$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json) Hash identifier: 6JmXrfZkgKjV7Bs2p2V52bcAY92IgdnQpzSvN58z0is= Subject key identifier: 4C:3D:D1:78:0B:A5:1E:6B:36:2D:86:AC:6B:12:47:16:53:70:4D:28 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 0197B6D785660CD553AFEAB90C933FACA5ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft Manifest number: 15CD Signing time: Sat 28 Jun 2025 14:01:07 +0000 Manifest this update: Sat 28 Jun 2025 14:01:07 +0000 Manifest next update: Sun 29 Jun 2025 14:01:07 +0000 Files and hashes: 1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=) 2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=) 3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=) 4: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=) 5: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=) 6: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=) 7: TcREFaat3BLntw04ypyL63blPnc.roa (hash: ujFrwypXV/leJfWI8GP1wwYG1eD9LOp8Gpc7lvuU/io=) 8: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=) 9: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=) 10: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=) 11: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=) 12: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: AGO7+I+JxZ52zlxXanVn7LBkuBfSHbajN/cksqT68Rc=) 13: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=) 14: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=) 15: poFYbbPGkTt6CCvX4o3TCsHpfsg.roa (hash: s1SNEkHqWiUfn1yNCntzkNwcArO1bOsbt3CndoD1K8g=) 16: r_KvJv83UWZ7GxTGf8Wcme3ktnw.roa (hash: d3lvS9v2d04dXWrzZAL/95YfMQ48ufz4iEKRW8zSM58=) 17: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=) 18: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:85:66:0c:d5:53:af:ea:b9:0c:93:3f:ac:a5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jun 28 14:01:07 2025 GMT Not After : Jun 29 14:01:07 2025 GMT Subject: CN=4c3dd1780ba51e6b362d86ac6b12471653704d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:ed:90:17:a7:61:1f:d7:c5:3d:e6:62:90: e1:e1:bf:e0:86:5e:6f:41:be:f0:fd:d6:8c:c1:56: 80:c0:e7:ab:4e:2a:07:23:92:3e:2e:15:56:8d:39: 98:28:aa:e7:22:e0:d7:3c:ba:04:88:4d:3f:49:3b: df:7c:4a:2d:64:89:ca:3e:e2:05:9e:e5:e7:5b:6e: a2:1f:e9:a3:6a:66:35:77:f0:82:1f:f0:8b:1f:15: 26:24:aa:db:a0:de:88:2e:b2:8a:6b:40:c5:5c:44: 86:ae:48:83:07:d7:93:5f:d8:6b:ee:cb:25:d2:35: b2:e9:a4:2c:e1:f2:70:dc:67:5c:49:19:75:00:4e: cd:7f:bc:aa:3c:cc:a0:73:18:3d:c7:60:f6:2e:c2: 06:de:d4:c1:a8:97:1f:16:8a:ce:5f:28:dd:5b:e6: 37:fd:54:d6:1a:1e:03:90:42:87:5c:db:a5:42:dd: 53:b0:a7:6f:de:82:9f:a2:88:7a:5b:eb:6d:70:d0: 6d:c5:e3:90:3d:d7:1f:7e:b0:b6:5d:d4:13:35:b9: 84:98:0d:c8:32:90:58:4e:d9:bb:4a:05:2b:98:cf: e3:3d:9b:d2:20:47:4d:4e:14:7e:72:6c:96:94:4e: 0b:2d:3f:77:0d:29:cb:67:4e:02:7a:cd:c3:9a:32: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3D:D1:78:0B:A5:1E:6B:36:2D:86:AC:6B:12:47:16:53:70:4D:28 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e4:3f:8c:60:56:a5:8c:67:93:71:38:67:bd:54:2b:10:65: 19:7a:d8:e7:c7:ec:bb:95:84:35:4d:47:c0:4d:68:ff:7b:2c: 20:d8:eb:ca:2d:a4:b5:7c:59:cb:5c:58:a6:78:b9:85:31:03: ae:99:52:8c:54:66:70:63:f1:af:41:a6:de:0d:3f:da:2a:9d: c9:74:b4:a0:09:40:2a:92:55:e8:be:1d:16:76:6e:12:af:39: 67:4d:45:52:c2:5d:48:52:21:ea:45:12:2b:24:4e:34:bf:55: 8a:19:62:3f:64:1d:98:3e:fe:32:c0:c3:0c:8b:25:20:46:8d: 28:31:db:95:c1:92:1f:c7:45:e7:6d:ef:57:e0:6d:cd:90:c8: 50:54:5c:99:a0:05:b4:f5:be:e9:94:69:2d:c9:d4:e1:a0:94: 65:2f:18:16:34:59:e8:0c:3e:d1:08:cf:ae:c2:e7:fa:b7:7b: 1c:6c:66:a5:e9:c5:0c:19:00:f4:d5:ed:b6:ea:49:7c:01:60: 09:21:d7:b0:22:70:c7:13:1b:b1:98:48:af:ad:1b:6f:ed:5c: 11:cc:88:1f:d4:df:66:de:dd:54:ab:07:6a:83:e7:4a:bd:8c: 69:e4:e4:d8:a9:92:23:c2:29:7b:c1:c2:bf:7b:74:e0:25:17: 17:20:4d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe214VmDNVTr+q5DJM/rKXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjUwNjI4MTQwMTA3WhcNMjUwNjI5MTQwMTA3WjAzMTEwLwYDVQQD Eyg0YzNkZDE3ODBiYTUxZTZiMzYyZDg2YWM2YjEyNDcxNjUzNzA0ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIftkBenYR/XxT3mYpDh4b/ghl5v Qb7w/daMwVaAwOerTioHI5I+LhVWjTmYKKrnIuDXPLoEiE0/STvffEotZInKPuIF nuXnW26iH+mjamY1d/CCH/CLHxUmJKrboN6ILrKKa0DFXESGrkiDB9eTX9hr7ssl 0jWy6aQs4fJw3GdcSRl1AE7Nf7yqPMygcxg9x2D2LsIG3tTBqJcfForOXyjdW+Y3 /VTWGh4DkEKHXNulQt1TsKdv3oKfooh6W+ttcNBtxeOQPdcffrC2XdQTNbmEmA3I MpBYTtm7SgUrmM/jPZvSIEdNThR+cmyWlE4LLT93DSnLZ04Ces3DmjL1KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw90XgLpR5rNi2GrGsSRxZTcE0oMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOQ/jGBW pYxnk3E4Z71UKxBlGXrY58fsu5WENU1HwE1o/3ssINjryi2ktXxZy1xYpni5hTED rplSjFRmcGPxr0Gm3g0/2iqdyXS0oAlAKpJV6L4dFnZuEq85Z01FUsJdSFIh6kUS KyRONL9VihliP2QdmD7+MsDDDIslIEaNKDHblcGSH8dF523vV+BtzZDIUFRcmaAF tPW+6ZRpLcnU4aCUZS8YFjRZ6Aw+0QjPrsLn+rd7HGxmpenFDBkA9NXttupJfAFg CSHXsCJwxxMbsZhIr60bb+1cEcyIH9TfZt7dVKsHaoPnSr2MaeTk2KmSI8Ipe8HC v3t04CUXFyBNWQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:06:01 2025 by rpki-client