$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: leC5kIJ0h1sjh1VQUvwT4h+zihBw+kvGOSGWhKZ7SpA= Subject key identifier: 49:60:21:B7:3C:35:B3:69:A4:28:AE:0E:3E:56:5F:D1:45:7D:5C:64 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0198D7E1AB16BABC23B0A4092651DEF74AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 1674 Signing time: Sat 23 Aug 2025 17:02:27 +0000 Manifest this update: Sat 23 Aug 2025 17:02:27 +0000 Manifest next update: Sun 24 Aug 2025 17:02:27 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: 7n6EHJTWdXshMEsK4dXjKr2PcVk8vE7m/grlmb5m2iU=) 2: 19n-Wj9bKFgdkGZ82WCYa5kkcv8.roa (hash: CeRMttDGjBvI7Ws7ExgxlD/xGz9sGjVLELjOntijMlE=) 3: 2zPiptdl-0edV96cLherBbf5jpY.roa (hash: pkUla5A0kJ9PBuMPaZOoGa9M3BoexGxDuGiL7TSPY+Q=) 4: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 5: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 6: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 7: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 8: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 9: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 10: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 11: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 12: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 13: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:e1:ab:16:ba:bc:23:b0:a4:09:26:51:de:f7:4a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Aug 23 17:02:27 2025 GMT Not After : Aug 24 17:02:27 2025 GMT Subject: CN=496021b73c35b369a428ae0e3e565fd1457d5c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f0:e6:6f:d5:0b:5c:a2:5b:21:ba:83:66:01: ee:9d:e0:c7:1c:18:91:57:7f:1c:01:04:79:76:30: 4d:aa:9a:f5:42:09:fa:04:91:4c:07:d5:e5:a4:ce: ca:22:01:f8:5a:86:38:2b:b2:c8:b8:6b:7b:dc:78: 6a:7f:90:b6:66:79:d3:74:72:57:8d:7c:03:69:92: c0:a2:71:b5:80:7a:58:57:3d:0a:80:f6:b5:31:00: d1:0c:64:81:4b:93:09:ab:fd:eb:3e:cd:07:7e:52: 7f:6a:fc:12:e4:f5:40:c9:b0:e1:24:da:32:e2:49: 74:ac:54:e0:8a:b8:9a:58:54:9f:c7:1a:1a:c1:df: 90:0b:4f:cc:68:00:e1:2b:7b:1e:9c:db:3f:27:52: cf:5b:d7:4a:16:d0:5c:ac:71:2d:7a:1b:a4:4f:75: f3:2b:8e:b8:01:d6:92:04:bd:1e:68:d6:26:82:5e: 87:32:65:26:97:99:0a:1b:38:73:e5:c9:42:e4:a6: 89:39:54:1e:ec:7d:d1:28:0d:b5:74:84:75:6e:2c: 8b:58:9c:11:ea:d6:27:2e:90:0c:76:ba:2f:87:05: 46:04:78:2b:14:88:e7:a8:4f:8f:31:b5:2e:26:cc: fa:ac:aa:30:57:b0:2e:3e:cd:f9:fa:04:dd:e3:bd: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:60:21:B7:3C:35:B3:69:A4:28:AE:0E:3E:56:5F:D1:45:7D:5C:64 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:30:e4:b6:b4:34:1e:7b:b7:13:5d:d5:fc:f0:49:93:93: 64:e9:bb:a0:b1:3a:6e:2d:d0:f1:db:33:2a:07:c2:6c:1b:cc: 36:91:ba:56:c0:c2:e7:0a:2b:65:e0:e1:40:17:c4:76:78:55: 85:01:98:af:61:bd:1b:26:3e:8e:49:1f:db:cf:c3:ac:5e:9d: 0b:86:c2:88:40:c4:5e:93:f8:b5:4f:cb:e3:ee:fa:14:69:0c: 63:0a:a8:b1:b7:7f:88:2b:d0:bf:0d:eb:03:7c:b8:1d:90:7f: 87:57:d8:b2:42:31:9e:a3:71:d2:98:cd:f1:d0:68:e2:48:42: de:8c:9f:fc:43:cc:34:b6:d3:8d:8d:fd:3a:69:9c:3d:8f:08: a2:25:6c:a8:a0:ea:06:11:d5:e3:3c:2a:c8:e8:a2:c4:8e:21: 3a:91:27:b2:99:b0:88:39:f7:d5:2f:24:9a:f2:2a:44:bb:50: 66:3f:4a:c5:df:f6:89:4c:91:ed:48:d1:ff:44:bb:b7:bc:63: 4a:a8:a8:36:20:e7:2b:90:86:e2:fe:77:0f:82:e6:a0:14:58: d6:32:6d:6f:e8:94:e8:b1:1b:bc:f6:66:d7:c0:af:07:3e:73: a4:92:be:19:e7:d4:7a:f2:d8:f7:3a:7f:e7:db:b4:af:60:13: 0b:69:f4:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZjX4asWurwjsKQJJlHe90rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwODIzMTcwMjI3WhcNMjUwODI0MTcwMjI3WjAzMTEwLwYDVQQD Eyg0OTYwMjFiNzNjMzViMzY5YTQyOGFlMGUzZTU2NWZkMTQ1N2Q1YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/Dmb9ULXKJbIbqDZgHuneDHHBiR V38cAQR5djBNqpr1Qgn6BJFMB9XlpM7KIgH4WoY4K7LIuGt73Hhqf5C2ZnnTdHJX jXwDaZLAonG1gHpYVz0KgPa1MQDRDGSBS5MJq/3rPs0HflJ/avwS5PVAybDhJNoy 4kl0rFTgiriaWFSfxxoawd+QC0/MaADhK3senNs/J1LPW9dKFtBcrHEtehukT3Xz K464AdaSBL0eaNYmgl6HMmUml5kKGzhz5clC5KaJOVQe7H3RKA21dIR1biyLWJwR 6tYnLpAMdrovhwVGBHgrFIjnqE+PMbUuJsz6rKowV7AuPs35+gTd471FpwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFElgIbc8NbNppCiuDj5WX9FFfVxkMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9Yw 5La0NB57txNd1fzwSZOTZOm7oLE6bi3Q8dszKgfCbBvMNpG6VsDC5worZeDhQBfE dnhVhQGYr2G9GyY+jkkf28/DrF6dC4bCiEDEXpP4tU/L4+76FGkMYwqosbd/iCvQ vw3rA3y4HZB/h1fYskIxnqNx0pjN8dBo4khC3oyf/EPMNLbTjY39OmmcPY8IoiVs qKDqBhHV4zwqyOiixI4hOpEnspmwiDn31S8kmvIqRLtQZj9Kxd/2iUyR7UjR/0S7 t7xjSqioNiDnK5CG4v53D4LmoBRY1jJtb+iU6LEbvPZm18CvBz5zpJK+GefUevLY 9zp/59u0r2ATC2n04g== -----END CERTIFICATE-----Generated at Sat Aug 23 21:02:13 2025 by rpki-client