$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: z45TU9GeLBpI9nUk3N/z7LsRULcdWnjg2M75xxFJvjY= Subject key identifier: 28:23:70:1B:78:60:99:D5:B1:55:A3:61:5E:60:9F:58:71:E6:5C:C8 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0199FF9020AB8F12E6CEBCA7B5A4B11AB53B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 16E9 Signing time: Mon 20 Oct 2025 03:00:59 +0000 Manifest this update: Mon 20 Oct 2025 03:00:59 +0000 Manifest next update: Tue 21 Oct 2025 03:00:59 +0000 Files and hashes: 1: 31eja_tbnq_0jWNTgyvlK_3Sing.roa (hash: rmbPmmaIu4C2re+gcy24kBfyHlmaf45FfJvIO49/pOs=) 2: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=) 3: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 4: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=) 5: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 6: CMJdala6pFhg-m_hIMesxyzbTAk.roa (hash: dvXeg+DcGeVh1vSS0AnLKUd1rN/dkpdkpg1fDCZ6b5g=) 7: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 8: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 9: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: xLeFQ6VfUpmQxOrvXlAsAgeTqQaY1ahCXNwFXdepJik=) 10: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 11: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 12: UItLZsiO26x7QiRXdGLqfBj5i3A.roa (hash: YEdG4y28dnG+6B0iGrSVjqk69La+oWZl6VDLolSPKHk=) 13: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 14: Z0HFTEB-y-xMkY874DNYvhokt7o.roa (hash: fMTVowfbwy2vdbwi3DPoTLMlTmRBQt2PrhpbkbjG32k=) 15: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 16: cuI5lIMGONC-zhkO0Br-gP7t3DM.roa (hash: HgCokX5nX8AH6l8KDj8If1jUn+noyEm0cg4YnPECwI0=) 17: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 18: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 19: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 20: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 21: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 22: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 23: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 24: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:90:20:ab:8f:12:e6:ce:bc:a7:b5:a4:b1:1a:b5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Oct 20 03:00:59 2025 GMT Not After : Oct 21 03:00:59 2025 GMT Subject: CN=2823701b786099d5b155a3615e609f5871e65cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:00:fb:8d:e4:1d:89:fa:e7:db:39:f6:f9: cb:41:1d:b2:82:40:e7:0a:36:e5:1e:34:c8:e7:0b: 94:41:18:8f:5b:4b:3e:b3:3f:02:59:a0:f6:e1:99: 40:21:5e:f2:36:de:84:1c:24:d1:04:e6:26:60:6e: 15:a9:05:57:ff:61:a3:30:a7:e4:97:f1:0a:5d:24: bf:7e:36:77:4e:47:b5:dc:82:79:8d:1e:c8:0b:b2: b4:bc:98:d6:cb:d7:a7:d6:bf:c8:41:38:07:f8:53: 1a:34:e9:11:86:55:5a:84:80:1c:92:eb:d3:6f:ba: f1:66:49:b1:fa:da:86:df:20:87:5f:54:14:37:9a: 65:c1:bd:e9:c7:3f:29:b9:70:32:a7:67:cc:c3:35: 2a:0d:b1:83:7f:c5:b1:67:5b:94:72:0f:db:f2:01: 3c:65:3e:3d:21:da:b7:dc:25:12:dd:69:90:41:55: a6:7b:fa:99:8d:1d:73:01:e5:4e:32:25:22:c4:ee: 0b:64:9e:a4:10:8e:bf:8c:f8:87:62:79:84:d4:2e: cf:1b:cc:0a:9a:d6:10:08:f3:ce:8b:9c:e9:ab:32: 54:90:df:dd:d9:33:2f:7a:38:e7:37:6b:c9:87:c6: bc:94:f4:e4:fc:91:fe:36:83:5c:83:69:59:c1:d2: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:70:1B:78:60:99:D5:B1:55:A3:61:5E:60:9F:58:71:E6:5C:C8 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:18:0a:b9:76:e3:b0:9c:e7:3d:72:c4:a2:7e:b9:bc:2b:82: bb:c3:3f:97:71:0d:df:bc:e5:84:3b:b2:c4:91:e1:5f:90:e3: d7:2d:0f:1c:86:af:29:e7:2e:cf:a1:04:ce:8f:f5:4f:7e:c0: cf:55:8b:e2:bb:f0:f9:ea:79:cd:eb:73:f8:7a:dd:af:b4:b0: a6:5a:2b:28:cf:a4:cb:a5:ce:83:ff:17:2f:7f:9b:2e:cb:26: dd:92:bb:92:38:46:e2:57:50:9a:58:96:c4:39:bb:f6:bb:6d: 5c:2c:87:ee:9f:a0:bb:b9:a3:d9:6a:49:ac:70:a2:22:44:21: 0e:9a:fb:b0:58:0e:eb:82:45:c0:9d:da:42:be:14:d5:91:2b: e6:48:26:71:a3:a1:d1:c8:09:b0:aa:e9:2a:2d:61:94:46:9f: 7b:ac:3e:a3:bc:c1:2d:a5:4c:98:be:1d:81:6e:a1:dd:43:e3: c6:97:52:6c:2f:4d:b7:38:5a:1b:24:8a:6f:32:d9:bb:af:5d: c1:f6:21:08:e1:0f:fd:5f:c0:f5:74:29:ca:c6:fb:24:0e:23: 30:fb:25:a9:d4:ec:ca:3f:25:f2:de:a1:31:af:d1:21:bf:a7: df:ec:4f:19:06:83:05:a2:68:61:74:2f:30:d1:6a:88:c3:92: 92:f9:39:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/kCCrjxLmzryntaSxGrU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUxMDIwMDMwMDU5WhcNMjUxMDIxMDMwMDU5WjAzMTEwLwYDVQQD EygyODIzNzAxYjc4NjA5OWQ1YjE1NWEzNjE1ZTYwOWY1ODcxZTY1Y2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpUA+43kHYn659s59vnLQR2ygkDn CjblHjTI5wuUQRiPW0s+sz8CWaD24ZlAIV7yNt6EHCTRBOYmYG4VqQVX/2GjMKfk l/EKXSS/fjZ3Tke13IJ5jR7IC7K0vJjWy9en1r/IQTgH+FMaNOkRhlVahIAckuvT b7rxZkmx+tqG3yCHX1QUN5plwb3pxz8puXAyp2fMwzUqDbGDf8WxZ1uUcg/b8gE8 ZT49Idq33CUS3WmQQVWme/qZjR1zAeVOMiUixO4LZJ6kEI6/jPiHYnmE1C7PG8wK mtYQCPPOi5zpqzJUkN/d2TMvejjnN2vJh8a8lPTk/JH+NoNcg2lZwdIh2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgjcBt4YJnVsVWjYV5gn1hx5lzIMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRgKuXbj sJznPXLEon65vCuCu8M/l3EN37zlhDuyxJHhX5Dj1y0PHIavKecuz6EEzo/1T37A z1WL4rvw+ep5zetz+Hrdr7SwplorKM+ky6XOg/8XL3+bLssm3ZK7kjhG4ldQmliW xDm79rttXCyH7p+gu7mj2WpJrHCiIkQhDpr7sFgO64JFwJ3aQr4U1ZEr5kgmcaOh 0cgJsKrpKi1hlEafe6w+o7zBLaVMmL4dgW6h3UPjxpdSbC9NtzhaGySKbzLZu69d wfYhCOEP/V/A9XQpysb7JA4jMPslqdTsyj8l8t6hMa/RIb+n3+xPGQaDBaJoYXQv MNFqiMOSkvk57Q== -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:49 2025 by rpki-client