$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: 2j+SpCn/8QdyKQXKlEIhiIAdIlNMNec4Q3WzlXL+GhY= Subject key identifier: 68:82:89:A0:F8:30:42:60:77:65:14:8D:DE:7E:53:D9:8A:47:11:6A Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 01985645AACA2E326EFF3B9511DA6AEFDB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 168A Signing time: Tue 29 Jul 2025 13:01:02 +0000 Manifest this update: Tue 29 Jul 2025 13:01:02 +0000 Manifest next update: Wed 30 Jul 2025 13:01:02 +0000 Files and hashes: 1: 66Xx5jDxNG0NmEQTOBPZWLsuDKU.roa (hash: YRP6vRA01LYM57+OEVE980SXFAryoZ4goaiztW4UpGM=) 2: 9DFkE_ONLMsSYFORUmyk0ZRSKTA.roa (hash: Oql2v+O9dkhZ+7DYGfNZ3rdk/RuxC5q8FGZSbg+O9ds=) 3: B4tXNlare14cowDjlo4rc0k_Zys.roa (hash: LEb0l/0l4H7UFoxjjJjVz7LmnnvIxt4/UaJwY97TnpU=) 4: FJI79V-E-Y8UfKwl5_2LUDC0vxk.roa (hash: s16fEPA86b4JhDOB7SlXoJoOFthluuA5WBAQi1o/CVQ=) 5: I1gXlx046mNGwZ1Ahc41ozPoiSc.roa (hash: Tz5OeewMV1usaK3mD/N1zYSxy42INKdmwhHFFgrv9M0=) 6: NDiuqs_F6U9vhyoOyITvy1edxEE.roa (hash: JmO6c3RyiGwLx214FmPPWsfWGCX/kkf39Cg5s9Tt4H4=) 7: PKaqbyS2JUmUFWkanNtnUVOeb0k.roa (hash: XnxdB7QCFZRrLjw5gBqAaLpQdzzFZf/2WrRe2aVUvEM=) 8: WWTHjuXP-hTM6s4kv4UB1sZumBk.roa (hash: 5/7bb2uZROWFeHu9uoqvJqUFYOsZ2Pi3Cof+OpFAoMI=) 9: g8OvlCg4M_LLYJ6bBQfa3qDygtM.roa (hash: /qXBTOslZR34Pb+CWF3w3swrkdRrWHLjJPxnYymdULY=) 10: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: IT40nE04mcKwxMFlHyUcwjA6JLpESnJQQZP/eAOfTb8=) 11: hqbCZvBXzB77KHtqHXMD1fWA6kY.roa (hash: GUn5Uq/ONwTDRfgsRO2JjkxvZemRk4JP3fq+QqdcYLA=) 12: sel0Pjdv_dXk3SBzodZnhOMFOK8.roa (hash: /3JEX9WN7+Xu1r9ZBKcIYhcWh19ks1nzbzFN0VRMlhM=) 13: vG7IqBR6mOg-uBOkyC4NuXuE-oU.roa (hash: FcifxZKaLaj+zYPf8uRmVdxTjjrSLXukIUCG3S6YYo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:56:45:aa:ca:2e:32:6e:ff:3b:95:11:da:6a:ef:db:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jul 29 13:01:02 2025 GMT Not After : Jul 30 13:01:02 2025 GMT Subject: CN=688289a0f83042607765148dde7e53d98a47116a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:0d:ee:2d:4f:10:ca:bf:05:ab:fe:ea:e4: 8a:1c:ee:dc:20:1d:1d:1f:ae:8f:95:31:c0:2c:bb: aa:d7:61:de:7a:a1:9e:ef:95:4b:d8:7a:17:53:bc: 6d:54:34:12:bd:a2:6c:af:c4:59:64:1d:9d:05:05: 3d:02:80:ca:3e:b8:29:a5:97:55:41:46:13:05:87: d7:1a:f2:ea:b7:90:c6:71:3d:cb:ec:13:fd:61:00: 12:ae:f1:0e:7b:d2:18:8d:2b:08:d2:c8:77:93:ab: 82:b4:a6:bd:90:3f:77:bf:64:10:3b:52:71:4e:d6: dc:3c:0f:ac:5c:89:22:58:f8:a8:45:24:24:a4:88: 61:b8:4b:e0:00:e5:ee:c8:e3:14:0e:fa:63:30:89: 