$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft File: GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json) Hash identifier: s4aKjWVfgBVZqWXxrrLLIquR6Y080p7Epkhe6esSpIg= Subject key identifier: A1:09:E5:EA:80:72:D9:10:68:F0:72:C4:61:36:D4:90:41:C4:2C:8D Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 0199FF22417FFC05A78BB57C305DF4B2A470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft Manifest number: 1817 Signing time: Mon 20 Oct 2025 01:00:58 +0000 Manifest this update: Mon 20 Oct 2025 01:00:58 +0000 Manifest next update: Tue 21 Oct 2025 01:00:58 +0000 Files and hashes: 1: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=) 2: 1-WTtBjMSRrb4TAl7DySIOk7FY38.roa (hash: oHE7Yoyc0yluIv4batxOrntXR8UN3jcb6OoGC5ontY0=) 3: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=) 4: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=) 5: 9hwIee2iKDmXri9_fQ5eY0haCLM.roa (hash: G8lHAVoCj8lJj6Xnagqlp/q17S/Fw+kEY201Sx1VbeI=) 6: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=) 7: C3d3ZO8XQCxeFhqBO_oP_VQ09OQ.roa (hash: MMaye3J7V2SoKbNbcveyEYGo5j7+iVVQUv9e6yI1lxk=) 8: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=) 9: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=) 10: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (hash: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=) 11: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=) 12: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: CCAq4YzfMxfpcfPMjJBhB+RwmDQl/jeK0B7d4SBInS0=) 13: GbxtRPQwfoQV6FvhVdB0jvr2vRA.roa (hash: sBV2MtYwt+QZhE+a75Mo+LifJiO4Kf/NRarvun19aJQ=) 14: IQjgdPPcGOO-XEQSZxJ9maUCgq8.roa (hash: q4KGBpctUI3JXRA8plNcbzzfMeW2mF1ev2R4OL9CYXw=) 15: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=) 16: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=) 17: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=) 18: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=) 19: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=) 20: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=) 21: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=) 22: e0DnWMnFmTru3C2aoS2JyaRDfus.roa (hash: fqlHTmNWiwqv1CPk291HDWeErulj/q6A/K6RapftY6s=) 23: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (hash: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=) 24: fao7WExLDEpu1LFawbL2WzsdL2k.roa (hash: QSrLTR5vhkaq01veEqwW6gmy0aK0hTgLxDW0CjtAN54=) 25: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=) 26: luIF5RSE4UEeRnyDIACAMFK7ptU.roa (hash: prVzhZnIZRH6h67iHI2zHii5E9vi8C/WoWfLyxFMxMI=) 27: nwVznY1vTte-l8XB9qszVQuk5Ok.roa (hash: J9RM0fwCWpkVRTQQXMJ9b/yvLhlgyRqxXrtW1KNskP8=) 28: pnd3YojRi7DZYpXBXFp9kwat45Y.roa (hash: L/sfRRwnOa3q3wB7hNxXjSMDs2syDkgziLpoLHkufh4=) 29: q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa (hash: 5KGuyKJFaspfluOwOBDClndwqaUf6P40Y1cAOywOboE=) 30: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=) 31: sW_Pe5AiNGRK8YU3M9QNoMiFE0k.roa (hash: OI9qX7YhyRhGAGILyJE9MQsxymJKu7dbedIOFUkDFak=) 32: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=) 33: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=) 34: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=) 35: vj8KgRdnFps3dvkFo8d8rzw3ICQ.roa (hash: gpVEf849wWp4NXPmAVA8R6x7Qa0hkidn7DRQeM5OgKM=) 