$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: J+jgxjzuhQU0ADtJi2I2btqu2Rbpsqw3M3JVrxb4Cb0= Subject key identifier: CC:55:6E:A5:E4:A9:F0:7D:06:B5:8B:31:5E:BF:D3:B4:C4:7A:E7:D3 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0194BA8465D89C3B5E3D6373E2BED85F6BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 1422 Signing time: Fri 31 Jan 2025 04:00:26 +0000 Manifest this update: Fri 31 Jan 2025 04:00:26 +0000 Manifest next update: Sat 01 Feb 2025 04:00:26 +0000 Files and hashes: 1: 1-uFGyEDrsJ2Tn-2rEKT_dIMcV7s.roa (hash: VBjHQuaKImGimGPCmnypVNR3O3LL9PxVL9z9KgYtrow=) 2: 3RzB5tJS0oiPrnFU1JD80KRBdSM.roa (hash: 7NiLIwQ9kymps4BJ4j5KwlhzIcoENtYuGIE5yKcMeqM=) 3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 4: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 5: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 6: CamDV6EMiCzkpjzSA5DCBzSmm88.roa (hash: JV9zqepY4N2AO8yc2eogQKWbkVBXJ8vcgsnMjEIFHUI=) 7: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=) 8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: n5fnRgro9Rby0+6q9PmrQIq6uUHgYZS6UZtbd475KuI=) 9: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 10: Ptw4_zFCqPYQUTTCy1dZVQoxg34.roa (hash: YQcEf9Xp4z0ZmiC3BFuGxVR1J9Pf54Lb3C0rUZn2XNM=) 11: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 12: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 13: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=) 14: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 15: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 16: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 17: nXJVBDoTghhlgcnafBRSHmZouZE.roa (hash: xXzsE/ERNc12Y9tGy7/dqjCiaS8wDYYBGzdTk2QGemM=) 18: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 19: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 20: vAx_VrKuXs6fW_dI0Wfg2zqQKyY.roa (hash: 5ByrVJIYv2RUjs1ehBX3+MAJFx5uaR9Ai9D+J0IoBzs=) 21: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 22: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:84:65:d8:9c:3b:5e:3d:63:73:e2:be:d8:5f:6b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 31 04:00:26 2025 GMT Not After : Feb 1 04:00:26 2025 GMT Subject: CN=cc556ea5e4a9f07d06b58b315ebfd3b4c47ae7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:ab:09:c1:48:58:51:92:c0:c5:31:16:cc: 91:e9:bd:06:d8:3c:68:64:52:b7:74:ad:14:ee:35: 05:b7:a3:43:1b:a9:77:ec:fa:75:b3:42:29:12:9c: 30:17:bf:4d:8b:a3:52:0b:49:f5:4b:32:c1:46:cc: 0c:bf:f0:9e:84:cf:60:f2:ae:42:ed:d8:58:5f:39: 4c:67:d6:7f:a9:c5:3a:c2:ec:40:18:a4:f6:cc:5a: f9:d3:2f:ef:28:40:65:f7:6f:9a:eb:b6:0e:08:6e: 9b:48:f1:28:2c:0c:0e:0c:4c:bc:0b:cf:e6:f3:d3: