$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: opFSFrBpprw6m3GX0jGnpACBZPTV6jSuMaCJcMhzT0o= Subject key identifier: 0F:14:10:43:D3:25:D1:7D:61:5C:F7:02:D4:39:97:38:F5:41:11:1B Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019A503E076CE1E5DFD7258078BFC4137980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 1842 Signing time: Tue 04 Nov 2025 19:00:33 +0000 Manifest this update: Tue 04 Nov 2025 19:00:33 +0000 Manifest next update: Wed 05 Nov 2025 19:00:33 +0000 Files and hashes: 1: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=) 2: 1-WTtBjMSRrb4TAl7DySIOk7FY38.roa (hash: oHE7Yoyc0yluIv4batxOrntXR8UN3jcb6OoGC5ontY0=) 3: 326CMhRebacBUPQalSnj3YJYybQ.roa (hash: /NLGA7KLSgvqWOaQYDbgq4LbVYOg/ikPKnCGrwjkkCM=) 4: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=) 5: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=) 6: 6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa (hash: pSLhM/hRoovgEjgf+bz81N5PCn36Sbq5zBr5OXVmzxA=) 7: 9hwIee2iKDmXri9_fQ5eY0haCLM.roa (hash: G8lHAVoCj8lJj6Xnagqlp/q17S/Fw+kEY201Sx1VbeI=) 8: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=) 9: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=) 10: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=) 11: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (hash: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=) 12: Efu7W7ymCVkMFnSxFobAtH6rcks.roa (hash: NwX73vNbaowMG9DfSLk1rZ0g5R19GmDzCqOAJqdwlL8=) 13: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=) 14: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: IXDxCsPg2r2Vidl1ptyOjQEqO7umJC1H/LiamUlZYk8=) 15: GbxtRPQwfoQV6FvhVdB0jvr2vRA.roa (hash: sBV2MtYwt+QZhE+a75Mo+LifJiO4Kf/NRarvun19aJQ=) 16: LHFZ_8A1nB1N8zjUml3ZrGoW2eU.roa (hash: Oe+QcIqHf/AMmU3db+4I1/thFEAqfc4bB9KsP1qHtj8=) 17: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=) 18: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=) 19: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=) 20: Re37Ja-G7J0N9Ay2eCZ6qY8gvik.roa (hash: z5TsLpHb6KLUfsCQW7AKalpKIJngPwM3kIpXNuAM5qo=) 21: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=) 22: ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa (hash: EtvOvEJo6Cyf77jVld5ZTV+Rsw+jH9y+Q9afLM+AFLk=) 23: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=) 24: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=) 25: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=) 26: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (hash: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=) 27: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=) 28: lB0Y2eWw2fGl9D9NoUITBeh5ifY.roa (hash: cMwnQErfZS+RI9A5SCPbtMwp8CRjpQ5GBhjM47lkuFs=) 29: luIF5RSE4UEeRnyDIACAMFK7ptU.roa (hash: prVzhZnIZRH6h67iHI2zHii5E9vi8C/WoWfLyxFMxMI=) 30: nwVznY1vTte-l8XB9qszVQuk5Ok.roa (hash: J9RM0fwCWpkVRTQQXMJ9b/yvLhlgyRqxXrtW1KNskP8=) 31: q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa (hash: 5KGuyKJFaspfluOwOBDClndwqaUf6P40Y1cAOywOboE=) 32: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=) 33: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=) 34: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=) 35: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=) 36: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=) 