36: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=) 37: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:22:41:7f:fc:05:a7:8b:b5:7c:30:5d:f4:b2:a4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Oct 20 01:00:58 2025 GMT Not After : Oct 21 01:00:58 2025 GMT Subject: CN=a109e5ea8072d91068f072c46136d49041c42c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:50:c1:0a:7b:4a:ac:8d:58:0b:7f:9b:35: 3f:3d:86:4f:3e:da:87:c9:5d:a5:c0:5a:30:fc:4d: 9f:49:f1:fe:18:f2:7c:24:23:dc:45:56:4c:fe:c9: 47:0b:b1:ed:7d:77:a4:9b:da:f5:df:47:eb:1d:d2: 08:31:a4:a4:42:10:41:3b:89:25:b5:7e:b3:f6:04: 82:42:87:c2:56:34:22:48:6a:1f:f0:3a:4e:df:da: 8f:c7:d1:e9:06:0e:2e:1c:be:2c:c4:e9:2f:8f:93: bb:1f:0f:8b:4d:b4:53:4e:5c:b5:68:4b:71:c6:1c: 74:43:67:dc:19:d6:5f:48:a7:65:36:2c:72:0d:29: 9d:e6:36:75:cb:b3:27:f4:73:f5:02:48:cf:77:b5: b9:c3:6f:6c:39:c5:8e:a6:8e:83:8a:dd:43:24:46: 9f:7b:56:63:16:73:a0:b3:0f:e8:7b:48:c0:f4:2e: 37:99:cb:a5:82:ea:da:4f:bd:fc:1f:96:97:b2:cd: d2:b4:83:c5:e8:ee:0c:b7:ec:11:fb:df:e0:dc:96: c5:ed:a9:3b:93:03:9f:7e:1a:0a:d5:25:0c:5a:61: 97:a8:4c:0f:c7:f2:8f:14:d5:7f:ab:28:45:be:50: 2b:b6:7c:1d:a9:98:64:a6:7d:f9:e5:ef:7d:be:0a: 44:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:09:E5:EA:80:72:D9:10:68:F0:72:C4:61:36:D4:90:41:C4:2C:8D X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:62:2f:10:4d:04:73:05:2f:1b:20:82:93:48:3d:61:1a:49: f0:cd:a0:2e:98:03:11:95:a9:49:aa:51:01:ed:62:4b:08:ac: 63:fb:95:df:dd:6d:e1:44:ae:7c:6b:f6:d0:b5:01:df:9d:c2: 41:b9:6a:f6:38:db:4a:02:3d:07:bb:d6:c3:43:e0:ca:60:df: f7:3f:3d:85:28:ec:9b:dd:63:f3:39:6d:88:a2:22:76:7b:98: bd:eb:82:46:cb:83:81:59:c6:fd:b0:f1:ad:6a:f6:dd:fd:8d: a7:5e:b3:a6:42:77:e0:35:91:1a:00:1b:a4:9a:a0:18:e2:fe: 8f:74:ad:14:45:91:22:a3:7e:10:df:9a:dc:75:82:22:6d:e5: ea:7b:a1:e2:d9:2d:40:ed:a0:16:ca:00:81:2f:f7:b7:ad:4e: 0d:8e:6d:59:ad:cc:2e:06:d1:8d:71:82:19:49:4c:0d:ca:54: a2:95:31:e4:41:e4:1a:ef:03:45:69:ed:68:a7:2c:31:68:e7: 18:07:60:3c:df:b2:80:67:aa:c2:f3:f8:69:27:b1:22:9d:f6: e2:62:80:3f:5a:4d:b9:f5:9b:ab:df:b0:b7:12:07:e8:86:ba: 44:1d:aa:2a:cd:62:e9:c3:15:de:d7:40:3a:06:d3:d0:47:ac: 16:a0:2b:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/IkF//AWni7V8MF30sqRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMDIwMDEwMDU4WhcNMjUxMDIxMDEwMDU4WjAzMTEwLwYDVQQD EyhhMTA5ZTVlYTgwNzJkOTEwNjhmMDcyYzQ2MTM2ZDQ5MDQxYzQyYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm31QwQp7SqyNWAt/mzU/PYZPPtqH yV2lwFow/E2fSfH+GPJ8JCPcRVZM/slHC7HtfXekm9r130frHdIIMaSkQhBBO4kl tX6z9gSCQofCVjQiSGof8DpO39qPx9HpBg4uHL4sxOkvj5O7Hw+LTbRTTly1aEtx xhx0Q2fcGdZfSKdlNixyDSmd5jZ1y7Mn9HP1AkjPd7W5w29sOcWOpo6Dit1DJEaf e1ZjFnOgsw/oe0jA9C43mculguraT738H5aXss3StIPF6O4Mt+wR+9/g3JbF7ak7 kwOffhoK1SUMWmGXqEwPx/KPFNV/qyhFvlArtnwdqZhkpn355e99vgpESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEJ5eqActkQaPByxGE21JBBxCyNMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2IvEE0E cwUvGyCCk0g9YRpJ8M2gLpgDEZWpSapRAe1iSwisY/uV391t4USufGv20LUB353C Qblq9jjbSgI9B7vWw0PgymDf9z89hSjsm91j8zltiKIidnuYveuCRsuDgVnG/bDx rWr23f2Np16zpkJ34DWRGgAbpJqgGOL+j3StFEWRIqN+EN+a3HWCIm3l6nuh4tkt QO2gFsoAgS/3t61ODY5tWa3MLgbRjXGCGUlMDcpUopUx5EHkGu8DRWntaKcsMWjn GAdgPN+ygGeqwvP4aSexIp324mKAP1pNufWbq9+wtxIH6Ia6RB2qKs1i6cMV3tdA OgbT0EesFqArRw== -----END CERTIFICATE-----Generated at Mon Oct 20 05:59:51 2025 by rpki-client