$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft File: GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json) Hash identifier: nT6dHINGt68gxraW1q8eZUXak2mqDf2f4JqpvJPxdF8= Subject key identifier: FE:8C:CB:21:50:68:56:2A:9D:16:F3:42:3B:6F:AC:F4:EE:C4:40:3A Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 0197B632DD784A11CB449DAA65BDFF053A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft Manifest number: 0748 Signing time: Sat 28 Jun 2025 11:01:16 +0000 Manifest this update: Sat 28 Jun 2025 11:01:16 +0000 Manifest next update: Sun 29 Jun 2025 11:01:16 +0000 Files and hashes: 1: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=) 2: AmTrNmiUz3PQJSPRxeGKui--CsM.roa (hash: D2X8Ub7d1XFRGUtdtCWVBQi+s/6Li/HzCnTuVF4H0hw=) 3: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=) 4: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=) 5: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: TCozrc3wQbFGL+YTtvIYq/SgFwmH0GRqNt3bcTS2VUk=) 6: GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa (hash: eDAPdGo/XSCCbAybQBU4awqfxZqhBeWpUhbvG4BJjMc=) 7: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=) 8: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=) 9: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=) 10: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=) 11: _PsTgNyj2kuvf9bU_VQgCADRPAQ.roa (hash: bWRmBYvsrWHn6JuASHO7QZY/Kv+hHW0Nsaq81jNfzOc=) 12: bs7GziLox9peGF2yvnXKRWa8CtM.roa (hash: cBuRaE10dL+zgAwaQff5Gg3RICxaLuAu1aSi+XkcBE4=) 13: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=) 14: jyhaUuX-ZThRseELlPrxByqUyJw.roa (hash: e5odEgSnsIIM6hBXp3RT/Su+ZTlWWPrwLkc2XthjZ6o=) 15: pUiTftHtLJThXW7iYBmLM9nPjtk.roa (hash: DobEhFeM0/PnDTQSj7bsctOpFUAuyWbpKx0kf2ymHWY=) 16: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=) 17: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:dd:78:4a:11:cb:44:9d:aa:65:bd:ff:05:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jun 28 11:01:16 2025 GMT Not After : Jun 29 11:01:16 2025 GMT Subject: CN=fe8ccb215068562a9d16f3423b6facf4eec4403a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:06:60:f1:e2:bb:ec:15:81:60:76:1c:7e: 70:eb:7b:12:17:90:ef:7e:eb:82:2e:81:bc:60:0a: 3c:cb:5b:f2:35:4c:e1:b9:50:8a:e9:a1:d5:01:0a: a9:dc:d6:07:54:d6:18:fc:59:7e:af:65:31:0f:c3: 63:fa:e1:e7:ab:49:71:3c:26:b4:d8:23:4b:84:da: 03:15:04:47:96:34:08:37:41:17:54:e4:92:94:2b: b8:b1:d3:8e:ea:37:45:ba:0d:24:74:26:f0:bd:b7: cd:99:cd:03:54:1b:49:b3:3b:32:46:9b:e4:4a:68: 0e:f7:c0:ff:10:b1:34:fc:3b:be:78:ac:1f:60:c9: c8:aa:cf:25:cb:c4:0a:34:d1:f7:f8:d4:0d:ec:28: ef:ac:97:28:ff:71:29:79:55:8a:d4:98:a6:29:88: 57:0b:0f:b5:8f:4a:a4:32:4f:ce:3a:2a:65:ea:28: 85:1c:0d:31:d4:1c:d7:eb:32:98:3c:6e:98:54:e0: 36:10:fb:69:fb:36:3f:8d:16:4c:50:bf:52:c8:9c: 91:00:28:ca:73:f9:81:2f:36:cf:7a:6d:ea:8c:51: 51:34:4c:60:96:8a:e7:6e:da:39:50:07:b1:52:da: 40:51:8e:cb:0e:4e:b9:e8:77:a6:42:27:80:d7:ad: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8C:CB:21:50:68:56:2A:9D:16:F3:42:3B:6F:AC:F4:EE:C4:40:3A X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b5:42:c8:af:e5:0e:e5:39:67:84:37:46:d1:24:fb:53:9d: a1:d5:28:1a:34:06:bc:7c:fa:ea:96:25:89:00:08:88:6c:ab: 04:ab:ad:ab:5c:7d:44:ce:9d:77:07:3c:9d:3e:7e:32:5e:e7: f4:32:34:ac:ae:b9:b9:6c:b0:9d:0f:0d:b7:5a:6c:47:4c:00: 4e:f6:69:bf:75:ac:cc:90:77:81:1b:85:81:36:c7:1f:ca:05: 2a:3f:dc:85:3f:12:88:de:da:7b:74:4c:92:49:a9:f2:4a:89: 47:de:46:35:46:21:a6:5b:00:5d:11:2e:b7:ec:1c:f8:ad:03: cd:06:13:e4:46:54:da:45:73:70:20:16:96:74:07:cd:e0:83: a5:58:2a:47:d8:8d:03:6b:97:a0:63:5b:76:5a:e1:48:d2:26: e7:52:d2:1a:2b:c2:36:7e:04:4d:24:41:48:e1:85:56:c6:8e: da:f1:43:ed:0e:58:15:00:cb:b4:f8:28:db:ac:40:b0:ae:f8: 42:db:44:ea:5d:3d:b3:76:dc:9d:83:ef:16:d4:19:d3:b7:60: e2:e8:55:c5:eb:f5:a2:f5:99:05:44:3f:cb:f8:04:be:d7:0c: 29:15:ec:96:e9:2a:39:f4:4c:c3:7a:f0:9e:95:f2:db:d2:e6: 88:e5:fb:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2Mt14ShHLRJ2qZb3/BTqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUwNjI4MTEwMTE2WhcNMjUwNjI5MTEwMTE2WjAzMTEwLwYDVQQD EyhmZThjY2IyMTUwNjg1NjJhOWQxNmYzNDIzYjZmYWNmNGVlYzQ0MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9YGYPHiu+wVgWB2HH5w63sSF5Dv fuuCLoG8YAo8y1vyNUzhuVCK6aHVAQqp3NYHVNYY/Fl+r2UxD8Nj+uHnq0lxPCa0 2CNLhNoDFQRHljQIN0EXVOSSlCu4sdOO6jdFug0kdCbwvbfNmc0DVBtJszsyRpvk SmgO98D/ELE0/Du+eKwfYMnIqs8ly8QKNNH3+NQN7CjvrJco/3EpeVWK1JimKYhX Cw+1j0qkMk/OOipl6iiFHA0x1BzX6zKYPG6YVOA2EPtp+zY/jRZMUL9SyJyRACjK c/mBLzbPem3qjFFRNExglornbto5UAexUtpAUY7LDk656HemQieA1622VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6MyyFQaFYqnRbzQjtvrPTuxEA6MB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELVCyK/l DuU5Z4Q3RtEk+1OdodUoGjQGvHz66pYliQAIiGyrBKutq1x9RM6ddwc8nT5+Ml7n 9DI0rK65uWywnQ8Nt1psR0wATvZpv3WszJB3gRuFgTbHH8oFKj/chT8SiN7ae3RM kkmp8kqJR95GNUYhplsAXREut+wc+K0DzQYT5EZU2kVzcCAWlnQHzeCDpVgqR9iN A2uXoGNbdlrhSNIm51LSGivCNn4ETSRBSOGFVsaO2vFD7Q5YFQDLtPgo26xAsK74 QttE6l09s3bcnYPvFtQZ07dg4uhVxev1ovWZBUQ/y/gEvtcMKRXslukqOfRMw3rw npXy29LmiOX7sQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:28:38 2025 by rpki-client