$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: qEDRiRrWn7of2beqTGGF1A4maKqcpUfavR418snrHtY= Subject key identifier: 6A:5E:F8:EA:13:33:4C:E8:C6:99:64:ED:9D:37:02:23:DC:22:C4:99 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0196BDB75ABB9D9878C380AFFA663369CCF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 1557 Signing time: Sun 11 May 2025 05:00:32 +0000 Manifest this update: Sun 11 May 2025 05:00:32 +0000 Manifest next update: Mon 12 May 2025 05:00:32 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: 71UORjHEfbIWU0YRuFpyh1lc15a53N3i2CO9DnT/Ct4=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 4: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 5: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 6: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 7: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 8: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 9: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 10: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=) 11: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 12: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (hash: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:b7:5a:bb:9d:98:78:c3:80:af:fa:66:33:69:cc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: May 11 05:00:32 2025 GMT Not After : May 12 05:00:32 2025 GMT Subject: CN=6a5ef8ea13334ce8c69964ed9d370223dc22c499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:4b:cb:bd:03:83:18:9f:31:19:61:3a:59: 34:5d:df:23:d2:04:b6:72:62:b2:c8:85:86:54:22: 68:47:37:bf:bc:f6:9e:e0:81:d6:92:40:a7:1f:a5: 4f:7f:38:55:ab:2f:38:d8:9f:6a:12:d9:94:bf:62: 06:62:8e:84:a9:5d:1b:77:e9:e0:27:f2:db:35:aa: 4f:8a:52:76:80:82:36:55:b7:e3:45:46:6c:ec:c8: e4:96:79:92:e1:8a:20:5f:18:91:f5:44:a0:e5:8b: c7:1c:66:a5:03:20:90:71:4f:04:40:36:28:1f:72: d0:02:e0:1a:94:34:53:b4:81:a5:32:06:b9:45:6e: 97:51:34:b4:76:98:98:9e:50:52:88:a2:c7:20:f3: 16:b9:e3:a6:95:5d:0a:b2:39:23:8e:7d:4a:dc:c0: 04:11:86:c7:7f:b4:0f:89:53:5b:54:fc:29:ff:c2: 09:68:cd:44:fa:ae:f2:c5:80:16:d3:29:83:55:30: 7c:d4:70:3d:a5:d4:11:f5:1d:8b:83:00:eb:10:d5: f8:2a:b0:cc:af:ed:e8:35:e4:d3:b7:86:f0:d9:74: 37:ce:b9:72:4e:35:41:dc:1c:f9:7a:77:1d:dc:ee: ed:d1:e8:c2:7f:40:c5:55:62:76:34:fb:46:b2:53: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5E:F8:EA:13:33:4C:E8:C6:99:64:ED:9D:37:02:23:DC:22:C4:99 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:c4:3a:a0:bb:62:bf:ef:3d:2a:d0:0a:51:27:42:06:1c: 23:ea:fd:3a:37:c4:6a:92:28:9f:ac:1d:b8:1e:1a:58:bc:fe: 28:bc:c6:04:56:50:09:22:df:c3:cd:0e:d0:74:18:4e:99:53: 5f:a0:7a:89:bc:35:fe:50:db:7d:41:48:70:ed:3d:c5:fb:82: e6:b8:b9:02:1f:c5:4b:f8:88:74:bc:82:7c:cc:5a:94:71:fe: c6:f1:c3:26:eb:3d:52:43:7d:15:ee:cd:2b:ea:3a:3a:96:36: dc:6b:b1:7b:27:57:e7:2b:f1:ce:6b:73:60:86:8c:c6:21:c7: a6:2d:18:f4:a4:93:01:32:15:0f:b3:67:39:33:74:c9:27:ac: d6:7b:48:2f:6e:38:7a:1b:37:7b:67:30:8c:b3:e3:a0:c3:92: 65:60:10:0f:3c:4a:9d:c4:45:a0:61:46:9c:a8:16:97:de:07: 7c:23:74:92:80:e0:b0:1d:cf:3f:e7:79:44:f3:a0:47:e7:c5: d0:52:f2:93:70:9c:e4:58:00:5d:91:cd:db:94:27:6a:28:34: 6d:49:f7:71:70:d7:05:5d:b5:a6:d4:8d:d9:ce:4b:44:8c:dc: 0c:ea:14:36:ea:e1:66:db:63:da:ac:b6:a4:fa:24:ad:ab:64: 7e:53:2e:81 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZa9t1q7nZh4w4Cv+mYzaczwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwNTExMDUwMDMyWhcNMjUwNTEyMDUwMDMyWjAzMTEwLwYDVQQD Eyg2YTVlZjhlYTEzMzM0Y2U4YzY5OTY0ZWQ5ZDM3MDIyM2RjMjJjNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/FLy70DgxifMRlhOlk0Xd8j0gS2 cmKyyIWGVCJoRze/vPae4IHWkkCnH6VPfzhVqy842J9qEtmUv2IGYo6EqV0bd+ng J/LbNapPilJ2gII2VbfjRUZs7MjklnmS4YogXxiR9USg5YvHHGalAyCQcU8EQDYo H3LQAuAalDRTtIGlMga5RW6XUTS0dpiYnlBSiKLHIPMWueOmlV0Ksjkjjn1K3MAE EYbHf7QPiVNbVPwp/8IJaM1E+q7yxYAW0ymDVTB81HA9pdQR9R2LgwDrENX4KrDM r+3oNeTTt4bw2XQ3zrlyTjVB3Bz5encd3O7t0ejCf0DFVWJ2NPtGslNf9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGpe+OoTM0zoxplk7Z03AiPcIsSZMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3XE OqC7Yr/vPSrQClEnQgYcI+r9OjfEapIon6wduB4aWLz+KLzGBFZQCSLfw80O0HQY TplTX6B6ibw1/lDbfUFIcO09xfuC5ri5Ah/FS/iIdLyCfMxalHH+xvHDJus9UkN9 Fe7NK+o6OpY23GuxeydX5yvxzmtzYIaMxiHHpi0Y9KSTATIVD7NnOTN0ySes1ntI L244ehs3e2cwjLPjoMOSZWAQDzxKncRFoGFGnKgWl94HfCN0koDgsB3PP+d5RPOg R+fF0FLyk3Cc5FgAXZHN25Qnaig0bUn3cXDXBV21ptSN2c5LRIzcDOoUNurhZttj 2qy2pPokratkflMugQ== -----END CERTIFICATE-----Generated at Sun May 11 09:05:21 2025 by rpki-client