$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: R/qpjfY3i/v9UFnh3SMJVpocIUR6+Z5BEbjb0gcLc9U= Subject key identifier: 7B:9C:94:52:51:D7:1F:FF:F9:05:13:AD:5A:9F:E7:CD:28:87:24:AE Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019A01EBEF0E51EEDD7D19556B8EBA47832B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: DE Signing time: Mon 20 Oct 2025 14:00:30 +0000 Manifest this update: Mon 20 Oct 2025 14:00:30 +0000 Manifest next update: Tue 21 Oct 2025 14:00:30 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: Q5qPmz56+4LNGdPeD1TQefwiuyWIeB0iNfjip7ebMhI=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 9: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 10: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 11: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 13:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:eb:ef:0e:51:ee:dd:7d:19:55:6b:8e:ba:47:83:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Oct 20 14:00:30 2025 GMT Not After : Oct 21 14:00:30 2025 GMT Subject: CN=7b9c945251d71ffff90513ad5a9fe7cd288724ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:ff:3e:b6:59:d0:3c:ce:6b:d0:34:6d:cf: d1:61:95:2a:14:7e:a4:49:f2:b4:b4:90:f7:0c:2a: 67:9b:c0:c1:72:53:95:f8:74:84:b8:82:b5:04:4e: 0d:e8:49:ea:b0:2f:e5:aa:a8:42:84:49:34:f8:44: ab:12:6f:20:02:5e:63:71:23:3d:d4:83:89:59:21: 7d:83:be:0c:b3:9f:23:77:15:a5:fc:ee:2f:d2:76: 96:c5:9d:a8:77:77:75:e7:65:26:7b:45:22:90:2d: a4:b1:ae:10:03:3e:a3:2b:19:1d:65:92:3b:8d:1b: 73:86:84:1b:64:3a:5c:4d:aa:1a:07:45:45:30:41: fb:15:40:c1:1b:00:71:e1:b6:66:84:73:88:e7:dc: 8e:f8:25:66:55:be:a4:d1:22:6d:0e:3b:26:87:be: 3d:8d:4e:11:48:09:e0:8c:04:8f:71:72:3d:6d:d9: 8f:07:6b:05:40:f1:30:3d:71:11:9f:ba:86:3c:0a: 92:dd:b2:64:9d:43:0e:df:0b:38:8e:99:81:bc:3f: 86:6a:c9:e6:c3:b3:f8:1a:01:0d:85:e0:25:0f:fd: e6:2f:2a:25:dc:14:5b:3f:67:2a:98:d4:11:f7:1b: 6f:c1:55:19:46:21:c1:b7:e7:77:91:45:21:e7:97: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9C:94:52:51:D7:1F:FF:F9:05:13:AD:5A:9F:E7:CD:28:87:24:AE X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:79:a1:90:7b:6c:13:24:91:c6:dc:10:97:57:16:0a:4e:13: 98:61:f7:a2:3b:d0:5d:f2:8b:04:92:8a:c8:f5:ce:43:03:05: e9:53:33:91:ae:27:9c:f6:2f:b1:63:21:2c:cc:70:d4:11:f2: d2:e9:45:fe:67:36:4c:c0:a5:15:57:6c:0a:97:66:a1:64:7b: ac:72:35:a6:28:0b:74:89:e9:ab:f2:22:17:d8:56:19:9e:bb: ac:df:f4:a5:0e:ae:1f:97:60:9f:b4:57:e7:7b:2f:89:bd:50: d1:81:65:d5:a9:ec:45:6b:87:52:cd:ba:d2:ff:e1:b0:16:19: 07:e8:dd:70:83:67:d8:39:ba:cf:0e:c9:85:30:cc:c4:93:39: 3b:46:5d:cf:49:43:72:de:7f:2c:03:e0:d6:23:ed:cc:7a:cd: 31:b8:f1:12:36:0f:de:59:dc:07:84:4e:22:2d:ea:41:dc:33: ef:39:96:7c:e4:89:b4:71:4c:4d:2c:ae:00:11:36:67:fd:5d: bc:7c:d5:6c:e3:36:cb:cc:43:81:5c:7d:cd:b4:e2:14:51:50: 12:2f:4e:b0:08:f5:6a:2f:6c:d4:c9:c3:31:d5:71:ab:d0:50: 92:24:60:63:54:04:46:97:50:bd:8b:4e:03:2f:72:63:f7:f1: 98:98:04:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoB6+8OUe7dfRlVa466R4MrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUxMDIwMTQwMDMwWhcNMjUxMDIxMTQwMDMwWjAzMTEwLwYDVQQD Eyg3YjljOTQ1MjUxZDcxZmZmZjkwNTEzYWQ1YTlmZTdjZDI4ODcyNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhz/PrZZ0DzOa9A0bc/RYZUqFH6k SfK0tJD3DCpnm8DBclOV+HSEuIK1BE4N6EnqsC/lqqhChEk0+ESrEm8gAl5jcSM9 1IOJWSF9g74Ms58jdxWl/O4v0naWxZ2od3d152Ume0UikC2ksa4QAz6jKxkdZZI7 jRtzhoQbZDpcTaoaB0VFMEH7FUDBGwBx4bZmhHOI59yO+CVmVb6k0SJtDjsmh749 jU4RSAngjASPcXI9bdmPB2sFQPEwPXERn7qGPAqS3bJknUMO3ws4jpmBvD+Gasnm w7P4GgENheAlD/3mLyol3BRbP2cqmNQR9xtvwVUZRiHBt+d3kUUh55dhTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuclFJR1x//+QUTrVqf580ohySuMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXmhkHts EySRxtwQl1cWCk4TmGH3ojvQXfKLBJKKyPXOQwMF6VMzka4nnPYvsWMhLMxw1BHy 0ulF/mc2TMClFVdsCpdmoWR7rHI1pigLdInpq/IiF9hWGZ67rN/0pQ6uH5dgn7RX 53svib1Q0YFl1ansRWuHUs260v/hsBYZB+jdcINn2Dm6zw7JhTDMxJM5O0Zdz0lD ct5/LAPg1iPtzHrNMbjxEjYP3lncB4ROIi3qQdwz7zmWfOSJtHFMTSyuABE2Z/1d vHzVbOM2y8xDgVx9zbTiFFFQEi9OsAj1ai9s1MnDMdVxq9BQkiRgY1QERpdQvYtO Ay9yY/fxmJgEqw== -----END CERTIFICATE-----Generated at Mon Oct 20 20:27:42 2025 by rpki-client