$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft File: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json) Hash identifier: LLDdqWTqjTxf3a1xJV9fkEdJ+7gz58x+ez1tSBYtuIc= Subject key identifier: EB:1F:DE:4A:23:50:36:8B:12:22:D8:F6:7B:2F:FD:81:AB:BE:B9:8A Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 0199FB7CA15666D08CDA632A744177CD2EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft Manifest number: 1748 Signing time: Sun 19 Oct 2025 08:01:12 +0000 Manifest this update: Sun 19 Oct 2025 08:01:12 +0000 Manifest next update: Mon 20 Oct 2025 08:01:12 +0000 Files and hashes: 1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=) 2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=) 3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=) 4: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=) 5: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=) 6: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=) 7: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=) 8: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=) 9: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=) 10: UooM3kbVP_VgnWKTc0dSjHxgrW0.roa (hash: 7p6jwdP6bpELzkSwppQCFo5IztXEk6grCDth7THNqiE=) 11: W4_dQd7C2mAGB3I24C-30P9-KR0.roa (hash: Hqcu5oe9JYOMkNSJBN1TTQswujAkOBAd75J8FP6BT4w=) 12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=) 13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=) 14: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=) 15: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=) 16: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=) 17: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: sRtgIP9Juo0OsHuolI9GfP2+FFdzQYNz6EeOkMwyppM=) 18: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=) 19: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=) 20: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=) 21: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=) 22: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=) 23: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=) 24: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=) 25: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=) 26: ywR9gH1F0PpOZKegB621BiuyfHM.roa (hash: WDTlSi6oj6Emf/Zkaz3mbxQX1dD5hDKhstvcbB8/kXY=) 27: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:a1:56:66:d0:8c:da:63:2a:74:41:77:cd:2e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Oct 19 08:01:12 2025 GMT Not After : Oct 20 08:01:12 2025 GMT Subject: CN=eb1fde4a2350368b1222d8f67b2ffd81abbeb98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:51:70:d8:13:23:f2:9b:98:4d:b6:ca:e8: 03:22:0b:f6:f0:d5:1f:41:7a:f9:cf:3e:79:cb:fd: 3c:2a:77:b9:3b:35:9f:da:89:aa:e7:d7:83:88:2d: e7:f3:5a:f2:de:df:41:41:1a:12:56:2d:06:fa:13: 72:a9:cb:57:5c:be:e7:86:4e:21:fd:4c:9b:6d:8a: 9f:88:3c:aa:23:c2:e8:60:db:d0:d1:2d:ca:41:e0: c9:9e:76:fc:e9:43:6e:2b:23:35:96:cc:00:7d:db: 2c:79:a8:1e:35:c8:eb:8b:27:3b:50:25:1c:a4:a0: b3:bf:99:ad:e7:89:73:a6:bc:25:7a:26:5b:87:34: 38:dc:1b:07:e7:59:9b:d8:ae:0a:ad:c0:b5:39:1d: cc:b4:6f:a3:b5:05:c5:44:ab:68:f0:41:8d:76:83: 60:7a:47:27:56:d8:3f:7b:68:6d:3d:eb:6e:14:53: d6:92:a5:84:b6:f9:4f:03:b0:6f:2d:22:17:57:28: 0a:03:3b:37:a2:1b:97:fb:ca:11:b1:bf:be:20:8e: 2b:82:06:b4:ef:3d:79:d1:62:a9:b3:d2:0e:73:72: 7e:2c:f2:b3:98:25:1a:7e:ef:5c:f5:4c:28:54:64: bb:8a:59:9b:7c:27:ed:83:a0:89:a1:a8:75:bd:fe: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:DE:4A:23:50:36:8B:12:22:D8:F6:7B:2F:FD:81:AB:BE:B9:8A X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4f:4a:1f:e6:e2:f5:53:b5:d4:0a:18:54:1a:9e:1a:54:b8: 80:81:a0:db:6a:1d:b6:d6:17:47:a3:1a:b4:74:75:91:2b:6c: 2f:0f:c1:73:d7:50:7d:43:eb:31:ab:98:81:df:78:47:86:dd: 3a:c5:76:d2:bc:02:c6:14:37:b2:31:c8:06:63:58:d4:b4:5d: 31:95:48:95:b7:99:f0:9e:f8:de:a6:6b:3a:6a:55:60:cd:2a: 16:37:08:41:7c:b6:35:3d:cd:41:0f:ae:cc:92:45:3d:fb:08: 4f:dd:f9:ff:d2:b4:71:0f:27:6e:ef:44:d9:0d:4e:cf:ab:ef: 7c:98:4e:d5:75:7d:87:07:4c:71:85:51:dd:44:9b:c5:bf:7c: 95:db:d6:b7:c3:50:08:e5:9a:d6:4b:99:61:29:ba:6b:25:c5: 58:02:3d:82:6b:af:7e:49:2e:0c:94:f1:b8:b1:13:c7:04:09: 87:2a:63:69:6e:9b:4b:ba:e8:10:37:32:2f:35:07:b0:fe:d0: 36:55:33:c6:1f:2d:51:1a:b1:25:17:11:7e:17:06:ea:06:dd: 24:50:f8:72:46:bd:67:91:73:9a:e5:32:c8:f8:66:01:ac:51: b7:9f:bf:b7:f4:3e:03:5c:28:e3:93:ba:87:95:54:b4:e5:2a: 25:d6:c1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fKFWZtCM2mMqdEF3zS69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUxMDE5MDgwMTEyWhcNMjUxMDIwMDgwMTEyWjAzMTEwLwYDVQQD EyhlYjFmZGU0YTIzNTAzNjhiMTIyMmQ4ZjY3YjJmZmQ4MWFiYmViOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrxRcNgTI/KbmE22yugDIgv28NUf QXr5zz55y/08Kne5OzWf2omq59eDiC3n81ry3t9BQRoSVi0G+hNyqctXXL7nhk4h /UybbYqfiDyqI8LoYNvQ0S3KQeDJnnb86UNuKyM1lswAfdsseageNcjriyc7UCUc pKCzv5mt54lzprwleiZbhzQ43BsH51mb2K4KrcC1OR3MtG+jtQXFRKto8EGNdoNg ekcnVtg/e2htPetuFFPWkqWEtvlPA7BvLSIXVygKAzs3ohuX+8oRsb++II4rgga0 7z150WKps9IOc3J+LPKzmCUafu9c9UwoVGS7ilmbfCftg6CJoah1vf4zvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsf3kojUDaLEiLY9nsv/YGrvrmKMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE9KH+bi 9VO11AoYVBqeGlS4gIGg22odttYXR6MatHR1kStsLw/Bc9dQfUPrMauYgd94R4bd OsV20rwCxhQ3sjHIBmNY1LRdMZVIlbeZ8J743qZrOmpVYM0qFjcIQXy2NT3NQQ+u zJJFPfsIT935/9K0cQ8nbu9E2Q1Oz6vvfJhO1XV9hwdMcYVR3USbxb98ldvWt8NQ COWa1kuZYSm6ayXFWAI9gmuvfkkuDJTxuLETxwQJhypjaW6bS7roEDcyLzUHsP7Q NlUzxh8tURqxJRcRfhcG6gbdJFD4cka9Z5FzmuUyyPhmAaxRt5+/t/Q+A1wo45O6 h5VUtOUqJdbBQw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:30:26 2025 by rpki-client