$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json) Hash identifier: vmF6GrYh2njN+wJlNBpe2o68uqlzOgz2UYf3Dx1XafI= Subject key identifier: AD:03:15:1C:DB:CD:E1:20:F3:C0:C1:97:67:3A:EB:97:17:BE:9C:86 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 0197C07FA14C4692DCCA64BB978C2F203944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft Manifest number: 15D2 Signing time: Mon 30 Jun 2025 11:01:19 +0000 Manifest this update: Mon 30 Jun 2025 11:01:19 +0000 Manifest next update: Tue 01 Jul 2025 11:01:19 +0000 Files and hashes: 1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=) 2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=) 3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=) 4: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=) 5: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=) 6: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=) 7: TcREFaat3BLntw04ypyL63blPnc.roa (hash: ujFrwypXV/leJfWI8GP1wwYG1eD9LOp8Gpc7lvuU/io=) 8: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=) 9: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=) 10: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=) 11: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=) 12: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: Yd3X8eEYMYa5sH9TMFKna4XHoJtzjWj706Nfv21ekZg=) 13: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=) 14: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=) 15: poFYbbPGkTt6CCvX4o3TCsHpfsg.roa (hash: s1SNEkHqWiUfn1yNCntzkNwcArO1bOsbt3CndoD1K8g=) 16: r_KvJv83UWZ7GxTGf8Wcme3ktnw.roa (hash: d3lvS9v2d04dXWrzZAL/95YfMQ48ufz4iEKRW8zSM58=) 17: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=) 18: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c0:7f:a1:4c:46:92:dc:ca:64:bb:97:8c:2f:20:39:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jun 30 11:01:19 2025 GMT Not After : Jul 1 11:01:19 2025 GMT Subject: CN=ad03151cdbcde120f3c0c197673aeb9717be9c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:4e:32:92:80:5c:91:9d:9a:79:96:f1:7e: 32:32:10:e5:a5:8a:33:8a:f1:4a:22:bf:0b:65:b8: 73:35:a6:73:9e:ee:52:69:1c:a8:64:9c:55:16:e6: 64:5e:86:96:25:fd:d7:7b:3a:2f:25:5a:09:83:04: 0b:a3:52:e8:5e:3d:62:b2:24:68:6b:86:41:ca:77: 85:86:9e:1f:53:23:24:f2:d0:f6:1f:b4:2c:c5:26: 7a:6e:cc:f4:12:42:85:dd:8a:66:b9:75:fe:c6:54: 8a:ed:ff:84:af:37:fc:3d:1e:b4:6b:bf:13:7f:02: 1a:78:46:f7:4c:76:c1:cc:fc:af:27:10:5f:cc:a7: 91:ed:68:b5:f2:15:0f:5a:dd:e6:ce:fe:f7:ab:e8: 34:35:91:24:c5:df:84:96:f6:8c:79:70:79:cc:32: c5:db:6d:b2:3c:45:b5:1d:21:b1:8c:a6:18:91:fa: 99:87:3b:c4:85:c8:c2:14:c3:64:da:51:fc:9f:b3: da:f6:b1:71:da:f1:0a:76:5c:2e:ce:e0:83:9f:02: bf:de:4f:bd:c2:78:06:a5:97:45:ac:82:77:03:84: 17:92:5e:1b:09:c5:d4:88:d6:35:7e:1f:11:0f:d5: db:47:76:64:dc:82:05:11:97:94:ac:50:cb:ff:36: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:03:15:1C:DB:CD:E1:20:F3:C0:C1:97:67:3A:EB:97:17:BE:9C:86 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1a:8f:99:63:a6:cd:e0:3c:44:8d:35:8e:eb:0d:25:d4:49: f9:b2:b7:a0:81:21:8e:e6:ed:cc:ba:1b:a7:09:13:89:e3:a9: df:55:2e:15:20:8a:d4:91:9d:52:a9:b7:b6:cc:34:9d:e3:92: d9:d3:cb:4e:c6:ee:0e:c8:e9:9c:7c:9b:34:33:3f:b7:36:94: b9:d7:40:c4:f2:3c:83:1f:60:90:d8:a2:32:c4:51:92:a7:46: 42:1c:c7:ad:38:94:4f:70:be:56:a2:8f:da:a7:e0:f5:ec:29: 2c:d2:5c:b0:64:53:c1:52:30:d9:d0:87:49:1d:8c:56:3e:90: 64:61:cf:7c:36:04:32:9c:f9:83:25:d5:3b:9b:88:61:23:7a: 4a:62:6e:b7:76:93:5a:94:96:57:19:d7:78:0f:3e:fe:bf:af: eb:6d:5f:d5:b2:1d:68:2e:5d:34:86:1d:56:d8:17:68:f4:f1: 74:62:f1:c9:12:37:a5:29:b3:f1:e3:66:58:0c:39:c5:eb:66: fb:d0:f8:72:52:72:bd:d6:fe:19:70:07:08:55:e2:3d:fb:e2: a1:d3:a3:18:c0:48:e4:85:3f:6b:eb:01:e1:27:a5:14:61:a0: 94:a2:c4:da:41:c0:4b:3b:3e:f5:29:4d:78:f1:b5:b3:19:75: d7:f9:0f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfAf6FMRpLcymS7l4wvIDlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjUwNjMwMTEwMTE5WhcNMjUwNzAxMTEwMTE5WjAzMTEwLwYDVQQD EyhhZDAzMTUxY2RiY2RlMTIwZjNjMGMxOTc2NzNhZWI5NzE3YmU5Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XxOMpKAXJGdmnmW8X4yMhDlpYoz ivFKIr8LZbhzNaZznu5SaRyoZJxVFuZkXoaWJf3XezovJVoJgwQLo1LoXj1isiRo a4ZByneFhp4fUyMk8tD2H7QsxSZ6bsz0EkKF3YpmuXX+xlSK7f+Erzf8PR60a78T fwIaeEb3THbBzPyvJxBfzKeR7Wi18hUPWt3mzv73q+g0NZEkxd+ElvaMeXB5zDLF 222yPEW1HSGxjKYYkfqZhzvEhcjCFMNk2lH8n7Pa9rFx2vEKdlwuzuCDnwK/3k+9 wngGpZdFrIJ3A4QXkl4bCcXUiNY1fh8RD9XbR3Zk3IIFEZeUrFDL/zbzSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0DFRzbzeEg88DBl2c665cXvpyGMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBqPmWOm zeA8RI01jusNJdRJ+bK3oIEhjubtzLobpwkTieOp31UuFSCK1JGdUqm3tsw0neOS 2dPLTsbuDsjpnHybNDM/tzaUuddAxPI8gx9gkNiiMsRRkqdGQhzHrTiUT3C+VqKP 2qfg9ewpLNJcsGRTwVIw2dCHSR2MVj6QZGHPfDYEMpz5gyXVO5uIYSN6SmJut3aT WpSWVxnXeA8+/r+v621f1bIdaC5dNIYdVtgXaPTxdGLxyRI3pSmz8eNmWAw5xetm +9D4clJyvdb+GXAHCFXiPfviodOjGMBI5IU/a+sB4SelFGGglKLE2kHASzs+9SlN ePG1sxl11/kPTQ== -----END CERTIFICATE-----Generated at Mon Jun 30 20:49:31 2025 by rpki-client