$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: QU2bzNZkn/33sHy9W5QK46fFR9RnCXWTJVSM61HSTPE= Subject key identifier: 1E:CE:F2:52:8D:BE:63:13:94:B0:81:3B:F9:5C:88:19:AA:07:15:6F Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 0196730B3AA3FC12B675C57A0FCA97972302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 1628 Signing time: Sat 26 Apr 2025 17:00:37 +0000 Manifest this update: Sat 26 Apr 2025 17:00:37 +0000 Manifest next update: Sun 27 Apr 2025 17:00:37 +0000 Files and hashes: 1: 0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa (hash: 2JTts0dA2azaMsKe10BDoH1iul7B6xVWw7BDZ6UrOqs=) 2: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=) 3: 0PtdBDpxqBiamf3Wy5UzRY5Npb0.roa (hash: wq7MtI2Ozj/uprsyy9THpirTm2G1oDvb15eM2HzfNgM=) 4: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=) 5: 3CQxn1cSbk5ujQfHhnxDasY3W9c.roa (hash: HqrPej2qRyrHdaMDDGVqhxR/wvBPWopVDgOrRj62buk=) 6: 3HH58WmzWmQCD-OlTJN8dT8qa1M.roa (hash: of/nshXajmaTh0hvVJ+3GLNAI3gzOJPgVJPnBaDun6w=) 7: 3pvk7xDb4NV_nejPMsBPFHGXH-w.roa (hash: F1kItjl6urBp8elqxTTpkZJm2H5EiLSG+zhBNJ6u3Cs=) 8: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=) 9: 8VT8Fo3P5TNZ-vroEO27eP29hXg.roa (hash: pcmpK1WbqeqIW7/hwNEA1uEbwJv8DkJTR4wXodN3kk4=) 10: AlF6QUDYgPNFHoKES1GWsxqjDZg.roa (hash: b7yXTIUjvVlWzsxXNANwzdQ/qhc6RpUsiAkzEgXrpaU=) 11: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=) 12: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=) 13: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=) 14: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=) 15: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: ITtRTdYvnFC3+iRT2TsjnoJaNTtJBnjmd1rufXsIHfo=) 16: H05bxxYxtoijKcQ7lhpPPlR8JdU.roa (hash: v4GsRYWU+dWPTkFjL7lY7n7wJBqCf67cIpnIDarcBUA=) 17: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=) 18: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=) 19: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=) 20: Qi_okeIKGm2leqDBzMvdu74bomM.roa (hash: r2xQsTUMbLht++Z0RNSx2goRzGC7SSWFVnnASmt94Dk=) 21: T6gtaxOfCU_QWTuO38pW4oB0od8.roa (hash: KVkZ8CQnrh+zeDQo7wPoH9A/3jqz/nj5EPod+63b4Ro=) 22: TcQDciPSUxogutq-xkaHUPLF3ts.roa (hash: 1b1s+jfbmORH2ocmov5z0/0KS7ECvLwUQn61gk6ZegM=) 23: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=) 24: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=) 25: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=) 26: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=) 27: e5euSZ9D_YbBvOphxN8Ibp7E7_w.roa (hash: FbQMGoJ3vDCevdrKO8MX2xcP2RyL7bKOueHlQV2WaAE=) 28: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=) 29: ljzV0z5aUwEwlNY2NFDYxe9sRpo.roa (hash: QWA5p7MTHAwQyevcVXqFqA7tGNnnH1I1V+oF1Ee4hOA=) 30: m635TplodT5qm4wfbSbB7RhzWUM.roa (hash: B6jn3+DjahjWo60ghacvbwJM35HwBAigFtPVZQ19C6c=) 31: pnd3YojRi7DZYpXBXFp9kwat45Y.roa (hash: L/sfRRwnOa3q3wB7hNxXjSMDs2syDkgziLpoLHkufh4=) 32: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=) 33: sW_Pe5AiNGRK8YU3M9QNoMiFE0k.roa (hash: OI9qX7YhyRhGAGILyJE9MQsxymJKu7dbedIOFUkDFak=) 34: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=) 35: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=) 36: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=) 