$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: HK/jeZxD+HhiLSHBWFOPhuygKI//660kBQWpZz8QvqQ= Subject key identifier: 56:AD:9E:C7:85:6E:CD:F2:38:0C:3D:1A:4F:0D:1B:1F:EA:FC:A8:A9 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019747426BB1DB6BEAD9E332BBCB9E78BB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 1697 Signing time: Fri 06 Jun 2025 22:00:24 +0000 Manifest this update: Fri 06 Jun 2025 22:00:24 +0000 Manifest next update: Sat 07 Jun 2025 22:00:24 +0000 Files and hashes: 1: 0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa (hash: 2JTts0dA2azaMsKe10BDoH1iul7B6xVWw7BDZ6UrOqs=) 2: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=) 3: 0PtdBDpxqBiamf3Wy5UzRY5Npb0.roa (hash: wq7MtI2Ozj/uprsyy9THpirTm2G1oDvb15eM2HzfNgM=) 4: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=) 5: 3CQxn1cSbk5ujQfHhnxDasY3W9c.roa (hash: HqrPej2qRyrHdaMDDGVqhxR/wvBPWopVDgOrRj62buk=) 6: 3HH58WmzWmQCD-OlTJN8dT8qa1M.roa (hash: of/nshXajmaTh0hvVJ+3GLNAI3gzOJPgVJPnBaDun6w=) 7: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=) 8: 8VT8Fo3P5TNZ-vroEO27eP29hXg.roa (hash: pcmpK1WbqeqIW7/hwNEA1uEbwJv8DkJTR4wXodN3kk4=) 9: AlF6QUDYgPNFHoKES1GWsxqjDZg.roa (hash: b7yXTIUjvVlWzsxXNANwzdQ/qhc6RpUsiAkzEgXrpaU=) 10: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=) 11: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=) 12: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=) 13: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=) 14: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: GK2RcrPlBPxCnAEESdoxi4lPPoXCCQbdflvD2o67RSo=) 15: H05bxxYxtoijKcQ7lhpPPlR8JdU.roa (hash: v4GsRYWU+dWPTkFjL7lY7n7wJBqCf67cIpnIDarcBUA=) 16: J4ZDk3-dcZfjy_jR31SKpOx3Pbg.roa (hash: AEYn++tQHhQRRbaUmP9Ws1Lj2XgUlFiLNVmikfCzb2I=) 17: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=) 18: NeUwRTp81tfBXG66ClQqWHPlCb4.roa (hash: +vVG588nooXT+gCvKcWSHK/jt+83wQoJ4IiwpnhbSoc=) 19: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=) 20: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=) 21: RgvB7d4TCN0rr03afyGgKdK7IDA.roa (hash: gKiwdB9Qn/2LCCxe9gImwIyIPoyT/r41AjDUb5R+grk=) 22: T6gtaxOfCU_QWTuO38pW4oB0od8.roa (hash: KVkZ8CQnrh+zeDQo7wPoH9A/3jqz/nj5EPod+63b4Ro=) 23: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=) 24: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=) 25: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=) 26: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=) 27: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=) 28: m635TplodT5qm4wfbSbB7RhzWUM.roa (hash: B6jn3+DjahjWo60ghacvbwJM35HwBAigFtPVZQ19C6c=) 29: pnd3YojRi7DZYpXBXFp9kwat45Y.roa (hash: L/sfRRwnOa3q3wB7hNxXjSMDs2syDkgziLpoLHkufh4=) 30: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=) 31: sW_Pe5AiNGRK8YU3M9QNoMiFE0k.roa (hash: OI9qX7YhyRhGAGILyJE9MQsxymJKu7dbedIOFUkDFak=) 32: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=) 33: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=) 34: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=) 35: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=) 36: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:42:6b:b1:db:6b:ea:d9:e3:32:bb:cb:9e:78:bb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jun 