$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: G0NUNxpYX+IqsRdMA9Ui3GDrRuf3h7QI02/jlhaePYA= Subject key identifier: 43:C6:D2:52:14:62:A7:44:FC:19:BD:69:24:1C:AE:AA:39:75:15:92 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 0196BA11AC03999F8B0530BD16D5F04C14A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 1436 Signing time: Sat 10 May 2025 12:00:42 +0000 Manifest this update: Sat 10 May 2025 12:00:42 +0000 Manifest next update: Sun 11 May 2025 12:00:42 +0000 Files and hashes: 1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=) 2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=) 3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=) 4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=) 5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=) 6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: DFCcpyVRr+kxI2HBASy96qT249BrGt7udjCOfW6/2Og=) 8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=) 9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=) 10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=) 11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:11:ac:03:99:9f:8b:05:30:bd:16:d5:f0:4c:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: May 10 12:00:42 2025 GMT Not After : May 11 12:00:42 2025 GMT Subject: CN=43c6d2521462a744fc19bd69241caeaa39751592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:1e:ca:4b:6e:3b:7e:5b:6c:d8:f3:52:8d: d5:ee:c7:a6:a7:92:6a:20:29:fc:8d:88:73:5f:f8: 01:1a:91:28:b9:cf:0f:04:48:2c:bb:0c:b1:84:83: 36:5d:37:80:cf:22:6c:a5:79:31:8e:22:c8:94:0d: 0f:a7:99:f1:e2:02:db:0a:66:c5:fe:73:13:f6:4b: fa:c7:cc:91:c8:4e:3c:4b:05:48:9c:56:c0:99:46: 22:a8:d6:af:1c:f0:01:c1:6a:f9:69:75:b0:9e:cc: ec:bb:8c:81:f4:8f:4b:ef:c1:ae:07:4a:1b:e9:aa: 6c:86:ea:23:03:ea:08:e0:a4:61:49:27:ee:21:95: 08:03:14:47:00:24:8f:05:fe:85:07:53:62:ed:c5: 42:24:35:0c:c6:a8:6f:a8:e7:d8:14:d4:b2:cc:2e: 55:db:7c:2f:ca:47:1d:3f:89:fc:df:f2:59:6d:9e: d0:fe:b6:5a:ba:51:74:9c:33:63:04:8a:6b:9c:97: 61:68:39:26:c6:e9:81:8f:00:58:06:08:ec:f0:85: da:7d:42:f3:fe:01:fb:40:6e:aa:64:32:a9:ec:1c: 85:b5:55:8b:8c:45:28:af:08:fe:89:73:02:6e:17: b8:a7:23:54:03:9d:54:a8:c8:c1:24:f8:ac:a7:d1: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:D2:52:14:62:A7:44:FC:19:BD:69:24:1C:AE:AA:39:75:15:92 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:15:a2:a6:2b:c3:df:9d:55:cd:68:c4:75:78:63:c7:f7:fb: 88:ec:ee:d6:c6:63:25:fa:66:26:50:93:66:05:ad:24:36:58: 58:ee:12:92:65:2e:de:66:3c:c9:6b:43:31:e0:ac:01:7a:f6: be:ba:27:50:a0:6a:a5:ba:da:11:c6:fe:8c:fc:79:e3:81:6f: e4:99:f8:18:8c:86:04:b5:0f:81:5b:7c:e2:5b:cf:db:ac:56: 8a:0b:c9:b8:ed:8a:bd:13:8b:31:8c:bb:98:32:5e:38:ce:0f: 0a:22:fa:e9:29:ea:0d:b0:ab:d6:2e:c1:e8:35:b2:a8:8b:27: 66:4a:06:8d:53:6b:9b:32:be:3a:b9:58:10:af:7c:42:e3:92: 57:2e:e3:3f:34:6b:2e:70:da:62:c8:38:66:84:34:b4:3f:2a: 1b:92:98:ad:cf:58:8d:34:4a:c5:be:4d:05:1f:50:b2:c5:d7: 71:03:d1:04:4b:30:a3:3f:5c:a3:b7:36:4b:27:e1:7c:0e:13: 7e:46:fc:87:05:30:02:7e:df:91:77:02:dd:2c:ba:c1:c9:2c: 3a:48:61:38:bb:1d:68:77:c1:02:cc:60:bc:11:02:ad:3a:f6: 3a:b2:1f:5a:2a:a0:fd:d5:cb:dc:4b:de:89:12:67:ee:ef:27: c4:6d:6d:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6EawDmZ+LBTC9FtXwTBSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjUwNTEwMTIwMDQyWhcNMjUwNTExMTIwMDQyWjAzMTEwLwYDVQQD Eyg0M2M2ZDI1MjE0NjJhNzQ0ZmMxOWJkNjkyNDFjYWVhYTM5NzUxNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXUeyktuO35bbNjzUo3V7semp5Jq ICn8jYhzX/gBGpEouc8PBEgsuwyxhIM2XTeAzyJspXkxjiLIlA0Pp5nx4gLbCmbF /nMT9kv6x8yRyE48SwVInFbAmUYiqNavHPABwWr5aXWwnszsu4yB9I9L78GuB0ob 6apshuojA+oI4KRhSSfuIZUIAxRHACSPBf6FB1Ni7cVCJDUMxqhvqOfYFNSyzC5V 23wvykcdP4n83/JZbZ7Q/rZaulF0nDNjBIprnJdhaDkmxumBjwBYBgjs8IXafULz /gH7QG6qZDKp7ByFtVWLjEUorwj+iXMCbhe4pyNUA51UqMjBJPisp9HEiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPG0lIUYqdE/Bm9aSQcrqo5dRWSMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRWipivD 351VzWjEdXhjx/f7iOzu1sZjJfpmJlCTZgWtJDZYWO4SkmUu3mY8yWtDMeCsAXr2 vronUKBqpbraEcb+jPx544Fv5Jn4GIyGBLUPgVt84lvP26xWigvJuO2KvROLMYy7 mDJeOM4PCiL66SnqDbCr1i7B6DWyqIsnZkoGjVNrmzK+OrlYEK98QuOSVy7jPzRr LnDaYsg4ZoQ0tD8qG5KYrc9YjTRKxb5NBR9QssXXcQPRBEswoz9co7c2SyfhfA4T fkb8hwUwAn7fkXcC3Sy6wcksOkhhOLsdaHfBAsxgvBECrTr2OrIfWiqg/dXL3Eve iRJn7u8nxG1tlg== -----END CERTIFICATE-----Generated at Sat May 10 19:29:46 2025 by rpki-client