$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft (raw, json) Hash identifier: 1KBqkvtE5vAKjQn7zazJuKVVlaCYFyKmcnJJRzLR1AU= Subject key identifier: 7E:CD:23:DF:E4:7D:92:2E:19:20:51:39:33:75:B5:47:9B:FD:D4:17 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019A35D979247151FE0215B6366D9C57B715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft Manifest number: 168C Signing time: Thu 30 Oct 2025 16:00:36 +0000 Manifest this update: Thu 30 Oct 2025 16:00:36 +0000 Manifest next update: Fri 31 Oct 2025 16:00:36 +0000 Files and hashes: 1: 2YMGNAfsJDhXvpAQdDgMoQSJ1lQ.roa (hash: opwlvD4eXCeJtZqLmJkQjd4EnmKmwsPiFEkInxiN3ew=) 2: 3nHQeUIvfgERGGgwZXPLqGrFwCc.roa (hash: PVqd7KRgPCILOUDhdegbeY89u7gfE4kJTUXx1+4aybk=) 3: 4fJd3OUxKotrDopMoPp8x_J3KXs.roa (hash: jo1NuUMOgj2DOUbbjYgsD3WHmHnI2e64VwgOioKGjxc=) 4: 7xBwrzDU-Q3LgBd_pCCkSVZJ8r8.roa (hash: I4+USeGM9vUX6KcuBfkfPPLNkgp4BpNTxxlqHARIlaA=) 5: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (hash: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=) 6: GMUqnPQO8HVIx48VQ0kZwO4akaw.roa (hash: uZv76tLJNRtDmi3fk8CwmWOl4QIbJTpAAFy6cS5OdOg=) 7: HIqyL1_xN65PGGh2pYvXxB9JRnY.roa (hash: WSdWXpJpM+IApu/ksgC0/SIwWBLtodEczT76Ij0oaDM=) 8: HWSjw2fbv5zfcw0AKHO0DUnHOtQ.roa (hash: Xdy5Q/i3U4vTL+1/dZaz9m7aiTQM9VV6w2ke2pIj8Mo=) 9: L0_jQJT5Qclln0Oyg58IDEsvUEY.roa (hash: O4ru/bejek+UTjQtcEf3F24KaS3s+lQbPWX4dTGtcIg=) 10: M6XyFHtKP2ScUd5goZuFirggjdg.roa (hash: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=) 11: MiH69dfcyCIB23Qa5GvglWS530s.roa (hash: ib+HOhPLu/yX/AwfYmsfgR2RDO6fgoZuxLt0/b+SAbc=) 12: OE3tT2H2fUUZLW1vQ7BzbV1M8gU.roa (hash: y5ASsgsrkdPRvKNsFBA0em5Q7FjI70gdDU/50w7KFJA=) 13: Q155SYsxVZHtklas2BS3w5w70h0.roa (hash: FvNx0toywZuvzc5WA2iEA8TJxxDlZbL0owUYzKxW1No=) 14: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (hash: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=) 15: SX3ylag-hZOGWYy_pZkwNhLOSsE.roa (hash: 43OUdEAz6tq0z1F5ikIM0mpbPVhfkw5HMKGB/qtwP5M=) 16: VBzP8kfPQEFNtuR8PdFsD2jp1DY.roa (hash: 3EY9SySAHD8fNQ9KBgqy9PEqScRiw8H7Y0JuBdXiKGk=) 17: VWUyUYrxBUBQm8U_GjpDzaM_d0M.roa (hash: DnWyph44y5iJj5u6j2MjM6Rs0v4MJI8RZHnOeiNRgbw=) 18: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (hash: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=) 19: XOeYPDFunsrsYp0-Y7f01UANXYE.roa (hash: EDBHmHjrHHD79zYQIl4IIyJ7MsjaCFiA1LKPLtylFCA=) 20: YALvBFXCZCuiPMm-BJVewPH_enA.roa (hash: 2ekpPdYOHyCXTusjLDkkuEWOZIzDO3FZXtRuEpEjlLg=) 21: _GtticsJYfVQoe0D3zav_vzfdBI.roa (hash: q7xFTUE0zmzPMPHPkyjebKa2rHaYrI4nZ9SvbO1w70s=) 22: auEd2AJZBbZPig_7z1vxDlWadmA.roa (hash: 60BE0mDiR8P6qgvwmA8KQFG8GMDS3ckQBTSoMT45CdA=) 23: auJYqSGMRM2eh3GuPu73K0unOdU.roa (hash: GDejZaeuJKin43qGV5V9PEXLP2cVvsiS1K0IxA3fdMk=) 24: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (hash: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=) 25: cG7_wfsakBmyctpOoPE_qHS49E4.roa (hash: mSuDbhxIa4I4Ml2s2/BDm98rCr3yNT2h8gR1W7fngK4=) 26: e1WMx_ge3OvvuQfeVWgtsTZKIeI.roa (hash: AcxhV2adeY8w5h5li2Z6uouvIaFM+nk6upPlV2hgezs=) 27: gchn44JRTuDd880WIwbVtgXZUsU.roa (hash: JI8XHT7Ed3+L0vajm6jq0SIoKJNRevXoKUe8F/HW81I=) 28: gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl (hash: 0/rwR4+ssL+emrGKoHOcapbkfWKLbdFtfoLZ+Wd2dNg=) 29: kP5Kud5JC4HdByWF3NmU2sgwbJg.roa (hash: aeS1WvwgOcwV+L4eoLjhAuXFnavKM4LbSU/DAgly4BI=) 30: ojT-i1WyMoMzrKUGF70lR5SpfKo.roa (hash: +svQt7tDqw+nZSwF/1dh5yGoWZXeOhltuo6UFjy/ZCA=) 31: pFdc9GKBdXBjaKb_bkpy4pwiK_0.roa (hash: 8795JOEM2aEDEqQnWkWWkhSBntyGxcwSFS+eMBONKHk=) 32: qTXSVWTU8wL-LtchYD96dAZna1M.roa (hash: whr6apWGUcvqYoUu99TAxnFfLEWJVx+7V1setIYeu9Q=) 33: qiq4lHzWMEzrZSdOazDM-vLTXbw.roa (hash: xlyv2U2zn5kmXMwTOObtgWC0+eOvTyqFjN2rhysl2z8=) 34: uV9qh0Bz3P5Gfc4DrA8wQrQZnKM.roa (hash: Q2zeYVmGmIBxQp2Z7g0x6cXzrzkC3NswS2sBlFvJ0Pg=) 35: xSp6XojOq8AHuBptBsMJn0ejtl8.roa (hash: As0D1tFbvZDyE89/ZuOIeAirDGOGHpdYPzRD9NN17mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Oct 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:35:d9:79:24:71:51:fe:02:15:b6:36:6d:9c:57:b7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Oct 30 16:00:36 2025 GMT Not After : Oct 31 16:00:36 2025 GMT Subject: CN=7ecd23dfe47d922e192051393375b5479bfdd417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:d7:12:3f:9a:21:80:a2:02:94:99:60:35: c7:63:c9:16:3c:8f:12:a3:18:67:95:e5:54:d4:fb: 94:48:13:6d:37:22:33:3a:70:83:17:58:8c:47:fc: 47:6e:79:67:1d:7b:77:c5:b6:06:b1:bf:e9:49:6a: 46:d7:25:57:90:c8:6c:23:c3:36:38:da:13:0a:c4: fb:9b:05:d4:78:95:5e:6e:b6:32:ff:8b:6f:fe:63: 48:c5:ab:9a:42:4e:b5:dd:7d:08:ca:4a:bd:35:85: 74:fc:9e:1c:5a:8c:ec:63:42:c5:e6:f0:8d:78:09: 6a:54:e0:31:fa:21:0c:d5:5c:8e:eb:c3:8f:cb:0c: de:d0:73:b5:78:a0:2f:a8:14:b2:78:25:46:0f:42: 1c:60:8d:2c:8d:56:85:14:37:71:39:1b:2b:e7:11: 9c:8e:b3:94:45:1b:55:a7:51:d7:93:10:7d:f4:92: 