$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: JnzSb+ABXhyMw/p2e9vCEf5Q0u3LFjpEcr+bxuFA73A= Subject key identifier: 6E:77:A7:53:D4:42:35:9F:29:8D:48:3B:FB:7B:85:71:7C:F5:C4:6C Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 0197470BE691DA9CC8E585A00854596C2D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 1151 Signing time: Fri 06 Jun 2025 21:00:51 +0000 Manifest this update: Fri 06 Jun 2025 21:00:51 +0000 Manifest next update: Sat 07 Jun 2025 21:00:51 +0000 Files and hashes: 1: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 2: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: OiBi6diqdqpAskjP7DIT36WZaNgZwqjO4Fa9vYawq68=) 3: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 4: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 5: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 6: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 7: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 8: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 9: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 10: uVOilRs9nlSZX9PqVogOUrvkQSM.roa (hash: /mCUbTOWeinlY+5TK02vBXtRmjYZ4tmNd4E1mVfIF/4=) 11: xfa86z-_cd1JUN4qijUc-8zKEIc.roa (hash: V2BeXBWhsFE6+Rnj92uoYp038Gza7m9G0eWAbg/3QGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:0b:e6:91:da:9c:c8:e5:85:a0:08:54:59:6c:2d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Jun 6 21:00:51 2025 GMT Not After : Jun 7 21:00:51 2025 GMT Subject: CN=6e77a753d442359f298d483bfb7b85717cf5c46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:d2:9c:53:aa:73:6f:70:fc:a0:36:a7:56: b4:56:77:49:20:18:e1:6b:f2:33:2e:63:e9:fa:cc: a8:d7:10:bc:e6:3c:88:0f:bc:4d:24:fa:a8:ef:1f: a5:ce:cc:46:fb:5f:5a:ca:20:67:90:85:8a:0a:18: 9c:06:bb:e4:b3:f9:69:cb:6f:92:4b:03:dd:6b:c8: 17:22:c8:32:18:85:f9:70:5e:37:28:8c:59:a3:c8: f1:a1:7b:42:f5:3e:33:c5:73:47:a9:a9:d0:41:17: 56:74:5d:97:93:5c:94:a3:2b:bf:48:5f:0c:6d:9e: f9:00:e4:73:75:8c:c5:44:b5:66:65:dd:df:59:d8: 58:eb:c1:1c:bb:73:29:63:5f:d2:81:8e:df:52:db: 90:93:5d:a6:57:48:3e:14:04:fa:dc:aa:7c:2b:46: 01:b3:b2:ac:c3:e0:f0:38:d4:84:40:d6:04:d0:08: 65:05:92:05:83:45:5d:0a:c4:fb:e7:4d:b8:7e:cb: f1:06:81:50:32:aa:e5:b1:74:1a:7f:f9:aa:cd:73: 2a:0e:bc:1f:e0:44:2d:eb:c9:88:04:bd:c0:68:d7: 85:55:90:10:df:85:91:bd:60:e7:d7:58:19:ce:34: cd:e1:a2:d7:27:ad:94:09:30:d7:28:2b:2d:e8:b9: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:77:A7:53:D4:42:35:9F:29:8D:48:3B:FB:7B:85:71:7C:F5:C4:6C X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:82:b3:c9:fe:4a:78:fd:d3:f7:39:18:0a:ab:9c:ae:69:3c: 91:1d:c2:7f:2b:e6:9d:37:24:d2:ae:0b:69:2b:61:0a:b9:3a: ad:66:f3:49:43:a3:8e:d6:61:54:32:99:6a:e5:7d:08:7e:9f: f6:08:37:c6:00:09:8b:d9:65:92:51:f1:54:60:45:e8:81:27: d7:65:c8:e9:16:c2:44:47:ce:8f:bf:4c:65:73:48:93:69:4f: b4:b2:60:ff:21:67:58:73:7d:fc:38:77:1c:14:7d:fa:32:eb: 68:fa:86:5b:c6:86:7c:64:61:79:78:98:bc:00:77:73:ad:68: 66:23:7e:2b:fa:3d:59:b3:39:ca:f6:54:28:f0:c1:29:1a:a8: ee:01:29:ae:d1:17:a4:53:e3:1c:a7:02:95:7d:c0:e4:98:da: 5b:34:4a:b2:4d:34:35:8a:9a:9b:39:66:0c:65:e2:bf:5c:71: 60:fa:04:dd:45:d8:1f:ff:c5:0c:81:12:f0:ba:0c:a6:4d:25: 65:44:51:4a:a6:76:4b:05:83:c3:34:94:e5:ad:bb:dd:b5:38: e1:21:44:27:ba:f4:b8:2a:ad:b2:55:14:03:34:dd:14:20:57: 1a:4d:43:61:f8:66:33:a1:8c:0e:f8:e0:5b:f4:72:e0:69:9f: e0:60:40:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHC+aR2pzI5YWgCFRZbC2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUwNjA2MjEwMDUxWhcNMjUwNjA3MjEwMDUxWjAzMTEwLwYDVQQD Eyg2ZTc3YTc1M2Q0NDIzNTlmMjk4ZDQ4M2JmYjdiODU3MTdjZjVjNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFXSnFOqc29w/KA2p1a0VndJIBjh a/IzLmPp+syo1xC85jyID7xNJPqo7x+lzsxG+19ayiBnkIWKChicBrvks/lpy2+S SwPda8gXIsgyGIX5cF43KIxZo8jxoXtC9T4zxXNHqanQQRdWdF2Xk1yUoyu/SF8M bZ75AORzdYzFRLVmZd3fWdhY68Ecu3MpY1/SgY7fUtuQk12mV0g+FAT63Kp8K0YB s7Ksw+DwONSEQNYE0AhlBZIFg0VdCsT75024fsvxBoFQMqrlsXQaf/mqzXMqDrwf 4EQt68mIBL3AaNeFVZAQ34WRvWDn11gZzjTN4aLXJ62UCTDXKCst6LksLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG53p1PUQjWfKY1IO/t7hXF89cRsMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYKzyf5K eP3T9zkYCqucrmk8kR3CfyvmnTck0q4LaSthCrk6rWbzSUOjjtZhVDKZauV9CH6f 9gg3xgAJi9llklHxVGBF6IEn12XI6RbCREfOj79MZXNIk2lPtLJg/yFnWHN9/Dh3 HBR9+jLraPqGW8aGfGRheXiYvAB3c61oZiN+K/o9WbM5yvZUKPDBKRqo7gEprtEX pFPjHKcClX3A5JjaWzRKsk00NYqamzlmDGXiv1xxYPoE3UXYH//FDIES8LoMpk0l ZURRSqZ2SwWDwzSU5a273bU44SFEJ7r0uCqtslUUAzTdFCBXGk1DYfhmM6GMDvjg W/Ry4Gmf4GBAKg== -----END CERTIFICATE-----Generated at Sat Jun 7 04:12:46 2025 by rpki-client