$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: eR8acjlGWCogDulNWtDrbX2EpVEUlrIWT0taPp82BYA= Subject key identifier: 0D:2F:65:91:75:B4:27:FC:F0:47:6A:36:84:D5:04:7D:B2:14:9F:9E Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0197771CDDEFBE3C33C64B3ED3B67957A688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 15B8 Signing time: Mon 16 Jun 2025 05:01:09 +0000 Manifest this update: Mon 16 Jun 2025 05:01:09 +0000 Manifest next update: Tue 17 Jun 2025 05:01:09 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: rLRTTgr3lP2JatbniQhjAGJVKCwQMzgC361htFYQGdI=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 4: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 5: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 7: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 8: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 9: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 10: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 11: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=) 12: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 13: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (hash: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:1c:dd:ef:be:3c:33:c6:4b:3e:d3:b6:79:57:a6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jun 16 05:01:09 2025 GMT Not After : Jun 17 05:01:09 2025 GMT Subject: CN=0d2f659175b427fcf0476a3684d5047db2149f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:df:3c:ad:7d:d4:ef:3e:ad:cf:f7:e2:70: 00:21:b9:bd:07:ee:9e:e4:b2:6a:b5:9c:ce:7f:f3: 3c:04:1e:60:f8:84:4a:84:2e:a9:c9:95:7c:b1:fd: 01:00:0c:b9:f3:97:2d:fa:19:80:8b:12:ff:56:13: d2:5c:5e:a8:e7:0a:d1:d4:31:85:7d:fe:ce:7a:b0: cb:33:b0:9a:3a:14:99:ad:15:76:57:28:39:9b:74: 49:6e:e1:d7:80:20:52:21:44:79:6e:1a:4c:bb:b5: cf:a9:f3:b0:b3:b8:6a:83:80:11:77:fe:7a:92:3d: fc:43:f3:da:89:fc:e6:0b:ec:49:40:66:1f:df:2c: 71:b2:34:80:db:db:ee:65:28:e4:d2:1a:83:19:a7: d1:7f:c5:4a:b9:d5:2e:26:11:46:40:62:d5:2f:0f: 34:1c:70:6f:9a:a2:ec:7a:13:76:b9:b1:5c:60:f0: 2f:80:b8:78:e5:4a:68:17:70:8e:fd:3a:a0:31:40: 17:01:ca:97:3d:20:92:0e:89:9f:9e:6f:36:e0:50: 9a:32:8e:46:d9:d1:17:dc:1d:9c:4a:c0:84:09:a2: 4d:3b:05:23:2b:fc:03:1a:b1:87:75:34:df:d1:88: 4d:f7:b0:bc:9d:1b:33:a0:30:97:33:39:b1:a6:86: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2F:65:91:75:B4:27:FC:F0:47:6A:36:84:D5:04:7D:B2:14:9F:9E X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:85:ad:25:ce:16:9f:9c:80:df:53:24:eb:f2:01:20:ce:63: ec:fb:87:a1:9f:98:05:ca:08:71:bf:88:bc:f3:2c:af:c4:d9: a5:96:c6:1f:57:22:98:e6:d3:fe:fa:79:55:ea:f3:85:92:fe: 8a:3e:77:12:ca:54:5e:8a:0c:22:48:00:78:5f:10:6a:8b:c3: 47:8a:e7:c0:d1:5d:b2:6b:99:68:23:4c:7f:64:01:d1:ea:40: 47:6e:58:25:a9:54:ee:4b:60:ef:65:eb:d1:b8:23:60:27:cb: 6e:b2:0d:5f:c2:9b:8e:57:c6:bd:26:94:eb:3c:e7:bd:3b:7b: 33:83:2b:19:5d:c8:44:6b:c3:ec:71:57:a0:1e:75:57:eb:53: 99:0f:e6:9d:2d:57:64:41:3d:68:ca:33:ef:05:b0:3b:11:d1: 77:6b:10:7d:8b:d5:c8:d2:66:a8:3f:79:da:0f:70:84:b0:99: 76:61:1c:24:69:aa:4e:5f:84:01:ac:2e:ef:48:a4:13:9e:84: fa:83:f7:05:b7:9b:a7:33:da:f7:2c:43:66:c1:b3:a3:79:8b: 10:e2:5c:14:3b:af:ac:ff:59:55:60:19:a2:e2:7d:5e:eb:99: 2e:82:e9:20:71:a3:8c:0f:2c:54:73:cc:60:27:85:16:e2:5e: 93:42:43:a9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZd3HN3vvjwzxks+07Z5V6aIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwNjE2MDUwMTA5WhcNMjUwNjE3MDUwMTA5WjAzMTEwLwYDVQQD EygwZDJmNjU5MTc1YjQyN2ZjZjA0NzZhMzY4NGQ1MDQ3ZGIyMTQ5ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGDfPK191O8+rc/34nAAIbm9B+6e 5LJqtZzOf/M8BB5g+IRKhC6pyZV8sf0BAAy585ct+hmAixL/VhPSXF6o5wrR1DGF ff7OerDLM7CaOhSZrRV2Vyg5m3RJbuHXgCBSIUR5bhpMu7XPqfOws7hqg4ARd/56 kj38Q/PaifzmC+xJQGYf3yxxsjSA29vuZSjk0hqDGafRf8VKudUuJhFGQGLVLw80 HHBvmqLsehN2ubFcYPAvgLh45UpoF3CO/TqgMUAXAcqXPSCSDomfnm824FCaMo5G 2dEX3B2cSsCECaJNOwUjK/wDGrGHdTTf0YhN97C8nRszoDCXMzmxpoYXpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA0vZZF1tCf88EdqNoTVBH2yFJ+eMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4Wt Jc4Wn5yA31Mk6/IBIM5j7PuHoZ+YBcoIcb+IvPMsr8TZpZbGH1cimObT/vp5Verz hZL+ij53EspUXooMIkgAeF8QaovDR4rnwNFdsmuZaCNMf2QB0epAR25YJalU7ktg 72Xr0bgjYCfLbrINX8KbjlfGvSaU6zznvTt7M4MrGV3IRGvD7HFXoB51V+tTmQ/m nS1XZEE9aMoz7wWwOxHRd2sQfYvVyNJmqD952g9whLCZdmEcJGmqTl+EAawu70ik E56E+oP3BbebpzPa9yxDZsGzo3mLEOJcFDuvrP9ZVWAZouJ9XuuZLoLpIHGjjA8s VHPMYCeFFuJek0JDqQ== -----END CERTIFICATE-----Generated at Mon Jun 16 08:22:48 2025 by rpki-client