$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: 2blBDzAaDqxVjjDmvxfwq56qs06YVo6dFgHYGe1Vf2E= Subject key identifier: 29:34:98:4B:D3:AE:40:0F:ED:EE:44:2B:18:45:5D:A9:3F:8A:AE:28 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 0196071D42E120D46131996C04E9F8E168F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 1437 Signing time: Sat 05 Apr 2025 18:01:20 +0000 Manifest this update: Sat 05 Apr 2025 18:01:20 +0000 Manifest next update: Sun 06 Apr 2025 18:01:20 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: 72hcj4wbVqPsCBOmP2-2q0gKVwk.roa (hash: JVI3uRWBk247N9J10ej5wPC2kk3iQ5bErEc04hMDgSI=) 4: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 5: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=) 6: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 7: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: XUIuRLM4u0ks7ZYb5R8lAwRijliH9wL92Y+yL+r3Rz4=) 8: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 9: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 10: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 11: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 12: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=) 13: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:07:1d:42:e1:20:d4:61:31:99:6c:04:e9:f8:e1:68:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Apr 5 18:01:20 2025 GMT Not After : Apr 6 18:01:20 2025 GMT Subject: CN=2934984bd3ae400fedee442b18455da93f8aae28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:97:44:06:1c:14:d9:01:ab:31:2a:40:6a:e2: 16:12:30:e3:df:60:9b:88:54:03:35:68:6a:10:9d: f3:09:31:8d:24:ff:ad:8f:36:51:df:29:94:20:98: c9:c2:89:13:92:81:3e:c7:ca:e5:8a:7b:ce:df:fc: 42:68:ce:4b:aa:43:87:39:d2:89:da:7e:0f:80:8d: b2:96:b4:a6:10:2e:3a:73:41:be:86:7f:4d:82:de: 5b:79:f5:78:1b:50:f6:cb:01:c3:77:20:53:33:ce: d0:51:c0:46:a1:5e:90:06:94:a9:10:7c:d8:f5:30: 24:01:df:57:07:60:37:cd:63:f8:e9:11:61:ed:ed: 79:cc:06:76:de:a6:c0:9e:12:07:0a:1d:ce:52:1b: 48:26:7c:c4:13:20:f3:df:49:a7:a8:81:41:12:60: f1:c5:87:90:b1:3f:0b:fd:3f:70:dd:76:93:47:b4: 51:1e:75:93:07:af:d1:a7:6e:57:66:bd:1a:5f:48: 30:af:fd:55:0f:80:35:66:e6:8c:8a:7f:e2:80:40: 38:16:ab:22:4a:3d:84:e8:df:81:ac:68:0e:a8:6d: b6:92:ef:4c:3d:d9:8e:43:6b:1e:3e:c7:72:a7:17: b5:7f:4b:a0:cf:6c:d5:f0:95:2b:99:66:6c:a4:60: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:34:98:4B:D3:AE:40:0F:ED:EE:44:2B:18:45:5D:A9:3F:8A:AE:28 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:96:b7:ba:5e:f2:de:20:c9:61:ec:1e:72:5d:45:35:2b:a0: af:96:7f:7f:34:63:03:6d:2a:4b:e1:fd:ed:ed:6e:3b:82:5b: 14:4a:42:de:24:6b:29:50:bd:89:89:29:e5:fb:4d:6c:63:5a: 4d:32:df:fc:e3:e6:5d:88:2a:90:ad:56:5a:e7:52:45:e4:2e: 1b:84:d4:c4:f3:ae:25:d1:00:2a:6b:47:7d:61:95:e6:dc:96: cd:bd:80:ab:27:26:18:ec:e4:50:77:a6:ab:07:42:22:2b:1c: bb:82:f4:69:6f:c5:59:78:18:42:16:62:6d:16:9f:24:c7:60: 2e:97:3e:1e:15:f2:54:85:8e:a7:30:9d:6d:99:ab:aa:8a:35: a6:26:d2:1d:ce:c2:0e:c0:58:1a:41:8f:11:2e:07:34:10:13: b5:bc:ac:bf:88:4f:80:32:a1:75:54:8c:61:4b:ff:87:a5:03: 1a:d7:12:5a:7a:5a:a9:77:17:8b:65:9b:13:be:55:0b:8e:ef: c7:75:b1:38:0f:19:e0:03:99:cd:fb:70:d0:80:3e:b6:b2:28: d6:23:14:f9:e2:c8:78:fe:46:ab:2c:de:ca:a1:97:dc:79:55: 89:1e:00:cb:50:bd:5e:9c:c0:8d:24:40:3a:e0:5a:93:c6:c1: 29:19:4a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYHHULhINRhMZlsBOn44Wj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUwNDA1MTgwMTIwWhcNMjUwNDA2MTgwMTIwWjAzMTEwLwYDVQQD EygyOTM0OTg0YmQzYWU0MDBmZWRlZTQ0MmIxODQ1NWRhOTNmOGFhZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZdEBhwU2QGrMSpAauIWEjDj32Cb iFQDNWhqEJ3zCTGNJP+tjzZR3ymUIJjJwokTkoE+x8rlinvO3/xCaM5LqkOHOdKJ 2n4PgI2ylrSmEC46c0G+hn9Ngt5befV4G1D2ywHDdyBTM87QUcBGoV6QBpSpEHzY 9TAkAd9XB2A3zWP46RFh7e15zAZ23qbAnhIHCh3OUhtIJnzEEyDz30mnqIFBEmDx xYeQsT8L/T9w3XaTR7RRHnWTB6/Rp25XZr0aX0gwr/1VD4A1ZuaMin/igEA4Fqsi Sj2E6N+BrGgOqG22ku9MPdmOQ2sePsdypxe1f0ugz2zV8JUrmWZspGDyyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk0mEvTrkAP7e5EKxhFXak/iq4oMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJa3ul7y 3iDJYewecl1FNSugr5Z/fzRjA20qS+H97e1uO4JbFEpC3iRrKVC9iYkp5ftNbGNa TTLf/OPmXYgqkK1WWudSReQuG4TUxPOuJdEAKmtHfWGV5tyWzb2AqycmGOzkUHem qwdCIiscu4L0aW/FWXgYQhZibRafJMdgLpc+HhXyVIWOpzCdbZmrqoo1pibSHc7C DsBYGkGPES4HNBATtbysv4hPgDKhdVSMYUv/h6UDGtcSWnpaqXcXi2WbE75VC47v x3WxOA8Z4AOZzftw0IA+trIo1iMU+eLIeP5GqyzeyqGX3HlViR4Ay1C9XpzAjSRA OuBak8bBKRlKJg== -----END CERTIFICATE-----Generated at Sun Apr 6 03:14:56 2025 by rpki-client