$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: zX1h4ibSFrkUlgFdh5mFqgTmtF25cJEAo4uvw4/EPgE= Subject key identifier: 5C:62:12:85:D8:B1:13:3E:54:96:33:4A:77:FB:67:13:CD:49:40:E2 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 0196A0F63A6551F7C3C74F3A9A710366B088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 15A3 Signing time: Mon 05 May 2025 15:00:13 +0000 Manifest this update: Mon 05 May 2025 15:00:13 +0000 Manifest next update: Tue 06 May 2025 15:00:13 +0000 Files and hashes: 1: 66Xx5jDxNG0NmEQTOBPZWLsuDKU.roa (hash: YRP6vRA01LYM57+OEVE980SXFAryoZ4goaiztW4UpGM=) 2: 9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa (hash: Oql2v+O9dkhZ+7DYGfNZ3rdk/RuxC5q8FGZSbg+O9ds=) 3: BGevSFnT8xf0CHSmJ5dghUTZM0Y.roa (hash: RseQir4/MNTB+/zBlyt2uTS8Nl4/HA8197lwxaxF7lE=) 4: BMTWySXXoYp4j_6ntbs2-ohamFg.roa (hash: Edn46RrNIn8d7M7n7vHt7AEpc6kjHSKwgJ18d66oH+s=) 5: ExQ7BMgc74xVetqFHwRsutEdeS4.roa (hash: M+qyO+EOHZP7TGK2JjRjUGT20V4FYkmgqLUSP7YWWKw=) 6: I1gXlx046mNGwZ1Ahc41ozPoiSc.roa (hash: Tz5OeewMV1usaK3mD/N1zYSxy42INKdmwhHFFgrv9M0=) 7: NDiuqs_F6U9vhyoOyITvy1edxEE.roa (hash: JmO6c3RyiGwLx214FmPPWsfWGCX/kkf39Cg5s9Tt4H4=) 8: PKaqbyS2JUmUFWkanNtnUVOeb0k.roa (hash: XnxdB7QCFZRrLjw5gBqAaLpQdzzFZf/2WrRe2aVUvEM=) 9: TqHiNLl5mrjOhHbAFYixfR0hyKw.roa (hash: tKiuSdrZ18K8HL6wtj4abrvFTNBZIcj3M0BhwfBqXJw=) 10: WWTHjuXP-hTM6s4kv4UB1sZumBk.roa (hash: 5/7bb2uZROWFeHu9uoqvJqUFYOsZ2Pi3Cof+OpFAoMI=) 11: g8OvlCg4M_LLYJ6bBQfa3qDygtM.roa (hash: /qXBTOslZR34Pb+CWF3w3swrkdRrWHLjJPxnYymdULY=) 12: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: RK38ltf/UYzPEv17rk9pF94u3N5RDLcggCItbYPCQdY=) 13: hqbCZvBXzB77KHtqHXMD1fWA6kY.roa (hash: GUn5Uq/ONwTDRfgsRO2JjkxvZemRk4JP3fq+QqdcYLA=) 14: vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa (hash: FcifxZKaLaj+zYPf8uRmVdxTjjrSLXukIUCG3S6YYo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a0:f6:3a:65:51:f7:c3:c7:4f:3a:9a:71:03:66:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: May 5 15:00:13 2025 GMT Not After : May 6 15:00:13 2025 GMT Subject: CN=5c621285d8b1133e5496334a77fb6713cd4940e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:12:b1:06:ff:de:a4:c7:27:4a:b1:e8:dd: 99:6b:a8:bc:ce:98:1c:41:79:eb:a0:e4:c4:f1:03: 0a:e1:20:92:8c:b2:eb:41:43:41:4d:d8:f3:37:b0: 15:d6:2e:a5:c0:cb:8d:a7:c8:8e:24:5a:24:1d:f9: 3f:42:75:05:a3:90:73:0b:f6:f3:03:58:81:28:ea: 1f:6d:35:45:7e:10:ac:0b:fd:b7:be:7f:63:1d:28: ef:db:b7:5d:62:10:fa:3a:8d:49:2b:9e:96:a3:14: aa:77:d8:d9:da:d3:44:e1:b7:83:c8:46:1d:73:52: b5:d4:d2:b2:4e:53:d9:cd:42:c8:e4:96:a2:54:22: 