$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: sHXvq+5/Q1VoqshOkjYfjTP3FfyasLrRySVhggRg/i8= Subject key identifier: 76:40:F2:9F:3B:0E:70:0D:87:43:BA:B5:9D:14:27:BF:3E:61:0C:11 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 0198D7A9547E04C9BDE94C8E27B3E7247574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 177A Signing time: Sat 23 Aug 2025 16:00:55 +0000 Manifest this update: Sat 23 Aug 2025 16:00:55 +0000 Manifest next update: Sun 24 Aug 2025 16:00:55 +0000 Files and hashes: 1: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=) 2: 1-WTtBjMSRrb4TAl7DySIOk7FY38.roa (hash: oHE7Yoyc0yluIv4batxOrntXR8UN3jcb6OoGC5ontY0=) 3: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=) 4: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=) 5: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=) 6: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=) 7: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=) 8: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (hash: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=) 9: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=) 10: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: XgDPQb8IHOE9f+b8th6BgIkgYt75aGIbmA353Jb0BpU=) 11: IQjgdPPcGOO-XEQSZxJ9maUCgq8.roa (hash: q4KGBpctUI3JXRA8plNcbzzfMeW2mF1ev2R4OL9CYXw=) 12: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=) 13: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=) 14: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=) 15: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=) 16: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=) 17: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=) 18: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=) 19: e0DnWMnFmTru3C2aoS2JyaRDfus.roa (hash: fqlHTmNWiwqv1CPk291HDWeErulj/q6A/K6RapftY6s=) 20: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (hash: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=) 21: ehdBxAB_s_oyu7mn2EhLWbwjh7U.roa (hash: 8ENm1zYmYI/0iufjtnkA4MrHv/iDYfzRKy9sjlfQWK8=) 22: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=) 23: luIF5RSE4UEeRnyDIACAMFK7ptU.roa (hash: prVzhZnIZRH6h67iHI2zHii5E9vi8C/WoWfLyxFMxMI=) 24: nwVznY1vTte-l8XB9qszVQuk5Ok.roa (hash: J9RM0fwCWpkVRTQQXMJ9b/yvLhlgyRqxXrtW1KNskP8=) 25: pnd3YojRi7DZYpXBXFp9kwat45Y.roa (hash: L/sfRRwnOa3q3wB7hNxXjSMDs2syDkgziLpoLHkufh4=) 26: q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa (hash: 5KGuyKJFaspfluOwOBDClndwqaUf6P40Y1cAOywOboE=) 27: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=) 28: sW_Pe5AiNGRK8YU3M9QNoMiFE0k.roa (hash: OI9qX7YhyRhGAGILyJE9MQsxymJKu7dbedIOFUkDFak=) 29: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=) 30: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=) 31: uFi7iyMEIVYvS-L73_9haxSZnn8.roa (hash: 3zKUq0nG1USJV63lkXwBel5mKVb32udbWBx7eANEv2g=) 32: uXGJLAkLx9YFzntYRYNs8t7Agh8.roa (hash: UoPuFA4VH9eXYN9tJa/5gFxX302v7sxeA3qQO26shzE=) 33: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=) 34: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=) 35: y5WqXGLU22u4aL4JCEBbxVrtOEY.roa (hash: z4DU3Lg8BtbgwUJ28ZcKpy28XNCoDU5QwBzlGJaolwE=) 