$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: NhYLneKTo1IgBYbryKAMyXrLhzICITKrzkfi1faZ+UU= Subject key identifier: 08:16:18:B6:71:51:59:C9:B1:0D:2C:CC:EF:99:BB:58:6C:FF:DD:99 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0196730B71CA34069EB5375233300863D69E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 150A Signing time: Sat 26 Apr 2025 17:00:51 +0000 Manifest this update: Sat 26 Apr 2025 17:00:51 +0000 Manifest next update: Sun 27 Apr 2025 17:00:51 +0000 Files and hashes: 1: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=) 2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 3: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 4: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 5: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 6: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=) 7: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: A3Sg7f0X20c3eEweeVXSMy9U9ULtJ3c3ii0P2qFW2Zw=) 8: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 9: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 10: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 11: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=) 12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=) 19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:71:ca:34:06:9e:b5:37:52:33:30:08:63:d6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Apr 26 17:00:51 2025 GMT Not After : Apr 27 17:00:51 2025 GMT Subject: CN=081618b6715159c9b10d2cccef99bb586cffdd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:3c:47:e7:3b:54:6c:22:cc:75:d4:61:8e: 5f:86:52:6f:68:89:2d:32:c9:d1:d0:99:80:f8:7b: 5e:7a:1d:0e:e1:69:9b:3c:34:ec:6e:be:76:73:63: d5:c4:96:44:d1:c3:c4:86:55:78:bd:f0:97:6d:8c: 5b:ac:85:9a:af:17:b4:d1:9a:c9:da:2e:7d:e0:ea: c7:8d:ec:61:57:a9:b2:b5:96:e4:27:ed:3d:5d:fd: ee:fd:40:55:ff:5d:1f:49:14:22:84:a6:d9:d8:ad: 51:ed:d4:80:98:e5:3e:cd:bd:94:65:1f:69:20:0d: ec:c9:e1:8e:41:7f:1a:2f:bf:5d:da:5c:28:b6:45: 61:0f:db:56:dc:97:25:cd:d1:8c:e4:40:d5:7c:cd: 87:eb:5f:c3:96:48:7e:36:33:ad:20:5d:f8:70:8c: b1:88:e5:cf:95:4e:69:eb:ac:71:3f:31:87:c0:45: 8b:5a:5b:de:81:3c:f1:f2:ce:82:69:7c:d7:71:e1: 88:bd:f1:5e:75:6f:bd:62:fa:15:69:28:37:4d:75: 62:c6:cc:82:11:80:5a:fa:55:4b:87:b5:3b:04:40: 67:15:d3:55:27:ae:99:83:33:5d:9a:32:27:30:16: 96:b5:c5:92:85:f1:ae:62:33:59:d9:1a:71:c8:1c: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:16:18:B6:71:51:59:C9:B1:0D:2C:CC:EF:99:BB:58:6C:FF:DD:99 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c9:03:21:1c:ac:34:f3:cd:dd:53:b0:bb:a6:69:23:73:79: 61:cd:49:78:bc:f7:bd:f9:9e:e8:97:50:23:eb:6b:cf:c6:f3: 1a:a5:0e:e5:14:32:c7:c8:13:74:e7:4c:d4:4d:46:e0:d2:53: 70:44:38:7a:07:c1:cd:08:b7:7a:36:8a:8d:27:cd:b5:0f:27: 13:45:29:4c:1b:dd:ea:03:7e:a2:1c:69:d5:f5:f1:ca:9c:99: 35:56:d6:bf:4a:fc:63:e0:98:3e:b0:af:82:7c:cc:4b:32:0d: 46:05:0a:79:85:df:4f:eb:cd:5d:7e:99:ae:4c:5e:98:9f:ae: 6f:5c:1b:fd:ea:86:b4:57:96:f4:05:fa:2d:2a:e9:98:4e:a1: 6c:b8:7a:bd:4a:70:de:e7:16:ea:9a:77:d7:02:b4:c0:cc:1c: 54:4c:af:fa:6a:14:d8:c8:02:77:e5:82:1d:b8:e3:a0:cf:0e: ec:72:e8:0e:ae:c1:75:de:6e:b0:17:7b:37:86:3b:4c:02:3a: af:78:79:01:2d:ab:ff:92:1e:59:a0:94:23:0d:99:3c:6a:ba: 34:0b:50:9e:4d:bf:c5:32:04:29:92:cf:7c:f3:0f:e0:5a:b8: f7:f5:6c:e1:9e:66:79:0f:3d:a0:92:f6:b3:b6:5a:1f:ae:c5: ff:ad:f1:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzC3HKNAaetTdSMzAIY9aeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwNDI2MTcwMDUxWhcNMjUwNDI3MTcwMDUxWjAzMTEwLwYDVQQD EygwODE2MThiNjcxNTE1OWM5YjEwZDJjY2NlZjk5YmI1ODZjZmZkZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJg8R+c7VGwizHXUYY5fhlJvaIkt MsnR0JmA+Hteeh0O4WmbPDTsbr52c2PVxJZE0cPEhlV4vfCXbYxbrIWarxe00ZrJ 2i594OrHjexhV6mytZbkJ+09Xf3u/UBV/10fSRQihKbZ2K1R7dSAmOU+zb2UZR9p IA3syeGOQX8aL79d2lwotkVhD9tW3JclzdGM5EDVfM2H61/Dlkh+NjOtIF34cIyx iOXPlU5p66xxPzGHwEWLWlvegTzx8s6CaXzXceGIvfFedW+9YvoVaSg3TXVixsyC EYBa+lVLh7U7BEBnFdNVJ66ZgzNdmjInMBaWtcWShfGuYjNZ2RpxyByNuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgWGLZxUVnJsQ0szO+Zu1hs/92ZMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPskDIRys NPPN3VOwu6ZpI3N5Yc1JeLz3vfme6JdQI+trz8bzGqUO5RQyx8gTdOdM1E1G4NJT cEQ4egfBzQi3ejaKjSfNtQ8nE0UpTBvd6gN+ohxp1fXxypyZNVbWv0r8Y+CYPrCv gnzMSzINRgUKeYXfT+vNXX6ZrkxemJ+ub1wb/eqGtFeW9AX6LSrpmE6hbLh6vUpw 3ucW6pp31wK0wMwcVEyv+moU2MgCd+WCHbjjoM8O7HLoDq7Bdd5usBd7N4Y7TAI6 r3h5AS2r/5IeWaCUIw2ZPGq6NAtQnk2/xTIEKZLPfPMP4Fq49/Vs4Z5meQ89oJL2 s7ZaH67F/63xtw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:06:41 2025 by rpki-client