRu 1VTxmL7eqXQemA4w/sTzK1vw5nTYxKc1+Z08kU3MXv1wDEhOf2VyUAIPLc/YBCw4 2a7NXLJ9OHNHAQnNDP2si4iVY4SRcQyCawV5yijKVaAAGRxqzReVmUa4zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHaeSE3cC7ZFjgMOyov8MWJkyURMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAug/mJTE gn8HaoMGGel1uPvUykQGM3qGQQWqDCe0ubBHD0GW4YhL0Dw7So08FMhw9a8/hgtu bQaBT+Ex6jlF7UE55bOXULxPIiUvl0i2Z/WRNI9TyJmCmLAG6KvlN3xU4urto3WB mvtGDSi9EOvi2UC6goWz/muJuSzom34Jr5keeiT/bU5XHI1mDBBZcmAzoG2b9HET AIuaarT/T/7VyztDPTAscVR7vzapQPOaytfReM+jo965158GrLX51nR+zysSx1VJ DYX7u0p3qV5qXZcjiWAZB7zxflSwNJkaJjrJHLQwGX6guRzTRVg8NMvO+80fb2e4 j7sP7kQwQkRN8Q== -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:53 2025 by rpki-client