$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: gRa6JtqPUNAwJJk6GM4Hx8s7fXhSqWAC6TUnYuguWoo= Subject key identifier: E0:FE:0F:1B:9F:2A:30:91:F4:C6:5F:2F:56:09:C7:17:A9:95:F0:93 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 0199FBEA8D25EF39EBAB44EAFF80CCE5F9B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0B1F Signing time: Sun 19 Oct 2025 10:01:16 +0000 Manifest this update: Sun 19 Oct 2025 10:01:16 +0000 Manifest next update: Mon 20 Oct 2025 10:01:16 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 4: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: zrfEIw36Xy98DKEkDa2HcP5qtNrdM8Len1WVetPsiIc=) 5: KynLe6Isqqlf4ymHTSDycoUXo6I.roa (hash: 5ToAaDMV3/VF4hOG6Q6X59h91PT10t726RRqo0H2234=) 6: R1122jvmaRFCyB-pLRYd5mvSj18.roa (hash: Mn7gPdy8qzzJOoR47mruMMkcr1ejf5GwtKlMHf6MI9I=) 7: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 8: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 9: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 10: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 11: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:8d:25:ef:39:eb:ab:44:ea:ff:80:cc:e5:f9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Oct 19 10:01:16 2025 GMT Not After : Oct 20 10:01:16 2025 GMT Subject: CN=e0fe0f1b9f2a3091f4c65f2f5609c717a995f093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:9b:af:f8:d3:39:f2:f6:ce:14:f4:d6:58: 97:22:98:d7:db:5a:27:65:fb:02:c1:aa:2d:0d:2c: 14:c4:ce:1f:7f:4a:16:19:b1:8e:07:24:e0:be:c1: c5:c6:01:cf:84:61:77:29:b8:2e:07:e8:f3:17:1c: 9f:48:24:de:45:88:98:75:d7:8e:a4:be:70:4e:1a: 7c:68:1e:12:40:95:50:86:8a:55:e6:ed:c6:de:90: 1e:4e:fc:fa:67:f2:a1:21:b2:74:10:be:6c:cd:a1: d3:d0:a0:ba:28:0e:eb:a2:6d:67:b3:df:40:4a:8e: 4b:06:e0:b0:40:8f:af:0d:ad:35:66:a3:87:0a:56: 39:72:3a:43:af:bb:22:a9:07:67:0d:f2:85:7d:6b: a4:9b:1d:70:06:31:e5:4f:ab:8c:cb:ae:0c:c9:a0: 19:57:27:c1:db:90:b5:95:1d:b0:0a:00:3b:99:2e: 08:e8:ad:b7:84:b3:b3:cb:db:bc:ad:a7:37:ba:81: 86:c4:1c:80:f8:ea:ad:fa:c8:e2:16:45:1d:0e:88: 3c:f3:b3:64:b6:5f:de:6e:15:5f:c0:35:9f:44:48: b2:e4:fc:9e:1f:c5:19:d3:5b:1b:73:e1:ab:d7:07: 7d:03:ed:dc:2b:af:37:0b:58:76:d4:9f:25:6b:e6: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FE:0F:1B:9F:2A:30:91:F4:C6:5F:2F:56:09:C7:17:A9:95:F0:93 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e1:2a:58:1f:24:9f:7b:94:f6:0d:6d:de:89:e5:41:3c:5e: f4:5a:bf:2c:f8:3b:49:eb:e4:68:aa:a5:ae:09:95:68:9e:1b: d7:65:4c:9f:0c:ce:f3:b1:f3:44:92:46:a8:71:5c:d8:49:bd: 59:51:1b:bf:ef:8f:70:41:67:84:4e:66:e5:be:b2:5d:5a:98: ad:a3:a6:8a:37:fd:48:54:40:de:92:3e:40:5b:aa:00:1f:54: 8f:89:d3:91:2f:f2:4d:2c:b1:38:a9:06:be:fe:d0:98:f4:dd: 79:67:5f:6b:71:0a:4a:43:c1:4d:30:e7:f5:c2:4b:c1:67:55: 9b:80:c3:38:6a:a4:c5:79:f7:f1:91:3a:7a:4b:ee:10:5e:c5: cd:f7:99:7e:f9:60:a4:d7:2e:12:ba:d8:09:20:d0:33:5d:a5: d3:dc:be:c9:b5:84:0e:ef:28:f2:d4:39:68:ec:eb:30:2f:7a: 1f:41:c8:fd:8a:32:d2:19:8b:5f:0c:2b:6d:13:7d:42:4e:9a: b6:08:9a:6a:ba:e1:13:07:e7:2a:5e:2d:23:07:8f:1f:76:87: 91:65:47:bc:7c:b8:cf:27:f9:c6:6c:de:97:c2:a4:e2:9a:59: 00:53:34:42:bd:5e:d8:d5:c0:ab:ec:14:39:f8:31:99:5d:78: 5b:9a:28:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76o0l7znrq0Tq/4DM5fmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUxMDE5MTAwMTE2WhcNMjUxMDIwMTAwMTE2WjAzMTEwLwYDVQQD EyhlMGZlMGYxYjlmMmEzMDkxZjRjNjVmMmY1NjA5YzcxN2E5OTVmMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAWbr/jTOfL2zhT01liXIpjX21on ZfsCwaotDSwUxM4ff0oWGbGOByTgvsHFxgHPhGF3KbguB+jzFxyfSCTeRYiYddeO pL5wThp8aB4SQJVQhopV5u3G3pAeTvz6Z/KhIbJ0EL5szaHT0KC6KA7rom1ns99A So5LBuCwQI+vDa01ZqOHClY5cjpDr7siqQdnDfKFfWukmx1wBjHlT6uMy64MyaAZ VyfB25C1lR2wCgA7mS4I6K23hLOzy9u8rac3uoGGxByA+Oqt+sjiFkUdDog887Nk tl/ebhVfwDWfREiy5PyeH8UZ01sbc+Gr1wd9A+3cK683C1h21J8la+Y1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD+DxufKjCR9MZfL1YJxxeplfCTMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuEqWB8k n3uU9g1t3onlQTxe9Fq/LPg7SevkaKqlrgmVaJ4b12VMnwzO87HzRJJGqHFc2Em9 WVEbv++PcEFnhE5m5b6yXVqYraOmijf9SFRA3pI+QFuqAB9Uj4nTkS/yTSyxOKkG vv7QmPTdeWdfa3EKSkPBTTDn9cJLwWdVm4DDOGqkxXn38ZE6ekvuEF7FzfeZfvlg pNcuErrYCSDQM12l09y+ybWEDu8o8tQ5aOzrMC96H0HI/Yoy0hmLXwwrbRN9Qk6a tgiaarrhEwfnKl4tIwePH3aHkWVHvHy4zyf5xmzel8Kk4ppZAFM0Qr1e2NXAq+wU OfgxmV14W5oo2w== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:07 2025 by rpki-client