$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: dsNTR1fndTc9Dirlx1g0pQty7wcJ+0S2HPxf1GqabGA= Subject key identifier: 2E:DD:FA:F0:52:A5:C0:C7:A9:02:D4:2D:B9:2E:F8:22:3E:C8:75:04 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 0197B70EDE71592080E6760870AC1D1F275A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 14B9 Signing time: Sat 28 Jun 2025 15:01:34 +0000 Manifest this update: Sat 28 Jun 2025 15:01:34 +0000 Manifest next update: Sun 29 Jun 2025 15:01:34 +0000 Files and hashes: 1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=) 2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=) 3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=) 4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=) 5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=) 6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: YLMZqEzk2thLKfTix3zWWuT0+YjcCA0qafrlI7HQLSE=) 8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=) 9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=) 10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=) 11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:de:71:59:20:80:e6:76:08:70:ac:1d:1f:27:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jun 28 15:01:34 2025 GMT Not After : Jun 29 15:01:34 2025 GMT Subject: CN=2eddfaf052a5c0c7a902d42db92ef8223ec87504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:19:8e:8e:98:fc:3d:aa:f4:f1:1e:ac:14: fb:cc:3c:c0:93:16:af:ce:f0:00:17:28:b3:13:a9: fe:3b:e9:26:1c:46:28:d1:ec:a8:fe:87:9c:83:c4: 0a:49:60:d6:5f:fb:0e:36:79:64:9f:95:a5:e6:dc: 68:9d:9c:d8:bf:64:c5:06:0a:a6:63:6a:7a:ec:18: 39:62:d2:47:17:18:70:d5:70:cd:e6:6e:27:8e:f2: 57:6a:ff:16:26:58:5c:97:07:88:94:0c:ce:65:d3: 0f:27:67:72:01:86:3b:e0:8b:7c:d5:42:fa:8b:8c: 82:ef:84:c8:b2:a2:5b:71:34:98:d1:e3:c9:3f:a6: 76:25:0f:cc:9d:35:a2:33:b4:68:89:c1:7f:07:32: e7:21:19:19:36:e7:b2:9a:86:5e:38:e6:d6:f9:0b: f1:97:3e:ae:56:ba:86:9e:0f:67:15:c3:36:8d:02: 71:be:7b:3d:3c:49:f9:b6:a4:1f:c3:4f:5f:34:ce: 40:51:d8:ea:93:fd:f0:ea:70:c9:45:0b:3d:01:c6: 13:25:41:f3:05:0a:e4:cd:7f:fd:f2:9b:64:f3:c2: 9f:28:f5:6e:da:55:51:da:f7:81:d3:e5:d2:dd:e7: cf:a9:ee:3d:50:cc:cf:82:ef:1a:d1:b6:5b:56:6e: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:FA:F0:52:A5:C0:C7:A9:02:D4:2D:B9:2E:F8:22:3E:C8:75:04 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:16:52:ce:0f:fb:d9:0b:69:f8:e7:d6:3f:cb:84:13:b7:22: 38:0f:2c:c3:83:f0:08:8f:b8:9b:4f:23:b4:d4:7d:ef:9c:ee: c2:d1:96:0d:48:a9:6d:44:31:1c:e0:fe:94:9c:15:4e:00:31: 8b:86:a6:9c:cc:45:25:ab:b6:4c:f8:19:d6:59:5b:7b:70:0d: 4b:ff:f0:a1:b5:5e:41:9d:f5:78:0a:14:13:bf:b8:a6:fb:98: b2:93:26:34:7c:2c:da:62:92:d4:50:ad:e7:90:c3:44:7c:1f: 2d:3e:ca:44:d7:d7:4a:b7:3a:7c:b8:69:ae:77:fb:b4:44:dc: cd:07:88:7e:80:ad:06:89:95:66:6a:a3:32:87:81:e8:e2:71: 32:ce:82:6a:f7:ff:b7:5e:71:c0:79:e9:23:35:30:da:8d:43: 1a:8c:ea:7d:b6:2c:89:84:9c:65:b5:00:c1:aa:57:04:46:47: 27:8a:7f:02:01:67:c3:de:4f:11:01:95:d5:79:a2:e7:96:8e: 5b:a4:9c:97:94:6b:45:b1:a1:f7:24:98:0a:b9:57:1d:d8:bf: 30:f5:a6:d9:15:0b:ca:85:14:59:e5:0d:e5:08:b3:f4:55:64: e2:0f:46:43:4d:88:11:31:f8:db:78:91:51:5f:38:0b:05:49: 14:1b:e9:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dt5xWSCA5nYIcKwdHydaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjUwNjI4MTUwMTM0WhcNMjUwNjI5MTUwMTM0WjAzMTEwLwYDVQQD EygyZWRkZmFmMDUyYTVjMGM3YTkwMmQ0MmRiOTJlZjgyMjNlYzg3NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobAZjo6Y/D2q9PEerBT7zDzAkxav zvAAFyizE6n+O+kmHEYo0eyo/oecg8QKSWDWX/sONnlkn5Wl5txonZzYv2TFBgqm Y2p67Bg5YtJHFxhw1XDN5m4njvJXav8WJlhclweIlAzOZdMPJ2dyAYY74It81UL6 i4yC74TIsqJbcTSY0ePJP6Z2JQ/MnTWiM7RoicF/BzLnIRkZNueymoZeOObW+Qvx lz6uVrqGng9nFcM2jQJxvns9PEn5tqQfw09fNM5AUdjqk/3w6nDJRQs9AcYTJUHz BQrkzX/98ptk88KfKPVu2lVR2veB0+XS3efPqe49UMzPgu8a0bZbVm7j0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7d+vBSpcDHqQLULbku+CI+yHUEMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhZSzg/7 2Qtp+OfWP8uEE7ciOA8sw4PwCI+4m08jtNR975zuwtGWDUipbUQxHOD+lJwVTgAx i4amnMxFJau2TPgZ1llbe3ANS//wobVeQZ31eAoUE7+4pvuYspMmNHws2mKS1FCt 55DDRHwfLT7KRNfXSrc6fLhprnf7tETczQeIfoCtBomVZmqjMoeB6OJxMs6Cavf/ t15xwHnpIzUw2o1DGozqfbYsiYScZbUAwapXBEZHJ4p/AgFnw95PEQGV1Xmi55aO W6Scl5RrRbGh9ySYCrlXHdi/MPWm2RULyoUUWeUN5Qiz9FVk4g9GQ02IETH423iR UV84CwVJFBvpqg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:08:09 2025 by rpki-client