$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: HFcx/qaJPs8lm4YG2gJmvyXBTuBLGu5zpD3Yt9R15hc= Subject key identifier: 93:8F:8F:CA:99:1A:B4:74:39:8D:F1:02:27:1B:74:CF:3C:6E:68:32 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019A51BE497E2CCFABC5B217178174B1CB60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0294 Signing time: Wed 05 Nov 2025 02:00:16 +0000 Manifest this update: Wed 05 Nov 2025 02:00:16 +0000 Manifest next update: Thu 06 Nov 2025 02:00:16 +0000 Files and hashes: 1: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (hash: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=) 2: BDQDuKOE6HSldICs31YDXppOWyI.roa (hash: Ox3x2X8HRRb+xIBqwpqttFpUUTKWFHSb3CgZaB3s/b4=) 3: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=) 4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: JB7TnS5lkSIeI0aS8HeQCDgpDcGuImIRnKElrb1uPcc=) 5: LsjKvJfqEFM9fPtcTMmtOAbaLZo.roa (hash: gN2HlTiepxEVT7qJh1ObS9vb0d8/kqy8eI9gfEpnRzk=) 6: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=) 7: ZI7vOrG6oAyS8YfJbBpZewDNGXQ.roa (hash: npYfXMzfry1oEZ/+7tKck9ENcVNUZ6jLLVA2nOAVsn8=) 8: lHoepiCpX7g78Ng_Suk_7keCehI.roa (hash: JX1GmHVZEyU6jv7xs+Gm8SluiSfi45q37cjpO1lCp5M=) 9: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (hash: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=) 10: qMKOIrCowr-evIF2TKMj48rb5ME.roa (hash: AsnmGDasDlnURHsWZv2Xw6xs4e4snEFqyNhGTwaLi9I=) 11: qnICZYiLbrGPlJAYqEcKvQ2CjqQ.roa (hash: HnPlRq2/eM18ZCRGQnjr87vL3s3tKW/ZrixlOUg/qKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:be:49:7e:2c:cf:ab:c5:b2:17:17:81:74:b1:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Nov 5 02:00:16 2025 GMT Not After : Nov 6 02:00:16 2025 GMT Subject: CN=938f8fca991ab474398df102271b74cf3c6e6832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:6d:07:3d:34:68:bb:93:10:14:c3:ad:d6: 3f:a6:7a:09:8f:28:a6:49:cf:d1:38:e4:78:e9:e9: 20:e5:f4:11:5f:4a:cb:b0:6f:18:79:1d:07:77:97: 8b:33:1f:56:0a:c3:19:0f:1e:e4:bc:79:ba:44:b7: 17:d9:66:18:5a:7a:c8:14:7a:f2:91:2e:18:0f:8e: 11:ec:c3:34:c2:2d:be:20:e8:af:dd:72:58:3c:fc: 51:fc:72:8e:7a:e1:9e:60:84:41:ca:23:1d:65:9f: 50:ea:9b:f2:98:73:21:3b:ac:df:83:c6:d7:df:9d: 68:34:4f:fd:f5:8a:6d:31:5f:86:99:57:c7:1e:72: 48:a1:2c:4e:98:81:20:3d:48:6d:85:dc:b2:a4:b4: b0:fe:83:11:9c:3c:a4:7e:0b:bf:24:51:c3:61:c4: bf:a0:c1:a3:cb:97:49:34:d8:f4:6d:78:76:b5:1a: