$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: BvAEj6soKUEyKtFR4n+MC4RxGiKWu/qpBI7OjzWHVRo= Subject key identifier: A8:0F:7A:E5:53:B4:45:16:42:9E:BD:3F:6B:D0:C5:00:E3:6C:A1:F0 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 01969D878EB0AD84C292F0128434D2A07D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 1520 Signing time: Sun 04 May 2025 23:00:28 +0000 Manifest this update: Sun 04 May 2025 23:00:28 +0000 Manifest next update: Mon 05 May 2025 23:00:28 +0000 Files and hashes: 1: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=) 2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 3: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 4: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 5: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 6: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=) 7: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: K9ku2tdDkjRGC042aor8bLoSjvzSNZucc0NYwi5MCdY=) 8: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 9: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 10: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 11: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=) 12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=) 19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9d:87:8e:b0:ad:84:c2:92:f0:12:84:34:d2:a0:7d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: May 4 23:00:28 2025 GMT Not After : May 5 23:00:28 2025 GMT Subject: CN=a80f7ae553b44516429ebd3f6bd0c500e36ca1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:f6:0c:30:b4:fb:17:be:91:3a:f8:4d:5c: b8:0f:b7:9b:c3:19:07:aa:19:31:0a:06:76:cf:fd: a5:42:9b:4e:6e:9b:df:e2:78:f1:d4:eb:64:4d:43: d7:01:1c:40:7b:14:eb:61:c4:82:13:0d:b5:9d:11: 88:37:48:13:ae:f5:84:3f:49:86:5c:d3:f7:b1:ff: 72:b0:82:56:6a:b8:79:2d:ea:84:ed:55:b5:4f:ac: 12:9a:d9:24:74:45:f7:1c:01:1e:0f:d4:d0:f1:81: 4b:f0:1d:7e:9b:de:f6:cd:f7:53:44:0f:1a:08:f5: 8e:a8:43:92:38:b0:e7:53:ac:34:85:61:f3:69:87: 23:0c:02:fd:0f:11:9d:6e:b4:3d:55:41:b6:3a:84: bb:f1:10:fd:41:26:ce:8d:d2:33:49:8f:c1:5a:71: 65:4e:73:1f:76:3b:e2:60:75:60:e4:d3:79:5d:9e: 07:ee:62:0a:8b:d9:2f:e2:bc:a6:fa:e0:7c:d6:c8: d1:98:20:81:f5:c4:de:c4:b4:5b:c9:f1:ad:83:3e: d7:25:4e:0e:69:ee:c4:8d:32:b3:4c:7e:be:b2:25: b8:6c:63:51:73:39:5d:b7:da:77:b6:37:94:81:d4: 29:93:65:b4:d0:fb:d6:aa:68:d0:05:83:9a:1b:fc: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0F:7A:E5:53:B4:45:16:42:9E:BD:3F:6B:D0:C5:00:E3:6C:A1:F0 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:eb:b9:06:b8:bb:1f:3f:5d:97:da:4d:7d:fb:79:a3:3a:f2: 6f:fd:29:8a:ca:53:88:13:1f:72:70:90:4a:5b:17:51:f2:09: c0:6f:07:a1:2e:31:15:b7:34:f8:3c:9f:ae:09:eb:cc:12:be: d8:53:c2:ff:4f:d8:b5:d6:37:92:57:88:f2:97:08:4b:0c:a5: 96:3e:24:b5:cd:81:be:1b:c6:6e:fe:37:7a:69:ea:ca:88:05: d0:2c:46:ec:10:d2:b2:0e:a9:e8:36:d8:f1:69:c2:e7:7f:15: 4d:ed:7d:e6:98:85:e7:b4:28:1e:56:09:df:15:b3:f8:61:96: e8:35:cf:cc:78:ee:51:fd:90:63:fb:e3:67:7d:13:66:04:2e: 78:7a:52:6d:cb:3b:a6:28:34:02:47:02:97:4e:d5:15:1e:64: cf:ff:3f:38:22:87:84:01:da:33:e5:85:0e:70:57:07:55:6e: a1:9b:1e:ac:05:cb:7a:c9:12:40:30:b7:ed:d1:09:ac:f4:56: 69:5e:05:45:8b:3d:38:6c:b0:d9:07:40:41:73:23:6f:cd:88: 0e:77:e0:b3:44:31:db:5c:c8:b8:b9:84:a2:df:5c:30:f3:d2: b0:41:0a:e2:20:ab:c2:aa:07:55:35:67:9d:d2:7a:a4:2c:d2: 4d:9d:3b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZadh46wrYTCkvAShDTSoH1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwNTA0MjMwMDI4WhcNMjUwNTA1MjMwMDI4WjAzMTEwLwYDVQQD EyhhODBmN2FlNTUzYjQ0NTE2NDI5ZWJkM2Y2YmQwYzUwMGUzNmNhMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkD2DDC0+xe+kTr4TVy4D7ebwxkH qhkxCgZ2z/2lQptObpvf4njx1OtkTUPXARxAexTrYcSCEw21nRGIN0gTrvWEP0mG XNP3sf9ysIJWarh5LeqE7VW1T6wSmtkkdEX3HAEeD9TQ8YFL8B1+m972zfdTRA8a CPWOqEOSOLDnU6w0hWHzaYcjDAL9DxGdbrQ9VUG2OoS78RD9QSbOjdIzSY/BWnFl TnMfdjviYHVg5NN5XZ4H7mIKi9kv4rym+uB81sjRmCCB9cTexLRbyfGtgz7XJU4O ae7EjTKzTH6+siW4bGNRczldt9p3tjeUgdQpk2W00PvWqmjQBYOaG/wErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgPeuVTtEUWQp69P2vQxQDjbKHwMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOu5Bri7 Hz9dl9pNfft5ozryb/0pispTiBMfcnCQSlsXUfIJwG8HoS4xFbc0+DyfrgnrzBK+ 2FPC/0/YtdY3kleI8pcISwyllj4ktc2BvhvGbv43emnqyogF0CxG7BDSsg6p6DbY 8WnC538VTe195piF57QoHlYJ3xWz+GGW6DXPzHjuUf2QY/vjZ30TZgQueHpSbcs7 pig0AkcCl07VFR5kz/8/OCKHhAHaM+WFDnBXB1VuoZserAXLeskSQDC37dEJrPRW aV4FRYs9OGyw2QdAQXMjb82IDnfgs0Qx21zIuLmEot9cMPPSsEEK4iCrwqoHVTVn ndJ6pCzSTZ07qQ== -----END CERTIFICATE-----Generated at Mon May 5 04:42:14 2025 by rpki-client