36: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:a9:54:7e:04:c9:bd:e9:4c:8e:27:b3:e7:24:75:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Aug 23 16:00:55 2025 GMT Not After : Aug 24 16:00:55 2025 GMT Subject: CN=7640f29f3b0e700d8743bab59d1427bf3e610c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:b3:a0:54:11:98:28:5e:ac:06:2a:d2:7f: 96:49:8f:ca:fb:25:06:3e:e8:65:fd:25:85:9d:b0: a4:6f:b1:59:b8:82:14:6a:90:6b:11:4b:59:7f:b0: 1f:27:07:96:4b:aa:7c:1b:d5:00:17:ea:89:9a:1f: fc:7e:7e:1a:f9:58:a8:2a:8c:d8:62:90:7a:27:c9: c3:40:d1:8b:67:71:cb:8a:b6:7d:fb:6a:3d:a9:8b: c5:8f:de:1b:88:57:b3:f8:20:01:ff:75:0d:23:d4: ea:55:de:f3:8f:0f:7c:42:3e:47:72:eb:00:5b:de: 87:3a:54:de:d2:8a:5a:a1:0f:76:d4:6c:b7:c5:12: 88:d7:16:9d:9d:8c:1c:b5:dd:08:35:3f:a1:21:ca: 2c:92:f8:ab:b7:96:b9:0d:ca:1e:99:2a:1f:cc:7f: 5a:a4:a0:cd:7f:55:43:fe:9b:03:df:9b:db:a3:b9: ee:24:37:48:6b:8b:7e:0e:9c:f9:85:69:bb:47:3a: 30:b2:1c:fa:a4:1e:7d:91:0d:fa:41:c8:14:f4:93: 2e:c1:a8:a8:99:9d:81:13:89:23:18:1f:7a:e4:0b: 2d:e9:15:05:8b:10:12:f2:4f:6d:aa:a8:3c:ac:3c: 91:78:c2:9b:56:49:21:eb:a6:ca:b0:23:d8:81:c3: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:40:F2:9F:3B:0E:70:0D:87:43:BA:B5:9D:14:27:BF:3E:61:0C:11 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:95:12:67:4b:3c:c4:78:8e:76:e7:58:e0:cf:16:e4:12: e1:b0:fc:af:57:1c:42:44:85:fa:cb:4d:07:1f:c4:96:3c:cf: 69:0c:ae:a5:98:7d:14:58:85:a1:78:f3:ca:6d:a2:95:9a:ae: e2:5d:77:a3:e6:46:6f:d9:d2:e8:47:39:31:5d:86:9a:2a:9e: 64:d5:fa:f6:d5:95:b2:df:2e:6e:7b:24:ea:47:7a:64:d8:4b: 16:6b:de:f3:95:41:33:d3:66:83:91:ba:b0:46:7e:f9:04:37: f9:8d:ea:0e:ab:25:ca:5a:24:15:13:6f:29:42:e0:85:9f:78: 81:8d:6e:f1:4c:a0:39:49:98:27:29:4c:66:44:29:fe:20:62: 6c:dc:6e:c4:ac:84:fb:27:98:92:a0:37:b8:d0:92:33:7c:24: a3:4c:09:1b:8e:37:ea:d7:da:24:c7:98:3a:6e:9e:a4:b2:a1: 50:e0:ef:7d:4e:1a:e2:88:d9:ba:65:04:2c:5e:16:db:06:e7: 4a:7e:d3:d4:f3:4f:6a:2a:08:10:45:75:c8:9e:33:8c:ed:d3: 2f:69:45:92:8e:13:10:b7:b1:e8:87:bc:72:60:7a:18:bc:89: f2:d6:10:f7:ce:80:0e:81:72:20:ff:19:8b:9c:8a:94:cb:a3: 09:7e:1c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXqVR+BMm96UyOJ7PnJHV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUwODIzMTYwMDU1WhcNMjUwODI0MTYwMDU1WjAzMTEwLwYDVQQD Eyg3NjQwZjI5ZjNiMGU3MDBkODc0M2JhYjU5ZDE0MjdiZjNlNjEwYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF2zoFQRmCherAYq0n+WSY/K+yUG Puhl/SWFnbCkb7FZuIIUapBrEUtZf7AfJweWS6p8G9UAF+qJmh/8fn4a+VioKozY YpB6J8nDQNGLZ3HLirZ9+2o9qYvFj94biFez+CAB/3UNI9TqVd7zjw98Qj5HcusA W96HOlTe0opaoQ921Gy3xRKI1xadnYwctd0INT+hIcoskvirt5a5DcoemSofzH9a pKDNf1VD/psD35vbo7nuJDdIa4t+Dpz5hWm7Rzowshz6pB59kQ36QcgU9JMuwaio mZ2BE4kjGB965Ast6RUFixAS8k9tqqg8rDyReMKbVkkh66bKsCPYgcNUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZA8p87DnANh0O6tZ0UJ78+YQwRMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaeVEmdL PMR4jnbnWODPFuQS4bD8r1ccQkSF+stNBx/EljzPaQyupZh9FFiFoXjzym2ilZqu 4l13o+ZGb9nS6Ec5MV2GmiqeZNX69tWVst8ubnsk6kd6ZNhLFmve85VBM9Nmg5G6 sEZ++QQ3+Y3qDqslylokFRNvKULghZ94gY1u8UygOUmYJylMZkQp/iBibNxuxKyE +yeYkqA3uNCSM3wko0wJG4436tfaJMeYOm6epLKhUODvfU4a4ojZumUELF4W2wbn Sn7T1PNPaioIEEV1yJ4zjO3TL2lFko4TELex6Ie8cmB6GLyJ8tYQ986ADoFyIP8Z i5yKlMujCX4czw== -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:26 2025 by rpki-client