$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft File: GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json) Hash identifier: xhMv0sVFuaQwFjuZFYDVjqOqKNfvPQwXWNXn3onvqs8= Subject key identifier: 93:3E:44:60:B7:14:6E:0A:B2:8C:D1:3C:E2:B5:A3:E6:63:CF:83:9C Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019609793A56C4203AF13D31181FF4979E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft Manifest number: 0663 Signing time: Sun 06 Apr 2025 05:01:01 +0000 Manifest this update: Sun 06 Apr 2025 05:01:01 +0000 Manifest next update: Mon 07 Apr 2025 05:01:01 +0000 Files and hashes: 1: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=) 2: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=) 3: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: ULQ0pxm53s0L03Ag/lCJQY2He0DKPWFSnjGhelZy4qw=) 4: GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa (hash: eDAPdGo/XSCCbAybQBU4awqfxZqhBeWpUhbvG4BJjMc=) 5: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=) 6: RcIKD73d5ujXW1-AkxDhayNtfVI.roa (hash: 9/VGKZNbuvDtuY5QPyILGzD7v+5bfBrjF3UdfJhrKQM=) 7: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=) 8: TNVmsFulJ0CVHUr1TBafJ-15c1k.roa (hash: jUp+6iw9GTqfD/ZnQ80Ff0zfXIrBI9ftCxjnksKcQOk=) 9: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=) 10: _ASZiPv7hZdRHPYNayxoSPr5BZI.roa (hash: Ckq+XOCrDSGiAy5WF6l/e8L9omGzxK8ZY92a0XmtBxc=) 11: _PsTgNyj2kuvf9bU_VQgCADRPAQ.roa (hash: bWRmBYvsrWHn6JuASHO7QZY/Kv+hHW0Nsaq81jNfzOc=) 12: bs7GziLox9peGF2yvnXKRWa8CtM.roa (hash: cBuRaE10dL+zgAwaQff5Gg3RICxaLuAu1aSi+XkcBE4=) 13: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=) 14: jyhaUuX-ZThRseELlPrxByqUyJw.roa (hash: e5odEgSnsIIM6hBXp3RT/Su+ZTlWWPrwLkc2XthjZ6o=) 15: o5FK-KkSckiod3aRSAvg_C0hR1Q.roa (hash: pdFjqkiefblpcPGzv7KiohLrBFYc122aelPxDTy7TEY=) 16: tXbHOfReX9qN0T3foodzk2ifYsE.roa (hash: j/tvE7XOmml/IXF1FdoH5AY+EIUpxJ1RnI1YQ6w9LH0=) 17: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:79:3a:56:c4:20:3a:f1:3d:31:18:1f:f4:97:9e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Apr 6 05:01:01 2025 GMT Not After : Apr 7 05:01:01 2025 GMT Subject: CN=933e4460b7146e0ab28cd13ce2b5a3e663cf839c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:fd:a3:2a:15:64:cb:bb:91:52:ac:f0:be: c4:0c:b0:e4:dc:b4:ec:ee:5b:6c:b9:0c:ff:7e:a1: 7f:e1:b5:a4:68:78:f9:52:75:7c:c5:e7:14:97:7e: 70:65:21:f2:e1:47:bf:b7:60:19:af:e2:82:c6:0b: 3a:e8:d8:40:03:47:4d:95:4e:56:23:3a:20:db:11: 4c:18:b6:a3:c9:5e:9e:8b:4e:a5:57:5e:7e:65:25: dc:e8:0e:9f:c3:55:a0:bc:09:97:7e:5d:6a:0c:39: bb:3a:c5:f0:22:e6:61:c7:65:48:1f:e3:e5:d7:29: d7:b2:be:ae:d1:af:ed:50:e1:1d:b0:4e:90:dc:fc: 9d:58:75:b2:d2:76:c5:e5:6a:43:57:84:bd:22:0c: 19:c3:08:2c:2f:7a:dd:5c:67:54:28:97:4d:3d:c6: 57:a4:fb:7c:9d:d9:6f:db:ca:e3:e2:0e:be:99:d5: d8:c7:c6:27:f2:64:ec:9f:11:fb:08:49:76:4c:46: ad:5e:01:f1:bc:89:ff:12:5b:ff:92:41:84:ef:7a: d3:ee:54:4a:99:70:7d:f0:8c:5f:ff:92:e6:81:4e: 9f:f2:b9:4b:24:75:8b:c2:3c:b6:59:f1:17:d0:30: fc:c4:41:ba:53:e2:36:4e:88:c3:88:f6:e0:74:2b: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:44:60:B7:14:6E:0A:B2:8C:D1:3C:E2:B5:A3:E6:63:CF:83:9C X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7f:6a:ca:68:20:42:f0:25:77:26:ca:b5:d1:94:1d:e2:2d: 7b:ae:16:ad:61:a9:eb:6e:f5:d3:9a:af:d2:0b:67:5a:b3:cb: 52:a3:15:81:bf:32:cc:ab:79:98:46:9a:4b:8e:d3:9a:c1:6c: ab:18:81:c9:84:fc:11:85:e9:da:0c:d7:cc:da:34:50:28:0b: 85:b3:12:2b:2e:c6:de:b6:2f:e9:bb:ad:da:52:91:fd:46:48: 3c:28:fe:ad:e8:51:7f:8f:1a:99:20:ca:61:c7:b0:c0:dc:b9: 8f:83:0c:d2:00:e6:74:fa:26:74:12:97:13:1f:4b:17:30:61: 50:0c:44:74:fb:41:7e:74:66:5e:9d:94:5b:34:3c:db:f9:66: 7f:ae:f9:15:3c:70:57:7b:1e:db:06:88:30:7b:82:52:72:78: 46:00:c1:55:37:d8:75:47:0e:5b:c9:28:6e:ef:05:2b:80:d6: e8:08:e4:cd:d1:ad:a2:2d:e6:2c:0f:b5:8d:80:f6:4c:93:d6: 42:9f:d5:28:bf:a9:95:3d:d6:52:bd:98:9d:df:eb:dc:0c:87: 01:fa:92:1b:2d:58:dd:2d:b2:45:c7:dd:3f:c0:a9:f0:40:fb: b6:ee:a4:bb:4f:93:a2:c9:96:b2:ae:ec:57:bb:79:ca:1b:1f: 32:d9:e3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJeTpWxCA68T0xGB/0l551MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUwNDA2MDUwMTAxWhcNMjUwNDA3MDUwMTAxWjAzMTEwLwYDVQQD Eyg5MzNlNDQ2MGI3MTQ2ZTBhYjI4Y2QxM2NlMmI1YTNlNjYzY2Y4MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxb9oyoVZMu7kVKs8L7EDLDk3LTs 7ltsuQz/fqF/4bWkaHj5UnV8xecUl35wZSHy4Ue/t2AZr+KCxgs66NhAA0dNlU5W Izog2xFMGLajyV6ei06lV15+ZSXc6A6fw1WgvAmXfl1qDDm7OsXwIuZhx2VIH+Pl 1ynXsr6u0a/tUOEdsE6Q3PydWHWy0nbF5WpDV4S9IgwZwwgsL3rdXGdUKJdNPcZX pPt8ndlv28rj4g6+mdXYx8Yn8mTsnxH7CEl2TEatXgHxvIn/Elv/kkGE73rT7lRK mXB98Ixf/5LmgU6f8rlLJHWLwjy2WfEX0DD8xEG6U+I2TojDiPbgdCtOzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM+RGC3FG4KsozRPOK1o+Zjz4OcMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn9qymgg QvAldybKtdGUHeIte64WrWGp627105qv0gtnWrPLUqMVgb8yzKt5mEaaS47TmsFs qxiByYT8EYXp2gzXzNo0UCgLhbMSKy7G3rYv6but2lKR/UZIPCj+rehRf48amSDK YcewwNy5j4MM0gDmdPomdBKXEx9LFzBhUAxEdPtBfnRmXp2UWzQ82/lmf675FTxw V3se2waIMHuCUnJ4RgDBVTfYdUcOW8kobu8FK4DW6AjkzdGtoi3mLA+1jYD2TJPW Qp/VKL+plT3WUr2Ynd/r3AyHAfqSGy1Y3S2yRcfdP8Cp8ED7tu6ku0+TosmWsq7s V7t5yhsfMtnjLw== -----END CERTIFICATE-----Generated at Sun Apr 6 09:50:17 2025 by rpki-client