$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: ndW9tnI1+UXfBuSQRlfWIm91hbTrAfQqjt0PZDSaEq0= Subject key identifier: D6:D1:F5:C4:CD:36:CA:F4:4E:E0:AF:7B:50:B8:03:AE:86:35:15:16 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 0198D3966C048B3E6050A79BAD0AD97F1540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0A82 Signing time: Fri 22 Aug 2025 21:01:47 +0000 Manifest this update: Fri 22 Aug 2025 21:01:47 +0000 Manifest next update: Sat 23 Aug 2025 21:01:47 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: LmqpE/2owcHAAKsa4Wao/O0K/Rj7IEdgvRJkUQhgpuY=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 21:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d3:96:6c:04:8b:3e:60:50:a7:9b:ad:0a:d9:7f:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Aug 22 21:01:47 2025 GMT Not After : Aug 23 21:01:47 2025 GMT Subject: CN=d6d1f5c4cd36caf44ee0af7b50b803ae86351516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:7e:7c:a9:41:f7:cd:3e:ca:a7:05:8b:41: f3:31:59:7e:2a:27:f2:f2:90:21:42:4b:55:a9:62: ea:1b:ee:fe:d7:d6:ba:72:a5:5b:44:d2:35:2e:56: 0e:d2:82:83:fe:06:02:08:9e:cb:25:a1:7b:68:3e: f9:91:ff:51:d0:ad:05:53:bd:cc:e9:dc:60:75:28: 37:9e:5d:43:2c:ff:3c:6a:0f:d2:65:52:56:17:fb: 72:05:1e:0e:5b:29:b3:c5:6a:4a:7e:ed:1c:29:80: f3:b6:73:c5:1a:b4:d9:6f:7d:80:8a:51:82:82:0f: 7f:10:2c:9f:3c:92:10:9e:0c:98:35:24:48:31:47: 95:0d:d2:b5:9c:12:f7:8f:b0:c2:37:a7:17:ed:85: 71:1b:8e:6b:ff:46:48:cc:72:76:b2:f6:74:d0:24: f9:db:c1:93:81:1e:85:ac:ef:c3:68:27:f9:67:5b: 85:9d:2f:92:18:7e:15:71:53:53:97:5e:c7:e7:91: c7:d1:17:e9:fb:db:68:2d:45:b2:d9:79:5b:4a:77: c5:a6:64:a2:23:0b:3f:2b:dd:90:40:94:01:34:a0: 35:87:05:fe:b7:70:a3:75:b2:27:d3:98:2a:af:8e: ae:81:81:2a:d0:c5:d4:ee:f7:63:53:8f:c2:9b:50: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D1:F5:C4:CD:36:CA:F4:4E:E0:AF:7B:50:B8:03:AE:86:35:15:16 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:da:fa:d4:f8:9d:9d:b9:c9:fb:a7:96:68:51:65:30:41:5a: 2f:8c:e6:9e:33:e4:bb:fd:7e:38:0d:08:45:5f:e4:df:73:2f: f3:9c:6d:08:50:d4:cb:48:aa:4a:52:51:0f:70:00:05:c8:f0: c8:34:59:2e:de:22:00:8a:6e:50:68:13:94:90:08:5e:4d:ca: 80:26:b0:33:b6:92:1b:cb:c7:2f:50:9c:9a:01:49:5b:f9:67: d1:c8:cc:24:b9:00:24:7d:f4:91:9e:71:52:c7:f2:06:3c:48: ff:eb:e2:79:80:61:2f:2f:5e:45:6b:3d:38:95:16:5b:23:a8: fd:03:3c:8e:7e:05:0a:86:24:a9:73:dd:72:a7:8c:af:e2:45: f0:65:4f:7e:9b:f3:75:66:42:c8:ce:08:cb:2d:75:78:4a:ce: da:8d:08:46:77:d6:9f:0e:c3:1b:52:7c:0b:3d:87:ed:b0:2b: 9b:60:39:42:fb:49:0e:4b:65:89:7f:37:76:5c:68:15:9e:c4: b0:fb:39:25:8e:93:65:8c:6c:cd:c6:d0:39:66:b1:b1:b8:45: fe:bb:5f:99:2a:79:69:9f:c4:a8:ce:9f:53:63:04:49:0e:18: ee:64:9b:52:26:07:4b:72:a1:f9:fe:73:ad:45:50:55:1d:5c: 47:be:58:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjTlmwEiz5gUKebrQrZfxVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwODIyMjEwMTQ3WhcNMjUwODIzMjEwMTQ3WjAzMTEwLwYDVQQD EyhkNmQxZjVjNGNkMzZjYWY0NGVlMGFmN2I1MGI4MDNhZTg2MzUxNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfh+fKlB980+yqcFi0HzMVl+Kify 8pAhQktVqWLqG+7+19a6cqVbRNI1LlYO0oKD/gYCCJ7LJaF7aD75kf9R0K0FU73M 6dxgdSg3nl1DLP88ag/SZVJWF/tyBR4OWymzxWpKfu0cKYDztnPFGrTZb32AilGC gg9/ECyfPJIQngyYNSRIMUeVDdK1nBL3j7DCN6cX7YVxG45r/0ZIzHJ2svZ00CT5 28GTgR6FrO/DaCf5Z1uFnS+SGH4VcVNTl17H55HH0Rfp+9toLUWy2XlbSnfFpmSi Iws/K92QQJQBNKA1hwX+t3CjdbIn05gqr46ugYEq0MXU7vdjU4/Cm1AcdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbR9cTNNsr0TuCve1C4A66GNRUWMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtr61Pid nbnJ+6eWaFFlMEFaL4zmnjPku/1+OA0IRV/k33Mv85xtCFDUy0iqSlJRD3AABcjw yDRZLt4iAIpuUGgTlJAIXk3KgCawM7aSG8vHL1CcmgFJW/ln0cjMJLkAJH30kZ5x UsfyBjxI/+vieYBhLy9eRWs9OJUWWyOo/QM8jn4FCoYkqXPdcqeMr+JF8GVPfpvz dWZCyM4Iyy11eErO2o0IRnfWnw7DG1J8Cz2H7bArm2A5QvtJDktliX83dlxoFZ7E sPs5JY6TZYxszcbQOWaxsbhF/rtfmSp5aZ/EqM6fU2MESQ4Y7mSbUiYHS3Kh+f5z rUVQVR1cR75YUQ== -----END CERTIFICATE-----Generated at Sat Aug 23 07:07:05 2025 by rpki-client