$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: JeZqSJ46bI+pMJVsXgxaT5WUJYSfkf9PelH5lBHEktA= Subject key identifier: 0E:3C:BB:4B:76:10:D1:65:87:78:5F:5D:88:43:D1:42:5D:46:C5:32 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 0198D5161A1371F9A08349A78E8E56F5D21A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 164D Signing time: Sat 23 Aug 2025 04:00:52 +0000 Manifest this update: Sat 23 Aug 2025 04:00:52 +0000 Manifest next update: Sun 24 Aug 2025 04:00:52 +0000 Files and hashes: 1: 3_ZiNbcF_l_fHARs-V4muQ6S87I.roa (hash: u01NktxURzNoH0tA5SjsqobM+AcImV1Of4eOpnXlaxk=) 2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=) 3: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (hash: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=) 4: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=) 5: CMJdala6pFhg-m_hIMesxyzbTAk.roa (hash: dvXeg+DcGeVh1vSS0AnLKUd1rN/dkpdkpg1fDCZ6b5g=) 6: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=) 7: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=) 8: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: cKzFPCPpU+DKmp3DAe07+TUMoqSW/o+pwGWd2fccJvM=) 9: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=) 10: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=) 11: UItLZsiO26x7QiRXdGLqfBj5i3A.roa (hash: YEdG4y28dnG+6B0iGrSVjqk69La+oWZl6VDLolSPKHk=) 12: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=) 13: Z0HFTEB-y-xMkY874DNYvhokt7o.roa (hash: fMTVowfbwy2vdbwi3DPoTLMlTmRBQt2PrhpbkbjG32k=) 14: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=) 15: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=) 16: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=) 17: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=) 18: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=) 19: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=) 20: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=) 21: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=) 22: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:16:1a:13:71:f9:a0:83:49:a7:8e:8e:56:f5:d2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Aug 23 04:00:52 2025 GMT Not After : Aug 24 04:00:52 2025 GMT Subject: CN=0e3cbb4b7610d16587785f5d8843d1425d46c532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:be:4a:df:79:66:0f:67:b9:6c:71:01:c6: 4e:95:65:83:a0:fc:b5:5e:b5:c2:b2:2e:f3:32:8f: 75:d5:3a:17:05:86:4c:2c:5a:d5:5b:8c:aa:87:ca: de:78:5c:72:10:f6:ec:67:46:48:bc:89:2e:09:ac: 43:dc:ac:af:9e:53:08:6d:a2:62:10:49:0c:ca:9c: 07:48:d8:8a:ed:80:95:14:f7:2f:73:dc:7e:b5:9e: 20:36:f3:84:c0:ab:ae:ca:e8:5e:eb:fc:f8:08:f8: fc:74:a5:25:03:af:6d:c3:17:e7:0b:a8:37:4b:46: b9:fd:74:74:04:fd:8b:52:8a:8f:fd:df:ac:99:ef: 47:aa:b6:4f:f6:34:52:15:d3:5a:9b:f3:27:4c:f0: ae:08:82:5a:91:cb:50:7f:c7:4f:9d:c9:5e:96:87: 0e:ff:16:0f:99:cb:53:66:b0:e1:6f:84:bf:32:23: e0:c6:ee:7d:24:ac:19:c6:19:bd:19:d5:1f:e6:0b: 2b:db:76:39:81:b6:e2:3b:16:50:a9:d9:de:10:76: ca:ce:84:d2:c7:c3:72:1c:e6:48:76:15:84:04:b3: c8:41:53:f3:c0:df:f1:48:2f:95:00:a4:27:84:22: 9e:40:9c:63:20:bb:0a:39:23:6a:93:17:13:bb:2c: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:BB:4B:76:10:D1:65:87:78:5F:5D:88:43:D1:42:5D:46:C5:32 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:98:f6:1c:af:78:6e:7e:5e:ac:98:2e:52:7d:bc:6c:35:78: 0a:d0:81:a6:8a:63:87:eb:44:a7:6f:b0:00:4c:bc:b0:74:a8: 03:03:f4:5e:3d:30:ce:c3:4d:37:8f:39:75:1d:a0:51:54:3e: 0a:89:2a:8b:78:95:5c:d4:58:46:07:30:30:fe:e6:9a:c7:d3: f1:4d:e0:53:16:1e:32:d1:e9:44:4b:cb:9a:68:49:45:43:df: 34:f4:d8:05:a1:3b:b4:74:44:80:28:e6:30:c0:dc:65:1e:14: 85:0e:32:4e:30:1d:30:5d:ba:ef:9e:10:18:e6:cb:25:b2:f4: e2:39:56:fb:d5:2f:1e:d5:4f:2e:41:a3:75:03:41:03:07:aa: f8:1e:13:b3:c3:14:b4:b5:42:60:38:a4:7a:e1:e9:8e:76:19: 63:74:c7:99:46:c7:fa:a8:ed:02:d2:86:a6:9d:9f:37:ef:99: 8b:53:c7:26:a2:1d:3a:f2:df:36:a3:c0:7f:05:2f:29:ac:06: 25:4e:92:dd:90:db:66:ff:b4:db:cf:e4:a5:d9:ee:2c:6d:d5: 8a:ce:d8:9c:1c:82:fd:a7:65:78:07:56:89:e3:e7:a6:76:2e: 29:6f:91:10:d3:5b:cc:35:58:f9:f5:10:2f:0c:d2:8d:f8:19: 56:79:3a:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFhoTcfmgg0mnjo5W9dIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUwODIzMDQwMDUyWhcNMjUwODI0MDQwMDUyWjAzMTEwLwYDVQQD EygwZTNjYmI0Yjc2MTBkMTY1ODc3ODVmNWQ4ODQzZDE0MjVkNDZjNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwde+St95Zg9nuWxxAcZOlWWDoPy1 XrXCsi7zMo911ToXBYZMLFrVW4yqh8reeFxyEPbsZ0ZIvIkuCaxD3KyvnlMIbaJi EEkMypwHSNiK7YCVFPcvc9x+tZ4gNvOEwKuuyuhe6/z4CPj8dKUlA69twxfnC6g3 S0a5/XR0BP2LUoqP/d+sme9HqrZP9jRSFdNam/MnTPCuCIJakctQf8dPnclelocO /xYPmctTZrDhb4S/MiPgxu59JKwZxhm9GdUf5gsr23Y5gbbiOxZQqdneEHbKzoTS x8NyHOZIdhWEBLPIQVPzwN/xSC+VAKQnhCKeQJxjILsKOSNqkxcTuyx2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA48u0t2ENFlh3hfXYhD0UJdRsUyMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJj2HK94 bn5erJguUn28bDV4CtCBpopjh+tEp2+wAEy8sHSoAwP0Xj0wzsNNN485dR2gUVQ+ Cokqi3iVXNRYRgcwMP7mmsfT8U3gUxYeMtHpREvLmmhJRUPfNPTYBaE7tHREgCjm MMDcZR4UhQ4yTjAdMF26754QGObLJbL04jlW+9UvHtVPLkGjdQNBAweq+B4Ts8MU tLVCYDikeuHpjnYZY3THmUbH+qjtAtKGpp2fN++Zi1PHJqIdOvLfNqPAfwUvKawG JU6S3ZDbZv+028/kpdnuLG3Vis7YnByC/adleAdWiePnpnYuKW+RENNbzDVY+fUQ LwzSjfgZVnk6cg== -----END CERTIFICATE-----Generated at Sat Aug 23 09:39:39 2025 by rpki-client