$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json) Hash identifier: nTJScjdMTnW+0sMxRrKONZIbCrT1MRTL7TswkeodqMc= Subject key identifier: 25:62:8B:44:AF:CB:AF:F7:7B:A9:6F:67:ED:15:20:8C:62:5B:76:14 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 01984889AA003FBD45DCF5091E123882554B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft Manifest number: 1589 Signing time: Sat 26 Jul 2025 21:00:38 +0000 Manifest this update: Sat 26 Jul 2025 21:00:38 +0000 Manifest next update: Sun 27 Jul 2025 21:00:38 +0000 Files and hashes: 1: 1-I83jfVW3gnjQ0XhaxdfUDTrtZQ.roa (hash: InqTQ4KEAcMUMLc4WaYucGx20ArL2EDlb5vdlWGkCOQ=) 2: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=) 3: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=) 4: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=) 5: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=) 6: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=) 7: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=) 8: H5vkTQZNi2Bd0ExYzDgB6SvQgvw.roa (hash: IxFIlg2FYeuXJjAlimpeA14i06d0dEIvBqIsRuzdBeM=) 9: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=) 10: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (hash: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=) 11: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=) 12: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=) 13: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=) 14: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=) 15: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=) 16: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=) 17: S0Vg2fI8gb3gpVyIPxKcm-n-ucY.roa (hash: RtFSjw2hWEe1SJxWJS4nXDDZmSFL7zcL0HiqdY+IYlU=) 18: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=) 19: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=) 20: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=) 21: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=) 22: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=) 23: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=) 24: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=) 25: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=) 26: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=) 27: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=) 28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: dvdoSyLipUlWCnZW15Uv/cwWAbDxwSXW7IjNwwl4fcU=) 29: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=) 30: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=) 31: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=) 32: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=) 33: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=) 34: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:89:aa:00:3f:bd:45:dc:f5:09:1e:12:38:82:55:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jul 26 21:00:38 2025 GMT Not After : Jul 27 21:00:38 2025 GMT Subject: CN=25628b44afcbaff77ba96f67ed15208c625b7614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:50:df:d7:9e:3e:1b:e9:ed:de:7a:08:0a: 47:79:52:2a:90:04:ec:6c:e4:02:6e:90:5c:52:25: d0:c7:3b:d1:98:9c:8f:e7:69:08:71:e0:b1:a0:5b: 9b:a7:c5:a5:fe:86:61:25:87:8c:59:2a:37:96:10: 2a:3f:fe:d4:3b:e4:3c:a1:88:f9:e7:05:ad:32:26: 87:81:bd:8c:6d:13:a5:b0:09:53:71:cb:7e:e2:ea: 11:ef:b0:68:df:f4:e3:3d:a4:dd:e5:a0:a5:0a:6d: f4:5d:b6:2a:0f:52:41:c9:90:92:4e:9a:de:f0:38: e5:0b:bf:df:3d:a0:11:b0:90:6f:37:28:57:8b:8a: bb:aa:56:b5:94:7e:b5:27:39:a4:1e:d9:5b:8e:a3: 64:df:5e:81:1a:7e:1f:c8:dc:e3:7a:f1:fb:85:17: 90:15:fe:1c:4b:ef:50:20:5f:52:08:af:1e:da:fc: b8:cc:33:8d:8c:1a:84:d2:07:b0:cc:dd:04:ff:11: 0d:7e:22:0b:f2:dd:4b:97:36:45:4e:1c:97:68:53: 87:73:1f:8e:2a:c2:11:e0:9e:d6:c9:74:4e:fe:bc: 85:0f:8f:96:d9:b8:42:c5:dc:89:0b:3a:a1:99:b2: fd:0b:97:7c:c8:e1:49:5a:4d:5e:86:83:bc:11:8d: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:8B:44:AF:CB:AF:F7:7B:A9:6F:67:ED:15:20:8C:62:5B:76:14 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f0:f3:3c:38:d1:1e:58:db:b6:80:d0:e8:06:2d:fe:c1:4b: 61:2e:eb:01:9f:3a:70:38:a2:2f:a6:f0:5a:cf:82:fe:e1:68: 39:0b:82:f2:5c:c2:8c:66:91:38:2f:74:f2:bc:48:c5:63:49: 78:5a:9a:f6:41:21:44:5e:c8:30:7b:e8:20:79:96:18:19:eb: 76:f5:59:dc:9e:95:96:5c:f6:65:5f:17:97:cf:11:da:b8:80: 88:7a:71:be:41:dc:b0:16:50:39:06:75:2a:ad:b3:90:e7:81: 58:16:33:43:43:fd:ba:46:a3:3d:c7:60:0c:90:12:69:e2:47: f6:a8:fc:50:fc:0b:23:2d:15:97:60:21:85:c0:14:1c:43:46: 88:82:1e:73:9f:03:b3:c9:5b:88:3f:d9:d4:0e:f0:c4:80:59: dc:13:73:73:df:8f:ff:ec:c7:ca:d4:e3:2e:88:f3:41:c1:da: ea:c0:5e:dc:d3:a2:f9:ba:88:b0:7d:81:ed:3f:cf:f9:84:0c: 90:ce:04:9d:6a:66:fc:53:8d:99:f6:45:a4:5f:56:f6:cf:43: d8:80:24:53:54:fd:a3:72:86:93:42:e7:39:63:5f:d4:ba:3d: 04:ab:b2:46:c5:90:44:4c:46:a7:39:9e:0e:1f:fd:56:cf:62: 12:74:98:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIiaoAP71F3PUJHhI4glVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjUwNzI2MjEwMDM4WhcNMjUwNzI3MjEwMDM4WjAzMTEwLwYDVQQD EygyNTYyOGI0NGFmY2JhZmY3N2JhOTZmNjdlZDE1MjA4YzYyNWI3NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5Q39eePhvp7d56CApHeVIqkATs bOQCbpBcUiXQxzvRmJyP52kIceCxoFubp8Wl/oZhJYeMWSo3lhAqP/7UO+Q8oYj5 5wWtMiaHgb2MbROlsAlTcct+4uoR77Bo3/TjPaTd5aClCm30XbYqD1JByZCSTpre 8DjlC7/fPaARsJBvNyhXi4q7qla1lH61JzmkHtlbjqNk316BGn4fyNzjevH7hReQ Ff4cS+9QIF9SCK8e2vy4zDONjBqE0gewzN0E/xENfiIL8t1LlzZFThyXaFOHcx+O KsIR4J7WyXRO/ryFD4+W2bhCxdyJCzqhmbL9C5d8yOFJWk1ehoO8EY0Z8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVii0Svy6/3e6lvZ+0VIIxiW3YUMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffDzPDjR HljbtoDQ6AYt/sFLYS7rAZ86cDiiL6bwWs+C/uFoOQuC8lzCjGaROC908rxIxWNJ eFqa9kEhRF7IMHvoIHmWGBnrdvVZ3J6Vllz2ZV8Xl88R2riAiHpxvkHcsBZQOQZ1 Kq2zkOeBWBYzQ0P9ukajPcdgDJASaeJH9qj8UPwLIy0Vl2AhhcAUHENGiIIec58D s8lbiD/Z1A7wxIBZ3BNzc9+P/+zHytTjLojzQcHa6sBe3NOi+bqIsH2B7T/P+YQM kM4EnWpm/FONmfZFpF9W9s9D2IAkU1T9o3KGk0LnOWNf1Lo9BKuyRsWQRExGpzme Dh/9Vs9iEnSYLg== -----END CERTIFICATE-----Generated at Sun Jul 27 01:46:32 2025 by rpki-client