$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft File: G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json) Hash identifier: nr0X+KuAd7W/9iRG0Mg97nNql99+36oKwj3nr4NV2wk= Subject key identifier: 18:15:02:2A:B9:0D:C4:5E:80:01:78:13:48:CE:ED:0F:C6:C9:D8:9B Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019A00A35AA6FD0679C209A6F58811DB226D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft Manifest number: 0B1C Signing time: Mon 20 Oct 2025 08:01:36 +0000 Manifest this update: Mon 20 Oct 2025 08:01:36 +0000 Manifest next update: Tue 21 Oct 2025 08:01:36 +0000 Files and hashes: 1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=) 2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=) 3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=) 4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=) 5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: Bs4BdyWsclHro+LkJlRY9Z4AwhxcTJfBYvK18Tdiqpc=) 6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=) 7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=) 8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=) 9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=) 10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=) 11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=) 12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=) 13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=) 14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=) 15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=) 16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=) 17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=) 18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=) 19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=) 20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=) 21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=) 22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=) 23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:a3:5a:a6:fd:06:79:c2:09:a6:f5:88:11:db:22:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Oct 20 08:01:36 2025 GMT Not After : Oct 21 08:01:36 2025 GMT Subject: CN=1815022ab90dc45e8001781348ceed0fc6c9d89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:df:0f:34:61:d9:a6:01:d9:7f:75:02:e4: 59:ef:bb:eb:b8:0e:8d:b3:da:47:49:36:8d:a8:63: a2:50:62:a4:ae:58:4a:44:2d:ce:75:74:79:86:eb: 16:f4:4a:b9:fd:e4:73:c9:63:f2:cf:dc:b6:eb:dc: 34:e9:e0:b5:96:e8:e8:9c:0b:df:9a:d9:a9:ac:cb: 68:fe:d3:5f:10:50:c7:fb:fe:1e:f5:9f:06:1b:b3: 65:c9:f8:6c:14:a7:53:92:a3:39:c7:e9:ea:d6:3c: 4e:ef:1b:c5:e1:e3:31:28:fb:8f:0b:a6:e7:10:af: d0:24:1b:3b:4f:07:d7:17:c5:98:af:cd:11:42:96: ba:dd:a8:a0:37:e3:7a:92:a8:cb:95:71:28:d0:04: e8:53:df:c2:85:8f:ec:d4:9a:d0:8b:0e:aa:eb:31: 4c:b2:6b:53:92:c8:0e:74:8c:95:1b:45:36:b7:82: 61:69:ca:47:a8:ba:0e:96:6a:6b:5b:c2:f3:ce:3a: 21:0d:6d:62:ce:ac:cd:36:3c:23:a8:df:ab:cc:75: 2b:7d:3c:21:94:6e:e6:71:4e:8c:48:5f:fd:53:2c: 59:f2:0e:78:e8:ce:a4:6f:c6:a2:55:ac:bc:1c:d0: 9f:a8:29:90:d5:0c:ee:de:6d:3f:91:72:ef:a5:88: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:15:02:2A:B9:0D:C4:5E:80:01:78:13:48:CE:ED:0F:C6:C9:D8:9B X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b4:9f:2e:b1:4b:3e:78:66:1d:a7:b8:29:fd:21:e8:78:1b: b0:d9:74:1b:bf:58:fe:4a:4a:3d:84:97:ec:ef:d6:97:83:7d: 44:17:d7:fa:81:71:2b:e7:e7:06:fb:fc:2c:00:09:a0:9a:a3: 0d:7a:0d:6a:92:48:5f:48:3d:00:90:c5:1e:46:07:60:ed:f0: d0:75:e7:64:eb:6d:5f:62:20:2b:c7:42:82:c5:b7:e7:3a:bc: 88:9a:9c:fe:f2:9a:aa:7f:0c:33:4b:ad:f7:82:fc:24:03:21: 9c:e9:36:a6:fb:f5:dd:67:17:46:c4:fa:99:ca:24:84:f0:3f: 36:5d:b6:b6:fc:e6:a3:a6:f2:8f:ae:55:8e:26:a8:cf:48:ee: 7a:a4:30:c5:64:52:c0:11:59:93:b5:5f:c8:16:05:f8:1a:72: 9c:c0:bc:1c:b2:ee:9a:14:ad:21:f4:82:88:0c:1a:a0:62:36: 11:08:a2:55:1c:c2:01:67:95:57:46:c1:3b:12:22:1b:89:36: e1:02:eb:59:f2:3e:85:01:05:ab:95:7f:57:dd:da:23:c6:ed: 6b:6c:ad:6b:a2:c6:de:9e:61:99:de:3c:73:c6:2f:6f:dc:e4: 70:5e:2a:85:22:7b:fe:30:98:29:5e:a3:cd:da:fe:5e:57:79: 40:4a:67:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAo1qm/QZ5wgmm9YgR2yJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjUxMDIwMDgwMTM2WhcNMjUxMDIxMDgwMTM2WjAzMTEwLwYDVQQD EygxODE1MDIyYWI5MGRjNDVlODAwMTc4MTM0OGNlZWQwZmM2YzlkODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytnfDzRh2aYB2X91AuRZ77vruA6N s9pHSTaNqGOiUGKkrlhKRC3OdXR5husW9Eq5/eRzyWPyz9y269w06eC1lujonAvf mtmprMto/tNfEFDH+/4e9Z8GG7NlyfhsFKdTkqM5x+nq1jxO7xvF4eMxKPuPC6bn EK/QJBs7TwfXF8WYr80RQpa63aigN+N6kqjLlXEo0AToU9/ChY/s1JrQiw6q6zFM smtTksgOdIyVG0U2t4JhacpHqLoOlmprW8LzzjohDW1izqzNNjwjqN+rzHUrfTwh lG7mcU6MSF/9UyxZ8g546M6kb8aiVay8HNCfqCmQ1Qzu3m0/kXLvpYix+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgVAiq5DcRegAF4E0jO7Q/GydibMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbSfLrFL PnhmHae4Kf0h6HgbsNl0G79Y/kpKPYSX7O/Wl4N9RBfX+oFxK+fnBvv8LAAJoJqj DXoNapJIX0g9AJDFHkYHYO3w0HXnZOttX2IgK8dCgsW35zq8iJqc/vKaqn8MM0ut 94L8JAMhnOk2pvv13WcXRsT6mcokhPA/Nl22tvzmo6byj65Vjiaoz0jueqQwxWRS wBFZk7VfyBYF+BpynMC8HLLumhStIfSCiAwaoGI2EQiiVRzCAWeVV0bBOxIiG4k2 4QLrWfI+hQEFq5V/V93aI8bta2yta6LG3p5hmd48c8Yvb9zkcF4qhSJ7/jCYKV6j zdr+Xld5QEpngA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:31 2025 by rpki-client