$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: nDiioXZ17AXMZfSA84eFOgN0qQs+8Qbp0jZ781JvtbQ= Subject key identifier: 3D:91:B3:8A:ED:10:C5:F4:1E:73:BA:0D:DB:C7:AE:F7:C4:BB:55:0B Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 0197CD95EE0A13A2EAE009E28FE0F6252E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 16E5 Signing time: Thu 03 Jul 2025 00:00:44 +0000 Manifest this update: Thu 03 Jul 2025 00:00:44 +0000 Manifest next update: Fri 04 Jul 2025 00:00:44 +0000 Files and hashes: 1: 0E5pxjPKGty-7Utk-Pv9IA6sELQ.roa (hash: 2JTts0dA2azaMsKe10BDoH1iul7B6xVWw7BDZ6UrOqs=) 2: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=) 3: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=) 4: 3HH58WmzWmQCD-OlTJN8dT8qa1M.roa (hash: of/nshXajmaTh0hvVJ+3GLNAI3gzOJPgVJPnBaDun6w=) 5: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=) 6: AlF6QUDYgPNFHoKES1GWsxqjDZg.roa (hash: b7yXTIUjvVlWzsxXNANwzdQ/qhc6RpUsiAkzEgXrpaU=) 7: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=) 8: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=) 9: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=) 10: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=) 11: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: ADH+HJ137HJk1lkvqlR5aIvkwfAvqoJVHCzMDjEWtoo=) 12: H05bxxYxtoijKcQ7lhpPPlR8JdU.roa (hash: v4GsRYWU+dWPTkFjL7lY7n7wJBqCf67cIpnIDarcBUA=) 13: HDa3e7FjJLN4vkvamkngXm5ePcs.roa (hash: BV1R1fWNSV5+twcq/e5sRskaP6g+7NvvjjOA/kt/3rQ=) 14: J4ZDk3-dcZfjy_jR31SKpOx3Pbg.roa (hash: AEYn++tQHhQRRbaUmP9Ws1Lj2XgUlFiLNVmikfCzb2I=) 15: J7CyH1jM9ABCm1K4JA17hUYmY30.roa (hash: pc5Ro1o2+7p7REcnwD0zFlaopmSxt85bKJwvLWmQqWU=) 16: KbAXI0IOYcoOoPw6y-cV2m9E-80.roa (hash: fg8NGhzJOz2sVJmIvJ56BcLnWke4SMR50yZCF5BMuLU=) 17: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=) 18: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=) 19: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=) 20: THNlRPuy_OSmJwAh5AqaPu-4H0o.roa (hash: H6rO51juTcU0B9spDYV933Y2sFQTEVq28Z/yjMsoNXo=) 21: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=) 22: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=) 23: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=) 24: cBRN2PbbDG33cdtuS2Nprcq9CQk.roa (hash: vu6eZczHRxel7TcYM7lrw4Yz66z/iUHGjcVQ+ioggCE=) 25: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=) 26: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=) 27: mSBPlqtK_yso1LxvAD3vvq3Keko.roa (hash: ofI3EI2oD85Mu/hQ7FhUp/RhQjJ8UixFIAvem5Gdcqo=) 28: pnd3YojRi7DZYpXBXFp9kwat45Y.roa (hash: L/sfRRwnOa3q3wB7hNxXjSMDs2syDkgziLpoLHkufh4=) 29: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=) 30: sW_Pe5AiNGRK8YU3M9QNoMiFE0k.roa (hash: OI9qX7YhyRhGAGILyJE9MQsxymJKu7dbedIOFUkDFak=) 31: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=) 32: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=) 33: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=) 34: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=) 35: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cd:95:ee:0a:13:a2:ea:e0:09:e2:8f:e0:f6:25:2e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jul 