$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: pXnyDiJ9pX0uDzxHaqdIWHfL1PGezlv4OcDSa0AHLLg= Subject key identifier: 10:9B:B8:E5:BB:C3:2E:07:4F:C2:C5:1D:48:6B:31:59:34:15:6C:27 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019D2996E24AAA2EB4B202308161675295F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 19D2 Signing time: Thu 26 Mar 2026 10:00:47 +0000 Manifest this update: Thu 26 Mar 2026 10:00:47 +0000 Manifest next update: Fri 27 Mar 2026 10:00:47 +0000 Files and hashes: 1: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=) 2: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=) 3: 2ATxWC0LpwAfJfvHqDtwuI8bNls.roa (hash: Bm5IQQ4PBSwytK8rm4bHoKQ0+XdV1o2+vJdyCZLCHhU=) 4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=) 5: 44zPPgoQLefQJI3vtkJc6EwhCow.roa (hash: bzc7Uz3fgjL7VzDC/dK+5179ZuptpvJrsvVm26txhZQ=) 6: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=) 7: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=) 8: BI9M--P6yLGe4jvwVFojo0TL6DI.roa (hash: 5Hp6U9vwmy3Qj1szDvn3XgKpwr1D7A9keYBfO772XNU=) 9: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=) 10: E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa (hash: FoPG6dVyzwLVkXmSRMrejZ4jHtCGpIoYrs3nixOj+9E=) 11: EIzTw546AijLugfy7SUrbXCZrhI.roa (hash: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=) 12: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=) 13: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: PBji9e1nC6HExNbhfbWuiCnCHEQoubkt8iv5F4lDk/c=) 14: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=) 15: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=) 16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=) 17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=) 18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=) 19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=) 20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=) 21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=) 22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=) 23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=) 24: dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa (hash: xxmOZVSWpnayyu1BmFI9+MLq01yx4gC/aV4bZ9x0fQs=) 25: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (hash: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM=) 26: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=) 27: iv-DGbHi7jhC6-KbaXRuWKrxSJw.roa (hash: DCqm4T/AKjotRXUc3PC/vHyXchhsUr3+zqTpdaE+yuM=) 28: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=) 29: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=) 30: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=) 31: nPVcTbTK-fvP0ndgKJb_TVb3vms.roa (hash: 28mXD5Sps1UGHXUOMJ1VyXDyOke/hS4eNJgc9wW/KkI=) 32: rT2GKqRNplkDcHzBqdD4vYquDdU.roa (hash: xq38FNJ36cgvD1QD920Vixq2fn3iuLkSD00qomnTpqg=) 33: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=) 34: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=) 35: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=) 36: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=) 37: zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa (hash: naZhH7fX9yCGlkQixJYSLA7X9AZuM2jPZyAz9ulFItY=) 