$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: HYjdxBhKtoUEaE9u+oW88wVWfNG7PCkL+RxGp5FUgR4= Subject key identifier: 5E:37:18:53:DA:4F:AF:B3:CC:6E:92:A7:F8:13:72:9D:B2:EC:CF:03 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 0199FDD8E119899602269F8C2AE51CA309E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 10E7 Signing time: Sun 19 Oct 2025 19:01:12 +0000 Manifest this update: Sun 19 Oct 2025 19:01:12 +0000 Manifest next update: Mon 20 Oct 2025 19:01:12 +0000 Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=) 2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=) 3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=) 4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=) 5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=) 6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=) 7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=) 8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=) 9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=) 10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=) 11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: mdGN+FxrwR6KQeOyx/Pcx/FUOIjABairc7ZOd93KS0Y=) 12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=) 13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=) 14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=) 15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=) 16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d8:e1:19:89:96:02:26:9f:8c:2a:e5:1c:a3:09:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Oct 19 19:01:12 2025 GMT Not After : Oct 20 19:01:12 2025 GMT Subject: CN=5e371853da4fafb3cc6e92a7f813729db2eccf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:8b:ca:a7:cf:f9:90:3b:bf:78:b3:a1:3c: 80:e3:44:29:d9:b1:d5:3e:ee:fd:d4:49:c5:b0:a8: 82:83:2f:25:83:98:1a:ec:04:77:46:8b:07:fd:35: a1:08:24:a9:ae:68:c0:ea:5d:6c:e9:bb:77:a6:ca: 37:6f:c4:ff:cb:bb:7b:c8:66:31:36:f5:71:58:3c: 6a:1f:f9:4c:9b:c0:a6:a0:f3:c8:fc:2f:b3:5d:91: 8a:42:35:04:1d:1d:65:09:e9:96:ee:33:5f:36:c2: 39:d7:59:14:04:48:b2:0b:59:17:40:cf:79:ae:d4: 1d:cb:29:49:c3:64:04:bc:3e:30:b8:70:b2:e7:ab: 54:da:bc:c3:06:06:e7:c6:bd:3a:a0:9a:2d:54:f8: 9c:bd:fb:47:fd:ed:95:37:c9:ec:b7:d4:43:f2:46: 94:ca:42:97:e5:0d:76:50:c4:ea:a5:b2:81:e9:ce: 13:b2:1b:62:c4:2d:1e:f6:84:3b:02:55:2f:7f:e7: 83:17:00:8a:61:8f:0b:89:a2:b7:54:25:08:fa:4b: c3:b0:3e:c9:2f:91:4d:5b:41:b8:dd:1b:93:7f:a2: b1:86:1e:d4:ff:95:a0:fb:1b:69:89:a1:ee:83:49: ec:84:7f:8f:85:31:b0:b4:12:a3:14:e2:a3:0e:57: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:37:18:53:DA:4F:AF:B3:CC:6E:92:A7:F8:13:72:9D:B2:EC:CF:03 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:8b:8e:b9:95:1a:3f:ea:b7:4c:f2:f8:31:a5:d5:6e:c7:19: 9b:7a:47:8b:13:70:0f:70:aa:87:9a:13:c9:17:d4:63:93:a0: 29:fc:a3:ec:b6:51:20:86:bf:23:89:40:b1:1a:6c:94:82:6b: c8:23:8e:87:c1:c7:93:1e:4b:9c:d2:39:7c:6d:d5:86:de:da: d6:2b:3a:79:bf:66:df:5b:a1:5c:74:0f:e1:91:bb:6f:57:54: 50:01:a9:ec:8c:1a:89:1a:ab:70:58:66:39:55:34:8f:c1:fc: 44:39:3c:a4:25:56:50:89:fc:5e:18:3a:ca:4e:ed:3f:98:fc: 46:33:dd:05:61:24:2d:df:53:e6:0b:b1:f5:18:18:0f:f6:c1: ea:ff:5b:a8:7c:3f:5b:43:6e:8c:2f:60:b0:94:89:5b:6b:42: eb:79:2e:47:9f:fc:a8:0d:5b:d0:ed:51:d1:38:02:36:0a:c7: 8b:7a:0e:37:a3:d9:df:7e:c6:a7:82:17:c1:5e:d0:b9:3d:4d: c5:87:be:1a:3c:30:c9:66:37:d1:1a:b4:ef:89:95:d4:ae:82: 15:ba:24:3b:ad:8d:7e:3f:60:55:d1:07:c2:4b:48:c1:a6:ce: 1f:0f:df:5b:51:e5:60:e4:e0:a1:13:70:71:93:4e:4a:4a:10: 9c:a5:ab:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92OEZiZYCJp+MKuUcownpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUxMDE5MTkwMTEyWhcNMjUxMDIwMTkwMTEyWjAzMTEwLwYDVQQD Eyg1ZTM3MTg1M2RhNGZhZmIzY2M2ZTkyYTdmODEzNzI5ZGIyZWNjZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC6LyqfP+ZA7v3izoTyA40Qp2bHV Pu791EnFsKiCgy8lg5ga7AR3RosH/TWhCCSprmjA6l1s6bt3pso3b8T/y7t7yGYx NvVxWDxqH/lMm8CmoPPI/C+zXZGKQjUEHR1lCemW7jNfNsI511kUBEiyC1kXQM95 rtQdyylJw2QEvD4wuHCy56tU2rzDBgbnxr06oJotVPicvftH/e2VN8nst9RD8kaU ykKX5Q12UMTqpbKB6c4TshtixC0e9oQ7AlUvf+eDFwCKYY8LiaK3VCUI+kvDsD7J L5FNW0G43RuTf6Kxhh7U/5Wg+xtpiaHug0nshH+PhTGwtBKjFOKjDlf1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF43GFPaT6+zzG6Sp/gTcp2y7M8DMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3YuOuZUa P+q3TPL4MaXVbscZm3pHixNwD3Cqh5oTyRfUY5OgKfyj7LZRIIa/I4lAsRpslIJr yCOOh8HHkx5LnNI5fG3Vht7a1is6eb9m31uhXHQP4ZG7b1dUUAGp7IwaiRqrcFhm OVU0j8H8RDk8pCVWUIn8Xhg6yk7tP5j8RjPdBWEkLd9T5gux9RgYD/bB6v9bqHw/ W0NujC9gsJSJW2tC63kuR5/8qA1b0O1R0TgCNgrHi3oON6PZ337Gp4IXwV7QuT1N xYe+GjwwyWY30Rq074mV1K6CFbokO62Nfj9gVdEHwktIwabOHw/fW1HlYOTgoRNw cZNOSkoQnKWrPg== -----END CERTIFICATE-----Generated at Sun Oct 19 23:48:56 2025 by rpki-client