$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: Nqfph7nTUJ2ZGS4JLVyGbG6YTUk5D6ZJX5runt+J518= Subject key identifier: 71:EE:20:66:91:D2:3C:6C:D5:40:1D:C1:F4:9A:7B:D2:F1:E5:08:A3 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0197C45C2921A2A730A29B7D824388135235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 15E0 Signing time: Tue 01 Jul 2025 05:01:03 +0000 Manifest this update: Tue 01 Jul 2025 05:01:03 +0000 Manifest next update: Wed 02 Jul 2025 05:01:03 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: XyANadjGuE8A8Wxz2CKpfdTG2AqY9RiSGCszpG6nlQo=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=) 4: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 5: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 7: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 8: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 9: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 10: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 11: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=) 12: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 13: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (hash: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c4:5c:29:21:a2:a7:30:a2:9b:7d:82:43:88:13:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jul 1 05:01:03 2025 GMT Not After : Jul 2 05:01:03 2025 GMT Subject: CN=71ee206691d23c6cd5401dc1f49a7bd2f1e508a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a5:0a:de:41:e8:b3:da:a3:5a:6f:91:1e:53: 89:b2:3f:0c:4e:eb:b3:f4:b5:29:96:cf:d1:ec:28: 9c:e5:d3:9a:d0:1a:20:96:b3:42:1f:44:84:02:d3: 85:c6:f1:ff:1c:71:aa:0e:f4:fa:4f:fc:ec:00:b6: 7d:c2:b4:de:7b:1c:5e:a5:e3:29:74:19:60:74:12: 40:14:b3:98:3a:ad:f3:08:45:58:da:ee:15:6b:9d: 6b:c0:28:93:eb:f1:1e:e7:59:5d:9c:d8:1d:07:2b: 9a:ec:b0:8b:72:95:c8:28:91:d1:2f:4b:e3:60:14: c1:f3:7a:d5:0c:d8:1b:c3:50:98:5b:3d:90:88:f7: cc:a8:b6:da:45:3d:69:88:5b:8e:6a:e3:7a:ab:98: a0:ff:7e:84:db:86:d7:1b:74:4f:21:88:bd:0c:4c: dc:4b:58:91:2e:47:e8:1e:2b:28:ad:f1:8c:73:c2: f9:a9:cf:87:10:a7:0d:0f:c3:9b:6f:77:34:ef:5c: de:78:8c:d9:62:cb:9c:cd:32:a1:2d:b7:6c:11:fc: 19:fc:31:f1:36:4c:8c:0e:6e:e8:ae:2c:54:a4:b0: 26:e2:03:96:6c:70:09:04:93:1b:ef:69:07:56:55: e4:4e:7b:ca:06:4d:ad:9b:65:43:c8:89:60:16:05: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:20:66:91:D2:3C:6C:D5:40:1D:C1:F4:9A:7B:D2:F1:E5:08:A3 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0e:a3:9e:95:a8:ac:8c:db:f8:57:73:50:f2:8d:db:30:3f: 33:ea:ac:2e:fb:ae:63:f9:aa:30:7a:ab:42:85:a6:2f:6b:71: 7e:16:71:a3:80:70:d6:0c:69:dd:9b:76:25:31:33:a7:82:88: 3c:c7:e7:0d:ea:51:19:70:e8:c9:34:85:16:c5:4e:76:9d:22: a0:9a:af:28:5e:46:d0:d4:1e:48:a4:23:ac:e6:84:1c:ff:14: 2c:e4:d6:b2:43:30:4e:c1:50:e8:ee:27:16:e2:b4:f6:0a:b9: 50:88:d2:c2:67:a0:a9:0e:88:5e:f4:a4:58:07:2c:c3:b0:f0: 4f:f8:b8:b6:13:a0:57:05:87:c9:ad:b8:9f:e6:4d:19:4e:17: d5:1e:13:7f:88:b7:30:f3:9b:ac:07:f8:06:45:b4:29:a5:c5: ae:da:2a:7c:d4:cf:dd:76:13:2e:0d:ff:b8:f6:60:f4:34:a4: b7:bb:4c:90:7c:ab:60:d9:2c:43:16:a3:15:e6:44:98:72:73: 72:32:1b:f5:93:31:b5:05:e2:e9:9f:63:10:be:45:99:c4:48: b1:44:73:65:0c:32:8b:38:d6:20:4a:9e:16:d0:f3:67:ed:23: de:68:66:73:b6:9c:19:66:71:b0:58:17:d1:89:cd:c1:6e:98: 09:9e:a7:aa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZfEXCkhoqcwopt9gkOIE1I1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwNzAxMDUwMTAzWhcNMjUwNzAyMDUwMTAzWjAzMTEwLwYDVQQD Eyg3MWVlMjA2NjkxZDIzYzZjZDU0MDFkYzFmNDlhN2JkMmYxZTUwOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86UK3kHos9qjWm+RHlOJsj8MTuuz 9LUpls/R7Cic5dOa0BoglrNCH0SEAtOFxvH/HHGqDvT6T/zsALZ9wrTeexxepeMp dBlgdBJAFLOYOq3zCEVY2u4Va51rwCiT6/Ee51ldnNgdByua7LCLcpXIKJHRL0vj YBTB83rVDNgbw1CYWz2QiPfMqLbaRT1piFuOauN6q5ig/36E24bXG3RPIYi9DEzc S1iRLkfoHisorfGMc8L5qc+HEKcND8Obb3c071zeeIzZYsuczTKhLbdsEfwZ/DHx NkyMDm7orixUpLAm4gOWbHAJBJMb72kHVlXkTnvKBk2tm2VDyIlgFgVFjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHHuIGaR0jxs1UAdwfSae9Lx5QijMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw6j npWorIzb+FdzUPKN2zA/M+qsLvuuY/mqMHqrQoWmL2txfhZxo4Bw1gxp3Zt2JTEz p4KIPMfnDepRGXDoyTSFFsVOdp0ioJqvKF5G0NQeSKQjrOaEHP8ULOTWskMwTsFQ 6O4nFuK09gq5UIjSwmegqQ6IXvSkWAcsw7DwT/i4thOgVwWHya24n+ZNGU4X1R4T f4i3MPObrAf4BkW0KaXFrtoqfNTP3XYTLg3/uPZg9DSkt7tMkHyrYNksQxajFeZE mHJzcjIb9ZMxtQXi6Z9jEL5FmcRIsURzZQwyizjWIEqeFtDzZ+0j3mhmc7acGWZx sFgX0YnNwW6YCZ6nqg== -----END CERTIFICATE-----Generated at Tue Jul 1 13:19:05 2025 by rpki-client