38: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:96:e2:4a:aa:2e:b4:b2:02:30:81:61:67:52:95:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Mar 26 10:00:47 2026 GMT Not After : Mar 27 10:00:47 2026 GMT Subject: CN=109bb8e5bbc32e074fc2c51d486b315934156c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:05:66:13:a6:8f:aa:86:81:6f:d0:ef:cb: ef:59:a7:55:38:5c:c7:93:b6:4a:57:19:5a:6a:71: 3c:b8:9b:af:5b:6b:f2:c2:cc:87:20:6e:8b:1a:76: 44:7f:b3:f4:bc:33:3d:a9:75:7e:1e:27:f9:69:10: 7d:70:f1:a9:0f:ea:fa:2e:8a:cf:38:31:17:d1:87: e3:08:32:85:44:06:e7:8d:29:a7:12:aa:e8:ca:3f: e3:79:eb:fa:60:27:b6:0b:bc:70:d2:d5:27:ce:97: 80:76:2f:f2:e6:ca:9f:74:e2:1f:9e:ef:d5:f2:d4: 99:ae:0f:6a:6c:19:fa:2d:f2:a0:17:1e:4c:eb:5c: d9:68:8b:f2:0e:29:2e:bc:7b:80:79:d8:9d:5d:63: 0a:c2:c7:ae:1d:31:ca:c0:b0:f0:6b:a2:e1:15:70: 3b:ef:5d:de:81:5b:c2:76:32:5e:c1:4f:69:e1:a1: 6b:99:f1:ae:64:f2:75:68:70:88:ec:1d:7e:db:f3: aa:e2:39:2c:49:7b:a6:c2:6a:64:aa:33:38:61:d7: fc:3d:15:9a:ef:43:3c:75:fd:50:fb:02:10:1d:de: 84:56:88:8b:f9:fb:01:92:db:16:7c:2e:cc:85:92: 4f:30:33:b2:14:49:2d:29:85:15:d2:80:7f:5e:4f: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9B:B8:E5:BB:C3:2E:07:4F:C2:C5:1D:48:6B:31:59:34:15:6C:27 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9b:6a:a6:0c:7f:0f:42:f0:e9:49:59:7c:29:88:52:b4:aa: 01:05:e7:95:3a:a4:0d:e6:26:c7:3b:7a:ce:b8:e6:31:2a:6f: 33:81:13:21:40:81:d9:00:59:0d:78:13:90:b0:c0:65:0c:66: 10:e7:6a:75:17:69:86:2f:07:fb:af:f1:53:c1:3a:a2:3b:18: 17:a6:7a:e6:ec:a7:0a:4a:99:53:2a:e5:89:08:2c:04:69:a2: 11:b5:ee:bc:8a:eb:3a:9a:a2:73:54:53:33:4e:95:1c:3c:35: ac:eb:57:da:af:a0:93:d9:42:da:92:97:f0:15:d5:8c:1d:dc: dc:fc:b7:df:8b:bc:fa:e9:b7:62:a1:53:e6:94:03:06:ff:c7: 7a:dc:93:03:64:bd:6e:f8:e2:1b:37:aa:fd:6f:67:99:11:df: bb:9d:53:05:e7:8b:9b:40:3f:f9:26:ff:88:28:2a:78:bf:fd: 08:02:c2:e9:3b:1e:17:1b:1a:d3:f2:3c:0b:f7:8a:57:19:3f: 38:dd:73:3d:e9:55:9b:fe:65:c4:a0:bc:9c:58:6f:bb:45:7a: b5:47:3f:43:bf:5e:1b:59:de:b2:cb:cf:03:9f:72:6d:1d:11: ad:1c:d6:d2:90:66:26:99:a5:74:3c:dc:1d:1b:6d:50:a5:05: 73:ae:bb:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pluJKqi60sgIwgWFnUpXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMzI2MTAwMDQ3WhcNMjYwMzI3MTAwMDQ3WjAzMTEwLwYDVQQD EygxMDliYjhlNWJiYzMyZTA3NGZjMmM1MWQ0ODZiMzE1OTM0MTU2YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNEFZhOmj6qGgW/Q78vvWadVOFzH k7ZKVxlaanE8uJuvW2vywsyHIG6LGnZEf7P0vDM9qXV+Hif5aRB9cPGpD+r6LorP ODEX0YfjCDKFRAbnjSmnEqroyj/jeev6YCe2C7xw0tUnzpeAdi/y5sqfdOIfnu/V 8tSZrg9qbBn6LfKgFx5M61zZaIvyDikuvHuAedidXWMKwseuHTHKwLDwa6LhFXA7 713egVvCdjJewU9p4aFrmfGuZPJ1aHCI7B1+2/Oq4jksSXumwmpkqjM4Ydf8PRWa 70M8df1Q+wIQHd6EVoiL+fsBktsWfC7MhZJPMDOyFEktKYUV0oB/Xk/u2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCbuOW7wy4HT8LFHUhrMVk0FWwnMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZtqpgx/ D0Lw6UlZfCmIUrSqAQXnlTqkDeYmxzt6zrjmMSpvM4ETIUCB2QBZDXgTkLDAZQxm EOdqdRdphi8H+6/xU8E6ojsYF6Z65uynCkqZUyrliQgsBGmiEbXuvIrrOpqic1RT M06VHDw1rOtX2q+gk9lC2pKX8BXVjB3c3Py334u8+um3YqFT5pQDBv/HetyTA2S9 bvjiGzeq/W9nmRHfu51TBeeLm0A/+Sb/iCgqeL/9CALC6TseFxsa0/I8C/eKVxk/ ON1zPelVm/5lxKC8nFhvu0V6tUc/Q79eG1nessvPA59ybR0RrRzW0pBmJpmldDzc HRttUKUFc667wg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:22 2026 by rpki-client