ed:bf:74:29:87:19:f2:66:f9:a5:21:2f:4f:d8:96: a9:46:d0:dd:45:d6:16:12:25:63:23:69:f0:48:90: 20:48:42:50:9c:a5:1b:c7:cf:0b:36:ea:db:33:b4: ad:e8:fe:a4:e8:91:78:0b:b9:c9:b0:0a:59:65:24: a8:0f:be:cc:93:95:de:ad:97:ae:7d:19:2c:9d:c0: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8F:8F:CA:99:1A:B4:74:39:8D:F1:02:27:1B:74:CF:3C:6E:68:32 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:83:3f:3b:0d:7b:36:13:b8:c4:23:d5:4a:94:7a:92:fc:ad: 8b:36:00:d6:1c:96:57:bc:81:f7:a1:25:b1:16:8b:cf:7a:d1: d2:9a:d7:38:23:75:15:c0:e5:c8:72:52:ed:55:f4:46:5a:2a: ba:27:3e:8e:1b:5b:bc:a8:1c:ea:45:d0:11:e3:d9:fb:e2:2d: c0:0d:99:39:1c:99:f7:eb:d5:c5:ec:0e:f7:32:cf:cc:bb:92: 7d:e3:45:dd:a1:2b:fb:1e:27:11:b3:75:a5:3a:a2:fd:3a:e3: 10:c5:06:65:3c:13:14:8c:0d:de:94:e8:df:22:ae:44:a6:dd: e2:06:71:61:31:9c:14:bd:25:df:c2:0b:cb:2a:a7:6e:9f:48: 91:ba:79:e4:b7:c7:35:e0:57:42:50:cc:0c:54:ad:c4:7a:20: 1c:da:c8:3d:92:0d:5d:89:4f:63:0a:28:cb:fe:0b:32:ba:b7: 13:90:34:ad:d7:24:ea:27:55:a0:ab:41:eb:e2:c9:24:f8:63: 15:91:5e:d0:32:05:b5:55:9b:83:9c:95:fc:4d:fe:9e:73:ae: 52:bb:c1:c4:a1:6f:74:ac:c4:bd:5f:e9:9b:ea:d3:a5:4b:5c: f4:d6:28:23:7e:e0:97:f9:1e:c9:15:5b:cd:5e:bc:77:03:f6: b8:dd:d2:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRvkl+LM+rxbIXF4F0sctgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMTA1MDIwMDE2WhcNMjUxMTA2MDIwMDE2WjAzMTEwLwYDVQQD Eyg5MzhmOGZjYTk5MWFiNDc0Mzk4ZGYxMDIyNzFiNzRjZjNjNmU2ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0NtBz00aLuTEBTDrdY/pnoJjyim Sc/ROOR46ekg5fQRX0rLsG8YeR0Hd5eLMx9WCsMZDx7kvHm6RLcX2WYYWnrIFHry kS4YD44R7MM0wi2+IOiv3XJYPPxR/HKOeuGeYIRByiMdZZ9Q6pvymHMhO6zfg8bX 351oNE/99YptMV+GmVfHHnJIoSxOmIEgPUhthdyypLSw/oMRnDykfgu/JFHDYcS/ oMGjy5dJNNj0bXh2tRrtv3QphxnyZvmlIS9P2JapRtDdRdYWEiVjI2nwSJAgSEJQ nKUbx88LNurbM7St6P6k6JF4C7nJsApZZSSoD77Mk5XerZeufRksncAmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOPj8qZGrR0OY3xAicbdM88bmgyMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoM/Ow17 NhO4xCPVSpR6kvytizYA1hyWV7yB96ElsRaLz3rR0prXOCN1FcDlyHJS7VX0Rloq uic+jhtbvKgc6kXQEePZ++ItwA2ZORyZ9+vVxewO9zLPzLuSfeNF3aEr+x4nEbN1 pTqi/TrjEMUGZTwTFIwN3pTo3yKuRKbd4gZxYTGcFL0l38ILyyqnbp9Ikbp55LfH NeBXQlDMDFStxHogHNrIPZINXYlPYwooy/4LMrq3E5A0rdck6idVoKtB6+LJJPhj FZFe0DIFtVWbg5yV/E3+nnOuUrvBxKFvdKzEvV/pm+rTpUtc9NYoI37gl/keyRVb zV68dwP2uN3SNw== -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:26 2025 by rpki-client