$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: Cjv847aU+3J8kjZbppGZxK2a60uV3UqVEfD7E1Yg3d8= Subject key identifier: E3:39:4B:FB:0B:D1:5E:8A:23:6C:8C:0A:42:58:74:CC:4F:18:12:16 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 01A0BE792C3FB6C1BFB7CB3C1AF1EF8EAD8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 1BCD Signing time: Sun 20 Sep 2026 11:00:07 +0000 Manifest this update: Sun 20 Sep 2026 11:00:07 +0000 Manifest next update: Mon 21 Sep 2026 11:00:07 +0000 Files and hashes: 1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=) 2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=) 3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=) 4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=) 5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=) 6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=) 7: B2I17pBheusyOC7ocM9qlUDXh-I.roa (hash: GoFBrOWQVYy+Yfy42b64TQVPz8wmZmZuRwWMVQ1qgcQ=) 8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=) 9: CPP_xRW2A0WJfAuBSIiZNh9s2jk.roa (hash: RoRRyMaN6wn3ECV69tj01wk77kgumZZwueyOHn8JloA=) 10: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=) 11: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: ZuCWZFwl/ThnRAzWc3kYLxSIjoYuq8DGEN3+U3+koes=) 12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=) 13: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=) 14: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=) 15: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=) 16: Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa (hash: vftAEz3x91u1Hc7eUFmPCsiTfON2YdeF+0OPnpeRYCs=) 17: SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa (hash: iZdqEuhLKPZUUK2YbA/Np/er8XGu26nbBYz75XXIsXY=) 18: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=) 19: UiJd6YTZpwcRxL_MZ8S7bv8c500.roa (hash: 3gXPtJg8GpqC0O+77QNOsj779ZWJdMvL9obpa2jP6Jk=) 20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=) 21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=) 22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=) 23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=) 24: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=) 25: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=) 26: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=) 27: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=) 28: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=) 29: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=) 30: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=) 31: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=) 32: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=) 33: taiwWvpw25ppA7g9Q1XuWsE_s34.roa (hash: He6fUV5BcE5qyrTu375pyEkyqiLeAHLfPkSkUA8RSOI=) 34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=) 35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 11:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:79:2c:3f:b6:c1:bf:b7:cb:3c:1a:f1:ef:8e:ad:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Sep 20 11:00:07 2026 GMT Not After : Sep 21 11:00:07 