c0:68:32:ff:c8:44:1d:ba:1c:2d:d7:49:cf:b5:08: b7:2b:c5:11:a8:3a:a6:a1:9e:44:f4:a9:7e:71:7d: fb:29:64:03:dc:f2:57:40:bd:d5:3f:76:97:24:a8: e2:e7:cf:04:c5:b1:42:f0:6f:03:79:ab:1d:74:a7: 1d:11:5b:06:39:6a:c5:01:ed:26:99:df:7b:bc:a1: 67:b3:51:d4:8c:fe:c1:4e:6f:57:8b:45:51:3a:79: 61:c9:af:b4:fc:43:f9:fe:69:80:f0:2f:00:79:90: 44:da:81:1f:1e:cb:c4:3e:7d:ad:96:cc:31:39:da: 3f:a6:72:68:0a:7a:af:50:7d:8f:6f:f9:56:46:3a: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:55:6E:A5:E4:A9:F0:7D:06:B5:8B:31:5E:BF:D3:B4:C4:7A:E7:D3 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4f:af:51:8e:66:e7:88:7c:90:71:09:01:95:c9:88:56:76: a1:54:5d:d8:da:ef:a9:43:d4:c3:2e:85:45:5e:ac:87:4e:78: 67:53:ff:34:88:c8:3e:63:0c:1b:f3:2b:68:30:b6:83:79:c0: 9f:82:32:56:29:85:e6:57:93:1a:e0:9e:7e:31:92:7e:4f:a0: 63:8e:92:69:12:6e:c5:3c:5e:a6:99:3c:dd:8c:a1:f5:2e:28: ea:08:47:6c:7c:fb:68:26:f4:2b:6f:20:c4:9b:ef:d6:ef:0d: 85:6b:43:7e:8c:59:50:dc:19:68:7a:ee:73:dc:8a:98:17:a3: 4a:1d:9a:fc:b9:f6:c1:61:06:e0:31:fb:05:4c:ae:bb:69:81: 88:7f:25:e0:bc:a6:af:51:d2:2b:f1:5c:2b:3d:1e:77:d8:51: f0:5b:e8:21:2e:56:4e:b7:62:41:79:79:57:9f:cb:6b:6d:76: 1d:ac:24:2f:0e:9b:ea:19:81:44:88:eb:ae:85:e4:7d:f2:f5: c5:da:ac:91:4a:43:5a:96:70:6c:e2:8c:ce:e4:3e:cd:c2:24: 5d:43:7f:98:c8:a8:70:7c:f6:d7:ca:3b:c5:ba:40:14:92:60: 66:c6:c6:b9:2e:50:5e:40:9f:e7:28:06:e4:42:06:8d:f7:53: 62:ab:8d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6hGXYnDtePWNz4r7YX2v5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwMTMxMDQwMDI2WhcNMjUwMjAxMDQwMDI2WjAzMTEwLwYDVQQD EyhjYzU1NmVhNWU0YTlmMDdkMDZiNThiMzE1ZWJmZDNiNGM0N2FlN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfGrCcFIWFGSwMUxFsyR6b0G2Dxo ZFK3dK0U7jUFt6NDG6l37Pp1s0IpEpwwF79Ni6NSC0n1SzLBRswMv/CehM9g8q5C 7dhYXzlMZ9Z/qcU6wuxAGKT2zFr50y/vKEBl92+a67YOCG6bSPEoLAwODEy8C8/m 89PAaDL/yEQduhwt10nPtQi3K8URqDqmoZ5E9Kl+cX37KWQD3PJXQL3VP3aXJKji 588ExbFC8G8DeasddKcdEVsGOWrFAe0mmd97vKFns1HUjP7BTm9Xi0VROnlhya+0 /EP5/mmA8C8AeZBE2oEfHsvEPn2tlswxOdo/pnJoCnqvUH2Pb/lWRjpzHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxVbqXkqfB9BrWLMV6/07TEeufTMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE+vUY5m 54h8kHEJAZXJiFZ2oVRd2NrvqUPUwy6FRV6sh054Z1P/NIjIPmMMG/MraDC2g3nA n4IyVimF5leTGuCefjGSfk+gY46SaRJuxTxeppk83Yyh9S4o6ghHbHz7aCb0K28g xJvv1u8NhWtDfoxZUNwZaHruc9yKmBejSh2a/Ln2wWEG4DH7BUyuu2mBiH8l4Lym r1HSK/FcKz0ed9hR8FvoIS5WTrdiQXl5V5/La212HawkLw6b6hmBRIjrroXkffL1 xdqskUpDWpZwbOKMzuQ+zcIkXUN/mMiocHz218o7xbpAFJJgZsbGuS5QXkCf5ygG 5EIGjfdTYquNMw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:33:57 2025 by rpki-client on console-fra.rpki-client.org