$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: oGEziIHkDoZo5k1/5J9cSJvX0us67hziErsotdWmbyg= Subject key identifier: E3:CC:D2:45:C6:C4:80:31:E3:88:7E:38:CD:B4:01:23:E6:3E:64:15 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019827B541E2CC5ACD262E2B312867606D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0A29 Signing time: Sun 20 Jul 2025 12:00:46 +0000 Manifest this update: Sun 20 Jul 2025 12:00:46 +0000 Manifest next update: Mon 21 Jul 2025 12:00:46 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (hash: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: YF8nk8pi4yXYbLfMccIIu9EapOHyAprSqdCXPEDlQ1Y=) 6: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 7: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 8: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 9: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 10: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:41:e2:cc:5a:cd:26:2e:2b:31:28:67:60:6d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jul 20 12:00:46 2025 GMT Not After : Jul 21 12:00:46 2025 GMT Subject: CN=e3ccd245c6c48031e3887e38cdb40123e63e6415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:dc:29:93:e6:c6:72:01:2a:f7:ba:b3:01: 17:5e:8e:68:3b:eb:17:e6:ea:4f:61:c2:51:92:ff: 8c:85:5b:f1:7a:65:98:7f:1b:9f:be:14:69:c8:8f: dc:c2:70:4f:31:49:e8:21:98:a4:5c:0d:48:ff:61: 5f:62:65:c8:af:24:9c:7b:25:19:d5:77:4a:18:2a: 1a:c8:6d:c0:3a:6e:dd:40:ba:02:35:96:11:8e:6d: 31:59:66:91:90:04:fd:db:a6:4e:5e:67:50:b1:d5: bc:7f:e7:3f:3e:20:be:4e:d3:f7:2f:34:78:0e:dd: 65:e2:69:7e:94:e4:e8:b4:38:ca:22:a6:f4:16:a0: eb:66:d6:77:14:5b:eb:ce:25:e7:a4:52:48:a7:27: d6:44:29:d5:01:e2:f8:b9:d8:08:2a:c1:33:8a:63: 34:f6:06:10:22:d6:de:0b:fb:7e:0f:3b:9d:26:8a: 2b:4d:3c:1c:3b:08:a5:30:7a:99:33:69:4f:5d:bb: 13:b7:fe:d6:06:bd:9c:cd:5c:76:bf:1d:2e:ae:e7: 01:1a:21:a3:f2:3e:5f:4a:19:96:e4:53:90:db:37: 80:41:33:16:64:e3:bd:17:1c:03:8a:5b:07:43:1e: cf:0c:1f:e9:b5:4b:d1:86:ee:cf:cc:55:5f:bb:da: 4e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:D2:45:C6:C4:80:31:E3:88:7E:38:CD:B4:01:23:E6:3E:64:15 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:2c:b2:33:37:3d:92:57:73:aa:2e:69:ff:76:26:70:98: 54:30:ba:ee:28:1f:ac:9d:74:05:35:9c:39:57:bd:c6:0a:c3: 95:2e:ef:d4:54:23:b4:e1:b3:e1:9b:03:37:fd:f2:da:6a:bf: b7:c8:93:ec:7a:15:14:5f:83:a5:a6:c3:8e:fd:4c:8b:9d:69: a0:cc:f5:92:6d:8a:d1:14:33:61:aa:f3:ac:7f:ac:8b:bc:00: f2:8e:20:58:ac:67:90:3d:52:92:ca:e4:85:55:03:c1:25:30: ec:ea:6d:5f:07:37:7f:cb:6a:1c:a3:b1:3b:39:a7:f1:b3:44: 0b:7f:2d:9a:43:f9:ce:4b:5c:b2:a2:af:da:6f:e7:60:2c:b8: 22:3a:fc:c0:c4:a4:6e:d6:1b:7f:18:4b:73:d7:cb:ee:0b:1b: 03:26:46:a0:30:2f:38:1f:62:91:e0:ac:9e:bd:ef:b6:40:a0: 95:22:2a:7b:82:b3:6f:65:30:28:04:13:f6:13:07:ee:30:80: 15:86:b3:d4:bf:23:cb:28:f5:2f:77:ea:bf:3d:b1:30:24:30: 85:f8:4a:37:21:fe:44:70:a4:50:c3:94:e6:7d:be:0b:28:78: 1e:c2:e5:58:da:52:5a:b0:ef:5b:d6:96:56:92:f9:7f:cd:f0: 09:32:19:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntUHizFrNJi4rMShnYG0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwNzIwMTIwMDQ2WhcNMjUwNzIxMTIwMDQ2WjAzMTEwLwYDVQQD EyhlM2NjZDI0NWM2YzQ4MDMxZTM4ODdlMzhjZGI0MDEyM2U2M2U2NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5jcKZPmxnIBKve6swEXXo5oO+sX 5upPYcJRkv+MhVvxemWYfxufvhRpyI/cwnBPMUnoIZikXA1I/2FfYmXIrySceyUZ 1XdKGCoayG3AOm7dQLoCNZYRjm0xWWaRkAT926ZOXmdQsdW8f+c/PiC+TtP3LzR4 Dt1l4ml+lOTotDjKIqb0FqDrZtZ3FFvrziXnpFJIpyfWRCnVAeL4udgIKsEzimM0 9gYQItbeC/t+DzudJoorTTwcOwilMHqZM2lPXbsTt/7WBr2czVx2vx0urucBGiGj 8j5fShmW5FOQ2zeAQTMWZOO9FxwDilsHQx7PDB/ptUvRhu7PzFVfu9pOOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPM0kXGxIAx44h+OM20ASPmPmQVMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLkssjM3 PZJXc6ouaf92JnCYVDC67igfrJ10BTWcOVe9xgrDlS7v1FQjtOGz4ZsDN/3y2mq/ t8iT7HoVFF+DpabDjv1Mi51poMz1km2K0RQzYarzrH+si7wA8o4gWKxnkD1Sksrk hVUDwSUw7OptXwc3f8tqHKOxOzmn8bNEC38tmkP5zktcsqKv2m/nYCy4Ijr8wMSk btYbfxhLc9fL7gsbAyZGoDAvOB9ikeCsnr3vtkCglSIqe4Kzb2UwKAQT9hMH7jCA FYaz1L8jyyj1L3fqvz2xMCQwhfhKNyH+RHCkUMOU5n2+Cyh4HsLlWNpSWrDvW9aW VpL5f83wCTIZOQ== -----END CERTIFICATE-----Generated at Sun Jul 20 20:44:55 2025 by rpki-client