$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: b2pftFA7JXAcuu8GUFVYZ1uynJtYnzXo7I0q+d/L5VM= Subject key identifier: 0E:EA:82:08:A1:C7:66:FA:08:E2:17:83:3F:2E:75:7B:63:0C:50:54 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 0199FCC680F02F4BF380E56B038737677DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0268 Signing time: Sun 19 Oct 2025 14:01:31 +0000 Manifest this update: Sun 19 Oct 2025 14:01:31 +0000 Manifest next update: Mon 20 Oct 2025 14:01:31 +0000 Files and hashes: 1: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (hash: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=) 2: BDQDuKOE6HSldICs31YDXppOWyI.roa (hash: Ox3x2X8HRRb+xIBqwpqttFpUUTKWFHSb3CgZaB3s/b4=) 3: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=) 4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: GZIchM6gwLt/dK3J1zraQBG/XA0qJDnNPvx8+rvw/wA=) 5: LsjKvJfqEFM9fPtcTMmtOAbaLZo.roa (hash: gN2HlTiepxEVT7qJh1ObS9vb0d8/kqy8eI9gfEpnRzk=) 6: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=) 7: ZI7vOrG6oAyS8YfJbBpZewDNGXQ.roa (hash: npYfXMzfry1oEZ/+7tKck9ENcVNUZ6jLLVA2nOAVsn8=) 8: lHoepiCpX7g78Ng_Suk_7keCehI.roa (hash: JX1GmHVZEyU6jv7xs+Gm8SluiSfi45q37cjpO1lCp5M=) 9: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (hash: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=) 10: qMKOIrCowr-evIF2TKMj48rb5ME.roa (hash: AsnmGDasDlnURHsWZv2Xw6xs4e4snEFqyNhGTwaLi9I=) 11: qnICZYiLbrGPlJAYqEcKvQ2CjqQ.roa (hash: HnPlRq2/eM18ZCRGQnjr87vL3s3tKW/ZrixlOUg/qKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:80:f0:2f:4b:f3:80:e5:6b:03:87:37:67:7d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Oct 19 14:01:31 2025 GMT Not After : Oct 20 14:01:31 2025 GMT Subject: CN=0eea8208a1c766fa08e217833f2e757b630c5054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:8e:b5:89:9d:b8:b6:78:f1:57:c8:23:3e: 66:76:88:27:71:19:64:3d:65:a1:f4:53:1f:32:56: 08:ea:0a:92:26:31:d7:4d:0e:df:25:c9:43:30:2c: c8:ad:86:1f:af:77:00:84:3b:3f:49:55:ab:42:68: a5:58:55:47:11:7f:3a:7a:f2:f8:40:88:57:85:0a: af:d8:fc:87:66:29:0c:d1:d0:e7:38:5d:48:23:7e: 1d:e9:b5:f8:cd:25:35:46:82:64:8e:a3:cd:f7:5e: 78:f2:cb:fc:bf:70:e4:9b:5f:32:b3:dc:e4:b5:95: 82:31:a0:35:91:76:b5:ff:08:cf:f9:23:05:3c:46: 9c:c5:55:e2:92:49:23:eb:89:75:2a:6e:8e:2e:5b: 14:e3:10:a5:f4:58:c6:aa:ef:bb:b9:23:91:46:e8: 09:a1:c5:52:93:fd:59:ed:2b:9d:e3:e8:64:b4:20: