$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: 7YEzJPSFLfu0R9Q0o9l53h6oU2zhFOxynf00Mw9/JpU= Subject key identifier: E3:64:B3:58:1E:86:DD:A5:03:3E:DA:B4:86:3D:44:44:68:70:CC:13 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 0198D6CD5C801203A89F74C299F2551FFC3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 154E Signing time: Sat 23 Aug 2025 12:00:39 +0000 Manifest this update: Sat 23 Aug 2025 12:00:39 +0000 Manifest next update: Sun 24 Aug 2025 12:00:39 +0000 Files and hashes: 1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=) 2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=) 3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=) 4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=) 5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=) 6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: tfLfZJ0bFzYJiBa9u22pPshWsjpX7fOEyizBJhrwfFA=) 8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=) 9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=) 10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=) 11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:cd:5c:80:12:03:a8:9f:74:c2:99:f2:55:1f:fc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Aug 23 12:00:39 2025 GMT Not After : Aug 24 12:00:39 2025 GMT Subject: CN=e364b3581e86dda5033edab4863d44446870cc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:ef:7c:00:c6:59:84:7d:18:d7:42:d4:b9: 66:e8:e9:83:d1:16:e3:db:af:cf:fd:bd:1f:b8:b7: b7:d0:b0:0d:b8:0e:37:6d:0d:14:6d:67:d0:88:c5: 10:1f:c0:d3:bf:63:e9:f9:1b:b9:f6:da:1a:24:84: 1e:f3:e3:ee:a7:ee:c8:21:a8:b1:80:46:45:3b:0d: 63:d8:ac:e8:20:2b:62:6d:d8:c2:47:70:79:95:50: da:68:46:13:8c:7f:04:5b:56:e3:a7:33:0c:89:ef: 97:06:d7:c4:5e:a6:21:bb:d5:12:98:60:75:83:b1: 12:26:2a:90:e9:e6:b6:b9:9c:e2:22:a9:26:80:17: 9f:3d:f8:2b:2f:f7:3a:e0:dc:44:a1:60:59:ed:c0: 7f:0e:3b:4d:e2:e6:45:82:17:62:e9:b0:86:af:46: 3a:20:7f:c8:5a:37:e9:ba:bb:08:27:19:07:b4:92: aa:5c:2b:0e:18:a5:72:d9:5b:07:07:fe:cf:06:37: d2:b8:f8:a9:d8:3b:c5:77:c7:9a:ec:5c:da:60:50: ed:56:f9:59:a9:b2:72:68:cf:63:31:ca:a1:02:ae: cf:fc:55:51:8f:65:27:59:95:56:34:31:be:14:da: 19:f1:0b:d5:01:aa:09:c8:70:b4:cd:3f:1d:ed:8b: 86:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:64:B3:58:1E:86:DD:A5:03:3E:DA:B4:86:3D:44:44:68:70:CC:13 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:db:65:45:f7:17:23:2e:ea:3e:9f:6c:56:ae:bc:83:fa:73: db:ef:95:4e:09:9f:da:4a:0e:a7:76:fa:e2:95:3f:e2:5a:a1: be:f8:aa:b6:26:ca:4a:5f:32:9d:0c:4c:de:dd:a3:24:54:b2: f5:42:de:ed:df:88:77:41:65:01:0c:96:c3:22:60:f5:da:32: d6:99:e1:13:dc:cc:a4:5c:8b:e6:2f:9e:13:b5:c1:0d:5f:97: 20:ab:44:ee:d1:5f:6c:40:de:15:64:5a:05:c7:85:fe:d2:66: 48:2a:ba:7c:a9:65:86:64:38:67:1b:60:43:f8:96:1b:da:90: fc:1c:00:78:27:e4:99:9d:04:a7:de:dd:e7:bf:fe:fa:ef:f8: de:3b:9c:f0:28:05:0a:25:f6:b8:dc:60:f6:87:a0:71:b6:d3: 80:ba:de:00:96:ac:da:6d:10:d6:ac:17:9f:c1:91:f2:f2:5c: 70:1a:64:e9:5f:98:98:a3:bf:7f:50:b8:7a:31:21:ac:cd:7a: e1:25:65:fb:59:3d:b4:b0:4f:ce:01:65:17:52:2c:d7:18:aa: a0:59:8a:ec:a0:23:01:0c:1d:7a:e8:3a:77:5f:5e:16:fd:e6: b9:74:2b:48:f7:4f:62:6a:06:4e:47:47:6b:dc:37:8d:fb:f2: fe:22:6f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzVyAEgOon3TCmfJVH/w7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjUwODIzMTIwMDM5WhcNMjUwODI0MTIwMDM5WjAzMTEwLwYDVQQD EyhlMzY0YjM1ODFlODZkZGE1MDMzZWRhYjQ4NjNkNDQ0NDY4NzBjYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniDvfADGWYR9GNdC1Llm6OmD0Rbj 26/P/b0fuLe30LANuA43bQ0UbWfQiMUQH8DTv2Pp+Ru59toaJIQe8+Pup+7IIaix gEZFOw1j2KzoICtibdjCR3B5lVDaaEYTjH8EW1bjpzMMie+XBtfEXqYhu9USmGB1 g7ESJiqQ6ea2uZziIqkmgBefPfgrL/c64NxEoWBZ7cB/DjtN4uZFghdi6bCGr0Y6 IH/IWjfpursIJxkHtJKqXCsOGKVy2VsHB/7PBjfSuPip2DvFd8ea7FzaYFDtVvlZ qbJyaM9jMcqhAq7P/FVRj2UnWZVWNDG+FNoZ8QvVAaoJyHC0zT8d7YuGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONks1geht2lAz7atIY9RERocMwTMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNtlRfcX Iy7qPp9sVq68g/pz2++VTgmf2koOp3b64pU/4lqhvviqtibKSl8ynQxM3t2jJFSy 9ULe7d+Id0FlAQyWwyJg9doy1pnhE9zMpFyL5i+eE7XBDV+XIKtE7tFfbEDeFWRa BceF/tJmSCq6fKllhmQ4ZxtgQ/iWG9qQ/BwAeCfkmZ0Ep97d57/++u/43juc8CgF CiX2uNxg9oegcbbTgLreAJas2m0Q1qwXn8GR8vJccBpk6V+YmKO/f1C4ejEhrM16 4SVl+1k9tLBPzgFlF1Is1xiqoFmK7KAjAQwdeug6d19eFv3muXQrSPdPYmoGTkdH a9w3jfvy/iJvMw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:18 2025 by rpki-client