$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: Ct6bwUcPPocye1KFm5HamxeZYrqCWuDKEPVJlH+Gw7Y= Subject key identifier: 97:C4:C2:E5:BE:CE:56:BA:98:27:8D:10:F3:59:88:F1:47:78:21:6B Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 0198CB01AAA2C8BA8CEAD1DEFF9210492F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 3D Signing time: Thu 21 Aug 2025 05:02:20 +0000 Manifest this update: Thu 21 Aug 2025 05:02:20 +0000 Manifest next update: Fri 22 Aug 2025 05:02:20 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: bH7c+9Ha3sU513xkI3BQkcSkmN44KHs2/dBXolGGmdU=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 9: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 10: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 11: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Aug 2025 05:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:cb:01:aa:a2:c8:ba:8c:ea:d1:de:ff:92:10:49:2f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Aug 21 05:02:20 2025 GMT Not After : Aug 22 05:02:20 2025 GMT Subject: CN=97c4c2e5bece56ba98278d10f35988f14778216b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:77:61:b5:81:73:9e:ca:34:f9:a9:98:5c: 8d:41:e4:ba:60:48:2f:3b:f2:66:92:f0:ce:a9:9b: 5d:a5:98:1a:71:45:b8:e4:85:7e:ed:c1:d0:45:12: f3:05:4a:c5:90:2b:37:1e:47:8a:80:7d:8f:ef:c6: 17:1c:37:a6:3f:80:95:90:61:d7:ba:ff:ad:16:42: 80:3a:ca:7e:34:0d:b2:dd:a5:fd:49:8e:ff:01:af: 91:d2:c4:8a:d5:4e:08:33:e5:af:9a:17:74:53:74: 4e:cc:79:90:b7:d4:39:bb:c0:85:f9:21:86:c7:8b: 0c:4d:97:5e:76:17:ba:79:ee:06:e9:e4:6b:fe:dc: 7c:cd:43:a7:34:9b:df:f2:f2:f5:b2:f9:90:34:f1: ba:10:04:4d:5f:8f:b8:e9:ca:d7:52:ba:34:2f:2f: 77:f4:16:df:29:04:97:0e:d3:28:03:27:6a:eb:ce: 5c:b4:fc:18:2e:a9:d7:ab:55:a5:0b:07:91:0a:00: 4f:4e:24:2a:3a:f0:f2:75:4f:9e:ad:79:b5:20:71: 2a:bf:79:6c:4a:a3:f3:8c:7d:24:4a:cf:77:f3:05: 1b:58:5f:ca:17:18:e8:8e:f9:1d:ff:f7:8a:77:59: 77:1f:19:65:04:22:25:80:7b:28:92:08:72:9d:11: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C4:C2:E5:BE:CE:56:BA:98:27:8D:10:F3:59:88:F1:47:78:21:6B X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:49:81:96:67:86:db:44:46:d1:e8:7d:87:91:8d:f1:ce:27: 3a:c9:db:02:fe:c0:53:c0:90:6c:5a:81:fc:99:1d:89:a7:32: 53:5c:b0:5f:20:0b:35:35:89:bf:8f:41:0c:d9:1a:cb:77:a8: 7f:98:d5:06:78:4b:67:ce:7a:24:3b:77:56:0f:7b:60:4f:8c: 1d:c9:36:5e:65:c6:3a:28:fb:6a:30:29:af:56:7b:b5:80:a5: 39:c0:08:b7:27:0d:0e:6b:e4:77:03:6d:92:6e:65:84:4c:95: d0:e6:77:b0:5b:32:5c:eb:b3:09:03:fd:40:2e:f1:59:bd:ab: 39:8a:d0:3e:1f:7d:bb:e5:ad:f6:fe:fe:22:16:79:a0:7d:57: ab:58:9c:4c:f0:04:03:63:d5:04:83:07:b4:b9:c5:d4:4c:9f: 41:d4:6a:c9:89:2e:37:45:b8:4d:e5:e0:ee:74:9b:91:b8:7f: 33:f8:5b:f5:c0:60:d9:ee:64:3a:af:b1:95:8d:84:a7:af:74: 92:7b:a8:45:ca:97:ef:b5:26:03:3c:00:e3:00:21:ee:9d:6f: 70:9a:22:dd:1c:e5:4a:e1:54:6f:f8:2a:a0:a6:40:19:c0:af: 7c:59:93:ed:28:3c:37:ef:54:5a:70:3f:5d:9b:80:82:bc:a1: 05:ab:b3:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjLAaqiyLqM6tHe/5IQSS+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUwODIxMDUwMjIwWhcNMjUwODIyMDUwMjIwWjAzMTEwLwYDVQQD Eyg5N2M0YzJlNWJlY2U1NmJhOTgyNzhkMTBmMzU5ODhmMTQ3NzgyMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKN3YbWBc57KNPmpmFyNQeS6YEgv O/JmkvDOqZtdpZgacUW45IV+7cHQRRLzBUrFkCs3HkeKgH2P78YXHDemP4CVkGHX uv+tFkKAOsp+NA2y3aX9SY7/Aa+R0sSK1U4IM+Wvmhd0U3ROzHmQt9Q5u8CF+SGG x4sMTZdedhe6ee4G6eRr/tx8zUOnNJvf8vL1svmQNPG6EARNX4+46crXUro0Ly93 9BbfKQSXDtMoAydq685ctPwYLqnXq1WlCweRCgBPTiQqOvDydU+erXm1IHEqv3ls SqPzjH0kSs938wUbWF/KFxjojvkd//eKd1l3HxllBCIlgHsokghynRF8wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfEwuW+zla6mCeNEPNZiPFHeCFrMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkmBlmeG 20RG0eh9h5GN8c4nOsnbAv7AU8CQbFqB/JkdiacyU1ywXyALNTWJv49BDNkay3eo f5jVBnhLZ856JDt3Vg97YE+MHck2XmXGOij7ajApr1Z7tYClOcAItycNDmvkdwNt km5lhEyV0OZ3sFsyXOuzCQP9QC7xWb2rOYrQPh99u+Wt9v7+IhZ5oH1Xq1icTPAE A2PVBIMHtLnF1EyfQdRqyYkuN0W4TeXg7nSbkbh/M/hb9cBg2e5kOq+xlY2Ep690 knuoRcqX77UmAzwA4wAh7p1vcJoi3RzlSuFUb/gqoKZAGcCvfFmT7Sg8N+9UWnA/ XZuAgryhBauzRg== -----END CERTIFICATE-----Generated at Thu Aug 21 10:24:09 2025 by rpki-client