$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft File: GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json) Hash identifier: sWYyy8kHvSUwwKXtD+ybQU8JrGmxQB0J9fU3wYN/HcY= Subject key identifier: 4B:33:15:86:73:37:FA:A4:7F:A5:D6:0F:13:BD:65:07:16:9E:17:4A Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019A4EBD55B277565888BB9BDCE47392F785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft Manifest number: 08B7 Signing time: Tue 04 Nov 2025 12:00:22 +0000 Manifest this update: Tue 04 Nov 2025 12:00:22 +0000 Manifest next update: Wed 05 Nov 2025 12:00:22 +0000 Files and hashes: 1: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=) 2: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=) 3: ByxFjr3Toz51tTrCgyJcZ9ROTDc.roa (hash: MC65BQj3HwbXh+vS6odPDeaoBTY9byCzkoFUHQFoK8Q=) 4: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=) 5: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: emiQWwE8YzhZzkVI8LbVeiQzNLV8hMTb6ri/yzhKT3Q=) 6: I4lk-K4vzADVCX6yUHNgiwhmEpI.roa (hash: GGA95oFZZ8h6ELEvN/tBAFl4TyZuEFRFl/1TZUQ+VFk=) 7: MqSMr4SHl_2pRnKp2kxe3xf9us8.roa (hash: 35jRHvNXfyo825+J2hBOdYQpQKTNSs5hrfo5icVPFJY=) 8: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=) 9: PB1BeL4uZ3QF6gY3DHiXfq0456E.roa (hash: yBSu3OCxbV3AaOMypdJ28XmEmDKMRu8A8am1l/di17A=) 10: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=) 11: UEFTphc5r_X08VC4KXcQxiS2shg.roa (hash: 7dECbcqaLL4E/mWcxOkfhjwmM0MPjpjuitKlI7h4KmU=) 12: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=) 13: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (hash: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=) 14: c_ipsLRzEgE5DXpkiVFIk32gy4w.roa (hash: KkfKem9M1oAl2JCMI+RrdXiWdDVk/LRejyZbOohwDvU=) 15: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=) 16: izylkdHb8K1XiexJr07bxHzS70o.roa (hash: +WAoXiTTcbRjvuFJ+mdToEXjYNYtqJBIbb39TwPcmHE=) 17: qR3RdSbRRb7JtoPItdAFVcmOfm4.roa (hash: 0YUFu35h0q7ZeWw1RWxv5JvuYja078PVd4Tt+tY/B3M=) 18: t3YGdwn4XgpiLvqOT8pcW7Y62YU.roa (hash: 2/dq9okwdAS6VebH9nouSwmwpygS4x1CkX0kF3Wm31g=) 19: tlIT9EE8YpMp8nWSniI3miatB10.roa (hash: hMUJkDEHVtxIORugCsH16m3DT06lYDeH6qg/65YvGew=) 20: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=) 21: zl_FIWsQsU9TjHfL29rvbfo1pm8.roa (hash: plWBBKMU1eDxoN+f9JQHw2+baxWKk/tH9YtUnkFUaOw=) 22: zowYpDvX28H799XOtT_VcDDQ5qw.roa (hash: OCaDapxirUyOCbcAZjHU0KKvPPI3Jq1Fl4Zm8vwBoJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:55:b2:77:56:58:88:bb:9b:dc:e4:73:92:f7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Nov 4 12:00:22 2025 GMT Not After : Nov 5 12:00:22 2025 GMT Subject: CN=4b3315867337faa47fa5d60f13bd6507169e174a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:25:e6:ff:a1:87:ab:4d:49:e6:cd:67:86: bb:05:88:08:4b:fa:6b:79:b4:64:32:ea:10:41:95: ab:6b:1a:d1:47:b8:bb:ed:68:6e:2d:02:b7:b5:42: 