$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: jXDDGM/G+v+VK73B+1/fzAqZWyWNqmOsvxFUABejfW4= Subject key identifier: 2F:D4:B5:DC:58:5E:F9:FE:2E:0E:5F:03:5E:AC:5F:31:F2:74:E2:ED Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0197B6694BC262FB9AC81B53B6BFD5AF3E6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 15B6 Signing time: Sat 28 Jun 2025 12:00:43 +0000 Manifest this update: Sat 28 Jun 2025 12:00:43 +0000 Manifest next update: Sun 29 Jun 2025 12:00:43 +0000 Files and hashes: 1: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=) 2: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=) 3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 4: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=) 5: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 6: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 7: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: 2IHoaomr1EIl4+7F84YZUtHOfvCvtHQ6Q1l4cZ8l0RE=) 9: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 10: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 11: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=) 19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:69:4b:c2:62:fb:9a:c8:1b:53:b6:bf:d5:af:3e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jun 28 12:00:43 2025 GMT Not After : Jun 29 12:00:43 2025 GMT Subject: CN=2fd4b5dc585ef9fe2e0e5f035eac5f31f274e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:38:5f:2e:d0:16:b1:f5:76:cf:00:56:b1: ad:3b:5c:1b:3e:d5:e6:20:d3:c1:b3:76:b8:24:92: 15:bd:06:ee:5c:25:58:af:4b:6a:2e:ee:d7:2c:38: 37:27:ab:ba:3f:9c:c4:94:fb:87:73:1f:26:48:62: 4a:81:de:51:97:75:f6:7e:78:9f:3d:1f:de:0e:36: 19:7c:6e:b6:78:ef:01:33:df:2a:9f:1a:1d:5c:56: ae:d3:3b:05:87:5b:c2:6a:ad:30:e4:32:d6:60:4a: f2:5c:cb:e6:db:6f:79:80:59:f7:b5:62:c7:66:40: 9e:1b:52:74:65:6c:b7:c9:f9:fc:46:49:d4:54:dc: 48:05:a7:d2:d6:b9:62:da:29:81:65:4f:61:84:fa: 7b:6c:97:bc:78:8f:4c:43:3e:8e:71:f6:41:be:38: 59:9b:05:57:e4:2d:dd:e0:0c:d9:31:8f:86:75:bf: ac:63:bf:f4:e6:43:51:82:58:92:e5:e7:78:c6:bf: 81:c4:3e:a6:78:36:5f:7e:5d:5e:01:97:9b:ba:ff: 79:12:4b:cc:50:5b:a0:ac:bc:b3:34:8e:ff:ac:a2: 65:61:a9:fe:91:dc:db:04:b5:4b:01:5f:91:c0:01: f0:87:96:fe:27:ad:54:9f:99:b8:a8:38:ef:c8:4a: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D4:B5:DC:58:5E:F9:FE:2E:0E:5F:03:5E:AC:5F:31:F2:74:E2:ED X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:45:c9:b0:c5:01:ec:fa:80:3a:6c:a0:fa:a8:29:77:aa:41: 00:a6:44:f8:52:49:0b:1a:04:5e:e2:ca:ff:4c:c3:67:bb:b5: f6:b3:cd:32:a4:8d:ec:63:dd:d1:d7:84:73:2e:e1:ad:d6:06: 9c:3e:8a:ab:b3:4f:42:60:01:93:8f:84:c0:b8:77:8b:56:0c: 16:19:8b:79:e9:48:4c:df:de:c4:43:66:c2:da:ef:f6:f5:40: c1:55:d0:3b:51:78:a1:7c:59:28:11:a3:5f:3e:b4:cf:a1:93: 12:83:21:29:87:82:1c:66:e7:7c:46:46:ed:b3:23:d3:32:9d: 85:f7:db:74:d3:00:b9:16:b1:00:63:48:bc:5d:31:f9:9c:d0: 3c:fa:ab:13:3f:e4:d6:a8:d9:45:d3:25:bc:3c:a9:ee:3a:74: df:ec:72:80:4c:f6:f4:2b:0f:32:b3:3d:d7:a8:f0:91:65:51: d8:ef:f4:25:ad:16:d6:01:03:61:aa:ca:22:29:08:3f:44:9b: b5:06:01:36:a1:dc:e8:25:0a:3f:7a:04:ca:04:35:c3:db:fd: af:35:66:57:33:de:b2:94:c7:9e:30:62:5d:55:8d:c6:21:47: 65:d2:fd:9a:8a:58:15:16:dd:f8:0d:42:be:0d:04:af:19:3c: 79:e7:87:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2aUvCYvuayBtTtr/Vrz5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwNjI4MTIwMDQzWhcNMjUwNjI5MTIwMDQzWjAzMTEwLwYDVQQD EygyZmQ0YjVkYzU4NWVmOWZlMmUwZTVmMDM1ZWFjNWYzMWYyNzRlMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRg4Xy7QFrH1ds8AVrGtO1wbPtXm INPBs3a4JJIVvQbuXCVYr0tqLu7XLDg3J6u6P5zElPuHcx8mSGJKgd5Rl3X2fnif PR/eDjYZfG62eO8BM98qnxodXFau0zsFh1vCaq0w5DLWYEryXMvm2295gFn3tWLH ZkCeG1J0ZWy3yfn8RknUVNxIBafS1rli2imBZU9hhPp7bJe8eI9MQz6OcfZBvjhZ mwVX5C3d4AzZMY+Gdb+sY7/05kNRgliS5ed4xr+BxD6meDZffl1eAZebuv95EkvM UFugrLyzNI7/rKJlYan+kdzbBLVLAV+RwAHwh5b+J61Un5m4qDjvyEqz3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/UtdxYXvn+Lg5fA16sXzHydOLtMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEXJsMUB 7PqAOmyg+qgpd6pBAKZE+FJJCxoEXuLK/0zDZ7u19rPNMqSN7GPd0deEcy7hrdYG nD6Kq7NPQmABk4+EwLh3i1YMFhmLeelITN/exENmwtrv9vVAwVXQO1F4oXxZKBGj Xz60z6GTEoMhKYeCHGbnfEZG7bMj0zKdhffbdNMAuRaxAGNIvF0x+ZzQPPqrEz/k 1qjZRdMlvDyp7jp03+xygEz29CsPMrM916jwkWVR2O/0Ja0W1gEDYarKIikIP0Sb tQYBNqHc6CUKP3oEygQ1w9v9rzVmVzPespTHnjBiXVWNxiFHZdL9mopYFRbd+A1C vg0Erxk8eeeHAg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:55:54 2025 by rpki-client