$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: mSB564pRnGpAY18fP06cd4hEmUk8eWX7bJ8JTCjM0Z8= Subject key identifier: 7D:CE:00:17:A1:16:AA:83:51:69:7E:01:FA:49:CF:DD:89:F5:77:81 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 0197B5FC349A7437F6DC8A941B898EDCF4D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1637 Signing time: Sat 28 Jun 2025 10:01:34 +0000 Manifest this update: Sat 28 Jun 2025 10:01:34 +0000 Manifest next update: Sun 29 Jun 2025 10:01:34 +0000 Files and hashes: 1: 66Xx5jDxNG0NmEQTOBPZWLsuDKU.roa (hash: YRP6vRA01LYM57+OEVE980SXFAryoZ4goaiztW4UpGM=) 2: 9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa (hash: Oql2v+O9dkhZ+7DYGfNZ3rdk/RuxC5q8FGZSbg+O9ds=) 3: B4tXNlare14cowDjlo4rc0k_Zys.roa (hash: LEb0l/0l4H7UFoxjjJjVz7LmnnvIxt4/UaJwY97TnpU=) 4: FJI79V-E-Y8UfKwl5_2LUDC0vxk.roa (hash: s16fEPA86b4JhDOB7SlXoJoOFthluuA5WBAQi1o/CVQ=) 5: I1gXlx046mNGwZ1Ahc41ozPoiSc.roa (hash: Tz5OeewMV1usaK3mD/N1zYSxy42INKdmwhHFFgrv9M0=) 6: NDiuqs_F6U9vhyoOyITvy1edxEE.roa (hash: JmO6c3RyiGwLx214FmPPWsfWGCX/kkf39Cg5s9Tt4H4=) 7: PKaqbyS2JUmUFWkanNtnUVOeb0k.roa (hash: XnxdB7QCFZRrLjw5gBqAaLpQdzzFZf/2WrRe2aVUvEM=) 8: WWTHjuXP-hTM6s4kv4UB1sZumBk.roa (hash: 5/7bb2uZROWFeHu9uoqvJqUFYOsZ2Pi3Cof+OpFAoMI=) 9: g8OvlCg4M_LLYJ6bBQfa3qDygtM.roa (hash: /qXBTOslZR34Pb+CWF3w3swrkdRrWHLjJPxnYymdULY=) 10: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: +WFJRhPHcI2z1x4MCfj28rHsAio0/ke6veYXU29NMF4=) 11: hqbCZvBXzB77KHtqHXMD1fWA6kY.roa (hash: GUn5Uq/ONwTDRfgsRO2JjkxvZemRk4JP3fq+QqdcYLA=) 12: sel0Pjdv_dXk3SBzodZnhOMFOK8.roa (hash: /3JEX9WN7+Xu1r9ZBKcIYhcWh19ks1nzbzFN0VRMlhM=) 13: vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa (hash: FcifxZKaLaj+zYPf8uRmVdxTjjrSLXukIUCG3S6YYo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fc:34:9a:74:37:f6:dc:8a:94:1b:89:8e:dc:f4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jun 28 10:01:34 2025 GMT Not After : Jun 29 10:01:34 2025 GMT Subject: CN=7dce0017a116aa8351697e01fa49cfdd89f57781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:e8:cc:8f:f1:5b:fc:9d:3f:34:bb:9a:48: 84:c3:e1:e5:0f:62:fa:9d:5b:54:2a:9a:f5:fb:e8: 5b:78:1a:8f:64:ea:71:2c:49:de:d4:06:77:b6:8e: 56:0d:c8:e0:8d:b9:6d:cb:71:55:81:d6:dd:49:a4: f5:9c:74:68:53:78:51:96:47:5a:7a:df:28:18:e2: eb:c2:ad:c9:0f:b0:fc:ae:50:5b:9c:15:b2:63:41: b0:22:9f:6a:65:d9:e6:9d:93:0b:9f:19:bb:37:2e: 11:23:c0:d6:99:07:2f:a2:95:42:6e:23:bf:c8:3e: c8:63:1d:fc:ad:89:4f:38:da:ed:23:61:e1:3e:9b: eb:88:60:98:4a:1e:3b:7a:e3:57:27:12:dc:6a:f3: 