20:28:c2:fb:27:4d:a6:ad:47:9a:98:e5:31:5e:6d: ec:8e:33:9b:e3:7f:bd:bb:e8:81:00:84:c1:d3:b0: 66:93:04:db:5d:79:fb:6f:97:c6:f8:0d:7d:4f:2f: 6e:82:ed:cc:22:5f:3b:8d:d5:16:f7:45:1f:4e:f0: 12:12:c7:68:49:08:12:7a:04:a0:87:fd:29:88:7e: f1:9d:56:0c:90:d1:c3:24:00:9c:24:f0:cd:c0:02: 57:d0:f9:6c:af:46:90:39:e1:4d:d1:a5:1a:87:55: 55:27:45:58:5a:8f:ec:4f:e5:7d:6e:81:d1:e0:b2: e6:66:c9:f6:50:7e:81:2a:f3:7f:24:3e:b9:ef:03: 8a:76:13:42:af:fe:cf:c9:4d:3e:13:b4:7e:1e:e5: c9:64:81:82:5f:b5:d5:4a:0e:22:ec:c3:23:33:2b: 8b:06:d0:fd:13:94:4f:40:c2:41:ed:df:37:e3:55: 2b:58:b3:f6:31:d7:24:67:10:f1:95:2f:cd:e5:5b: 8c:ea:26:bd:e7:95:69:3f:8b:8f:d3:f6:c1:70:d3: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:15:86:73:37:FA:A4:7F:A5:D6:0F:13:BD:65:07:16:9E:17:4A X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c8:73:b3:34:37:0c:91:f8:6c:c9:71:6f:d5:0f:7c:c6:9a: ec:21:c9:95:c1:2b:a4:aa:54:c6:6d:97:0d:a3:ab:f8:79:de: 99:d7:ac:ee:89:ed:01:2f:f9:b8:c7:2c:c4:e1:93:09:03:36: 88:0e:b9:66:02:3d:19:40:03:11:fa:05:7a:4f:87:d6:0d:a6: 85:d5:83:dd:72:49:c6:3d:22:33:6f:3a:16:3f:18:9b:bc:b1: b0:33:c0:e6:b7:0e:0e:be:e9:4a:29:c1:30:e4:8f:94:06:48: ff:bc:f1:65:21:f6:5f:3a:c4:53:a8:ab:34:43:95:36:45:8e: c9:3a:1d:60:46:25:b2:3f:07:79:71:04:c5:a0:33:c5:d5:58: e1:13:12:2e:1d:45:37:f9:45:f8:83:a9:16:9c:6b:10:e3:70: cb:d7:0d:2a:c0:e6:3b:37:11:b1:04:32:74:3d:b1:b1:be:a4: aa:17:24:d7:ca:bf:b3:56:cc:5c:7c:22:88:a6:55:f1:fd:ab: 53:09:90:8f:cd:54:5c:46:30:c3:80:08:47:dc:ac:8d:1b:c3: d4:50:e3:dd:07:be:71:57:78:06:16:d6:8b:55:0b:3f:f5:05: 48:ab:67:6f:89:30:79:a9:d4:ce:ba:3d:e1:4d:92:32:01:9c: 5f:a7:db:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvVWyd1ZYiLub3ORzkveFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUxMTA0MTIwMDIyWhcNMjUxMTA1MTIwMDIyWjAzMTEwLwYDVQQD Eyg0YjMzMTU4NjczMzdmYWE0N2ZhNWQ2MGYxM2JkNjUwNzE2OWUxNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXIl5v+hh6tNSebNZ4a7BYgIS/pr ebRkMuoQQZWraxrRR7i77WhuLQK3tUIgKML7J02mrUeamOUxXm3sjjOb43+9u+iB AITB07BmkwTbXXn7b5fG+A19Ty9ugu3MIl87jdUW90UfTvASEsdoSQgSegSgh/0p iH7xnVYMkNHDJACcJPDNwAJX0Plsr0aQOeFN0aUah1VVJ0VYWo/sT+V9boHR4LLm Zsn2UH6BKvN/JD657wOKdhNCr/7PyU0+E7R+HuXJZIGCX7XVSg4i7MMjMyuLBtD9 E5RPQMJB7d8341UrWLP2MdckZxDxlS/N5VuM6ia955VpP4uP0/bBcNN6JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEszFYZzN/qkf6XWDxO9ZQcWnhdKMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8hzszQ3 DJH4bMlxb9UPfMaa7CHJlcErpKpUxm2XDaOr+Hnemdes7ontAS/5uMcsxOGTCQM2 iA65ZgI9GUADEfoFek+H1g2mhdWD3XJJxj0iM286Fj8Ym7yxsDPA5rcODr7pSinB MOSPlAZI/7zxZSH2XzrEU6irNEOVNkWOyTodYEYlsj8HeXEExaAzxdVY4RMSLh1F N/lF+IOpFpxrEONwy9cNKsDmOzcRsQQydD2xsb6kqhck18q/s1bMXHwiiKZV8f2r UwmQj81UXEYww4AIR9ysjRvD1FDj3Qe+cVd4BhbWi1ULP/UFSKtnb4kweanUzro9 4U2SMgGcX6fbAg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:52:20 2025 by rpki-client