2026 GMT Subject: CN=e3394bfb0bd15e8a236c8c0a425874cc4f181216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:01:62:e0:c4:22:07:e4:d3:12:ab:35:b8: a8:fc:21:42:04:bb:2e:c4:17:96:3b:84:ec:9c:51: dc:85:2d:ab:55:d5:a8:62:07:62:75:bf:a6:6e:f3: 1f:9b:e5:2d:45:38:d2:88:86:3b:94:4f:a1:dc:21: e0:42:1e:96:d2:f9:44:16:fa:4f:e3:87:b1:e1:e8: f7:ff:08:26:06:cc:3b:11:92:ae:fa:c6:e8:5d:1f: cd:6a:83:60:e3:94:71:5e:b5:33:d8:70:fa:85:5f: 94:91:34:99:a1:57:0e:8b:66:91:97:31:bb:ca:44: 03:92:07:a7:aa:9b:67:25:bf:fe:ce:dd:2f:86:c2: 09:d0:7b:bb:e5:35:60:43:e9:d3:83:3d:0e:9d:09: 76:8d:fa:9c:ad:22:9c:ae:41:4a:3a:0b:e0:27:3e: 4a:32:67:cf:49:48:b9:f4:2f:77:c1:48:1c:c8:9f: 63:45:fc:30:c8:b7:38:b4:70:e6:b9:96:f0:96:76: 2c:98:98:99:57:b2:f2:65:df:f3:7b:43:9c:13:ae: de:ba:ef:24:a4:00:2e:05:fe:af:52:46:c3:b4:e7: 78:fc:65:9a:bf:27:5b:6a:62:c2:e9:dd:a2:cb:81: 1f:6e:a6:08:1f:fb:0c:0c:e6:d0:0d:2e:1d:8f:14: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:4B:FB:0B:D1:5E:8A:23:6C:8C:0A:42:58:74:CC:4F:18:12:16 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ea:cf:f0:8c:23:90:e6:e1:a4:0b:47:e9:bf:2c:65:7e:6e: 0e:f2:14:19:68:76:73:3c:38:b4:87:9a:98:d0:8f:94:65:06: b7:fd:0d:3f:e3:fd:46:c4:e3:30:2f:3e:af:37:7e:a2:19:cb: 9f:48:80:2b:90:10:5c:b0:4c:a3:2e:e8:9a:b5:a7:17:ab:5c: 75:f8:51:74:1a:b1:50:09:93:55:18:82:2b:65:08:3b:79:09: dc:cd:20:86:85:34:b9:ae:33:f4:68:cd:5f:94:8f:41:25:d6: bd:9c:e0:f7:12:70:ea:98:ae:d1:d8:ce:75:1d:b9:87:98:06: 11:c7:44:fd:52:92:e5:f1:be:cb:d1:e7:de:af:22:6f:93:03: 5f:76:4d:9b:79:2d:ab:9a:7e:19:72:37:3c:42:7d:4e:31:f4: 1f:b8:96:d5:15:3c:98:52:d1:f1:c4:9b:37:ec:35:06:c4:c1: 7d:58:9e:86:01:b3:27:c1:96:fb:8e:ab:30:86:92:19:b6:e4: 10:b3:7e:b0:35:fc:0e:53:95:96:ed:c2:d2:66:1a:7b:50:21: d1:73:1c:c6:6d:d8:2a:6a:7b:2e:bc:1c:da:02:55:31:d3:56: a8:ff:0b:56:aa:da:61:75:64:a3:16:e2:c4:f6:b2:86:25:5f: ac:11:c9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+eSw/tsG/t8s8GvHvjq2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwOTIwMTEwMDA3WhcNMjYwOTIxMTEwMDA3WjAzMTEwLwYDVQQD EyhlMzM5NGJmYjBiZDE1ZThhMjM2YzhjMGE0MjU4NzRjYzRmMTgxMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC4BYuDEIgfk0xKrNbio/CFCBLsu xBeWO4TsnFHchS2rVdWoYgdidb+mbvMfm+UtRTjSiIY7lE+h3CHgQh6W0vlEFvpP 44ex4ej3/wgmBsw7EZKu+sboXR/NaoNg45RxXrUz2HD6hV+UkTSZoVcOi2aRlzG7 ykQDkgenqptnJb/+zt0vhsIJ0Hu75TVgQ+nTgz0OnQl2jfqcrSKcrkFKOgvgJz5K MmfPSUi59C93wUgcyJ9jRfwwyLc4tHDmuZbwlnYsmJiZV7LyZd/ze0OcE67euu8k pAAuBf6vUkbDtOd4/GWavydbamLC6d2iy4EfbqYIH/sMDObQDS4djxQQ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM5S/sL0V6KI2yMCkJYdMxPGBIWMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAberP8Iwj kObhpAtH6b8sZX5uDvIUGWh2czw4tIeamNCPlGUGt/0NP+P9RsTjMC8+rzd+ohnL n0iAK5AQXLBMoy7omrWnF6tcdfhRdBqxUAmTVRiCK2UIO3kJ3M0ghoU0ua4z9GjN X5SPQSXWvZzg9xJw6piu0djOdR25h5gGEcdE/VKS5fG+y9Hn3q8ib5MDX3ZNm3kt q5p+GXI3PEJ9TjH0H7iW1RU8mFLR8cSbN+w1BsTBfViehgGzJ8GW+46rMIaSGbbk ELN+sDX8DlOVlu3C0mYae1Ah0XMcxm3YKmp7Lrwc2gJVMdNWqP8LVqraYXVkoxbi xPayhiVfrBHJTw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:36:23 2026 by rpki-client