37: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3e:07:6c:e1:e5:df:d7:25:80:78:bf:c4:13:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Nov 4 19:00:33 2025 GMT Not After : Nov 5 19:00:33 2025 GMT Subject: CN=0f141043d325d17d615cf702d4399738f541111b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:dc:3c:62:11:ce:e4:f2:42:08:e4:88:e5: 43:b6:4a:6c:11:d3:d8:0d:90:a0:ef:67:91:09:8e: a8:43:e4:4e:26:d5:4c:bd:f4:05:e2:0c:fd:77:2d: ca:02:12:26:83:c1:f4:a2:13:54:89:df:b5:a9:f2: 0b:d0:31:2d:6a:25:89:20:04:c7:df:c1:a3:06:cf: 12:59:69:24:8d:d7:20:ac:43:b2:1f:c5:be:c6:74: 9a:a7:2d:81:b7:5f:c2:21:f5:64:c9:df:16:50:d9: 24:bf:70:95:83:b5:1f:9b:77:99:56:6c:24:5e:dd: cb:41:d5:92:bf:68:8d:10:0f:78:b2:55:2b:aa:79: f1:30:74:a2:13:0a:1e:35:65:16:df:ee:47:f2:ad: 47:67:aa:12:06:f8:f4:4f:de:68:34:4c:43:36:6c: 53:80:99:4b:ba:a9:aa:04:b7:08:5b:4e:2c:cb:da: 7c:d9:8d:59:b8:f3:a9:32:e5:af:de:ae:a4:8d:0b: 09:6f:92:c2:cf:36:2a:99:20:da:22:4d:98:db:ae: 10:d0:c7:94:3c:20:be:2d:76:2f:b0:09:89:4e:d8: ab:3c:60:07:73:cc:7a:50:f0:f5:0a:6b:65:93:ad: ec:a3:04:af:92:b6:54:89:06:1d:e5:2a:c6:2b:17: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:14:10:43:D3:25:D1:7D:61:5C:F7:02:D4:39:97:38:F5:41:11:1B X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:0d:6c:8f:6c:93:f4:6a:45:b4:70:12:16:77:27:29:95:c5: 14:e5:42:03:95:97:5c:bd:9d:08:a1:6d:91:8d:03:40:32:fc: 61:ea:f2:bb:aa:f5:d3:42:d4:cf:20:12:ba:b4:cc:17:e3:27: 10:a5:ff:f2:91:9b:b5:1a:2e:af:04:5e:73:31:ef:22:46:de: 2e:5f:6b:9c:53:d3:c0:f4:e5:2a:77:a8:f1:17:f2:92:2d:8f: 79:5b:8b:91:c0:de:df:44:e1:a0:85:38:fe:b5:b6:12:bf:e4: fb:96:e1:7a:8b:e6:b4:a7:e9:19:3e:3f:23:05:06:e9:95:fa: 00:36:76:3a:29:5f:4d:a8:ed:94:af:5b:e9:a1:e6:76:af:cd: 6f:a5:12:64:6a:38:7f:53:8d:a2:34:84:88:53:b4:e4:65:b9: 78:1d:20:9b:c7:41:61:b0:e3:7e:e6:d9:8e:6b:dd:c8:8b:ed: 8c:c4:0c:1e:67:9e:b8:4d:14:2e:a2:78:6a:f5:16:e8:fb:0f: 48:83:56:81:98:32:2e:1e:36:41:bc:97:e9:4c:e9:e7:be:4e: 66:67:25:e6:f7:e9:7c:6a:b0:94:2b:f3:33:19:98:66:e1:ba: 13:3a:c7:80:1a:f2:fe:6d:71:83:8c:ce:c2:f7:ec:ae:b6:cc: bb:99:b8:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPgds4eXf1yWAeL/EE3mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMTA0MTkwMDMzWhcNMjUxMTA1MTkwMDMzWjAzMTEwLwYDVQQD EygwZjE0MTA0M2QzMjVkMTdkNjE1Y2Y3MDJkNDM5OTczOGY1NDExMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTvcPGIRzuTyQgjkiOVDtkpsEdPY DZCg72eRCY6oQ+ROJtVMvfQF4gz9dy3KAhImg8H0ohNUid+1qfIL0DEtaiWJIATH 38GjBs8SWWkkjdcgrEOyH8W+xnSapy2Bt1/CIfVkyd8WUNkkv3CVg7Ufm3eZVmwk Xt3LQdWSv2iNEA94slUrqnnxMHSiEwoeNWUW3+5H8q1HZ6oSBvj0T95oNExDNmxT gJlLuqmqBLcIW04sy9p82Y1ZuPOpMuWv3q6kjQsJb5LCzzYqmSDaIk2Y264Q0MeU PCC+LXYvsAmJTtirPGAHc8x6UPD1Cmtlk63sowSvkrZUiQYd5SrGKxfUuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8UEEPTJdF9YVz3AtQ5lzj1QREbMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuw1sj2yT 9GpFtHASFncnKZXFFOVCA5WXXL2dCKFtkY0DQDL8Yeryu6r100LUzyASurTMF+Mn EKX/8pGbtRourwReczHvIkbeLl9rnFPTwPTlKneo8Rfyki2PeVuLkcDe30ThoIU4 /rW2Er/k+5bheovmtKfpGT4/IwUG6ZX6ADZ2OilfTajtlK9b6aHmdq/Nb6USZGo4 f1ONojSEiFO05GW5eB0gm8dBYbDjfubZjmvdyIvtjMQMHmeeuE0ULqJ4avUW6PsP SINWgZgyLh42QbyX6Uzp575OZmcl5vfpfGqwlCvzMxmYZuG6EzrHgBry/m1xg4zO wvfsrrbMu5m4FQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:57 2025 by rpki-client