$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: TW2vW9KlrJkwM1P1cfjzGbVwI9vVdQiN5HZBtrVo4CU= Subject key identifier: EF:F2:F6:01:D2:46:0C:23:74:89:5C:BF:6E:74:7B:65:58:13:ED:83 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019A08252EAF13D6AA7F29928A164F596EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0B26 Signing time: Tue 21 Oct 2025 19:00:45 +0000 Manifest this update: Tue 21 Oct 2025 19:00:45 +0000 Manifest next update: Wed 22 Oct 2025 19:00:45 +0000 Files and hashes: 1: 2qbv-Pz4jvP3wMojh-nzxxXsgEA.roa (hash: 6+tOpgdGlSlIz8zd2wwUoB5CJwy5U+RYKeXiB03sSqI=) 2: 4iz3Hu7F2tbrDoJ4Ra5IwOQBcc8.roa (hash: IuX1GQGX1ljfGB12u2KgCWJaKWaeRSMtVHGJgPlmubc=) 3: 6eKe40wQFw_IElI8zuS7QLnMNg4.roa (hash: mwVnzWXnINu+28zpnqNx3ogIAlI7EUmZqAGL+SLmsV8=) 4: FK7ySAm15wLL-A5orFXHLmT_3-4.roa (hash: euYKdJ6l4Q6ZCJVn8FSzuiK3t+z0DHSmXlQqQRNIQAA=) 5: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: wrxKUFLspek3muRc8rD/JGdc0Ifuogi9zcVpU1jJJ7g=) 6: R1122jvmaRFCyB-pLRYd5mvSj18.roa (hash: Mn7gPdy8qzzJOoR47mruMMkcr1ejf5GwtKlMHf6MI9I=) 7: W0IlYJBPaOJMLv1mCH5NTe9bDXI.roa (hash: h5rJEpD/zc6V9IYMVIxJVkoM8iIZhHm9sfu6/N8DwVg=) 8: m8Tdxvep8gBoC6AvkeleXRfcmoc.roa (hash: JYOwdAc9iDDM7jQ9HDSgVBqUbsa0fTnhwbYX6eo7TMw=) 9: mgJS3W7Q1z7oQKmX5lJZfvASfdU.roa (hash: txXvckVXMlcgRykwLcE07dh3QNh7v2yueF/O/NOTi+w=) 10: r0MpZWGF2my5L4ptog2DrTmu7No.roa (hash: z4pivdKzari5mOdXF7fYltYsmUc2SDlRQvzzFytcUVQ=) 11: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (hash: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=) 12: xdWwTqIEbBWD-ayZaCrJQr7xhvk.roa (hash: XVK45wg0nZbg1ksXLgfN8TmYvrajdIvWajx9rGkrzcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:25:2e:af:13:d6:aa:7f:29:92:8a:16:4f:59:6e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Oct 21 19:00:45 2025 GMT Not After : Oct 22 19:00:45 2025 GMT Subject: CN=eff2f601d2460c2374895cbf6e747b655813ed83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4d:0f:60:4a:aa:fc:74:a4:49:16:81:06:6d: fe:f4:3e:0d:07:75:4c:ce:1a:5f:c5:63:3f:e0:3c: a1:a1:57:41:32:b5:48:cc:f2:3b:05:63:15:44:b5: 9e:f7:96:b2:dc:23:f6:a7:7b:3f:7b:70:de:40:32: 34:bb:26:85:a7:f2:d5:d3:75:80:6e:59:93:fb:7c: 7a:81:6c:7b:c7:aa:11:cd:f2:ac:ae:d2:c0:a9:a1: e5:93:02:27:9a:13:54:57:81:2c:53:7e:6c:3c:04: fa:2e:53:12:0d:44:44:19:c6:a4:f4:e2:c3:07:5a: b5:b8:08:7d:06:78:9c:90:84:9e:c0:2a:59:55:fc: 57:fd:8f:5b:3f:af:02:03:7e:41:32:ee:c1:60:52: cf:dd:81:38:3a:e1:07:eb:e1:9c:53:95:f6:0c:50: 