$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: TWM41BTccz2QIp8B81X8VZJv0nqmXuS17AuC5d8Eh54= Subject key identifier: 1F:6C:00:F1:04:1A:F1:59:86:F1:2A:59:5D:3E:79:83:C6:8E:2A:10 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 0199EE9CEFB5DC9D7FCD7CD672BF41D7391C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: D4 Signing time: Thu 16 Oct 2025 20:01:26 +0000 Manifest this update: Thu 16 Oct 2025 20:01:26 +0000 Manifest next update: Fri 17 Oct 2025 20:01:26 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: wMf0tZgGBHJlpwxqudGq829gD4o0QRLa2+wb7KAN3gs=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 9: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 10: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 11: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Oct 2025 20:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ee:9c:ef:b5:dc:9d:7f:cd:7c:d6:72:bf:41:d7:39:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Oct 16 20:01:26 2025 GMT Not After : Oct 17 20:01:26 2025 GMT Subject: CN=1f6c00f1041af15986f12a595d3e7983c68e2a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:31:06:22:44:5e:fa:d9:62:6d:71:2c:b5: 10:86:16:60:ee:62:93:4c:c3:c1:59:56:81:d8:da: 29:8f:d7:5c:0e:2f:10:c6:52:17:62:a5:e7:e1:ea: 3e:69:9d:60:c5:1d:b6:0d:db:95:8f:b3:93:2e:d2: a6:af:76:e0:aa:ca:3d:71:b3:35:07:2d:0a:b8:e0: 69:84:34:77:06:36:c5:af:8d:2a:33:a0:79:d5:ff: 49:45:05:d5:e3:be:aa:55:ab:64:9b:c4:63:5e:09: 0d:2d:24:be:f1:d5:37:5b:f9:e9:ab:51:e6:20:5a: bc:35:89:e0:2b:f4:72:71:de:f6:86:84:f8:1d:16: 97:cc:28:c2:35:89:12:e4:24:ca:1e:c5:d0:0e:89: b1:76:93:a5:0c:62:38:dc:15:0e:24:94:47:54:0e: c1:f8:f3:71:7e:16:ec:1e:f6:f9:a0:0d:dc:8c:68: 01:45:79:49:ce:c0:77:45:14:b1:6d:6a:94:e1:68: 5a:22:71:9a:8c:ee:33:46:02:5c:73:21:69:37:20: 08:18:f4:3c:99:a9:3f:fa:ed:5d:e3:12:7c:71:7a: 6d:b2:3c:8d:8f:2c:bc:90:d4:82:a9:2a:b0:d6:25: e2:be:f6:58:29:ae:a5:03:83:f6:36:7a:90:c0:0d: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:00:F1:04:1A:F1:59:86:F1:2A:59:5D:3E:79:83:C6:8E:2A:10 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8f:81:07:0d:79:63:11:dc:a3:27:b1:b0:5e:64:a1:06:26: 96:71:9c:be:94:ee:2f:2f:4f:fe:1a:fe:64:fd:98:5b:dc:c7: 98:92:1c:c2:b3:eb:9f:87:21:45:c8:5e:2d:d4:da:f2:1d:1d: 24:45:05:33:90:38:0b:39:54:25:ad:b5:0a:77:4a:5b:36:03: ae:c5:59:09:15:5f:7b:09:7f:35:fe:f4:31:08:5b:40:1f:f2: 01:b0:fa:f0:8c:3d:da:55:98:7c:92:9c:84:4f:9e:3e:cf:75: 89:e0:60:67:6e:91:57:3c:82:f4:da:f6:cd:15:93:f9:96:7f: b9:cc:a0:2d:c3:17:b8:40:e1:7e:13:69:78:0e:b2:65:c4:4e: 90:0b:20:f4:62:82:83:e0:14:76:af:eb:d2:23:56:6a:fe:6a: 8d:20:cf:06:dc:07:1a:07:a9:d1:24:fc:a7:f9:a8:70:9e:16: 20:dd:68:1d:36:d7:8e:a3:52:8a:45:3b:16:ef:1c:33:46:35: 04:91:ed:73:ef:c3:b0:62:ca:1f:1a:59:93:c8:72:49:20:46: fe:0d:91:40:7c:60:cf:70:7e:63:30:17:c7:b9:07:97:cf:71: ca:9b:26:07:99:fe:13:c3:f9:4d:58:7d:fb:ba:f4:f5:bc:64: 33:04:b5:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnunO+13J1/zXzWcr9B1zkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUxMDE2MjAwMTI2WhcNMjUxMDE3MjAwMTI2WjAzMTEwLwYDVQQD EygxZjZjMDBmMTA0MWFmMTU5ODZmMTJhNTk1ZDNlNzk4M2M2OGUyYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9UxBiJEXvrZYm1xLLUQhhZg7mKT TMPBWVaB2Nopj9dcDi8QxlIXYqXn4eo+aZ1gxR22DduVj7OTLtKmr3bgqso9cbM1 By0KuOBphDR3BjbFr40qM6B51f9JRQXV476qVatkm8RjXgkNLSS+8dU3W/npq1Hm IFq8NYngK/Rycd72hoT4HRaXzCjCNYkS5CTKHsXQDomxdpOlDGI43BUOJJRHVA7B +PNxfhbsHvb5oA3cjGgBRXlJzsB3RRSxbWqU4WhaInGajO4zRgJccyFpNyAIGPQ8 mak/+u1d4xJ8cXptsjyNjyy8kNSCqSqw1iXivvZYKa6lA4P2NnqQwA3grQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9sAPEEGvFZhvEqWV0+eYPGjioQMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4+BBw15 YxHcoyexsF5koQYmlnGcvpTuLy9P/hr+ZP2YW9zHmJIcwrPrn4chRcheLdTa8h0d JEUFM5A4CzlUJa21CndKWzYDrsVZCRVfewl/Nf70MQhbQB/yAbD68Iw92lWYfJKc hE+ePs91ieBgZ26RVzyC9Nr2zRWT+ZZ/ucygLcMXuEDhfhNpeA6yZcROkAsg9GKC g+AUdq/r0iNWav5qjSDPBtwHGgep0ST8p/mocJ4WIN1oHTbXjqNSikU7Fu8cM0Y1 BJHtc+/DsGLKHxpZk8hySSBG/g2RQHxgz3B+YzAXx7kHl89xypsmB5n+E8P5TVh9 +7r09bxkMwS1+Q== -----END CERTIFICATE-----Generated at Fri Oct 17 04:35:15 2025 by rpki-client