47:94:60:97:33:6f:c5:87:d8:22:30:2e:d2:71:63: 08:0c:f4:12:7f:c4:42:27:1d:93:37:39:50:60:31: ad:2d:aa:20:5c:af:1b:9b:05:bc:ee:a9:7d:81:6f: 34:f0:b2:50:71:2b:2a:5f:72:1b:fb:ab:59:d7:26: 47:63:19:4d:f7:4a:c0:b4:4e:e5:38:fc:5e:ae:af: d0:97:35:08:c7:a0:42:90:97:70:a3:cd:5e:64:bc: 5f:14:23:d1:ac:01:a2:b3:3e:49:ac:c8:da:bb:4e: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CE:00:17:A1:16:AA:83:51:69:7E:01:FA:49:CF:DD:89:F5:77:81 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c1:89:bb:7c:86:00:9d:4f:af:2c:b4:60:54:90:38:de:a2: 69:03:4c:79:43:50:23:b8:73:e6:ad:c7:52:a5:bf:09:dc:a7: 57:02:c4:70:5d:1c:e8:9c:3e:1f:ee:a6:d5:0e:e1:cf:ec:45: 98:29:a5:ed:4e:7e:8d:5b:4f:98:2a:47:1f:58:fb:b4:65:35: 69:1e:54:81:40:1f:cc:9d:eb:c6:9f:16:71:52:f5:c4:7f:b1: a2:09:bb:ae:30:26:9d:2c:d6:cc:07:4f:73:c9:d5:0f:bd:a6: f4:77:82:26:8c:c7:e3:37:e5:b5:b1:6f:08:a0:3d:32:21:13: 76:f6:d4:91:fc:3e:a6:6d:c5:38:76:ec:14:9a:ba:11:b8:50: 28:47:c1:a3:36:cc:27:16:84:52:d7:58:31:d8:61:78:ae:c7: 81:69:97:93:92:91:c9:6d:ef:e2:54:91:01:4e:e6:6b:73:44: 5b:56:96:c2:91:ff:90:89:a5:62:91:37:7c:37:cf:51:4a:b7: cc:82:d0:74:1a:48:27:6a:88:51:8f:fe:3a:26:82:e6:92:f3: 1d:44:30:82:17:a5:4d:77:81:74:8f:b4:85:41:7c:f8:d2:cd: 13:b5:a1:39:6b:0c:b3:8e:06:97:20:ee:56:2f:90:0e:3c:0a: 22:9d:f6:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1/DSadDf23IqUG4mO3PTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUwNjI4MTAwMTM0WhcNMjUwNjI5MTAwMTM0WjAzMTEwLwYDVQQD Eyg3ZGNlMDAxN2ExMTZhYTgzNTE2OTdlMDFmYTQ5Y2ZkZDg5ZjU3NzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryXozI/xW/ydPzS7mkiEw+HlD2L6 nVtUKpr1++hbeBqPZOpxLEne1AZ3to5WDcjgjblty3FVgdbdSaT1nHRoU3hRlkda et8oGOLrwq3JD7D8rlBbnBWyY0GwIp9qZdnmnZMLnxm7Ny4RI8DWmQcvopVCbiO/ yD7IYx38rYlPONrtI2HhPpvriGCYSh47euNXJxLcavNHlGCXM2/Fh9giMC7ScWMI DPQSf8RCJx2TNzlQYDGtLaogXK8bmwW87ql9gW808LJQcSsqX3Ib+6tZ1yZHYxlN 90rAtE7lOPxerq/QlzUIx6BCkJdwo81eZLxfFCPRrAGisz5JrMjau06CJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3OABehFqqDUWl+AfpJz92J9XeBMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMGJu3yG AJ1Pryy0YFSQON6iaQNMeUNQI7hz5q3HUqW/CdynVwLEcF0c6Jw+H+6m1Q7hz+xF mCml7U5+jVtPmCpHH1j7tGU1aR5UgUAfzJ3rxp8WcVL1xH+xogm7rjAmnSzWzAdP c8nVD72m9HeCJozH4zfltbFvCKA9MiETdvbUkfw+pm3FOHbsFJq6EbhQKEfBozbM JxaEUtdYMdhheK7HgWmXk5KRyW3v4lSRAU7ma3NEW1aWwpH/kImlYpE3fDfPUUq3 zILQdBpIJ2qIUY/+OiaC5pLzHUQwghelTXeBdI+0hUF8+NLNE7WhOWsMs44GlyDu Vi+QDjwKIp32qQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:07:14 2025 by rpki-client