$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: q7ufWZyHC37qzgQ53rVLz9jUg6f8xz7H4Syxl+yz8Mc= Subject key identifier: 43:43:E9:89:64:55:75:F0:DF:CD:BF:DC:A4:95:61:E9:26:A2:26:C8 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 0198D697F2499F5BCBC78301156527D81856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 43 Signing time: Sat 23 Aug 2025 11:02:18 +0000 Manifest this update: Sat 23 Aug 2025 11:02:18 +0000 Manifest next update: Sun 24 Aug 2025 11:02:18 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: fL6dImZUO0n3VsGUPoaYVHz8RGosFLAwu1Dc8lD6brY=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 9: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 10: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 11: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:97:f2:49:9f:5b:cb:c7:83:01:15:65:27:d8:18:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Aug 23 11:02:18 2025 GMT Not After : Aug 24 11:02:18 2025 GMT Subject: CN=4343e989645575f0dfcdbfdca49561e926a226c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:6a:3b:77:17:5a:e2:4d:ea:c7:c9:9e:4e: e4:35:15:6c:db:d4:2c:b6:da:16:7e:92:08:a6:ee: 8c:04:7b:38:f6:3e:f3:1d:c6:43:14:e8:bc:03:a5: 0d:0a:28:aa:ef:02:b5:e9:d7:9f:09:ac:49:65:b2: eb:11:40:a1:73:83:c8:ff:5e:91:b2:e7:e1:e2:41: da:48:f5:74:9c:47:03:e3:c8:18:31:27:e0:0d:26: 08:e7:5d:d0:2e:5c:ee:ec:59:4f:ac:86:b0:57:63: 31:29:04:25:ed:7a:a4:67:d9:4c:9e:70:26:c8:63: 6b:ba:31:b8:bc:50:f1:1b:8d:6b:c9:23:7a:58:03: b2:65:b2:ea:5c:58:4f:c2:5a:da:0f:ad:94:aa:f5: da:1e:e7:d0:fb:4f:d3:8c:f4:43:ea:46:87:6c:af: 6f:c5:d7:89:91:70:5f:c4:84:72:93:0f:e6:51:7c: 22:56:07:e7:91:9c:8d:a0:fb:26:78:9e:e1:85:d0: fe:f9:7c:65:40:60:3f:e3:a1:63:79:6c:8c:bc:00: 90:94:52:1a:2b:69:b6:b0:58:03:00:6d:35:44:ce: 8d:0b:cf:0f:02:eb:6c:ce:2a:96:c5:c2:a7:62:bd: 53:0c:0e:88:86:70:a8:7a:2e:e3:e5:a8:61:19:c8: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:43:E9:89:64:55:75:F0:DF:CD:BF:DC:A4:95:61:E9:26:A2:26:C8 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:65:83:21:15:ed:53:0f:20:3f:14:00:36:94:2b:77:52:9f: c6:db:e2:c0:a1:bf:96:26:7d:4a:1b:a6:89:80:3e:1c:01:6f: 3d:62:2a:e5:fa:cb:d7:a7:d2:6b:c9:0d:85:75:22:89:94:a7: 03:a6:2f:e3:9a:2b:2e:90:fe:66:60:e1:9e:1d:63:ef:df:4d: c2:88:3f:27:2c:9e:3d:e6:8d:e1:3a:ec:91:74:d7:87:fc:57: 47:74:32:6f:42:d9:5b:4b:7c:10:a1:28:cb:68:bf:5d:22:6e: 70:af:5f:37:24:67:2f:eb:32:ec:d8:f0:0c:6d:40:2f:e7:57: 53:de:52:e9:7a:1d:3a:0a:09:e7:40:37:e9:39:0e:6f:55:79: ee:04:38:c4:e9:94:1e:0a:1e:43:99:75:59:49:01:52:f4:73: a2:f1:26:f8:47:38:e2:9d:60:15:d3:0c:7a:63:45:08:d7:b5: bf:23:b1:63:1b:f5:ec:cc:81:db:0e:7d:69:84:80:a3:56:ab: 01:39:65:82:2b:e4:b0:97:a2:f3:ee:5b:07:53:aa:f2:09:6d: b4:27:b6:50:2a:bb:55:b0:d1:64:f3:2d:f0:51:c7:61:e3:af: 77:a7:eb:db:8e:56:35:90:44:d3:f3:9b:e3:16:43:59:dd:50: 6a:1e:89:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWl/JJn1vLx4MBFWUn2BhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUwODIzMTEwMjE4WhcNMjUwODI0MTEwMjE4WjAzMTEwLwYDVQQD Eyg0MzQzZTk4OTY0NTU3NWYwZGZjZGJmZGNhNDk1NjFlOTI2YTIyNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLJqO3cXWuJN6sfJnk7kNRVs29Qs ttoWfpIIpu6MBHs49j7zHcZDFOi8A6UNCiiq7wK16defCaxJZbLrEUChc4PI/16R sufh4kHaSPV0nEcD48gYMSfgDSYI513QLlzu7FlPrIawV2MxKQQl7XqkZ9lMnnAm yGNrujG4vFDxG41rySN6WAOyZbLqXFhPwlraD62UqvXaHufQ+0/TjPRD6kaHbK9v xdeJkXBfxIRykw/mUXwiVgfnkZyNoPsmeJ7hhdD++XxlQGA/46FjeWyMvACQlFIa K2m2sFgDAG01RM6NC88PAutsziqWxcKnYr1TDA6IhnCoei7j5ahhGchfJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEND6YlkVXXw382/3KSVYekmoibIMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGWDIRXt Uw8gPxQANpQrd1KfxtviwKG/liZ9ShumiYA+HAFvPWIq5frL16fSa8kNhXUiiZSn A6Yv45orLpD+ZmDhnh1j799Nwog/JyyePeaN4TrskXTXh/xXR3Qyb0LZW0t8EKEo y2i/XSJucK9fNyRnL+sy7NjwDG1AL+dXU95S6XodOgoJ50A36TkOb1V57gQ4xOmU HgoeQ5l1WUkBUvRzovEm+Ec44p1gFdMMemNFCNe1vyOxYxv17MyB2w59aYSAo1ar ATllgivksJei8+5bB1Oq8glttCe2UCq7VbDRZPMt8FHHYeOvd6fr245WNZBE0/Ob 4xZDWd1Qah6JDQ== -----END CERTIFICATE-----Generated at Sat Aug 23 18:32:12 2025 by rpki-client