$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft File: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json) Hash identifier: APBvoi2ZfP8f5ep1Oe6EbgpGjFJDNajox6qv7138MZM= Subject key identifier: 02:09:DB:51:DC:4E:E6:92:B8:C3:7F:F5:CB:01:1C:06:64:35:AD:2E Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 0196090BACF20E850229CC7180B2782AF313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft Manifest number: 14F8 Signing time: Sun 06 Apr 2025 03:01:22 +0000 Manifest this update: Sun 06 Apr 2025 03:01:22 +0000 Manifest next update: Mon 07 Apr 2025 03:01:22 +0000 Files and hashes: 1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: TIMAsRYeHXJB0pTbseDTHbton3f/AeTM6eBc5Eu3KnU=) 2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=) 3: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=) 4: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=) 5: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=) 6: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=) 7: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=) 8: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=) 9: fD8GIH6z46Fe4jXM5zFhzDh2XyA.roa (hash: 2gGDcWr1z9OKvXcdR3D8qcYgZBgggJEEN+hEEGnbSmc=) 10: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=) 11: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=) 12: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=) 13: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (hash: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:0b:ac:f2:0e:85:02:29:cc:71:80:b2:78:2a:f3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Apr 6 03:01:22 2025 GMT Not After : Apr 7 03:01:22 2025 GMT Subject: CN=0209db51dc4ee692b8c37ff5cb011c066435ad2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:c3:40:b2:90:bb:a3:fb:d6:29:d7:fe:be: 8e:32:9a:6e:91:65:a1:1b:65:63:cb:28:f1:91:33: 55:42:cf:15:01:8f:aa:04:fe:30:38:5e:40:ef:21: 94:9e:b9:21:b8:ac:f6:9f:12:d0:78:82:d4:51:85: d8:26:23:c0:b3:1c:05:9a:7e:44:9f:7c:b1:ab:03: e7:b7:19:28:b4:f7:9d:9f:c1:79:4f:df:57:3e:0e: 4a:95:e2:81:4c:2d:44:1b:ef:38:c4:ce:77:7f:8a: 6b:a3:9c:fb:a3:e3:ef:b4:b3:8c:dc:9e:b7:a4:9b: a3:b4:40:51:14:7e:26:b6:a8:ce:4a:12:45:fe:fa: 36:59:33:7f:3c:ed:cc:2e:a4:0c:09:67:be:df:b3: ab:98:47:2d:9b:70:6d:e3:17:c9:2d:d3:be:de:c6: 7e:a7:76:ad:aa:ec:7a:b0:f4:e6:68:98:e2:56:24: de:d4:c9:a4:12:83:b0:d1:59:42:23:0a:a1:f2:21: fb:a6:db:4e:43:c9:ab:91:f2:95:9b:6e:9f:c6:56: 0e:91:b9:57:68:0e:8b:fb:71:1e:1a:90:d6:ea:17: 82:17:9e:54:c2:fc:0d:3a:fa:97:ca:d8:d3:dd:8e: 82:f6:f9:a0:4d:f0:58:23:91:44:67:b1:73:9f:b9: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:09:DB:51:DC:4E:E6:92:B8:C3:7F:F5:CB:01:1C:06:64:35:AD:2E X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cb:c1:72:aa:40:7b:32:56:05:d3:3b:8d:9b:c7:4b:a9:96: 62:65:2d:03:1c:9d:8e:a3:da:67:8b:e1:6d:65:ce:5a:ef:77: b0:a4:80:65:03:b6:6b:46:c5:f7:ed:4c:05:0b:e3:6e:67:ad: c4:ba:1f:b1:48:02:c2:50:92:30:d8:d5:b6:3f:56:2b:23:bd: 5b:5d:80:29:da:20:a2:e1:5a:0d:83:0b:42:9c:29:24:22:ca: 53:47:3e:08:26:55:c3:4b:f0:11:46:e8:65:c1:d0:b8:62:30: ad:df:c6:87:01:d1:c0:9d:57:0b:03:a6:9d:d3:9b:e1:7e:3c: f2:be:2e:b2:a6:0b:df:e3:d3:21:53:56:18:fa:7e:b9:47:e6: a5:b1:da:f1:31:32:58:25:0d:12:8c:6c:86:6d:7c:38:d9:4f: c7:83:90:c3:78:51:46:f9:63:c1:3b:5f:5c:6e:90:fe:de:f2: 65:29:74:3c:61:20:c7:eb:26:53:91:46:c9:9f:a4:cc:0d:e2: 96:a6:29:8e:7d:c7:4d:5f:21:9a:3f:39:10:7c:4b:7b:c8:4d: 7d:80:12:e9:12:66:69:a8:4c:4b:4d:ef:b9:b0:ed:56:74:eb: 78:de:42:f4:f7:91:88:ed:b6:9c:bb:59:03:dd:b0:08:e5:41: c0:07:ee:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZYJC6zyDoUCKcxxgLJ4KvMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjUwNDA2MDMwMTIyWhcNMjUwNDA3MDMwMTIyWjAzMTEwLwYDVQQD EygwMjA5ZGI1MWRjNGVlNjkyYjhjMzdmZjVjYjAxMWMwNjY0MzVhZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5/DQLKQu6P71inX/r6OMppukWWh G2VjyyjxkTNVQs8VAY+qBP4wOF5A7yGUnrkhuKz2nxLQeILUUYXYJiPAsxwFmn5E n3yxqwPntxkotPedn8F5T99XPg5KleKBTC1EG+84xM53f4pro5z7o+PvtLOM3J63 pJujtEBRFH4mtqjOShJF/vo2WTN/PO3MLqQMCWe+37OrmEctm3Bt4xfJLdO+3sZ+ p3atqux6sPTmaJjiViTe1MmkEoOw0VlCIwqh8iH7pttOQ8mrkfKVm26fxlYOkblX aA6L+3EeGpDW6heCF55UwvwNOvqXytjT3Y6C9vmgTfBYI5FEZ7Fzn7nL2QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAIJ21HcTuaSuMN/9csBHAZkNa0uMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRlLzgyMjQwMC0zMjQ4LTQ3MDItYjI5Yi1hMWI3Y2VlZmEx NmMvMS8xLUdVYkVaVHhMcGpuRFQybmp2NU4wa1o4MUNNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8vB cqpAezJWBdM7jZvHS6mWYmUtAxydjqPaZ4vhbWXOWu93sKSAZQO2a0bF9+1MBQvj bmetxLofsUgCwlCSMNjVtj9WKyO9W12AKdogouFaDYMLQpwpJCLKU0c+CCZVw0vw EUboZcHQuGIwrd/GhwHRwJ1XCwOmndOb4X488r4usqYL3+PTIVNWGPp+uUfmpbHa 8TEyWCUNEoxshm18ONlPx4OQw3hRRvljwTtfXG6Q/t7yZSl0PGEgx+smU5FGyZ+k zA3ilqYpjn3HTV8hmj85EHxLe8hNfYAS6RJmaahMS03vubDtVnTreN5C9PeRiO22 nLtZA92wCOVBwAfuVQ== -----END CERTIFICATE-----Generated at Sun Apr 6 05:20:27 2025 by rpki-client