$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json) Hash identifier: yt7DPkZLp94lwQ/m9aBnXNqi0T3BNB8ETrAZ7LM+Z5E= Subject key identifier: 3F:0D:CC:8E:EC:03:51:D1:32:A4:A6:E6:C3:7B:CF:42:61:17:97:8B Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019747E780F58C5A54F5967083623EAD8D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft Manifest number: 09B3 Signing time: Sat 07 Jun 2025 01:00:43 +0000 Manifest this update: Sat 07 Jun 2025 01:00:43 +0000 Manifest next update: Sun 08 Jun 2025 01:00:43 +0000 Files and hashes: 1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=) 2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=) 3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=) 4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=) 5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: jHobZvd9h95QloPZOSzte3sHhkJZFIaoSoIlOIYr4+c=) 6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=) 7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=) 8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=) 9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=) 10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=) 11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=) 12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=) 13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=) 14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=) 15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=) 16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=) 17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=) 18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=) 19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=) 20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=) 21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=) 22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=) 23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=) 24: sXpjAF10yFnKIr4QcLJYvBmJdoY.roa (hash: APdgDAmA0VEbqfM6xaUZ783M1XIEd3juXocVjfK3nIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:80:f5:8c:5a:54:f5:96:70:83:62:3e:ad:8d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jun 7 01:00:43 2025 GMT Not After : Jun 8 01:00:43 2025 GMT Subject: CN=3f0dcc8eec0351d132a4a6e6c37bcf426117978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:99:6f:12:49:1b:1b:e2:67:fe:3f:f7:f2: 2a:d3:e0:d7:85:43:50:30:38:c9:8e:3a:e6:d3:1b: 2a:9b:ae:17:bc:e2:a5:b9:9d:ed:3e:86:7d:a6:87: b6:e6:2b:fb:8d:84:fd:73:a4:08:07:d6:5b:db:db: a3:dc:07:38:e6:83:51:42:29:c1:92:03:d9:15:33: 2a:6e:15:c6:82:c8:18:56:72:b8:76:3a:69:21:4d: 00:77:28:27:e0:0a:53:7d:c7:d5:f8:f8:b9:70:6a: 64:35:b6:69:31:f3:34:b4:97:c9:0c:a2:43:36:ec: 74:e4:43:2d:01:40:cd:8c:1d:93:17:07:e9:2c:db: c7:cd:c3:73:10:db:49:41:5c:95:f2:31:d9:0d:ee: aa:c4:92:a0:25:1c:b3:2a:be:02:53:b4:90:08:ed: 4f:1b:22:6d:a5:af:7e:76:8c:5a:24:76:9c:b1:42: 30:a2:03:56:0e:15:86:7b:bc:58:3c:a9:57:22:6b: ba:18:6e:f1:69:f0:2e:b0:81:3a:d6:e1:83:7b:ae: 02:44:ce:7b:50:20:36:f1:7a:b6:65:5c:5b:13:5a: 14:df:66:2d:58:2e:3a:bc:ca:41:ba:9f:0a:10:68: fc:4d:16:c8:94:22:7a:2c:72:de:37:59:1a:f0:bd: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0D:CC:8E:EC:03:51:D1:32:A4:A6:E6:C3:7B:CF:42:61:17:97:8B X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d5:6a:19:cb:f2:9c:2a:ca:94:6a:44:fe:59:68:8b:aa:92: aa:3a:17:2b:7b:74:bb:d1:a6:41:b3:c9:1c:9d:81:1d:42:9d: 3d:40:ba:06:80:03:92:26:b1:eb:a7:42:06:52:27:c8:e2:4b: 58:4c:3d:6b:6d:af:da:19:00:5f:a1:c1:1e:3d:e0:4f:fc:e2: 0c:0e:5c:a4:e1:34:42:a1:cf:85:a0:02:b3:4c:73:3c:07:83: c9:68:b9:a3:7c:57:54:02:ea:ef:4c:ad:ec:f4:b0:d4:0a:26: af:af:b3:00:97:36:2f:46:99:a2:eb:ce:bc:b7:7a:f3:62:c1: d2:d3:83:7c:4a:fe:de:bc:50:e2:94:9b:42:d3:42:8e:ea:0a: e5:9b:e5:e0:42:87:35:0b:88:45:1e:3c:b2:73:bb:97:f9:e4: ba:8b:e9:03:35:41:e1:99:49:12:3e:25:70:7e:13:3c:f0:4b: e2:f0:96:a4:fd:b8:5c:6f:6b:54:61:34:2c:11:9b:73:60:62: 11:aa:a3:21:37:c2:85:e7:50:3d:25:cd:a0:a5:c2:b7:6f:7e: 51:9a:45:3c:b5:55:30:90:77:90:ec:e8:99:b5:88:b9:07:9d: 7e:13:f4:7f:9f:bb:fc:fb:3a:a1:47:49:c2:9e:c3:34:3e:89: d5:60:72:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH54D1jFpU9ZZwg2I+rY0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjUwNjA3MDEwMDQzWhcNMjUwNjA4MDEwMDQzWjAzMTEwLwYDVQQD EygzZjBkY2M4ZWVjMDM1MWQxMzJhNGE2ZTZjMzdiY2Y0MjYxMTc5NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zCZbxJJGxviZ/4/9/Iq0+DXhUNQ MDjJjjrm0xsqm64XvOKluZ3tPoZ9poe25iv7jYT9c6QIB9Zb29uj3Ac45oNRQinB kgPZFTMqbhXGgsgYVnK4djppIU0Adygn4ApTfcfV+Pi5cGpkNbZpMfM0tJfJDKJD Nux05EMtAUDNjB2TFwfpLNvHzcNzENtJQVyV8jHZDe6qxJKgJRyzKr4CU7SQCO1P GyJtpa9+doxaJHacsUIwogNWDhWGe7xYPKlXImu6GG7xafAusIE61uGDe64CRM57 UCA28Xq2ZVxbE1oU32YtWC46vMpBup8KEGj8TRbIlCJ6LHLeN1ka8L1QEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8NzI7sA1HRMqSm5sN7z0JhF5eLMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9VqGcvy nCrKlGpE/lloi6qSqjoXK3t0u9GmQbPJHJ2BHUKdPUC6BoADkiax66dCBlInyOJL WEw9a22v2hkAX6HBHj3gT/ziDA5cpOE0QqHPhaACs0xzPAeDyWi5o3xXVALq70yt 7PSw1Aomr6+zAJc2L0aZouvOvLd682LB0tODfEr+3rxQ4pSbQtNCjuoK5Zvl4EKH NQuIRR48snO7l/nkuovpAzVB4ZlJEj4lcH4TPPBL4vCWpP24XG9rVGE0LBGbc2Bi EaqjITfChedQPSXNoKXCt29+UZpFPLVVMJB3kOzombWIuQedfhP0f5+7/Ps6oUdJ wp7DND6J1WByaw== -----END CERTIFICATE-----Generated at Sat Jun 7 07:49:02 2025 by rpki-client