52:5a:48:f4:db:59:dd:da:b5:83:d2:7b:bd:d1:9b: f4:99:59:27:a6:db:af:99:8b:3c:cb:c6:a8:cd:8d: cc:ba:e4:9b:52:4f:1d:33:da:b5:d3:60:a6:e9:4e: 37:a7:4a:85:9f:26:a3:3b:57:88:92:18:12:49:e3: 0c:f7:30:74:a9:b2:9a:ca:fe:b3:45:14:09:c6:a7: cc:c9:be:1b:55:9e:0e:9e:81:d9:f8:d2:60:4a:cb: 3c:a5:21:38:a9:c6:6b:6d:7e:01:23:0e:b9:12:1c: a4:d6:e4:a8:ba:25:64:2f:05:76:71:32:13:4e:e5: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:62:12:85:D8:B1:13:3E:54:96:33:4A:77:FB:67:13:CD:49:40:E2 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c3:c2:5f:98:9b:73:af:97:a2:de:6b:44:09:db:37:bb:7b: 73:e1:fc:d5:7d:0a:00:8c:b1:3b:ca:c5:0b:e3:90:bc:3a:d2: 24:4c:e8:30:26:34:53:ba:2b:63:7d:04:6e:28:16:45:58:28: 24:8e:17:3f:44:24:30:5d:4a:e8:ce:6e:b5:c1:92:84:c9:8c: f5:f3:9e:5e:e6:fd:35:5a:ec:f1:9d:53:8b:80:9d:36:3a:9f: 78:19:2f:d1:e9:80:10:63:62:f9:0b:28:0d:d0:55:b2:2e:a4: 22:92:fb:a7:99:af:86:b0:27:1e:86:79:e1:d1:1a:21:b9:95: 22:9b:80:f6:88:4a:bd:2e:52:87:e1:1f:09:4c:35:16:76:1a: c9:2b:78:0c:72:a9:6c:9a:12:ca:b0:c3:cc:c8:8b:a9:d8:cb: 0d:34:e4:3d:3c:0b:4c:bb:13:ba:23:fa:59:66:20:31:b5:a8: dd:1f:76:8f:45:74:cd:a5:d1:99:c6:51:34:3e:9f:79:35:e5: da:e9:b2:6f:d1:18:70:e9:dc:18:52:f3:12:36:64:48:d4:3e: fe:e4:2a:42:d2:fa:75:d6:77:ca:64:26:ac:94:d6:27:dd:4d: 63:4e:40:59:07:a9:f9:e3:45:5b:ad:69:39:c6:aa:4c:67:e3: 5b:da:9b:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZag9jplUffDx086mnEDZrCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUwNTA1MTUwMDEzWhcNMjUwNTA2MTUwMDEzWjAzMTEwLwYDVQQD Eyg1YzYyMTI4NWQ4YjExMzNlNTQ5NjMzNGE3N2ZiNjcxM2NkNDk0MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozcSsQb/3qTHJ0qx6N2Za6i8zpgc QXnroOTE8QMK4SCSjLLrQUNBTdjzN7AV1i6lwMuNp8iOJFokHfk/QnUFo5BzC/bz A1iBKOofbTVFfhCsC/23vn9jHSjv27ddYhD6Oo1JK56WoxSqd9jZ2tNE4beDyEYd c1K11NKyTlPZzULI5JaiVCJSWkj021nd2rWD0nu90Zv0mVknptuvmYs8y8aozY3M uuSbUk8dM9q102Cm6U43p0qFnyajO1eIkhgSSeMM9zB0qbKayv6zRRQJxqfMyb4b VZ4OnoHZ+NJgSss8pSE4qcZrbX4BIw65Ehyk1uSouiVkLwV2cTITTuU5AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxiEoXYsRM+VJYzSnf7ZxPNSUDiMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccPCX5ib c6+Xot5rRAnbN7t7c+H81X0KAIyxO8rFC+OQvDrSJEzoMCY0U7orY30EbigWRVgo JI4XP0QkMF1K6M5utcGShMmM9fOeXub9NVrs8Z1Ti4CdNjqfeBkv0emAEGNi+Qso DdBVsi6kIpL7p5mvhrAnHoZ54dEaIbmVIpuA9ohKvS5Sh+EfCUw1FnYaySt4DHKp bJoSyrDDzMiLqdjLDTTkPTwLTLsTuiP6WWYgMbWo3R92j0V0zaXRmcZRND6feTXl 2umyb9EYcOncGFLzEjZkSNQ+/uQqQtL6ddZ3ymQmrJTWJ91NY05AWQep+eNFW61p OcaqTGfjW9qb+Q== -----END CERTIFICATE-----Generated at Mon May 5 20:48:57 2025 by rpki-client