db:c3:ee:8e:7b:e0:1c:f1:fd:e5:1e:57:7a:5d:c3: 56:be:1d:4a:76:fe:2e:60:52:3c:d9:27:99:70:13: 59:9e:aa:dc:6a:9b:c3:04:26:84:7c:4c:5c:47:30: 83:ea:c4:d1:83:18:f2:38:aa:94:e2:b0:b4:2d:41: b0:5d:0a:c4:d9:d3:d6:71:59:25:34:d8:cb:82:e9: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EA:82:08:A1:C7:66:FA:08:E2:17:83:3F:2E:75:7B:63:0C:50:54 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:12:68:f9:49:f3:4d:5d:15:87:d7:ed:74:ae:e1:64:7a:99: 67:7e:c1:10:0b:6e:2b:54:cf:b2:bf:52:5e:16:04:44:50:77: 7e:0d:d7:37:aa:17:73:4d:cf:4e:1e:f3:2a:a1:2b:0a:70:3d: f7:40:0b:6c:40:29:52:29:66:af:98:4e:a4:78:33:21:d5:3a: 1b:99:55:4f:2d:c6:7d:e8:74:b7:72:d3:46:d2:68:27:89:e2: dd:d6:83:02:ca:5d:aa:79:f5:52:b9:0b:57:0e:55:2a:ec:3f: 73:aa:5a:59:a8:1f:63:54:f4:64:e4:af:06:a9:c0:17:3e:84: 06:0f:66:51:e9:d4:2c:8b:29:e0:2b:39:7b:88:4d:2e:89:74: c9:1d:6c:98:4e:9a:0f:77:5d:44:22:68:33:38:0b:d4:a0:7c: 82:13:bd:2f:e4:fb:0b:c1:ca:b4:3e:f0:dd:52:43:63:b5:b1: 2c:6b:e5:73:fa:30:b5:0a:e9:81:f2:89:3a:be:27:3a:48:2b: f5:65:62:46:65:de:77:0b:e3:73:34:41:9e:e9:fd:07:f7:1e: 4c:f2:a4:b0:c5:f8:74:6e:8c:c1:65:e6:7f:6c:5b:af:90:df: c7:51:47:fb:a9:b4:89:6c:2e:24:ed:22:27:f8:65:f0:0a:b3: 21:2c:c6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xoDwL0vzgOVrA4c3Z32jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMDE5MTQwMTMxWhcNMjUxMDIwMTQwMTMxWjAzMTEwLwYDVQQD EygwZWVhODIwOGExYzc2NmZhMDhlMjE3ODMzZjJlNzU3YjYzMGM1MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4WOtYmduLZ48VfIIz5mdogncRlk PWWh9FMfMlYI6gqSJjHXTQ7fJclDMCzIrYYfr3cAhDs/SVWrQmilWFVHEX86evL4 QIhXhQqv2PyHZikM0dDnOF1II34d6bX4zSU1RoJkjqPN91548sv8v3Dkm18ys9zk tZWCMaA1kXa1/wjP+SMFPEacxVXikkkj64l1Km6OLlsU4xCl9FjGqu+7uSORRugJ ocVSk/1Z7Sud4+hktCDbw+6Oe+Ac8f3lHld6XcNWvh1Kdv4uYFI82SeZcBNZnqrc apvDBCaEfExcRzCD6sTRgxjyOKqU4rC0LUGwXQrE2dPWcVklNNjLgukYBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7qggihx2b6COIXgz8udXtjDFBUMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhJo+Unz TV0Vh9ftdK7hZHqZZ37BEAtuK1TPsr9SXhYERFB3fg3XN6oXc03PTh7zKqErCnA9 90ALbEApUilmr5hOpHgzIdU6G5lVTy3Gfeh0t3LTRtJoJ4ni3daDAspdqnn1UrkL Vw5VKuw/c6paWagfY1T0ZOSvBqnAFz6EBg9mUenULIsp4Cs5e4hNLol0yR1smE6a D3ddRCJoMzgL1KB8ghO9L+T7C8HKtD7w3VJDY7WxLGvlc/owtQrpgfKJOr4nOkgr 9WViRmXedwvjczRBnun9B/ceTPKksMX4dG6MwWXmf2xbr5Dfx1FH+6m0iWwuJO0i J/hl8AqzISzGdg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:50:17 2025 by rpki-client