$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: KgQsAvRNMLywDgtD8qZT+3Au+U1U6UIVBRpRWks3BZo= Subject key identifier: 0F:03:DC:0A:72:CA:C4:57:DA:C4:E9:DF:33:5C:46:20:40:8B:CD:F2 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 0196D3D17A932AF683D8AD291308F38A3F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0979 Signing time: Thu 15 May 2025 12:00:43 +0000 Manifest this update: Thu 15 May 2025 12:00:43 +0000 Manifest next update: Fri 16 May 2025 12:00:43 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: P1/Wjx7SGh1H7vMcYovRZ6K5lVF5qUFlz3UlShwoNFo=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 May 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:d3:d1:7a:93:2a:f6:83:d8:ad:29:13:08:f3:8a:3f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: May 15 12:00:43 2025 GMT Not After : May 16 12:00:43 2025 GMT Subject: CN=0f03dc0a72cac457dac4e9df335c4620408bcdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:e7:46:eb:da:31:4c:00:44:01:81:ac:25: f6:ed:f9:b6:0c:57:6b:bb:95:38:af:95:7b:42:28: 03:17:33:8b:fe:ae:3e:e5:5a:97:b6:6c:2f:c1:e9: ed:af:65:dc:fe:34:a3:c8:35:88:56:89:38:f8:ca: a0:9d:f1:04:7c:48:ff:ee:33:f8:1c:c5:1c:2f:78: ee:d5:33:74:81:58:35:5a:87:60:06:68:a8:71:47: e7:a6:9b:75:93:1c:25:21:c5:c6:a8:2a:08:14:45: d8:32:e1:77:82:2f:16:39:1f:e2:24:b9:47:7b:36: 25:f5:dc:68:be:e1:4a:fd:81:19:bf:5e:14:3b:2d: ee:b3:2a:d5:04:70:48:e4:a6:48:ec:05:36:3d:ec: 58:2c:35:3c:3a:77:d0:07:19:78:64:c8:a2:2c:e5: 17:9d:ca:29:35:88:5c:7f:7e:97:17:7e:28:5e:84: 27:8e:96:6e:c7:22:12:e5:ab:44:8d:e2:48:71:9e: 8f:89:05:80:0d:bf:52:f5:94:5b:1f:fd:ca:fe:17: 9f:8c:db:89:47:a4:93:48:62:26:bd:54:34:d9:9b: a0:e8:67:45:fb:5f:a7:6a:b1:d4:55:78:c8:23:bc: 37:7c:53:13:c1:81:f0:5d:f4:a1:3f:6b:a5:c8:6a: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:DC:0A:72:CA:C4:57:DA:C4:E9:DF:33:5C:46:20:40:8B:CD:F2 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3c:5f:f4:8c:0c:06:4a:49:b6:9f:f8:9f:5a:87:ba:04:29: be:35:e1:d9:d1:ab:7e:a5:f2:19:b7:07:3c:e9:29:a7:e4:c3: d5:41:01:5e:8e:bc:60:ef:b8:7e:ae:7c:e5:0f:5d:a0:b7:38: 91:c6:c9:ea:e5:0f:5d:19:4e:3e:7a:7f:99:c2:88:b0:0d:e5: c4:69:ff:53:9b:f9:b4:00:7d:3f:fc:54:11:ad:c7:04:0f:cf: 7f:34:4a:62:b7:d7:19:90:92:72:b5:d2:1d:01:b3:86:b7:46: 48:6a:f5:08:dc:24:66:b5:3a:97:b0:34:4f:47:b4:ad:4a:cd: 78:70:f7:dd:bb:e4:0f:ef:08:79:fb:3d:b5:f4:61:97:4a:a4: 73:8b:04:cb:d5:57:6d:b7:f6:09:95:e8:7d:14:79:02:d7:8d: fd:62:45:0b:d3:22:4a:b4:18:23:63:0f:37:9f:9f:cf:fb:c5: 1b:e7:13:f2:4b:f1:e8:bf:7b:fd:75:74:f0:cb:d7:fd:ce:46: d0:10:8c:de:c8:0f:00:fe:e3:79:e0:c6:84:7d:6b:61:7f:46: 79:bd:c8:29:ef:67:cb:37:68:1b:55:98:25:cb:ac:b6:ee:bf: b1:67:15:c3:2f:75:90:7b:41:9b:bc:2b:a0:46:43:10:b7:06: b3:c0:03:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbT0XqTKvaD2K0pEwjzij9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwNTE1MTIwMDQzWhcNMjUwNTE2MTIwMDQzWjAzMTEwLwYDVQQD EygwZjAzZGMwYTcyY2FjNDU3ZGFjNGU5ZGYzMzVjNDYyMDQwOGJjZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ3nRuvaMUwARAGBrCX27fm2DFdr u5U4r5V7QigDFzOL/q4+5VqXtmwvwentr2Xc/jSjyDWIVok4+MqgnfEEfEj/7jP4 HMUcL3ju1TN0gVg1WodgBmiocUfnppt1kxwlIcXGqCoIFEXYMuF3gi8WOR/iJLlH ezYl9dxovuFK/YEZv14UOy3usyrVBHBI5KZI7AU2PexYLDU8OnfQBxl4ZMiiLOUX ncopNYhcf36XF34oXoQnjpZuxyIS5atEjeJIcZ6PiQWADb9S9ZRbH/3K/hefjNuJ R6STSGImvVQ02Zug6GdF+1+narHUVXjII7w3fFMTwYHwXfShP2ulyGpwZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8D3ApyysRX2sTp3zNcRiBAi83yMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjxf9IwM BkpJtp/4n1qHugQpvjXh2dGrfqXyGbcHPOkpp+TD1UEBXo68YO+4fq585Q9doLc4 kcbJ6uUPXRlOPnp/mcKIsA3lxGn/U5v5tAB9P/xUEa3HBA/PfzRKYrfXGZCScrXS HQGzhrdGSGr1CNwkZrU6l7A0T0e0rUrNeHD33bvkD+8Iefs9tfRhl0qkc4sEy9VX bbf2CZXofRR5AteN/WJFC9MiSrQYI2MPN5+fz/vFG+cT8kvx6L97/XV08MvX/c5G 0BCM3sgPAP7jeeDGhH1rYX9Geb3IKe9nyzdoG1WYJcustu6/sWcVwy91kHtBm7wr oEZDELcGs8AD0Q== -----END CERTIFICATE-----Generated at Thu May 15 19:34:56 2025 by rpki-client