$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: Npr1Iyr//se1bXUezEv3dWGm4BxEQnMHI21xnqgxPoc= Subject key identifier: 15:4E:51:F8:70:C6:DC:87:26:93:3B:5F:54:EE:D7:F6:DE:8D:A2:1F Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0198868D91AAB205310AFA79BF791FA0A9FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 1649 Signing time: Thu 07 Aug 2025 22:01:21 +0000 Manifest this update: Thu 07 Aug 2025 22:01:21 +0000 Manifest next update: Fri 08 Aug 2025 22:01:21 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: giM/VJq5GyM9IfDsdB6+Apr8a55yLnf/gFJwHkk4g/o=) 2: 19n-Wj9bKFgdkGZ82WCYa5kkcv8.roa (hash: CeRMttDGjBvI7Ws7ExgxlD/xGz9sGjVLELjOntijMlE=) 3: 2zPiptdl-0edV96cLherBbf5jpY.roa (hash: pkUla5A0kJ9PBuMPaZOoGa9M3BoexGxDuGiL7TSPY+Q=) 4: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 5: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 6: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 7: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 8: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 9: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 10: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 11: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 12: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 13: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=) 14: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 16:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:86:8d:91:aa:b2:05:31:0a:fa:79:bf:79:1f:a0:a9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Aug 7 22:01:21 2025 GMT Not After : Aug 8 22:01:21 2025 GMT Subject: CN=154e51f870c6dc8726933b5f54eed7f6de8da21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:70:9e:b9:fb:b2:9f:6a:3b:df:d7:70:0b: af:6b:3b:a3:3c:fd:5e:cb:ae:62:ac:2c:03:83:ec: 28:7a:7e:23:57:c4:86:99:10:bd:5b:a2:43:13:c6: 70:d3:1d:37:65:9a:d5:80:e0:08:cd:1a:a3:4c:83: 76:82:7d:19:52:f1:c8:69:ea:94:21:0a:93:9d:b3: fe:36:40:31:2e:52:71:96:e9:0f:92:0f:18:55:d6: a3:30:a5:89:c0:78:44:b1:d6:90:a7:c8:a0:f0:18: 9b:f7:89:9d:ba:6c:b3:f7:a6:f8:eb:1b:78:eb:ba: 83:71:06:38:d6:73:9e:c6:73:e9:62:93:ad:0d:40: e5:17:f9:f7:c4:a3:68:98:66:f0:45:da:f4:06:f0: 7f:14:76:2b:8d:53:38:93:8d:09:5d:af:67:52:5b: c2:e6:fb:b6:d5:13:f8:65:42:8a:f2:5d:47:5b:58: f4:0b:ea:e1:82:a0:aa:b8:dd:8d:12:23:3b:17:56: 62:cc:dd:cf:c3:ef:1f:a3:0a:21:49:a0:68:f0:e0: bf:fe:d3:90:7b:22:dc:19:17:8c:d1:40:a9:94:e8: ff:6c:11:c7:0a:73:3c:5b:63:b9:16:39:be:1a:3f: 41:88:9d:82:27:97:9d:6c:0c:f0:1a:42:04:57:81: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4E:51:F8:70:C6:DC:87:26:93:3B:5F:54:EE:D7:F6:DE:8D:A2:1F X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e2:73:13:9b:3d:d0:86:5a:09:3b:94:9e:ff:5f:ea:9f:0f: 74:0c:0e:82:4b:2e:e5:aa:a0:3f:a4:1a:3c:63:c5:2a:eb:48: 13:aa:c7:e0:6e:37:1c:b2:da:2a:f3:b2:ce:bc:58:b1:63:16: ec:d1:d8:b7:1c:83:69:87:57:63:fd:3f:c2:55:8b:16:a2:dd: e4:43:fc:3c:b5:2c:0c:7f:ba:37:ce:16:da:9e:88:0e:f7:64: 44:22:92:0e:fa:1d:58:ee:ea:5b:5a:65:ca:64:27:9c:da:9a: cd:bf:91:6e:25:b7:65:32:46:7e:f6:7d:9e:91:36:a9:c8:75: f6:18:1b:94:a3:d1:25:48:10:04:91:1e:46:f2:f6:21:c2:08: 79:a8:7e:97:e3:81:77:77:b3:dd:a4:5b:c7:cb:d5:18:8b:a5: 0a:0c:8a:59:13:fb:37:82:ff:8b:06:09:ed:42:fa:05:2c:97: 5a:22:c3:bc:22:de:73:f8:ad:8f:ea:41:49:a8:15:92:83:68: f9:e1:bd:c1:f5:90:c5:7d:db:61:f6:1b:f5:bd:8b:1a:0e:ef: 6a:09:6c:3c:fd:11:aa:17:91:a6:ba:1d:a3:99:96:00:0e:e9: a8:ef:f2:b0:62:57:94:9e:e2:bb:54:f6:7f:e0:92:10:1e:28: a9:46:ee:d7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZiGjZGqsgUxCvp5v3kfoKn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwODA3MjIwMTIxWhcNMjUwODA4MjIwMTIxWjAzMTEwLwYDVQQD EygxNTRlNTFmODcwYzZkYzg3MjY5MzNiNWY1NGVlZDdmNmRlOGRhMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoNwnrn7sp9qO9/XcAuvazujPP1e y65irCwDg+woen4jV8SGmRC9W6JDE8Zw0x03ZZrVgOAIzRqjTIN2gn0ZUvHIaeqU IQqTnbP+NkAxLlJxlukPkg8YVdajMKWJwHhEsdaQp8ig8Bib94mdumyz96b46xt4 67qDcQY41nOexnPpYpOtDUDlF/n3xKNomGbwRdr0BvB/FHYrjVM4k40JXa9nUlvC 5vu21RP4ZUKK8l1HW1j0C+rhgqCquN2NEiM7F1ZizN3Pw+8fowohSaBo8OC//tOQ eyLcGReM0UCplOj/bBHHCnM8W2O5Fjm+Gj9BiJ2CJ5edbAzwGkIEV4Eh0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBVOUfhwxtyHJpM7X1Tu1/bejaIfMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuJz E5s90IZaCTuUnv9f6p8PdAwOgksu5aqgP6QaPGPFKutIE6rH4G43HLLaKvOyzrxY sWMW7NHYtxyDaYdXY/0/wlWLFqLd5EP8PLUsDH+6N84W2p6IDvdkRCKSDvodWO7q W1plymQnnNqazb+RbiW3ZTJGfvZ9npE2qch19hgblKPRJUgQBJEeRvL2IcIIeah+ l+OBd3ez3aRbx8vVGIulCgyKWRP7N4L/iwYJ7UL6BSyXWiLDvCLec/itj+pBSagV koNo+eG9wfWQxX3bYfYb9b2LGg7vaglsPP0RqheRprodo5mWAA7pqO/ysGJXlJ7i u1T2f+CSEB4oqUbu1w== -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:08 2025 by rpki-client