3 00:00:44 2025 GMT Not After : Jul 4 00:00:44 2025 GMT Subject: CN=3d91b38aed10c5f41e73ba0ddbc7aef7c4bb550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:62:4d:ae:47:58:50:1a:22:1a:4b:9b:89: 8f:11:35:9c:35:19:39:43:e3:47:20:31:99:3d:cf: 29:19:c1:8e:e4:e0:d4:3e:d2:c6:3b:6c:1f:c5:72: b0:2c:3a:26:b8:ea:d7:3f:05:c2:3c:05:bc:4f:66: 22:c7:1c:87:bc:34:9c:ae:5d:c6:94:b1:f8:e0:71: 7f:46:56:b5:bc:57:5f:73:71:67:0a:60:c7:e4:d4: 31:e4:01:bb:84:46:17:b7:83:12:5d:d8:f6:4b:28: cc:9f:9d:04:8a:a3:e5:ab:9e:23:70:a9:da:07:0d: a3:43:14:30:5b:10:5c:3b:2f:bd:f6:e9:b8:d3:ed: 16:e4:43:24:87:43:aa:2e:e5:80:5e:9d:4f:6a:a2: c9:a5:71:d6:11:fe:59:d2:89:6d:f5:39:58:3d:61: ac:fd:67:19:e3:e3:8a:94:b7:51:f8:9f:90:a9:33: cc:1d:6e:07:14:ce:df:70:b9:ba:39:43:33:e6:33: a7:9c:a3:58:13:75:a1:97:76:94:c7:a2:30:1f:7d: 86:88:2d:58:94:24:73:dd:79:70:36:ae:48:b9:89: 67:bf:06:4e:0f:8c:11:4a:d2:65:37:e1:b2:43:17: b7:9e:c5:5d:58:60:5a:07:9b:7f:ee:e3:17:05:04: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:91:B3:8A:ED:10:C5:F4:1E:73:BA:0D:DB:C7:AE:F7:C4:BB:55:0B X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:77:7a:ad:ec:c3:f4:8f:40:a7:36:99:f6:77:0d:95:a4:68: 78:c5:2a:d5:bd:c2:12:37:88:a6:a5:c9:1f:e9:6e:d9:71:83: cd:da:8a:a1:44:8e:39:3a:ec:1b:2b:fc:db:1e:b6:8c:b2:68: ca:c4:18:b8:38:51:34:d2:f2:8f:4c:7e:6e:ed:d2:d0:14:e5: e8:5f:9e:36:95:93:a6:cc:33:30:fa:31:fc:ae:bf:b3:65:94: 56:f9:38:18:28:b9:da:97:52:99:c9:92:99:24:f4:24:92:ca: d1:b1:e4:76:37:94:ed:16:f3:6a:09:0c:92:e8:69:cf:f4:c9: 5e:a8:27:47:e3:b1:b8:4c:30:53:47:45:e8:2b:46:95:91:88: 43:db:2c:14:a5:03:f9:96:f4:7e:08:68:0d:18:8a:f6:6a:f9: ae:b1:fa:d2:62:30:74:8d:e3:a9:b7:06:88:eb:17:68:1a:28: 43:82:3b:d4:56:4d:a6:bf:2c:69:aa:dd:1f:2b:11:ac:44:0e: e3:31:51:24:35:85:84:b5:63:f5:12:24:7c:c8:f0:ec:e6:1f: 33:45:5e:c3:6f:cb:8b:dd:eb:dd:c1:e8:ed:ec:d3:2b:e1:1d: 27:ec:d0:13:71:0a:dd:3f:9a:94:a9:f2:91:22:4b:77:d0:e8: bf:8b:af:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfNle4KE6Lq4Anij+D2JS4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUwNzAzMDAwMDQ0WhcNMjUwNzA0MDAwMDQ0WjAzMTEwLwYDVQQD EygzZDkxYjM4YWVkMTBjNWY0MWU3M2JhMGRkYmM3YWVmN2M0YmI1NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfBiTa5HWFAaIhpLm4mPETWcNRk5 Q+NHIDGZPc8pGcGO5ODUPtLGO2wfxXKwLDomuOrXPwXCPAW8T2YixxyHvDScrl3G lLH44HF/Rla1vFdfc3FnCmDH5NQx5AG7hEYXt4MSXdj2SyjMn50EiqPlq54jcKna Bw2jQxQwWxBcOy+99um40+0W5EMkh0OqLuWAXp1PaqLJpXHWEf5Z0olt9TlYPWGs /WcZ4+OKlLdR+J+QqTPMHW4HFM7fcLm6OUMz5jOnnKNYE3Whl3aUx6IwH32GiC1Y lCRz3XlwNq5IuYlnvwZOD4wRStJlN+GyQxe3nsVdWGBaB5t/7uMXBQRzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2Rs4rtEMX0HnO6DdvHrvfEu1ULMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXd6rezD 9I9ApzaZ9ncNlaRoeMUq1b3CEjeIpqXJH+lu2XGDzdqKoUSOOTrsGyv82x62jLJo ysQYuDhRNNLyj0x+bu3S0BTl6F+eNpWTpswzMPox/K6/s2WUVvk4GCi52pdSmcmS mST0JJLK0bHkdjeU7RbzagkMkuhpz/TJXqgnR+OxuEwwU0dF6CtGlZGIQ9ssFKUD +Zb0fghoDRiK9mr5rrH60mIwdI3jqbcGiOsXaBooQ4I71FZNpr8saardHysRrEQO 4zFRJDWFhLVj9RIkfMjw7OYfM0Vew2/Li93r3cHo7ezTK+EdJ+zQE3EK3T+alKny kSJLd9Dov4uvSw== -----END CERTIFICATE-----Generated at Thu Jul 3 02:54:53 2025 by rpki-client