$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft File: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json) Hash identifier: KnXm4z6W9wzzMXOoZgJ3eOiWrBhoixR4Yc1d3/h1FRk= Subject key identifier: E5:27:35:E1:96:62:ED:67:27:A2:33:F1:19:2A:D8:76:97:35:01:C3 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 0198C6B679D43C9861E08E9B6ED426740566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft Manifest number: 16A8 Signing time: Wed 20 Aug 2025 09:01:43 +0000 Manifest this update: Wed 20 Aug 2025 09:01:43 +0000 Manifest next update: Thu 21 Aug 2025 09:01:43 +0000 Files and hashes: 1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=) 2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=) 3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=) 4: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=) 5: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=) 6: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=) 7: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=) 8: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=) 9: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=) 10: UooM3kbVP_VgnWKTc0dSjHxgrW0.roa (hash: 7p6jwdP6bpELzkSwppQCFo5IztXEk6grCDth7THNqiE=) 11: W4_dQd7C2mAGB3I24C-30P9-KR0.roa (hash: Hqcu5oe9JYOMkNSJBN1TTQswujAkOBAd75J8FP6BT4w=) 12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=) 13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=) 14: bBRJ88vGGDyD9dLDArY5zAKdNuw.roa (hash: vS28Ry1njW+ZhZmyyNEaInRIqI7X/sIYsEuXLFBqT8w=) 15: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=) 16: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=) 17: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=) 18: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: ji/yYsakpfWJ9HIKllM5rvfiYm/TzehU1qTbS7AVsZI=) 19: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=) 20: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=) 21: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=) 22: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=) 23: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=) 24: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=) 25: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=) 26: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=) 27: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:c6:b6:79:d4:3c:98:61:e0:8e:9b:6e:d4:26:74:05:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Aug 20 09:01:43 2025 GMT Not After : Aug 21 09:01:43 2025 GMT Subject: CN=e52735e19662ed6727a233f1192ad876973501c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:13:7f:a5:e9:1d:72:a1:e6:78:0b:c2:3a: 7f:ec:58:b0:0d:0c:1a:0d:16:6e:62:bc:93:8c:a6: f2:17:be:64:e3:38:7a:1c:2d:60:8f:dc:d9:ae:15: dc:b4:1b:44:60:28:30:03:b6:1e:3a:cd:bf:0f:29: 82:5d:b0:b8:52:4f:49:fd:88:d1:69:8b:f9:41:4e: 3a:16:10:fe:83:7c:4c:cf:4b:9a:61:8c:44:cd:7c: fc:9f:7b:6d:17:32:47:c9:57:b7:ac:fc:f8:1c:98: 2d:0a:12:e1:52:b8:59:24:21:d5:94:16:ac:eb:6f: ce:8e:dd:88:f2:3a:2e:06:71:f6:1c:59:a2:c9:2c: af:4d:ba:33:a7:a9:8b:fb:91:1b:18:e3:11:f1:ef: 70:33:a7:fd:cb:0a:a3:e7:f6:07:d2:91:cd:46:89: 72:32:b7:7f:60:c7:d2:df:23:b8:8d:af:c5:6d:a5: e6:14:97:29:9c:9e:08:34:01:75:08:f2:07:93:32: ed:13:53:8c:8c:96:61:09:31:84:13:e3:4b:4a:ec: ed:3d:53:e2:fe:5f:21:3f:c9:01:37:11:61:68:57: 01:8d:ce:de:f7:32:28:3e:bd:7f:af:ff:10:7b:4c: da:a2:ee:dd:64:ba:c7:e0:a4:ff:9d:14:97:22:1c: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:27:35:E1:96:62:ED:67:27:A2:33:F1:19:2A:D8:76:97:35:01:C3 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:98:bc:0c:9e:aa:85:96:02:e6:64:e7:54:96:95:60:e7:71: 2e:20:7e:03:fd:cb:31:d5:f4:94:c1:80:9b:9b:a0:7d:bb:63: 48:30:a4:b4:f6:57:c6:bd:34:76:93:64:0b:2f:88:26:c6:dc: 98:71:f2:ce:14:6e:44:ab:4d:db:d5:77:09:50:9f:35:46:99: 99:97:1c:18:72:a5:18:fb:4d:bf:96:21:92:93:6b:de:fb:95: 2f:3c:3a:1f:9c:b7:ee:d9:3e:f4:62:6a:2a:b9:d6:89:5f:6c: 68:34:16:28:9e:62:a7:06:70:8a:67:49:8e:7e:9b:3f:b8:c0: 59:14:27:1c:55:13:ff:34:ea:f7:17:30:36:ac:3c:62:65:e9: 65:74:10:8c:1f:41:d5:a0:cb:bb:7d:bd:36:b5:90:a5:4c:28: 89:46:cb:b9:1e:d2:dd:67:30:a3:aa:51:93:c0:0d:25:eb:96: 0c:63:f3:ac:bb:45:a6:d3:2e:ab:85:a0:e5:2f:28:34:34:67: 24:ad:99:19:83:88:76:35:c6:29:59:fd:59:83:f4:07:72:fd: 0f:ec:e6:c8:1b:39:64:e1:f4:55:1a:a8:f9:a3:dd:d5:6c:7e: 0b:ae:fa:09:4b:de:64:8d:78:e6:95:ec:ad:ae:6e:0e:91:16: 86:54:cd:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjGtnnUPJhh4I6bbtQmdAVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUwODIwMDkwMTQzWhcNMjUwODIxMDkwMTQzWjAzMTEwLwYDVQQD EyhlNTI3MzVlMTk2NjJlZDY3MjdhMjMzZjExOTJhZDg3Njk3MzUwMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny4Tf6XpHXKh5ngLwjp/7FiwDQwa DRZuYryTjKbyF75k4zh6HC1gj9zZrhXctBtEYCgwA7YeOs2/DymCXbC4Uk9J/YjR aYv5QU46FhD+g3xMz0uaYYxEzXz8n3ttFzJHyVe3rPz4HJgtChLhUrhZJCHVlBas 62/Ojt2I8jouBnH2HFmiySyvTbozp6mL+5EbGOMR8e9wM6f9ywqj5/YH0pHNRoly Mrd/YMfS3yO4ja/FbaXmFJcpnJ4INAF1CPIHkzLtE1OMjJZhCTGEE+NLSuztPVPi /l8hP8kBNxFhaFcBjc7e9zIoPr1/r/8Qe0zaou7dZLrH4KT/nRSXIhx7WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUnNeGWYu1nJ6Iz8Rkq2HaXNQHDMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZi8DJ6q hZYC5mTnVJaVYOdxLiB+A/3LMdX0lMGAm5ugfbtjSDCktPZXxr00dpNkCy+IJsbc mHHyzhRuRKtN29V3CVCfNUaZmZccGHKlGPtNv5YhkpNr3vuVLzw6H5y37tk+9GJq KrnWiV9saDQWKJ5ipwZwimdJjn6bP7jAWRQnHFUT/zTq9xcwNqw8YmXpZXQQjB9B 1aDLu329NrWQpUwoiUbLuR7S3Wcwo6pRk8ANJeuWDGPzrLtFptMuq4Wg5S8oNDRn JK2ZGYOIdjXGKVn9WYP0B3L9D+zmyBs5ZOH0VRqo+aPd1Wx+C676CUveZI145pXs ra5uDpEWhlTNzA== -----END CERTIFICATE-----Generated at Wed Aug 20 15:30:54 2025 by rpki-client