81:4e:90:08:74:2a:ef:37:c3:86:0a:bf:f6:36:a1: b9:b1:24:fc:77:81:c5:14:04:f3:c7:a4:37:b8:a4: 99:22:a0:ce:a3:b5:00:c6:8a:03:04:c8:ae:d9:11: 17:ca:ff:80:df:d0:a3:79:5e:de:fd:16:b7:d4:fe: 2b:af:94:69:1e:31:98:a3:6a:2b:86:2f:11:94:ba: ea:77:24:e9:b1:a6:16:cc:de:ad:85:81:bf:e1:3c: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F2:F6:01:D2:46:0C:23:74:89:5C:BF:6E:74:7B:65:58:13:ED:83 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:96:77:fb:70:d5:62:d6:36:26:84:b0:cc:69:66:95:22:90: 30:dc:56:2e:ef:f9:f2:98:e6:91:10:b7:75:bc:f3:93:8b:6a: 04:fe:72:d2:ae:64:f3:fc:1a:34:b2:e2:33:ff:65:a0:f9:38: 64:9f:57:a6:8a:ec:26:31:ae:4b:6c:59:1d:10:d5:63:4c:c3: 88:b5:a1:54:1b:bc:a4:5a:b2:e0:9e:46:4a:2b:e2:ae:14:4c: 25:c3:d4:03:f2:64:bc:3d:a9:85:78:5c:c3:52:14:5e:23:21: 99:73:cc:67:17:1f:9b:69:15:72:f0:45:b3:5d:35:83:5e:18: bc:90:aa:2a:d2:b2:96:9b:89:a4:31:dc:64:90:02:95:54:20: 75:18:a5:a7:35:12:ed:84:85:b3:b8:86:d4:22:48:da:25:83: 68:eb:c2:aa:74:ad:c8:f2:28:3b:a0:00:27:4a:e1:28:9b:c4: a4:21:01:c8:2d:c8:05:2b:e1:45:3c:0d:6a:45:35:05:97:1e: ed:a8:41:eb:a3:5a:96:16:42:3f:ac:23:bb:aa:50:74:28:2c: 10:7f:28:cc:f0:45:3f:78:17:8c:cd:cb:e4:a3:f6:75:3b:ec: f5:aa:8a:11:39:bf:98:d4:a3:b7:37:8f:1b:91:12:9e:5b:62: 8a:31:3e:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIJS6vE9aqfymSihZPWW6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUxMDIxMTkwMDQ1WhcNMjUxMDIyMTkwMDQ1WjAzMTEwLwYDVQQD EyhlZmYyZjYwMWQyNDYwYzIzNzQ4OTVjYmY2ZTc0N2I2NTU4MTNlZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+k0PYEqq/HSkSRaBBm3+9D4NB3VM zhpfxWM/4DyhoVdBMrVIzPI7BWMVRLWe95ay3CP2p3s/e3DeQDI0uyaFp/LV03WA blmT+3x6gWx7x6oRzfKsrtLAqaHlkwInmhNUV4EsU35sPAT6LlMSDUREGcak9OLD B1q1uAh9BnickISewCpZVfxX/Y9bP68CA35BMu7BYFLP3YE4OuEH6+GcU5X2DFCB TpAIdCrvN8OGCr/2NqG5sST8d4HFFATzx6Q3uKSZIqDOo7UAxooDBMiu2REXyv+A 39CjeV7e/Ra31P4rr5RpHjGYo2orhi8RlLrqdyTpsaYWzN6thYG/4TyN+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/y9gHSRgwjdIlcv250e2VYE+2DMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJZ3+3DV YtY2JoSwzGlmlSKQMNxWLu/58pjmkRC3dbzzk4tqBP5y0q5k8/waNLLiM/9loPk4 ZJ9XporsJjGuS2xZHRDVY0zDiLWhVBu8pFqy4J5GSivirhRMJcPUA/JkvD2phXhc w1IUXiMhmXPMZxcfm2kVcvBFs101g14YvJCqKtKylpuJpDHcZJAClVQgdRilpzUS 7YSFs7iG1CJI2iWDaOvCqnStyPIoO6AAJ0rhKJvEpCEByC3IBSvhRTwNakU1BZce 7ahB66NalhZCP6wju6pQdCgsEH8ozPBFP3gXjM3L5KP2dTvs9aqKETm/mNSjtzeP G5ESnltiijE+yg== -----END CERTIFICATE-----Generated at Tue Oct 21 23:02:31 2025 by rpki-client