$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft File: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json) Hash identifier: 6wPHulT1WjtQpAyWf4NgMsracn111O+48dK6U92FjVo= Subject key identifier: 28:3B:58:C0:BC:24:3A:86:76:2F:B2:9E:35:4A:EA:B1:6D:3C:11:4C Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019961340E7C2D92B433887B7F2A2CB58CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft Manifest number: 16F8 Signing time: Fri 19 Sep 2025 09:00:25 +0000 Manifest this update: Fri 19 Sep 2025 09:00:25 +0000 Manifest next update: Sat 20 Sep 2025 09:00:25 +0000 Files and hashes: 1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=) 2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=) 3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=) 4: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=) 5: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=) 6: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=) 7: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=) 8: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=) 9: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=) 10: UooM3kbVP_VgnWKTc0dSjHxgrW0.roa (hash: 7p6jwdP6bpELzkSwppQCFo5IztXEk6grCDth7THNqiE=) 11: W4_dQd7C2mAGB3I24C-30P9-KR0.roa (hash: Hqcu5oe9JYOMkNSJBN1TTQswujAkOBAd75J8FP6BT4w=) 12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=) 13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=) 14: bBRJ88vGGDyD9dLDArY5zAKdNuw.roa (hash: vS28Ry1njW+ZhZmyyNEaInRIqI7X/sIYsEuXLFBqT8w=) 15: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=) 16: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=) 17: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=) 18: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: O3kXrqTmY5PLtREA8ATj1ArhDfs1/gq2JhKO1J4tPEI=) 19: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=) 20: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=) 21: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=) 22: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=) 23: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=) 24: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=) 25: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=) 26: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=) 27: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:61:34:0e:7c:2d:92:b4:33:88:7b:7f:2a:2c:b5:8c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Sep 19 09:00:25 2025 GMT Not After : Sep 20 09:00:25 2025 GMT Subject: CN=283b58c0bc243a86762fb29e354aeab16d3c114c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:0b:9e:63:03:24:4f:4e:98:cb:62:2d:bf: 76:cc:8b:35:e2:67:6d:2d:d5:b2:42:43:71:5e:90: 87:9c:3b:bb:41:ca:6d:f6:78:ca:86:72:d6:4a:6e: c5:7c:02:8f:df:68:d3:3a:d7:75:43:29:ea:2b:ac: 8d:e2:3f:f7:04:cd:3a:20:20:aa:b3:19:2c:c7:44: fd:98:04:dc:08:70:9c:0b:04:8a:de:a7:c8:60:a9: 30:d4:df:ed:5f:61:e9:44:94:ca:eb:25:2c:e5:01: cb:11:15:b4:11:5c:9b:34:5c:91:1a:4a:43:17:71: fa:17:9d:22:9b:fc:59:4b:f7:da:6a:1c:dd:4e:86: 3f:17:d1:ce:9e:68:aa:72:70:7a:7d:c0:61:b7:48: ec:ed:64:60:f6:df:6a:8f:37:fe:53:69:05:30:d4: b4:ce:aa:70:08:96:af:40:a7:e7:f3:be:9f:cc:10: f4:c6:ed:d5:ac:f9:e6:19:3e:d9:09:f1:37:89:78: 8f:a0:4e:7b:6a:96:da:04:aa:89:e4:26:18:43:f3: 96:c4:bc:42:0c:a4:18:4b:a5:5c:c1:d7:40:f1:51: 75:68:45:72:44:86:1e:e6:2b:38:2f:a6:6c:36:54: 11:45:69:2d:3d:f5:43:3b:08:06:04:01:af:e7:36: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:58:C0:BC:24:3A:86:76:2F:B2:9E:35:4A:EA:B1:6D:3C:11:4C X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:85:e2:d3:26:ce:57:48:89:0c:f5:21:b8:78:7e:9e:35:d1: 02:02:be:e1:38:19:33:0a:f4:0a:7a:ac:35:02:5d:3a:1c:79: 21:b5:10:9b:52:21:3f:45:14:e7:a3:48:40:6b:f6:9a:56:d0: aa:73:c8:2d:c2:35:d0:ff:9e:77:c0:cb:b3:71:4f:2a:0a:f5: c8:09:ae:7a:a7:9c:ea:68:a0:bb:6a:21:66:b9:68:0a:65:61: 7a:38:cc:28:f0:bc:8e:1b:90:8e:f2:72:5f:68:6e:9c:01:b1: 44:6a:5c:f0:7f:ff:df:be:0d:93:b6:6d:e5:67:64:3d:87:68: da:b0:98:36:2d:6b:09:ca:7e:ce:18:54:69:5e:7a:81:95:7c: d8:f5:5b:db:9b:15:a5:fd:44:43:0a:74:0a:f3:16:c2:0c:ab: da:5c:3b:0c:98:b1:04:30:ed:40:4f:f8:40:8f:da:91:ae:40: 1d:5c:6c:8c:af:3b:17:eb:89:d1:e5:71:68:7c:f1:e6:db:f4: df:13:68:12:23:07:f1:22:1a:c3:81:d9:86:cf:e1:bf:6f:16: 2d:06:55:df:5a:46:96:7a:5b:d5:83:f0:e2:de:41:72:17:c1: 21:d3:a2:83:64:e3:07:23:93:54:48:c3:df:10:ff:9f:cc:04: 58:84:2a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlhNA58LZK0M4h7fyostYylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUwOTE5MDkwMDI1WhcNMjUwOTIwMDkwMDI1WjAzMTEwLwYDVQQD EygyODNiNThjMGJjMjQzYTg2NzYyZmIyOWUzNTRhZWFiMTZkM2MxMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0sLnmMDJE9OmMtiLb92zIs14mdt LdWyQkNxXpCHnDu7Qcpt9njKhnLWSm7FfAKP32jTOtd1QynqK6yN4j/3BM06ICCq sxksx0T9mATcCHCcCwSK3qfIYKkw1N/tX2HpRJTK6yUs5QHLERW0EVybNFyRGkpD F3H6F50im/xZS/faahzdToY/F9HOnmiqcnB6fcBht0js7WRg9t9qjzf+U2kFMNS0 zqpwCJavQKfn876fzBD0xu3VrPnmGT7ZCfE3iXiPoE57apbaBKqJ5CYYQ/OWxLxC DKQYS6VcwddA8VF1aEVyRIYe5is4L6ZsNlQRRWktPfVDOwgGBAGv5za6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg7WMC8JDqGdi+ynjVK6rFtPBFMMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYXi0ybO V0iJDPUhuHh+njXRAgK+4TgZMwr0CnqsNQJdOhx5IbUQm1IhP0UU56NIQGv2mlbQ qnPILcI10P+ed8DLs3FPKgr1yAmueqec6migu2ohZrloCmVhejjMKPC8jhuQjvJy X2hunAGxRGpc8H//374Nk7Zt5WdkPYdo2rCYNi1rCcp+zhhUaV56gZV82PVb25sV pf1EQwp0CvMWwgyr2lw7DJixBDDtQE/4QI/aka5AHVxsjK87F+uJ0eVxaHzx5tv0 3xNoEiMH8SIaw4HZhs/hv28WLQZV31pGlnpb1YPw4t5BchfBIdOig2TjByOTVEjD 3xD/n8wEWIQq4w== -----END CERTIFICATE-----Generated at Fri Sep 19 15:29:17 2025 by rpki-client