$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: u4sK4Vq1I35ainFHCDFQvGiJ0JOvN6QAo3Uop8RrAXE= Subject key identifier: F5:C4:4C:A3:5A:5B:70:C9:34:07:DB:C5:7A:3E:2B:4C:D7:44:B4:98 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0199179A971A0A32374F7504608CF431ADF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 1670 Signing time: Fri 05 Sep 2025 02:00:30 +0000 Manifest this update: Fri 05 Sep 2025 02:00:30 +0000 Manifest next update: Sat 06 Sep 2025 02:00:30 +0000 Files and hashes: 1: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=) 2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 3: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=) 4: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 5: CMJdala6pFhg-m_hIMesxyzbTAk.roa (hash: dvXeg+DcGeVh1vSS0AnLKUd1rN/dkpdkpg1fDCZ6b5g=) 6: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 7: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: tmUBsrEzeIkVo+NRuNUgA9VcmCigO2Fdh4mEObGyVqg=) 9: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 10: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 11: UItLZsiO26x7QiRXdGLqfBj5i3A.roa (hash: YEdG4y28dnG+6B0iGrSVjqk69La+oWZl6VDLolSPKHk=) 12: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 13: Z0HFTEB-y-xMkY874DNYvhokt7o.roa (hash: fMTVowfbwy2vdbwi3DPoTLMlTmRBQt2PrhpbkbjG32k=) 14: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 15: cuI5lIMGONC-zhkO0Br-gP7t3DM.roa (hash: HgCokX5nX8AH6l8KDj8If1jUn+noyEm0cg4YnPECwI0=) 16: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 17: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 18: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 19: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 20: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 21: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 22: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 23: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:9a:97:1a:0a:32:37:4f:75:04:60:8c:f4:31:ad:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Sep 5 02:00:30 2025 GMT Not After : Sep 6 02:00:30 2025 GMT Subject: CN=f5c44ca35a5b70c93407dbc57a3e2b4cd744b498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:df:5e:d6:f9:6f:63:9b:ec:93:51:d6:d1: 20:f9:a0:64:79:08:72:6d:74:80:8c:45:00:1b:a6: af:fb:98:a6:51:1d:8b:ff:f2:88:cc:36:80:e4:e5: 11:ff:c4:55:4a:2e:b9:e0:99:55:d8:57:84:c4:25: 5b:7e:49:66:11:cf:26:29:cb:65:0b:b3:a9:bf:76: db:2a:63:2a:09:87:c6:64:58:91:ab:62:56:f4:24: a2:88:94:40:46:3c:45:66:46:09:be:cd:0f:bf:c6: ee:d3:bf:38:76:68:e1:5b:d6:55:04:02:98:3f:4d: ea:c0:3e:c6:a6:2e:43:b7:db:c9:98:f5:25:aa:91: 0c:06:42:db:7f:42:3c:55:8e:95:fc:e1:94:47:42: 82:db:24:d0:fd:19:60:94:d7:51:a5:d4:e6:06:60: 34:3f:08:27:c0:59:86:df:9e:79:4d:d4:68:bd:6a: 9c:a4:dc:55:ad:c7:71:a8:0a:be:94:e4:12:be:d6: 9c:b9:bb:a6:b7:f8:eb:83:27:57:e6:d8:12:23:0e: b8:e0:a9:fb:19:db:cc:2a:ab:83:fc:ab:b8:68:0f: b5:54:dd:24:af:1e:fc:0e:8f:3e:cf:80:f5:9f:93: ec:0e:14:5f:87:9c:5a:a6:46:05:61:4f:0a:f0:4a: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C4:4C:A3:5A:5B:70:C9:34:07:DB:C5:7A:3E:2B:4C:D7:44:B4:98 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d5:f0:5d:9e:f7:a3:26:c3:60:08:df:87:bf:e9:d1:5e:e9: c2:8a:9c:5b:07:b8:be:6a:16:8e:0b:f3:cc:c4:15:13:5b:7c: b5:c8:43:8a:d7:3f:cd:a3:07:79:b9:f8:e7:78:85:71:af:d5: 85:d0:fd:6f:2e:61:80:e2:57:54:d2:36:b7:5c:b9:b7:44:9a: 36:a0:27:41:ac:92:f0:06:d4:c1:b8:20:9b:ec:67:41:7b:33: c7:cc:c7:be:3c:43:84:5d:d8:17:96:7e:8e:de:86:dd:61:96: f8:99:eb:f9:29:a9:0c:a8:6a:cb:15:66:86:46:09:46:20:db: 6a:8a:3d:98:18:02:e6:62:57:74:a7:48:81:d6:51:a0:03:97: 24:11:44:b7:1d:a0:93:cf:66:2c:9f:ac:da:d7:09:a3:a2:0c: 5b:06:07:92:14:72:27:75:51:da:4b:79:0b:95:6f:12:bc:a5: 34:ba:34:af:19:36:48:48:a1:77:0d:d2:e5:8c:dd:4e:90:64: ad:80:8d:f7:00:f8:0b:b3:7f:a4:42:04:0c:04:8b:d6:3a:f5: c6:d0:21:99:6d:b0:c7:a3:8f:83:5d:11:50:ff:70:01:5f:58: 88:7a:9c:de:09:3e:a6:04:d2:53:d5:9a:9b:90:8f:f7:d3:35: 6f:2d:3a:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXmpcaCjI3T3UEYIz0Ma3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwOTA1MDIwMDMwWhcNMjUwOTA2MDIwMDMwWjAzMTEwLwYDVQQD EyhmNWM0NGNhMzVhNWI3MGM5MzQwN2RiYzU3YTNlMmI0Y2Q3NDRiNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyzfXtb5b2Ob7JNR1tEg+aBkeQhy bXSAjEUAG6av+5imUR2L//KIzDaA5OUR/8RVSi654JlV2FeExCVbfklmEc8mKctl C7Opv3bbKmMqCYfGZFiRq2JW9CSiiJRARjxFZkYJvs0Pv8bu0784dmjhW9ZVBAKY P03qwD7Gpi5Dt9vJmPUlqpEMBkLbf0I8VY6V/OGUR0KC2yTQ/RlglNdRpdTmBmA0 PwgnwFmG3555TdRovWqcpNxVrcdxqAq+lOQSvtacubumt/jrgydX5tgSIw644Kn7 GdvMKquD/Ku4aA+1VN0krx78Do8+z4D1n5PsDhRfh5xapkYFYU8K8EpA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXETKNaW3DJNAfbxXo+K0zXRLSYMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9XwXZ73 oybDYAjfh7/p0V7pwoqcWwe4vmoWjgvzzMQVE1t8tchDitc/zaMHebn453iFca/V hdD9by5hgOJXVNI2t1y5t0SaNqAnQayS8AbUwbggm+xnQXszx8zHvjxDhF3YF5Z+ jt6G3WGW+Jnr+SmpDKhqyxVmhkYJRiDbaoo9mBgC5mJXdKdIgdZRoAOXJBFEtx2g k89mLJ+s2tcJo6IMWwYHkhRyJ3VR2kt5C5VvErylNLo0rxk2SEihdw3S5YzdTpBk rYCN9wD4C7N/pEIEDASL1jr1xtAhmW2wx6OPg10RUP9wAV9YiHqc3gk+pgTSU9Wa m5CP99M1by06pA== -----END CERTIFICATE-----Generated at Fri Sep 5 07:37:30 2025 by rpki-client