37: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:3a:a3:fc:12:b6:75:c5:7a:0f:ca:97:97:23:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Apr 26 17:00:37 2025 GMT Not After : Apr 27 17:00:37 2025 GMT Subject: CN=1ecef2528dbe631394b0813bf95c8819aa07156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:ac:7c:15:f0:39:c6:02:85:d2:ff:c2:5b: 1a:1b:08:c1:b6:ab:a5:70:c6:d3:7b:db:d0:8f:c4: 79:64:54:d4:f7:f1:68:77:c5:bd:a6:74:da:84:a1: 10:bb:1b:c2:20:26:c8:6a:f7:5f:81:75:26:88:82: fb:88:80:9a:92:57:9a:8a:33:cc:26:86:78:86:f8: 1d:21:d4:01:d7:07:42:36:ee:e4:68:6c:6b:5a:8c: 30:a4:19:80:0d:6e:44:47:42:9a:5a:b8:ab:f9:e3: 99:eb:21:22:b1:27:6d:2d:e4:99:03:dc:10:86:77: f3:39:5c:dd:9e:17:c8:33:32:7f:33:0c:ba:a7:49: 1e:bb:3c:4b:e6:0a:14:5c:50:7d:dc:bc:4d:82:dc: ef:3d:64:cc:7c:39:c9:7d:b1:e3:f0:c2:4e:b9:2e: 25:4b:5f:21:14:61:a2:52:35:19:37:56:91:36:02: 88:62:5c:72:ff:b8:6d:6c:38:36:5e:47:2e:0e:bd: 39:80:40:91:e4:02:d4:36:a4:73:00:f3:0b:41:1b: ad:8a:1c:8f:06:2a:de:9f:51:0f:5d:cb:47:bb:04: 31:e9:4a:76:7b:4e:32:0c:08:26:ef:19:79:7a:46: 93:b9:84:6c:45:93:5e:50:71:f2:59:10:6b:24:10: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:F2:52:8D:BE:63:13:94:B0:81:3B:F9:5C:88:19:AA:07:15:6F X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:f6:80:b3:a6:c7:10:78:59:b7:82:48:a9:59:f2:58:6d: 97:12:24:70:30:fe:be:a9:9b:a2:bf:15:fc:ce:ed:0a:b5:4c: 53:2f:72:33:02:83:8d:10:d2:2e:9a:0e:2a:3a:d8:f3:3d:40: 61:14:51:d4:e4:63:84:3e:68:b4:f2:d0:87:2a:76:d6:ed:28: 18:c8:06:9d:e7:b8:08:27:2e:2e:e5:8e:94:6e:88:5e:79:fe: e5:69:74:38:84:83:54:49:65:cc:5d:69:46:c0:58:ca:90:c2: cc:ff:c1:78:cd:c7:09:ec:b7:24:70:a8:c2:3a:c3:d5:19:9f: 09:5f:0f:c4:57:e3:f0:c6:d6:5c:71:3e:23:c7:07:e5:ff:bd: 0d:4f:c1:3b:49:fb:2b:12:c9:4a:76:b7:2a:85:04:a4:01:f1: 6a:08:aa:23:72:c5:50:3e:ca:a4:fb:2a:ad:2a:e1:80:3e:33: 8f:44:cd:e3:f3:86:a4:25:19:46:f9:79:41:6f:73:0f:e0:a2: 9d:54:a1:58:c3:8c:64:36:63:55:65:0a:00:20:dc:be:0e:8a: 32:ff:bc:81:3d:71:1f:0e:19:4a:93:f5:86:03:b5:b8:d7:48: 9e:15:21:81:c7:06:a1:d5:0d:db:51:eb:d5:94:6e:47:23:e0: 3a:9a:5b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzCzqj/BK2dcV6D8qXlyMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUwNDI2MTcwMDM3WhcNMjUwNDI3MTcwMDM3WjAzMTEwLwYDVQQD EygxZWNlZjI1MjhkYmU2MzEzOTRiMDgxM2JmOTVjODgxOWFhMDcxNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1asfBXwOcYChdL/wlsaGwjBtqul cMbTe9vQj8R5ZFTU9/Fod8W9pnTahKEQuxvCICbIavdfgXUmiIL7iICakleaijPM JoZ4hvgdIdQB1wdCNu7kaGxrWowwpBmADW5ER0KaWrir+eOZ6yEisSdtLeSZA9wQ hnfzOVzdnhfIMzJ/Mwy6p0keuzxL5goUXFB93LxNgtzvPWTMfDnJfbHj8MJOuS4l S18hFGGiUjUZN1aRNgKIYlxy/7htbDg2XkcuDr05gECR5ALUNqRzAPMLQRutihyP Biren1EPXctHuwQx6Up2e04yDAgm7xl5ekaTuYRsRZNeUHHyWRBrJBCEzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7O8lKNvmMTlLCBO/lciBmqBxVvMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj672gLOm xxB4WbeCSKlZ8lhtlxIkcDD+vqmbor8V/M7tCrVMUy9yMwKDjRDSLpoOKjrY8z1A YRRR1ORjhD5otPLQhyp21u0oGMgGnee4CCcuLuWOlG6IXnn+5Wl0OISDVEllzF1p RsBYypDCzP/BeM3HCey3JHCowjrD1RmfCV8PxFfj8MbWXHE+I8cH5f+9DU/BO0n7 KxLJSna3KoUEpAHxagiqI3LFUD7KpPsqrSrhgD4zj0TN4/OGpCUZRvl5QW9zD+Ci nVShWMOMZDZjVWUKACDcvg6KMv+8gT1xHw4ZSpP1hgO1uNdInhUhgccGodUN21Hr 1ZRuRyPgOppbDw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:02:37 2025 by rpki-client