$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft File: Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json) Hash identifier: r408kuOIL279aSdsuImw67Uxf+4ePmVvmkWPHDv87bw= Subject key identifier: 84:93:A8:4F:CA:90:45:DD:3A:20:72:31:64:9D:73:FD:E3:30:27:95 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 01992A0F38C3D85DB95F75A3705C34BC5DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft Manifest number: 05E3 Signing time: Mon 08 Sep 2025 16:01:04 +0000 Manifest this update: Mon 08 Sep 2025 16:01:04 +0000 Manifest next update: Tue 09 Sep 2025 16:01:04 +0000 Files and hashes: 1: 4ASzv8VWMQYFKDY_-XGCbimJW5s.roa (hash: 4zLzwFIqB9q7XlogNn2GDLJVXFyYSxghGw7cNNnYtt8=) 2: 5HV-tkSn-nvaTCJgq2qZMjXXs3I.roa (hash: V4YAUXA1HwXaJ3mud6IQQG1XhWx4lpV0RuNwmpEC5DM=) 3: 5h7U117_LogP5kPETSBap2Ev0yI.roa (hash: QLmh86oOsIGhmYhBoDiaCA4zllnx8R+NzKdjQbMIzHI=) 4: B4_oxATnGbDyQRnpDFsFel2qJro.roa (hash: Eu+Z19cukHF/X5BwY4vJJ3PD89GFZl84ZrwWgUf0Sdc=) 5: B627jyelsOrc-4KEk9rr5UX-6bs.roa (hash: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=) 6: Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa (hash: fRiDqhfW2rBzfJSvdE7QFaE7Ru5cnrq0/b1xWUv4QEU=) 7: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (hash: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=) 8: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: PDV6lbdqCAX3SSfc/EXDb5ABnFFBvktWrm8sAa9/ukg=) 9: K6GiiZJ71L0lYgovFnICdAk-1Ks.roa (hash: 6qHwOyZ8UfE4rkOQqwwP70JdW41FclRsGgCcII3xOE8=) 10: M1aqRzQAx0u0GH1aXLjObYZ4Q7k.roa (hash: mN6UichsOlqnG+M84GTpzNqXCEcMKcyFp6FqDGDV0E4=) 11: MSXSTFKnAwZwbqobS5_FZAQrg-M.roa (hash: D45Ar0ZBYy4iC6UD1t5qGymD/cKcsHTZdI0FaRgD4/k=) 12: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (hash: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=) 13: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (hash: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=) 14: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (hash: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=) 15: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (hash: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=) 16: bgJ7rFWnfoshvC4eV7CAkgZqHG0.roa (hash: PATqRpXU1ld4RrBFHxUB48disbekj/eibE1opPwFCWU=) 17: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (hash: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=) 18: fmODc7MENEc14rO10yX01KjqK28.roa (hash: uJCEf4lpY599iRYVqaOAvP8jY7fLqVDXB1BusGXHNpw=) 19: kvTlBi_B8QrdRGJqo_C6nAXRdfc.roa (hash: 6MLCaYZkCCpTI+u5625D24+Iiiya7eil7hcGEmC1dUY=) 20: lU9bl4hVEw5hzibuRIs13xmbj9M.roa (hash: ZUdsZ2gex8weJr9deejWFGIwiEepSjgNX4ZZr24MPDg=) 21: moCjhy9MjqXiFgMnAR9Fy5SDHgo.roa (hash: LUnUKR1Zotqdb56mM7OX5qPTEb698XgNZZiSiK3MEOQ=) 22: o41yDBZggn4lr9NsPB_Gp8GKfBM.roa (hash: KRnKN0lrEk1hL6MxXIHkfLYCNSrhlEIODabcvB9s1Rk=) 23: rC-6_MpLFXNC_yVcHN7bocmTRFo.roa (hash: F2+vYnjsDip5hlFlmE+A+nvZymiYmgHK6+W34puVOf4=) 24: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (hash: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=) 25: tWCaBWq3ZgV3-7XX1cWsxbC1zrE.roa (hash: 1GYVtpcVNjgzgm/oYqnREnTQrGZnX2ki31par69caoA=) 