6e:82:48:5b:26:86:71:a0:49:0b:84:6d:32:5b:bd: 99:9c:ba:df:54:8f:23:c6:e5:c0:16:95:bf:27:41: 68:1e:d3:43:7f:06:50:81:8a:d6:13:5c:d9:f4:95: f2:e1:e0:ac:0d:e0:bc:97:0e:b9:d4:5d:6f:8c:11: 58:bc:95:66:c6:5d:3f:7a:aa:74:7d:07:39:81:14: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CD:23:DF:E4:7D:92:2E:19:20:51:39:33:75:B5:47:9B:FD:D4:17 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e8:34:aa:30:f5:0c:f7:d8:44:c5:32:0f:b6:b8:ea:48:5a: a8:c1:b3:24:89:83:f6:dc:34:97:23:2b:a5:f9:a0:77:25:48: 7e:fe:d0:7a:36:8d:d5:4e:1c:98:6f:c4:47:53:e7:91:68:ab: e5:3f:68:d8:9b:ee:4f:57:8a:fc:42:9c:01:d0:84:20:c1:c8: 70:35:4e:a1:c0:66:64:d6:8f:49:35:20:64:92:a7:9a:a0:87: d3:88:b5:4b:98:68:79:cd:6b:4d:3c:cb:f3:5f:50:a7:63:1c: d2:30:08:25:1d:60:b8:d3:b6:76:09:a3:e6:db:37:fd:b6:a2: 40:9c:a1:a4:f0:8c:3b:f2:95:1c:9f:57:b3:ea:30:8b:c2:82: 80:ad:ea:4b:71:94:88:56:04:96:67:3f:db:2b:d6:41:27:41: 83:b0:d5:02:8f:05:7d:4a:f7:87:49:b3:54:d7:24:5e:14:ad: 17:13:d0:dd:dd:cc:97:be:60:4c:51:bd:67:f3:bd:85:2f:a6: 71:de:5b:db:44:11:27:49:41:95:44:2d:66:8a:a8:6c:a4:3b: 47:dc:ca:5c:ec:83:e0:b7:26:c7:01:ac:d7:2a:f0:8a:11:82: 2a:42:eb:fe:95:1d:33:91:1b:bc:eb:7e:45:b4:3c:6b:ae:05: fa:c8:bc:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZo12XkkcVH+AhW2Nm2cV7cVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjUxMDMwMTYwMDM2WhcNMjUxMDMxMTYwMDM2WjAzMTEwLwYDVQQD Eyg3ZWNkMjNkZmU0N2Q5MjJlMTkyMDUxMzkzMzc1YjU0NzliZmRkNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vjXEj+aIYCiApSZYDXHY8kWPI8S oxhnleVU1PuUSBNtNyIzOnCDF1iMR/xHbnlnHXt3xbYGsb/pSWpG1yVXkMhsI8M2 ONoTCsT7mwXUeJVebrYy/4tv/mNIxauaQk613X0Iykq9NYV0/J4cWozsY0LF5vCN eAlqVOAx+iEM1VyO68OPywze0HO1eKAvqBSyeCVGD0IcYI0sjVaFFDdxORsr5xGc jrOURRtVp1HXkxB99JJugkhbJoZxoEkLhG0yW72ZnLrfVI8jxuXAFpW/J0FoHtND fwZQgYrWE1zZ9JXy4eCsDeC8lw651F1vjBFYvJVmxl0/eqp0fQc5gRSmOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7NI9/kfZIuGSBROTN1tUeb/dQXMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOg0qjD1 DPfYRMUyD7a46khaqMGzJImD9tw0lyMrpfmgdyVIfv7QejaN1U4cmG/ER1PnkWir 5T9o2JvuT1eK/EKcAdCEIMHIcDVOocBmZNaPSTUgZJKnmqCH04i1S5hoec1rTTzL 819Qp2Mc0jAIJR1guNO2dgmj5ts3/baiQJyhpPCMO/KVHJ9Xs+owi8KCgK3qS3GU iFYElmc/2yvWQSdBg7DVAo8FfUr3h0mzVNckXhStFxPQ3d3Ml75gTFG9Z/O9hS+m cd5b20QRJ0lBlUQtZoqobKQ7R9zKXOyD4LcmxwGs1yrwihGCKkLr/pUdM5EbvOt+ RbQ8a64F+si8UQ== -----END CERTIFICATE-----Generated at Fri Oct 31 02:18:51 2025 by rpki-client