4a:6c:23:eb:e5:64:07:4c:61:1a:e7:7f:c3:3b:0e: 3e:7d:2a:29:de:2c:ed:0f:9b:23:bd:2c:b2:5e:20: 15:e2:53:bc:72:b8:46:83:20:84:7d:27:5f:a3:91: 09:5f:63:ac:ba:19:48:8c:94:77:82:03:4e:8a:94: 89:01:e4:7b:41:d1:de:16:3e:34:4f:ec:e6:dd:cb: 7c:c9:42:f9:31:10:9f:bd:23:33:d8:15:94:fb:2d: 50:53:b7:a6:12:09:f7:4a:43:ea:d4:34:81:df:c2: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:82:89:A0:F8:30:42:60:77:65:14:8D:DE:7E:53:D9:8A:47:11:6A X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ad:53:71:e4:1b:ff:30:70:8e:26:98:72:65:61:96:39:83: 98:60:76:b1:b9:fd:b6:2e:2a:0f:6f:5f:ce:98:84:c6:6a:fe: d4:d9:51:57:ea:15:43:6a:5b:dd:cd:e7:34:5a:66:df:3f:36: 37:c1:fe:53:ad:d3:2c:42:f8:38:59:38:c9:8e:d9:d1:6f:99: c4:a5:01:d5:59:6b:3b:a2:1c:81:c8:ce:77:17:11:4d:71:ae: 07:8b:0c:01:54:05:ad:e0:f8:19:64:5e:a1:07:e0:fc:b3:ff: e5:02:3a:fa:3e:9a:bc:21:59:8b:72:6a:53:2a:52:3f:22:27: db:82:9c:96:bc:1c:ad:95:1b:d0:24:b7:b3:ca:47:cf:4e:b0: 0b:05:1f:e0:04:01:72:cf:81:10:02:8a:16:4c:66:11:e2:06: ed:ac:ea:33:28:61:6c:23:fb:95:c3:10:26:4e:d7:97:e2:9a: c3:bf:81:0f:ad:5e:0a:65:71:e5:1d:d5:1e:db:d5:81:6a:e6: 59:8d:e1:08:f0:00:4b:47:7e:6c:d9:b8:f7:27:b3:36:26:56: 34:9a:19:d9:38:6a:77:b0:69:69:49:77:e6:c4:b9:72:ae:70: 24:af:1a:e9:42:a3:dc:3b:b0:6b:d5:1a:1e:60:c2:0d:d3:dd: 64:06:c1:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhWRarKLjJu/zuVEdpq79smMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUwNzI5MTMwMTAyWhcNMjUwNzMwMTMwMTAyWjAzMTEwLwYDVQQD Eyg2ODgyODlhMGY4MzA0MjYwNzc2NTE0OGRkZTdlNTNkOThhNDcxMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWUN7i1PEMq/Bav+6uSKHO7cIB0d H66PlTHALLuq12HeeqGe75VL2HoXU7xtVDQSvaJsr8RZZB2dBQU9AoDKPrgppZdV QUYTBYfXGvLqt5DGcT3L7BP9YQASrvEOe9IYjSsI0sh3k6uCtKa9kD93v2QQO1Jx TtbcPA+sXIkiWPioRSQkpIhhuEvgAOXuyOMUDvpjMIlKbCPr5WQHTGEa53/DOw4+ fSop3iztD5sjvSyyXiAV4lO8crhGgyCEfSdfo5EJX2OsuhlIjJR3ggNOipSJAeR7 QdHeFj40T+zm3ct8yUL5MRCfvSMz2BWU+y1QU7emEgn3SkPq1DSB38L+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiCiaD4MEJgd2UUjd5+U9mKRxFqMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX61TceQb /zBwjiaYcmVhljmDmGB2sbn9ti4qD29fzpiExmr+1NlRV+oVQ2pb3c3nNFpm3z82 N8H+U63TLEL4OFk4yY7Z0W+ZxKUB1VlrO6IcgcjOdxcRTXGuB4sMAVQFreD4GWRe oQfg/LP/5QI6+j6avCFZi3JqUypSPyIn24KclrwcrZUb0CS3s8pHz06wCwUf4AQB cs+BEAKKFkxmEeIG7azqMyhhbCP7lcMQJk7Xl+Kaw7+BD61eCmVx5R3VHtvVgWrm WY3hCPAAS0d+bNm49yezNiZWNJoZ2Thqd7BpaUl35sS5cq5wJK8a6UKj3Duwa9Ua HmDCDdPdZAbBng== -----END CERTIFICATE-----Generated at Tue Jul 29 14:39:00 2025 by rpki-client