$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: Dsat0yHQZWn2zbx4AGoPS3K2/r8MrRXHfb7W/QI5y9Y= Subject key identifier: BD:82:E5:F8:33:38:F8:17:A7:D1:10:D5:2E:08:B0:5E:7A:AA:D4:EE Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0198752C1F187A0EB7651BE817A70C1B6739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 161A Signing time: Mon 04 Aug 2025 13:01:22 +0000 Manifest this update: Mon 04 Aug 2025 13:01:22 +0000 Manifest next update: Tue 05 Aug 2025 13:01:22 +0000 Files and hashes: 1: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=) 2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 3: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=) 4: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 5: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 6: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 7: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: ZsardNZBiXza9T8vx7YobassGdqEfbFr+PQKpeLdH10=) 8: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 9: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 10: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 11: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 12: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 13: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 14: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 15: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 16: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 17: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 18: wGyHk9gYeskzcCKJ7x0BfiaBGzc.roa (hash: pHjY0bV1PHR8z6NZPRJLMGDMEG7YK9lmXi37Gy7o7wA=) 19: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 20: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:2c:1f:18:7a:0e:b7:65:1b:e8:17:a7:0c:1b:67:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Aug 4 13:01:22 2025 GMT Not After : Aug 5 13:01:22 2025 GMT Subject: CN=bd82e5f83338f817a7d110d52e08b05e7aaad4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:c8:11:49:89:60:c2:da:da:9c:0e:f4:91: f8:84:7d:8d:57:8e:b8:38:2b:af:ac:5e:be:2f:a3: 6a:ed:1f:58:f4:a4:c2:4b:04:e5:c7:ae:66:13:eb: 37:95:d0:9d:55:ec:d7:71:b8:6e:f0:24:96:6e:88: 56:2c:f7:73:67:af:43:f9:8c:df:33:eb:06:3c:7c: 33:f3:a2:f9:f5:68:7a:1b:bc:dc:7e:41:0e:04:0f: d1:02:70:c3:b7:b0:1e:8d:f5:1b:1a:e9:12:57:2e: 24:86:cb:4c:80:56:6e:99:71:70:c2:1f:b2:bc:31: 85:72:d2:ed:c8:c6:34:5f:47:0a:53:74:7c:d4:ef: 42:9c:56:07:4e:5f:8e:a1:4c:86:66:de:9f:6e:b5: 20:3a:80:ae:50:47:b2:da:bd:f3:be:00:95:a6:45: d0:bb:1c:b3:07:04:36:17:66:5f:ee:06:b5:97:35: f1:12:55:27:5b:f2:b1:50:6f:8d:5b:51:4b:5d:bb: 3d:7e:7b:fc:6f:da:40:37:0e:47:bb:d6:45:a3:03: 2c:3b:1a:52:9f:e3:e0:69:96:ff:89:d2:93:5e:44: 86:29:35:5c:78:66:80:22:cd:21:11:9a:38:dd:4e: 3e:c9:c4:e8:a9:00:1e:79:60:35:e4:e7:58:5c:2e: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:E5:F8:33:38:F8:17:A7:D1:10:D5:2E:08:B0:5E:7A:AA:D4:EE X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:45:80:f5:e2:4e:f2:84:be:87:c7:52:57:2f:b9:a7:a7:4f: 72:11:61:d1:d3:1b:05:80:f6:0b:a9:67:34:da:ac:58:a9:78: 95:d2:4f:42:82:b8:8b:6a:75:e6:43:cc:08:ea:49:6f:6e:11: 3d:f1:98:a2:98:d9:a5:ea:85:9b:2d:f2:21:91:ce:4f:9e:7b: 50:e4:6d:40:b0:7c:5f:15:22:12:ec:81:29:3d:55:9a:71:16: 70:88:b3:1c:cf:ec:7f:20:ca:2f:cf:4e:72:64:1a:d3:f4:43: 1a:de:d9:dc:f5:cc:69:c9:24:a9:76:54:47:2d:1f:0d:3f:3e: e0:11:13:24:4a:5b:60:65:f0:52:90:7c:a3:15:1f:88:37:94: 58:e4:1e:c0:92:46:42:47:8c:0f:c8:17:4c:09:c6:22:ba:1c: 56:8f:4b:b0:a8:e9:ff:69:2e:91:04:dd:36:51:21:4a:24:1e: 88:34:c2:ce:89:51:a3:24:9e:08:8c:2a:a9:e1:21:dd:78:8b: ca:20:dd:85:6b:25:1d:04:e9:61:b3:0e:12:c2:e0:85:3c:2e: ed:51:e6:99:19:c0:4b:64:22:40:48:a0:57:dd:32:6a:1b:ac: 36:36:7b:da:8c:84:5b:e7:6e:0c:10:b9:a7:dc:50:91:36:75: 34:a4:72:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1LB8Yeg63ZRvoF6cMG2c5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwODA0MTMwMTIyWhcNMjUwODA1MTMwMTIyWjAzMTEwLwYDVQQD EyhiZDgyZTVmODMzMzhmODE3YTdkMTEwZDUyZTA4YjA1ZTdhYWFkNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXIEUmJYMLa2pwO9JH4hH2NV464 OCuvrF6+L6Nq7R9Y9KTCSwTlx65mE+s3ldCdVezXcbhu8CSWbohWLPdzZ69D+Yzf M+sGPHwz86L59Wh6G7zcfkEOBA/RAnDDt7AejfUbGukSVy4khstMgFZumXFwwh+y vDGFctLtyMY0X0cKU3R81O9CnFYHTl+OoUyGZt6fbrUgOoCuUEey2r3zvgCVpkXQ uxyzBwQ2F2Zf7ga1lzXxElUnW/KxUG+NW1FLXbs9fnv8b9pANw5Hu9ZFowMsOxpS n+PgaZb/idKTXkSGKTVceGaAIs0hEZo43U4+ycToqQAeeWA15OdYXC7VXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2C5fgzOPgXp9EQ1S4IsF56qtTuMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEWA9eJO 8oS+h8dSVy+5p6dPchFh0dMbBYD2C6lnNNqsWKl4ldJPQoK4i2p15kPMCOpJb24R PfGYopjZpeqFmy3yIZHOT557UORtQLB8XxUiEuyBKT1VmnEWcIizHM/sfyDKL89O cmQa0/RDGt7Z3PXMackkqXZURy0fDT8+4BETJEpbYGXwUpB8oxUfiDeUWOQewJJG QkeMD8gXTAnGIrocVo9LsKjp/2kukQTdNlEhSiQeiDTCzolRoySeCIwqqeEh3XiL yiDdhWslHQTpYbMOEsLghTwu7VHmmRnAS2QiQEigV90yahusNjZ72oyEW+duDBC5 p9xQkTZ1NKRyrg== -----END CERTIFICATE-----Generated at Mon Aug 4 19:17:35 2025 by rpki-client