$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: yDTWG2gTEIelPdO9Nti9PW0H8M5Y8KCHmwhNt5+nU70= Subject key identifier: BA:CC:7E:63:6E:DB:6C:DF:60:33:99:18:75:1B:92:09:2C:D3:1A:FA Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019673E6E4BF9E134C5FC4370C56889E2B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 1530 Signing time: Sat 26 Apr 2025 21:00:33 +0000 Manifest this update: Sat 26 Apr 2025 21:00:33 +0000 Manifest next update: Sun 27 Apr 2025 21:00:33 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: oWrU6LVgIztF8nZD2kjSzTmOGGkLPn8FjzZOOP5uSJc=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 4: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 5: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 6: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 7: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 8: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 9: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 10: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=) 11: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 12: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (hash: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=) 13: tHoWXXV-bnWtPv3_sIlIUroPQXU.roa (hash: 2JU40V040r5Mc7sNTioajDBldud1UQyIgT0ERMOL7qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:e6:e4:bf:9e:13:4c:5f:c4:37:0c:56:88:9e:2b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Apr 26 21:00:33 2025 GMT Not After : Apr 27 21:00:33 2025 GMT Subject: CN=bacc7e636edb6cdf60339918751b92092cd31afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:df:37:d3:dd:35:5b:d4:fd:13:70:b2:4a: e5:8b:e3:64:be:36:23:02:0d:f1:28:0c:e4:38:f0: 57:12:7d:a1:eb:2d:fd:9c:73:07:0c:6a:fd:1a:f3: c1:c3:4c:ca:0c:e2:c8:76:f2:be:69:a3:ce:1b:6c: 7d:fb:85:27:32:11:84:34:d1:c3:f4:1b:4b:74:9a: c9:48:ef:d9:d3:f3:46:bd:59:f9:22:05:4a:f8:fa: 48:2d:4f:e2:92:8d:00:66:c6:7c:b7:89:bc:fb:92: 49:33:b3:fc:5a:94:24:23:57:35:a7:e7:a3:67:b2: a8:67:68:0d:d2:52:13:9a:65:ec:63:af:2e:c2:b8: 13:f5:dc:1f:f9:c3:3b:31:e4:c1:59:78:bd:4c:f0: 10:6b:ec:9d:ee:93:3a:71:66:df:48:e0:00:b5:e1: b8:f8:89:c1:e5:00:c3:6d:d9:cc:df:2a:0e:b5:dc: 82:76:1d:ad:d2:8e:c7:6a:a2:ae:19:62:45:c5:9c: 4f:72:9c:ba:7b:d0:a0:ce:36:eb:86:92:f4:d4:b3: 23:3a:76:be:9a:8f:2c:ef:ab:35:ea:c5:14:2d:6e: 63:bb:5b:6b:3a:39:e4:d3:15:23:40:94:78:54:f2: 85:9d:50:6a:d4:12:9c:a8:16:0e:2f:79:da:ef:c6: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:7E:63:6E:DB:6C:DF:60:33:99:18:75:1B:92:09:2C:D3:1A:FA X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8b:8a:5e:16:59:81:0f:2e:89:03:3c:d4:25:7d:2b:15:53: 2d:eb:10:b0:3e:ab:48:e7:97:3a:9b:a5:bf:23:24:19:a2:31: 6f:c5:20:d8:78:89:dd:c3:14:44:3f:3f:a7:17:78:2f:8f:3f: 82:92:c4:0f:42:d3:13:3e:d3:f8:d9:17:8a:41:47:aa:91:cd: 71:5e:ed:57:d2:c7:84:28:d7:d8:c3:4a:44:a7:27:ca:21:b2: 69:b5:15:c8:d9:4c:d2:02:e2:4e:cf:03:6e:12:14:8e:8b:ef: 82:cc:d7:ff:5b:73:03:0c:0d:18:84:25:ef:e1:fb:94:a9:a8: 50:67:86:78:f1:a8:95:52:9e:cc:4c:d7:13:d2:b8:a1:3d:2b: ed:e7:98:a3:04:f5:a7:ad:e5:fd:f5:fd:0a:74:6a:d7:a6:89: 74:99:c5:98:cf:57:24:40:aa:44:cd:70:f8:d6:a4:55:5a:4e: ce:9b:ab:58:27:e9:87:ad:13:58:19:92:a3:53:f1:ef:30:73: ac:84:f5:e9:f7:28:c7:10:81:1d:48:4e:df:7e:91:27:aa:71: 5a:70:31:2f:1a:11:dc:5a:58:b4:2b:4f:fc:6d:8a:e6:f1:0a: 43:a0:c9:1e:68:58:d9:69:73:6f:63:fc:98:51:42:20:31:5a: a3:39:0a:cb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZZz5uS/nhNMX8Q3DFaInitVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwNDI2MjEwMDMzWhcNMjUwNDI3MjEwMDMzWjAzMTEwLwYDVQQD EyhiYWNjN2U2MzZlZGI2Y2RmNjAzMzk5MTg3NTFiOTIwOTJjZDMxYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz73fN9PdNVvU/RNwskrli+NkvjYj Ag3xKAzkOPBXEn2h6y39nHMHDGr9GvPBw0zKDOLIdvK+aaPOG2x9+4UnMhGENNHD 9BtLdJrJSO/Z0/NGvVn5IgVK+PpILU/iko0AZsZ8t4m8+5JJM7P8WpQkI1c1p+ej Z7KoZ2gN0lITmmXsY68uwrgT9dwf+cM7MeTBWXi9TPAQa+yd7pM6cWbfSOAAteG4 +InB5QDDbdnM3yoOtdyCdh2t0o7HaqKuGWJFxZxPcpy6e9CgzjbrhpL01LMjOna+ mo8s76s16sUULW5ju1trOjnk0xUjQJR4VPKFnVBq1BKcqBYOL3na78ZU6wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLrMfmNu22zfYDOZGHUbkgks0xr6MB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIuK XhZZgQ8uiQM81CV9KxVTLesQsD6rSOeXOpulvyMkGaIxb8Ug2HiJ3cMURD8/pxd4 L48/gpLED0LTEz7T+NkXikFHqpHNcV7tV9LHhCjX2MNKRKcnyiGyabUVyNlM0gLi Ts8DbhIUjovvgszX/1tzAwwNGIQl7+H7lKmoUGeGePGolVKezEzXE9K4oT0r7eeY owT1p63l/fX9CnRq16aJdJnFmM9XJECqRM1w+NakVVpOzpurWCfph60TWBmSo1Px 7zBzrIT16fcoxxCBHUhO336RJ6pxWnAxLxoR3FpYtCtP/G2K5vEKQ6DJHmhY2Wlz b2P8mFFCIDFaozkKyw== -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:09 2025 by rpki-client