$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json) Hash identifier: A0FcVcrNMfx8/ITH4T6HvlsIiLuofwz1Su0YeUQiWks= Subject key identifier: 57:24:EB:EB:10:E0:AF:17:8A:E1:03:AA:1C:E2:10:E6:FA:24:A3:F8 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 0196B66C3C59DCBF3ABCBE58F1893EB57E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft Manifest number: 0967 Signing time: Fri 09 May 2025 19:01:08 +0000 Manifest this update: Fri 09 May 2025 19:01:08 +0000 Manifest next update: Sat 10 May 2025 19:01:08 +0000 Files and hashes: 1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=) 2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=) 3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=) 4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=) 5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: nWuMeybwx5v1+qQP6IIYCvu0BkdZkuR2M4mLs3drHcA=) 6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=) 7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=) 8: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=) 9: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=) 10: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=) 11: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=) 12: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=) 13: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=) 14: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=) 15: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=) 16: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=) 17: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=) 18: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=) 19: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=) 20: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=) 21: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=) 22: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=) 23: sXpjAF10yFnKIr4QcLJYvBmJdoY.roa (hash: APdgDAmA0VEbqfM6xaUZ783M1XIEd3juXocVjfK3nIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:6c:3c:59:dc:bf:3a:bc:be:58:f1:89:3e:b5:7e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: May 9 19:01:08 2025 GMT Not After : May 10 19:01:08 2025 GMT Subject: CN=5724ebeb10e0af178ae103aa1ce210e6fa24a3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:c8:cd:7a:d2:21:b6:72:d3:0c:87:02:31: ba:06:e5:fc:27:c2:a3:99:a5:d9:d4:80:25:fc:a5: 64:9f:4b:f0:f8:b5:10:b5:8f:09:60:3e:af:24:77: 3b:1b:ad:bc:ea:1a:41:dd:8e:f5:6a:8a:74:1f:92: d0:2e:07:48:2f:8e:e1:ca:c9:8c:9c:7e:14:4d:60: 6b:14:98:61:7f:cc:b3:54:82:7f:29:db:9e:31:72: 18:aa:7a:29:b0:3f:de:e3:04:fa:d3:fc:92:22:33: c4:07:ba:a5:cc:01:9e:21:ad:8f:5f:a0:14:6b:76: ad:18:9a:84:21:6e:bc:71:d3:92:85:35:57:1d:91: 45:7b:f6:3a:9a:8f:f4:18:26:6a:31:a5:54:2e:e9: 2c:2b:6c:3e:fe:dd:df:98:df:a2:07:de:40:7e:09: b9:5c:49:f2:dd:27:01:b4:a4:a6:98:87:6f:9d:ae: 8e:1d:2e:93:5a:8a:33:7a:13:cb:33:ef:5e:e3:2f: 89:28:d8:23:b3:c1:e5:b4:8c:00:7b:ea:78:01:83: 49:fa:f3:d9:2c:97:45:5b:59:9e:4d:74:e6:e5:85: 8d:fe:4e:97:ad:79:a6:0b:b8:49:63:01:93:74:8e: 3a:ea:8e:38:4a:08:02:ca:ca:59:d2:28:47:db:7f: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:EB:EB:10:E0:AF:17:8A:E1:03:AA:1C:E2:10:E6:FA:24:A3:F8 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6a:f6:07:c9:b6:47:a0:4e:9d:84:bd:1f:a2:ab:85:11:02: c8:ad:10:0b:2f:83:c7:73:24:be:55:53:3a:bb:ce:83:f9:63: a7:fa:8e:15:c3:a5:c7:10:2a:fb:ce:2e:39:73:ee:ad:2f:87: 62:85:ba:24:f0:89:96:29:71:0e:5c:2f:f9:66:60:a9:49:a0: ca:c1:15:84:5a:2e:39:95:bc:89:55:5b:e2:ef:61:a1:15:ba: e9:49:90:c2:ea:c4:58:5a:09:ed:7c:3f:1b:cb:a8:56:5d:03: 96:64:98:1e:8f:60:7d:de:4d:79:e0:60:6b:42:5d:70:62:f2: 76:60:50:05:68:31:21:ec:fd:07:cf:c0:59:bf:77:96:e7:cd: c6:3a:26:c6:00:5a:75:98:e9:e7:d2:d8:89:6d:82:f8:b4:3c: 16:9a:d9:2d:47:f6:2a:74:5b:4c:8b:e9:8c:21:03:24:90:9f: e1:d6:39:2b:92:0e:4d:25:40:dc:10:35:e9:a5:67:36:0f:74: 5a:f3:a4:1e:8c:84:ff:82:db:3e:cd:3c:b1:ec:1e:8f:6f:59: 56:43:30:8b:df:9b:82:ce:1a:bd:07:19:ec:b6:ba:63:44:89: 85:da:44:e9:a1:e1:62:b5:5c:fd:f3:37:b2:dd:83:10:d7:d7: 04:d2:6c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa2bDxZ3L86vL5Y8Yk+tX4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjUwNTA5MTkwMTA4WhcNMjUwNTEwMTkwMTA4WjAzMTEwLwYDVQQD Eyg1NzI0ZWJlYjEwZTBhZjE3OGFlMTAzYWExY2UyMTBlNmZhMjRhM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XvIzXrSIbZy0wyHAjG6BuX8J8Kj maXZ1IAl/KVkn0vw+LUQtY8JYD6vJHc7G6286hpB3Y71aop0H5LQLgdIL47hysmM nH4UTWBrFJhhf8yzVIJ/KdueMXIYqnopsD/e4wT60/ySIjPEB7qlzAGeIa2PX6AU a3atGJqEIW68cdOShTVXHZFFe/Y6mo/0GCZqMaVULuksK2w+/t3fmN+iB95Afgm5 XEny3ScBtKSmmIdvna6OHS6TWoozehPLM+9e4y+JKNgjs8HltIwAe+p4AYNJ+vPZ LJdFW1meTXTm5YWN/k6XrXmmC7hJYwGTdI466o44SggCyspZ0ihH23+anQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFck6+sQ4K8XiuEDqhziEOb6JKP4MB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2r2B8m2 R6BOnYS9H6KrhRECyK0QCy+Dx3MkvlVTOrvOg/ljp/qOFcOlxxAq+84uOXPurS+H YoW6JPCJlilxDlwv+WZgqUmgysEVhFouOZW8iVVb4u9hoRW66UmQwurEWFoJ7Xw/ G8uoVl0DlmSYHo9gfd5NeeBga0JdcGLydmBQBWgxIez9B8/AWb93lufNxjomxgBa dZjp59LYiW2C+LQ8FprZLUf2KnRbTIvpjCEDJJCf4dY5K5IOTSVA3BA16aVnNg90 WvOkHoyE/4LbPs08sewej29ZVkMwi9+bgs4avQcZ7La6Y0SJhdpE6aHhYrVc/fM3 st2DENfXBNJswQ== -----END CERTIFICATE-----Generated at Fri May 9 20:43:17 2025 by rpki-client