$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: yH1Fzjtdt7bJDAgcCY02QG1yVKoB1u4sxUPpsAvPXeo= Subject key identifier: BB:17:40:C4:1D:C5:E5:C9:61:E0:9C:13:A5:CF:FC:10:12:C4:FE:0D Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 01991BAE31C47A3510D8A0A98A3B12459E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0AA8 Signing time: Fri 05 Sep 2025 21:00:24 +0000 Manifest this update: Fri 05 Sep 2025 21:00:24 +0000 Manifest next update: Sat 06 Sep 2025 21:00:24 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: D2hB000xPlbBSZ6xgi4gfPCqlbE.roa (hash: KlYhV9C+9GNNwheGn7iRVSX1lORaoc1ghtLAo+2XQg0=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: lbFQAS9FeqOFzP2qzcFtQafDNUkGta+i2ic0fEXoMXw=) 6: R1122jvmaRFCyB-pLRYd5mvSj18.roa (hash: Mn7gPdy8qzzJOoR47mruMMkcr1ejf5GwtKlMHf6MI9I=) 7: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 8: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 9: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 10: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 11: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1b:ae:31:c4:7a:35:10:d8:a0:a9:8a:3b:12:45:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Sep 5 21:00:24 2025 GMT Not After : Sep 6 21:00:24 2025 GMT Subject: CN=bb1740c41dc5e5c961e09c13a5cffc1012c4fe0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:31:f1:6b:38:52:e7:2a:04:91:b4:17:f4: 1f:10:de:55:a7:a1:0f:e3:76:55:58:7b:cb:39:e3: bb:a1:27:46:69:b7:43:1a:ba:df:ef:1f:28:f6:a4: 19:7b:ff:4e:e1:9b:30:11:ac:36:e8:35:16:77:1b: 04:c1:0e:90:ab:aa:15:5f:06:56:81:24:12:3f:f1: 8d:b3:56:02:8c:22:97:b9:bb:e8:0d:81:41:c6:10: e8:72:43:fe:78:cd:11:bd:93:bd:b8:aa:0d:aa:04: e7:13:76:14:d5:c9:7a:25:8a:b7:02:03:d4:5d:01: 46:3e:7a:39:7a:13:04:fa:cb:92:71:d5:6a:d3:87: a9:6e:06:4f:9b:39:e7:65:03:47:0c:24:63:1b:2d: 06:bb:d0:06:cf:9e:db:f8:c1:ae:87:23:bd:7b:31: 19:63:b2:81:2c:ad:ad:8c:c9:4d:24:9a:6e:53:5e: 7f:95:e0:0e:9e:9b:68:53:d0:62:45:f4:b7:fc:e1: 10:c6:ac:b2:fd:8e:91:68:b1:31:a8:69:df:55:84: 01:54:47:7f:ba:c4:90:2b:89:a4:2b:59:2a:61:17: e6:82:d3:9c:32:d7:8e:ef:f9:fe:99:e8:f3:79:5a: 48:7d:b2:16:ea:3c:e0:ff:d7:f8:2b:32:e7:69:76: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:17:40:C4:1D:C5:E5:C9:61:E0:9C:13:A5:CF:FC:10:12:C4:FE:0D X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0d:c5:85:5b:0f:8c:a0:b4:59:68:ff:29:7c:0b:ea:df:8a: 0a:82:b3:d8:86:1f:01:90:ea:d7:77:b9:3e:fe:9e:91:04:06: 62:8e:c2:49:f2:b3:70:41:1e:d4:82:dd:62:8a:b9:d5:01:2f: 80:37:97:1d:bd:8c:75:5f:48:d2:c8:95:03:2c:51:67:ee:c0: 1b:db:c1:fa:f8:af:62:2a:f4:ac:66:fa:0e:39:53:7c:28:62: cd:bd:e7:94:68:29:78:6e:50:03:c6:49:e1:eb:0e:dd:c1:98: 0e:b2:ee:7d:44:69:ae:64:b4:ae:e6:dc:8d:fb:2b:6b:41:a0: c7:e0:a1:7e:03:b6:9d:24:cf:6d:98:6a:b3:96:55:d0:b7:7a: a6:19:7b:8c:0b:e8:f0:74:6f:f0:fe:c6:3c:e5:e3:b6:31:8e: 20:09:6b:7a:27:19:b4:80:95:97:6c:64:95:e8:9a:1d:29:f1: 68:ad:81:59:01:06:8e:a8:a6:b9:dd:aa:f3:55:e8:8e:9d:32: e3:42:fb:64:19:6f:ab:75:0e:73:d0:4b:75:50:ce:45:41:22: c3:cd:91:6b:e1:12:11:80:3e:a0:a5:64:bc:27:31:19:1b:bb: d7:bf:17:82:96:a9:d2:e6:19:c8:26:be:52:46:6e:e9:0b:4a: 7d:6f:30:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkbrjHEejUQ2KCpijsSRZ5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUwOTA1MjEwMDI0WhcNMjUwOTA2MjEwMDI0WjAzMTEwLwYDVQQD EyhiYjE3NDBjNDFkYzVlNWM5NjFlMDljMTNhNWNmZmMxMDEyYzRmZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYx8Ws4UucqBJG0F/QfEN5Vp6EP 43ZVWHvLOeO7oSdGabdDGrrf7x8o9qQZe/9O4ZswEaw26DUWdxsEwQ6Qq6oVXwZW gSQSP/GNs1YCjCKXubvoDYFBxhDockP+eM0RvZO9uKoNqgTnE3YU1cl6JYq3AgPU XQFGPno5ehME+suScdVq04epbgZPmznnZQNHDCRjGy0Gu9AGz57b+MGuhyO9ezEZ Y7KBLK2tjMlNJJpuU15/leAOnptoU9BiRfS3/OEQxqyy/Y6RaLExqGnfVYQBVEd/ usSQK4mkK1kqYRfmgtOcMteO7/n+mejzeVpIfbIW6jzg/9f4KzLnaXZeQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsXQMQdxeXJYeCcE6XP/BASxP4NMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw3FhVsP jKC0WWj/KXwL6t+KCoKz2IYfAZDq13e5Pv6ekQQGYo7CSfKzcEEe1ILdYoq51QEv gDeXHb2MdV9I0siVAyxRZ+7AG9vB+vivYir0rGb6DjlTfChizb3nlGgpeG5QA8ZJ 4esO3cGYDrLufURprmS0rubcjfsra0Ggx+ChfgO2nSTPbZhqs5ZV0Ld6phl7jAvo 8HRv8P7GPOXjtjGOIAlreicZtICVl2xkleiaHSnxaK2BWQEGjqimud2q81Xojp0y 40L7ZBlvq3UOc9BLdVDORUEiw82Ra+ESEYA+oKVkvCcxGRu7178Xgpap0uYZyCa+ UkZu6QtKfW8wUA== -----END CERTIFICATE-----Generated at Sat Sep 6 05:01:49 2025 by rpki-client