$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: 8BMf+1bYi7LQwxrtocjTnLHEMsYBI89YFu5RodQypDw= Subject key identifier: 09:CF:4D:C6:56:B5:CC:1F:C8:6E:87:E6:1D:50:E4:35:F7:8B:A4:06 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 01973BE3A903993F78BA99D21A9F4855B1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 1572 Signing time: Wed 04 Jun 2025 17:01:04 +0000 Manifest this update: Wed 04 Jun 2025 17:01:04 +0000 Manifest next update: Thu 05 Jun 2025 17:01:04 +0000 Files and hashes: 1: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=) 2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 3: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 4: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 5: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 6: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=) 7: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: 6TYSsGfj+ejqVqeZZE4Q7TrTgJhRDf0FZ57RMC/Xzao=) 8: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 9: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 10: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 11: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=) 12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=) 19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3b:e3:a9:03:99:3f:78:ba:99:d2:1a:9f:48:55:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jun 4 17:01:04 2025 GMT Not After : Jun 5 17:01:04 2025 GMT Subject: CN=09cf4dc656b5cc1fc86e87e61d50e435f78ba406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:04:74:5c:f6:3e:39:6f:c7:9e:26:dc:df:b7: bd:82:44:ca:7f:a8:e9:ed:2d:a0:c7:7a:c1:00:92: ca:ba:86:39:01:08:05:a7:60:1d:05:11:9c:7e:22: dd:36:c8:87:58:19:8d:c7:a9:03:ac:28:45:8c:91: 3b:12:13:e0:69:e0:d7:6d:29:11:01:22:bc:97:56: 58:4a:e6:84:b6:04:75:6e:3f:f6:e8:78:52:f6:ea: 50:37:52:46:b3:33:7d:8a:6f:c8:0f:1e:67:81:97: 85:86:a4:bb:aa:23:33:67:0f:c0:60:20:69:de:a8: e3:38:57:a6:fe:9c:1e:fd:f1:b0:ac:12:70:56:ff: bd:3d:56:0a:67:28:41:2e:93:2d:18:f8:1a:36:4f: c7:e8:97:00:e8:a7:87:71:f0:7e:95:48:e1:96:5c: ab:7e:16:e2:93:1e:20:f8:ee:1f:53:f8:53:08:90: be:2e:1f:ee:e6:bb:e6:85:53:11:a1:ce:7e:1b:4b: 60:c2:bd:2c:ca:5c:b6:38:43:55:2a:a6:1d:9f:d4: 7d:f9:c1:07:3f:30:0c:62:76:7d:6e:74:aa:1b:13: e5:1e:cd:7c:0d:41:cb:19:85:f9:7a:c5:2a:b5:da: ce:02:24:fe:3a:2f:fa:5c:14:64:57:37:eb:73:ca: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:4D:C6:56:B5:CC:1F:C8:6E:87:E6:1D:50:E4:35:F7:8B:A4:06 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:60:95:ac:93:cf:11:0d:78:63:7c:c2:6f:b2:5c:97:57:69: 13:bc:c0:42:ba:e3:e7:f0:e5:c2:21:42:79:8c:62:f2:a7:3e: 55:67:72:56:07:dc:39:ab:12:94:1c:a4:7c:01:04:1c:b9:26: e9:de:77:91:b1:1a:c8:6c:f1:de:25:a3:6c:8c:ce:19:47:18: d2:81:28:c1:3a:57:78:df:03:35:f0:cb:c2:79:42:4d:70:d2: 05:3f:96:3b:e7:8b:fc:78:d0:2b:41:0a:4d:96:40:03:ef:9b: d3:bc:e0:e8:eb:66:7a:ab:23:1a:b5:af:14:cd:d1:11:fa:7e: e6:1d:62:77:b8:ea:a4:06:01:ad:7e:25:c6:e5:db:6a:49:18: f7:da:fd:97:15:f9:f4:43:02:39:9a:d3:4c:84:a7:ba:b4:e4: e4:92:33:7c:a0:0b:55:07:a4:c0:17:56:35:a0:b3:05:7d:65: 3b:3e:f2:68:d9:91:06:6c:3b:d3:06:a1:e8:87:17:d2:03:23: 1b:4f:3f:39:18:5c:8b:44:a6:cc:d6:7d:7e:bb:d9:26:f1:df: 30:df:2c:6c:73:89:6d:da:26:a4:85:02:14:3e:8f:be:49:f7: 9f:30:42:dc:67:28:b8:e8:52:c8:a6:b0:8f:76:2f:ee:d5:0e: 9d:9a:b9:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc746kDmT94upnSGp9IVbHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwNjA0MTcwMTA0WhcNMjUwNjA1MTcwMTA0WjAzMTEwLwYDVQQD EygwOWNmNGRjNjU2YjVjYzFmYzg2ZTg3ZTYxZDUwZTQzNWY3OGJhNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AR0XPY+OW/Hnibc37e9gkTKf6jp 7S2gx3rBAJLKuoY5AQgFp2AdBRGcfiLdNsiHWBmNx6kDrChFjJE7EhPgaeDXbSkR ASK8l1ZYSuaEtgR1bj/26HhS9upQN1JGszN9im/IDx5ngZeFhqS7qiMzZw/AYCBp 3qjjOFem/pwe/fGwrBJwVv+9PVYKZyhBLpMtGPgaNk/H6JcA6KeHcfB+lUjhllyr fhbikx4g+O4fU/hTCJC+Lh/u5rvmhVMRoc5+G0tgwr0syly2OENVKqYdn9R9+cEH PzAMYnZ9bnSqGxPlHs18DUHLGYX5esUqtdrOAiT+Oi/6XBRkVzfrc8rqtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnPTcZWtcwfyG6H5h1Q5DX3i6QGMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmCVrJPP EQ14Y3zCb7Jcl1dpE7zAQrrj5/DlwiFCeYxi8qc+VWdyVgfcOasSlBykfAEEHLkm 6d53kbEayGzx3iWjbIzOGUcY0oEowTpXeN8DNfDLwnlCTXDSBT+WO+eL/HjQK0EK TZZAA++b07zg6OtmeqsjGrWvFM3REfp+5h1id7jqpAYBrX4lxuXbakkY99r9lxX5 9EMCOZrTTISnurTk5JIzfKALVQekwBdWNaCzBX1lOz7yaNmRBmw70wah6IcX0gMj G08/ORhci0SmzNZ9frvZJvHfMN8sbHOJbdompIUCFD6Pvkn3nzBC3GcouOhSyKaw j3Yv7tUOnZq5Dg== -----END CERTIFICATE-----Generated at Wed Jun 4 22:47:43 2025 by rpki-client