$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: gwhqUgxS/2uXoWcnE/L2quWDLmiSdZVNc8ZNjg/VTaM= Subject key identifier: 2A:C2:8A:54:13:19:05:D8:48:C5:97:B8:AC:7A:B0:43:84:DD:F1:F4 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019A0035999574E646E00251AE9FDB49240B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 15E8 Signing time: Mon 20 Oct 2025 06:01:43 +0000 Manifest this update: Mon 20 Oct 2025 06:01:43 +0000 Manifest next update: Tue 21 Oct 2025 06:01:43 +0000 Files and hashes: 1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=) 2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=) 3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=) 4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=) 5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=) 6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: sfLULWDeDdUe47//EA5TsPEYeZJhjFtuIUERD68m9kY=) 8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=) 9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=) 10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=) 11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:35:99:95:74:e6:46:e0:02:51:ae:9f:db:49:24:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Oct 20 06:01:43 2025 GMT Not After : Oct 21 06:01:43 2025 GMT Subject: CN=2ac28a54131905d848c597b8ac7ab04384ddf1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:83:20:93:27:64:34:82:0f:2a:91:b6:d8: 40:11:3d:63:0b:9d:b2:9b:5d:4e:36:ba:52:07:69: 64:55:33:72:fb:12:e7:70:12:7c:f4:1e:bb:b1:47: 2e:db:6b:a7:02:65:67:53:35:d9:03:7c:fc:0a:ad: c5:ba:3f:82:79:1c:c0:da:e8:6a:a8:82:a2:19:7b: ad:90:a4:24:99:74:ad:85:8c:d5:a7:35:19:f6:ac: 9a:bf:51:97:ff:d6:6d:91:c0:b1:9e:40:97:a2:e2: 09:84:27:03:b8:59:38:70:98:9f:7a:88:e2:7e:97: ac:30:28:ee:18:a4:e8:ec:0a:90:80:c1:41:82:68: f4:6f:3a:3d:65:a1:bc:af:15:a1:32:84:ff:be:26: 9d:ea:78:77:6c:bd:5e:84:44:02:fd:4f:bc:9a:d9: ca:70:f7:cd:93:c0:e5:e0:00:2b:cd:77:f5:f8:08: 2e:ad:e0:8b:ca:6a:31:89:6c:4d:0e:0a:36:2f:6b: 50:23:d7:bb:66:9d:e9:1f:79:ef:d6:16:25:f6:aa: f9:46:c4:5b:58:e2:fc:ea:6d:39:17:52:f0:cc:4e: 98:83:83:ff:19:9f:0c:67:7c:f1:4f:79:43:c2:c6: c3:43:3f:9d:05:5d:45:86:db:62:fd:af:78:4f:04: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:8A:54:13:19:05:D8:48:C5:97:B8:AC:7A:B0:43:84:DD:F1:F4 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3a:9b:d1:2b:4b:72:dc:72:be:26:82:3e:96:b9:a8:54:04: ce:85:05:f6:67:24:02:7e:00:d9:e7:7f:c9:a4:47:d5:fa:9b: 3e:11:21:0d:91:34:88:aa:ff:9f:15:4d:5f:1f:c5:0a:21:d0: 70:db:88:51:46:0d:ee:9e:3a:b4:48:4c:33:df:4d:db:cf:3a: 4a:37:e6:19:b6:9a:7c:3f:12:00:ca:2e:4b:d1:5a:9d:e9:3a: 9b:9d:32:72:9d:4e:ec:8b:df:69:49:74:92:ba:ce:9a:95:b2: d3:c5:7e:dc:c8:2b:cb:6e:05:43:7c:72:9b:e6:fb:a5:66:3d: 43:76:43:95:d6:d1:e1:9e:1b:8c:4a:e3:02:47:ee:de:24:4c: 2c:ed:fe:23:d4:df:8f:7f:b5:81:d2:34:3f:b5:93:f9:d6:19: 1f:1d:84:a1:cb:25:53:ce:1f:e2:c0:c0:a1:ff:6c:08:8a:12: 5a:17:19:bc:10:28:d4:02:a6:63:25:6e:4a:ce:54:24:2f:58: 2c:30:fe:07:e2:74:35:76:6d:99:80:ee:ec:03:e6:85:fc:70: 19:ed:5f:3b:42:53:81:5e:89:2d:da:5d:c0:05:04:50:13:57: 12:2b:19:cc:5a:ee:d9:b9:56:c0:6f:d6:3f:a0:7c:2c:ad:2a: 8d:85:a1:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoANZmVdOZG4AJRrp/bSSQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjUxMDIwMDYwMTQzWhcNMjUxMDIxMDYwMTQzWjAzMTEwLwYDVQQD EygyYWMyOGE1NDEzMTkwNWQ4NDhjNTk3YjhhYzdhYjA0Mzg0ZGRmMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo+DIJMnZDSCDyqRtthAET1jC52y m11ONrpSB2lkVTNy+xLncBJ89B67sUcu22unAmVnUzXZA3z8Cq3Fuj+CeRzA2uhq qIKiGXutkKQkmXSthYzVpzUZ9qyav1GX/9ZtkcCxnkCXouIJhCcDuFk4cJifeoji fpesMCjuGKTo7AqQgMFBgmj0bzo9ZaG8rxWhMoT/viad6nh3bL1ehEQC/U+8mtnK cPfNk8Dl4AArzXf1+AgureCLymoxiWxNDgo2L2tQI9e7Zp3pH3nv1hYl9qr5RsRb WOL86m05F1LwzE6Yg4P/GZ8MZ3zxT3lDwsbDQz+dBV1Fhtti/a94TwQpzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrCilQTGQXYSMWXuKx6sEOE3fH0MB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzqb0StL ctxyviaCPpa5qFQEzoUF9mckAn4A2ed/yaRH1fqbPhEhDZE0iKr/nxVNXx/FCiHQ cNuIUUYN7p46tEhMM99N2886SjfmGbaafD8SAMouS9Fanek6m50ycp1O7IvfaUl0 krrOmpWy08V+3Mgry24FQ3xym+b7pWY9Q3ZDldbR4Z4bjErjAkfu3iRMLO3+I9Tf j3+1gdI0P7WT+dYZHx2EocslU84f4sDAof9sCIoSWhcZvBAo1AKmYyVuSs5UJC9Y LDD+B+J0NXZtmYDu7APmhfxwGe1fO0JTgV6JLdpdwAUEUBNXEisZzFru2blWwG/W P6B8LK0qjYWhwg== -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:55 2025 by rpki-client