$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: BDsM+GrV6uuCJQ7DyUZt/k98Mxkti6Y24Il+Wyi9eeo= Subject key identifier: 17:99:71:68:F2:71:B1:B8:01:88:2A:B8:C8:13:15:6F:E3:29:3C:B9 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 01992C6B3EE4E10E3B1AB0A3F0738332271D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 15D9 Signing time: Tue 09 Sep 2025 03:00:49 +0000 Manifest this update: Tue 09 Sep 2025 03:00:49 +0000 Manifest next update: Wed 10 Sep 2025 03:00:49 +0000 Files and hashes: 1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=) 2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=) 3: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=) 4: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=) 5: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=) 6: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: Du2Z5Y1Im8JOjLlMzg6/697yoOcY2KLmx9FVKbrQ/Qk=) 7: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=) 8: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=) 9: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=) 10: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=) 11: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=) 12: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:6b:3e:e4:e1:0e:3b:1a:b0:a3:f0:73:83:32:27:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Sep 9 03:00:49 2025 GMT Not After : Sep 10 03:00:49 2025 GMT Subject: CN=17997168f271b1b801882ab8c813156fe3293cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:f8:09:08:15:4b:c8:65:65:ba:d1:29:76: 67:2d:a3:02:f9:3d:41:4b:31:34:3d:54:a2:43:12: c8:5e:98:40:f5:0c:b9:3f:a8:f5:14:84:2f:7a:9e: aa:c8:a0:41:90:13:f6:9e:7c:03:ce:75:06:97:e7: 22:b7:6f:82:3b:7e:ef:d7:1e:1f:a7:e6:79:af:37: ec:e3:41:4c:11:e6:5e:15:8b:41:2d:50:cd:30:e5: bd:a0:77:a4:d1:38:86:e8:4c:c5:c2:35:ea:13:31: 00:ac:6b:f5:a8:a1:96:88:09:82:2a:e7:6e:a6:2d: 5f:b7:22:4d:bf:97:65:c9:13:01:85:9e:3b:74:89: 58:82:46:1d:18:e1:04:b4:b1:a7:3f:e6:8b:35:f2: db:06:9d:32:da:48:45:2f:d7:3b:8f:23:56:06:f7: 53:ca:b9:1e:3b:e5:44:84:54:a2:9d:25:8e:e5:fa: 5d:80:27:95:2e:d3:1a:eb:ca:c8:6f:7c:84:99:03: 1d:a1:64:7a:d3:71:84:29:49:b8:e8:8d:b5:eb:6e: f3:9e:96:f6:7c:22:c4:93:8e:d6:1a:64:ed:2d:d2: 42:50:a9:53:62:59:61:56:04:72:bf:2e:eb:07:d0: 4d:37:98:76:e8:5b:6a:4d:5b:48:80:7c:db:9b:c9: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:99:71:68:F2:71:B1:B8:01:88:2A:B8:C8:13:15:6F:E3:29:3C:B9 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:96:e5:ac:21:c4:18:b4:73:f2:bc:6f:63:38:bf:c6:0f:ae: 94:fd:b3:4c:f9:a3:ea:54:28:d1:68:4a:96:97:93:a8:cd:35: fa:5b:09:8f:f0:3d:b7:5a:54:2e:10:12:48:60:43:c9:1b:af: f7:96:ce:36:15:61:7a:93:66:82:23:21:33:33:2e:4f:76:87: 26:26:18:c9:56:b2:73:ca:72:d3:15:cd:2f:69:a5:60:cb:b3: 06:b5:d6:9b:9e:9b:dd:af:11:e0:b5:a4:f7:dd:e5:d8:6e:25: 6a:5d:0d:e3:ea:23:e3:b2:67:3e:8f:5a:6f:e9:59:b9:c1:1e: bf:32:0f:45:5e:c7:90:88:3f:81:b9:ce:c1:dc:81:b1:d1:0f: 34:4f:6d:d9:77:3b:84:43:a1:7c:11:45:1b:34:51:81:ea:23: 98:c0:b6:33:50:97:86:91:cf:aa:be:ee:d5:54:0e:41:39:e1: ea:25:dc:3c:fa:32:cf:ad:f8:00:2b:7f:6e:12:d3:e6:cf:04: 4d:e5:53:c7:78:24:75:11:fb:00:bd:a4:05:60:6e:a6:00:8d: 55:dd:e1:8a:65:f6:9e:a9:af:68:a9:ba:2a:54:e5:96:ad:b8: ae:1e:3c:8d:28:12:1b:a3:09:0f:85:42:21:0c:f6:71:99:18: ff:96:c5:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksaz7k4Q47GrCj8HODMicdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjUwOTA5MDMwMDQ5WhcNMjUwOTEwMDMwMDQ5WjAzMTEwLwYDVQQD EygxNzk5NzE2OGYyNzFiMWI4MDE4ODJhYjhjODEzMTU2ZmUzMjkzY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j34CQgVS8hlZbrRKXZnLaMC+T1B SzE0PVSiQxLIXphA9Qy5P6j1FIQvep6qyKBBkBP2nnwDznUGl+cit2+CO37v1x4f p+Z5rzfs40FMEeZeFYtBLVDNMOW9oHek0TiG6EzFwjXqEzEArGv1qKGWiAmCKudu pi1ftyJNv5dlyRMBhZ47dIlYgkYdGOEEtLGnP+aLNfLbBp0y2khFL9c7jyNWBvdT yrkeO+VEhFSinSWO5fpdgCeVLtMa68rIb3yEmQMdoWR603GEKUm46I21627znpb2 fCLEk47WGmTtLdJCUKlTYllhVgRyvy7rB9BNN5h26FtqTVtIgHzbm8niqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeZcWjycbG4AYgquMgTFW/jKTy5MB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5blrCHE GLRz8rxvYzi/xg+ulP2zTPmj6lQo0WhKlpeTqM01+lsJj/A9t1pULhASSGBDyRuv 95bONhVhepNmgiMhMzMuT3aHJiYYyVayc8py0xXNL2mlYMuzBrXWm56b3a8R4LWk 993l2G4lal0N4+oj47JnPo9ab+lZucEevzIPRV7HkIg/gbnOwdyBsdEPNE9t2Xc7 hEOhfBFFGzRRgeojmMC2M1CXhpHPqr7u1VQOQTnh6iXcPPoyz634ACt/bhLT5s8E TeVTx3gkdRH7AL2kBWBupgCNVd3himX2nqmvaKm6KlTllq24rh48jSgSG6MJD4VC IQz2cZkY/5bF7w== -----END CERTIFICATE-----Generated at Tue Sep 9 09:13:31 2025 by rpki-client