26: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (hash: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2a:0f:38:c3:d8:5d:b9:5f:75:a3:70:5c:34:bc:5d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Sep 8 16:01:04 2025 GMT Not After : Sep 9 16:01:04 2025 GMT Subject: CN=8493a84fca9045dd3a207231649d73fde3302795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:68:af:c1:be:b3:fe:d3:ec:3f:8d:0d:da: 5e:ba:fe:7b:ad:c0:35:ea:84:f5:f8:bc:b7:1a:46: 0b:54:29:25:2f:67:7b:35:69:9d:5f:10:38:56:a6: d2:e2:ac:af:77:68:d7:78:fd:0f:ea:17:69:c2:43: d8:39:15:30:be:65:31:a0:fe:eb:c3:94:aa:bb:0d: 39:da:8f:8b:bc:bc:75:c9:2b:a3:f5:0f:9b:05:d6: 7c:78:33:0b:ec:9b:2a:a9:0a:cb:6d:34:19:16:7e: 5e:fb:c5:e3:d5:92:a0:10:08:7f:30:27:f4:fc:35: 79:81:cc:ff:07:22:31:90:04:75:88:51:c3:f1:15: b7:70:cd:2d:f3:8c:30:4c:e9:98:fb:5b:92:d1:46: 80:1b:8e:2d:e5:e4:99:b7:52:3d:f8:3b:ca:b2:59: ea:fa:3a:b3:6b:fc:8b:66:30:a3:64:d3:2b:a4:f3: 1b:53:f4:cd:73:27:7b:ec:59:79:34:2f:45:31:80: f6:4b:bc:7d:a6:b5:ee:77:e5:5d:73:f7:ac:e3:a0: 3e:67:f4:b9:b8:5c:cf:3b:f3:d1:4a:03:03:fe:92: 03:77:c8:47:2a:55:1b:66:9b:93:97:35:ea:cd:02: 2a:b0:de:d0:d4:8a:1d:f5:d7:9c:69:41:ab:22:a2: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:93:A8:4F:CA:90:45:DD:3A:20:72:31:64:9D:73:FD:E3:30:27:95 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dc:bc:55:54:78:2b:a3:8c:5e:26:12:b6:90:76:20:1e:b2: d7:94:ac:4c:93:b3:e4:f8:9c:3c:c3:74:0d:a1:f8:49:dd:37: b2:25:fa:f7:69:ba:73:b9:af:07:0b:5c:34:71:6a:5a:c4:87: 70:00:f0:41:61:86:22:9a:ea:b8:4f:ca:b2:d8:a5:9d:b7:aa: ce:22:05:8e:5b:67:0a:c1:45:13:10:cc:42:a3:14:50:14:9e: 3a:22:fe:68:70:7b:94:11:00:df:7c:d3:c4:73:f5:6a:ba:6a: 2d:5c:cc:91:63:ee:b9:a1:6c:67:ac:4f:a9:5a:50:b0:65:38: 4c:ac:f3:97:64:1d:94:a8:e2:08:f7:a4:53:da:3c:dd:2a:50: 67:e5:ee:cd:26:68:ca:63:e3:34:a7:91:cc:98:12:a0:4b:0e: a4:8c:2c:f1:7f:85:30:ad:c3:b1:d8:f2:2e:6d:2d:d7:e7:ec: 8d:59:6e:5c:b5:bd:59:50:22:28:32:29:e9:af:49:25:a6:9c: dc:8d:ca:97:ce:ed:ea:09:90:91:2b:d0:6e:a1:74:c4:e5:16: 64:c2:50:5f:55:2f:09:90:9a:7f:cf:bb:f7:a9:69:54:ec:6a: 6e:6c:26:f6:f6:6a:6d:2a:29:0e:e9:de:ca:2f:7b:3c:bd:0d: 0d:9a:04:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkqDzjD2F25X3WjcFw0vF30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUwOTA4MTYwMTA0WhcNMjUwOTA5MTYwMTA0WjAzMTEwLwYDVQQD Eyg4NDkzYTg0ZmNhOTA0NWRkM2EyMDcyMzE2NDlkNzNmZGUzMzAyNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1or8G+s/7T7D+NDdpeuv57rcA1 6oT1+Ly3GkYLVCklL2d7NWmdXxA4VqbS4qyvd2jXeP0P6hdpwkPYORUwvmUxoP7r w5Squw052o+LvLx1ySuj9Q+bBdZ8eDML7JsqqQrLbTQZFn5e+8Xj1ZKgEAh/MCf0 /DV5gcz/ByIxkAR1iFHD8RW3cM0t84wwTOmY+1uS0UaAG44t5eSZt1I9+DvKslnq +jqza/yLZjCjZNMrpPMbU/TNcyd77Fl5NC9FMYD2S7x9prXud+Vdc/es46A+Z/S5 uFzPO/PRSgMD/pIDd8hHKlUbZpuTlzXqzQIqsN7Q1Iod9decaUGrIqLtRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISTqE/KkEXdOiByMWSdc/3jMCeVMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNy8VVR4 K6OMXiYStpB2IB6y15SsTJOz5PicPMN0DaH4Sd03siX692m6c7mvBwtcNHFqWsSH cADwQWGGIprquE/KstilnbeqziIFjltnCsFFExDMQqMUUBSeOiL+aHB7lBEA33zT xHP1arpqLVzMkWPuuaFsZ6xPqVpQsGU4TKzzl2QdlKjiCPekU9o83SpQZ+XuzSZo ymPjNKeRzJgSoEsOpIws8X+FMK3DsdjyLm0t1+fsjVluXLW9WVAiKDIp6a9JJaac 3I3Kl87t6gmQkSvQbqF0xOUWZMJQX1UvCZCaf8+796lpVOxqbmwm9vZqbSopDune yi97PL0NDZoESw== -----END CERTIFICATE-----Generated at Mon Sep 8 19:07:58 2025 by rpki-client