6 22:00:24 2025 GMT Not After : Jun 7 22:00:24 2025 GMT Subject: CN=56ad9ec7856ecdf2380c3d1a4f0d1b1feafca8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:a8:33:87:21:5c:45:de:e4:89:0f:ee:73: 9e:38:f5:30:1c:2a:83:dd:25:85:18:d8:c9:f2:fa: 0d:ff:11:c0:9b:fc:53:f3:b5:6a:cb:9a:95:ed:1a: ff:e5:79:e9:85:06:56:72:47:9f:c4:54:18:16:a9: 00:bb:8c:60:ea:6d:d8:ea:1e:8e:d2:8f:5c:48:db: 25:0d:37:01:e0:9b:cf:60:ae:ae:f6:3c:e4:16:20: da:ca:88:a2:f8:f3:6e:e7:59:15:ac:88:9a:38:13: 56:15:f3:3f:95:3a:8b:6b:0d:45:92:76:2c:7d:14: f6:cb:d6:0e:16:88:39:fd:f6:a9:60:ed:f7:41:ea: 37:93:1b:c7:df:a6:8c:5f:d3:c7:c7:b5:2f:92:91: 34:a0:15:09:60:90:26:21:be:16:87:f9:12:a9:f0: 9a:73:19:bd:fa:ae:da:14:e2:61:6a:9e:46:db:a7: 4e:28:d2:a7:90:b9:fc:18:7d:32:0c:d7:b1:64:5a: a3:b9:b6:a0:c0:4e:a1:73:9a:df:9f:bd:3b:73:0d: a1:04:c5:71:cf:b9:6f:1e:53:b0:69:1d:4c:d7:39: 96:8f:04:9e:a6:c1:e9:7c:79:ef:e3:ee:67:03:19: 0e:52:f9:cf:de:8b:4d:89:c4:46:6a:e1:92:6d:42: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AD:9E:C7:85:6E:CD:F2:38:0C:3D:1A:4F:0D:1B:1F:EA:FC:A8:A9 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8e:ea:c7:db:de:52:6c:95:6b:f4:d7:e1:5d:d5:02:cc:3c: ba:93:de:c1:47:c2:d9:f2:bb:55:bf:34:bb:80:10:44:a1:ad: 3a:6e:fa:0e:f1:db:6e:0e:31:61:31:71:02:10:01:31:0c:04: b7:14:c8:ba:20:73:76:fc:bf:9b:7d:df:8a:ae:e1:49:33:ad: a5:1a:c8:3e:34:2f:a8:b9:54:8c:33:c3:8e:24:72:92:27:ac: 41:2c:7a:c2:e7:49:f1:15:67:1b:41:6e:63:96:54:87:11:fd: 5e:ea:3e:77:d3:bd:cc:2f:0b:da:04:04:cd:b7:4a:b7:34:33: 64:1b:2a:bb:7a:8d:85:c2:3f:42:15:cf:6d:b5:a7:0f:21:e6: 11:59:26:70:b6:4e:d6:ac:8f:c3:33:69:2d:47:68:a4:72:6b: 48:8e:90:ce:ea:9c:ff:79:c2:f1:b8:cd:ff:12:60:8b:50:18: 84:99:da:e3:76:a7:4a:67:27:1c:b9:68:ee:a3:56:3c:54:60: 38:bb:99:e9:07:b9:3f:86:cf:f3:a4:6a:e0:1c:9c:b8:65:e3: 63:cf:81:01:cc:76:c3:81:24:50:03:65:e8:8b:ef:1b:96:30: 4d:aa:cb:7d:0f:60:a1:bd:43:8d:a7:b8:69:78:39:2a:80:38: 88:7e:12:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHQmux22vq2eMyu8ueeLt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUwNjA2MjIwMDI0WhcNMjUwNjA3MjIwMDI0WjAzMTEwLwYDVQQD Eyg1NmFkOWVjNzg1NmVjZGYyMzgwYzNkMWE0ZjBkMWIxZmVhZmNhOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyneoM4chXEXe5IkP7nOeOPUwHCqD 3SWFGNjJ8voN/xHAm/xT87Vqy5qV7Rr/5XnphQZWckefxFQYFqkAu4xg6m3Y6h6O 0o9cSNslDTcB4JvPYK6u9jzkFiDayoii+PNu51kVrIiaOBNWFfM/lTqLaw1FknYs fRT2y9YOFog5/fapYO33Qeo3kxvH36aMX9PHx7UvkpE0oBUJYJAmIb4Wh/kSqfCa cxm9+q7aFOJhap5G26dOKNKnkLn8GH0yDNexZFqjubagwE6hc5rfn707cw2hBMVx z7lvHlOwaR1M1zmWjwSepsHpfHnv4+5nAxkOUvnP3otNicRGauGSbULSOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFatnseFbs3yOAw9Gk8NGx/q/KipMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU47qx9ve UmyVa/TX4V3VAsw8upPewUfC2fK7Vb80u4AQRKGtOm76DvHbbg4xYTFxAhABMQwE txTIuiBzdvy/m33fiq7hSTOtpRrIPjQvqLlUjDPDjiRykiesQSx6wudJ8RVnG0Fu Y5ZUhxH9Xuo+d9O9zC8L2gQEzbdKtzQzZBsqu3qNhcI/QhXPbbWnDyHmEVkmcLZO 1qyPwzNpLUdopHJrSI6Qzuqc/3nC8bjN/xJgi1AYhJna43anSmcnHLlo7qNWPFRg OLuZ6Qe5P4bP86Rq4BycuGXjY8+BAcx2w4EkUANl6IvvG5YwTarLfQ9gob1Djae4 aXg5KoA4iH4SsA== -----END CERTIFICATE-----Generated at Sat Jun 7 00:59:01 2025 by rpki-client