$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: IyI25eFjiI9LF2lRU/FzLghySiwExbHPiJi7Aa3WmeQ= Subject key identifier: 6A:E0:23:1C:7A:C2:88:61:56:32:D7:BF:B9:D5:D2:B9:B8:97:3A:1C Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 01A00B4E89F88FBB05097F11B641999C63C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0595 Signing time: Sun 16 Aug 2026 16:01:31 +0000 Manifest this update: Sun 16 Aug 2026 16:01:31 +0000 Manifest next update: Mon 17 Aug 2026 16:01:31 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 5C8k3ddiqLbGsXqe45o7Id7HOO0.roa (hash: pZs4d4kJNeixdF+Iw81m1vsrRYVb82Jb2MwKueXsQCs=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: htFbCP7I+5gjlZziVejAsprw7fGIVxXSAMhuPydEOXg=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: UaDo_BT2LcEP_zURCB9RbFxkQbA.roa (hash: wqnHfwG1lUfRQ7Htl0lN1tjaK6i63SCJO0QAnE5rZNQ=) 8: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 9: ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa (hash: LnaAJuj99vAMW7ciXruEozC3uPYJ6VZLPCj09EMLZA0=) 10: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 11: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 12: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 13: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Aug 2026 13:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:0b:4e:89:f8:8f:bb:05:09:7f:11:b6:41:99:9c:63:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Aug 16 16:01:31 2026 GMT Not After : Aug 17 16:01:31 2026 GMT Subject: CN=6ae0231c7ac288615632d7bfb9d5d2b9b8973a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:ad:6b:1c:74:62:88:2c:e2:a4:28:aa:24: ba:fc:66:79:aa:57:0b:4d:9e:50:82:ac:b6:03:1d: 0d:18:93:27:0b:28:d8:87:45:d2:2a:71:29:85:c3: d9:f8:ea:c2:f8:ed:08:6c:4d:8f:b0:92:1f:66:92: 4a:35:f3:3f:e2:2b:22:e9:83:b5:85:5f:b9:84:dd: 93:03:0e:d0:ba:2c:e1:cc:0c:33:32:c3:ee:25:d5: 27:37:8d:2b:53:42:ee:c1:91:07:a6:af:2d:4b:33: b1:8a:d3:cf:e2:15:c9:22:8d:39:50:d1:0c:e4:02: 63:2a:c7:b3:0a:45:c4:2e:fa:6f:b0:ab:3b:ce:56: 16:69:fb:15:83:ed:34:6d:8e:6f:b9:f8:c7:17:9c: 40:1c:e4:ee:99:75:b9:c6:9b:34:e7:c0:5c:2e:78: 6e:2c:a1:b0:c9:18:ad:40:ef:55:fc:f5:13:5f:ee: 48:63:87:e1:15:f2:d5:99:e9:0e:df:a1:22:c5:32: 21:18:2f:0e:93:96:97:ed:22:f6:c3:d1:6e:26:9a: 40:56:0a:a6:38:ec:2b:8a:aa:c5:28:d2:ca:0d:cf: 7c:b3:b1:4f:47:39:00:0b:ec:ba:67:a9:8a:bf:fe: ab:4b:89:33:9b:1c:e1:10:b4:03:fe:26:80:b5:a9: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E0:23:1C:7A:C2:88:61:56:32:D7:BF:B9:D5:D2:B9:B8:97:3A:1C X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:96:4a:c6:aa:6a:a7:10:07:8d:28:2b:bc:ae:94:3e:12:14: a2:11:93:ec:47:dd:2a:51:e4:9f:8e:74:33:73:d8:83:f7:74: 23:87:62:8b:5b:eb:1e:87:af:c5:08:9e:1a:49:2e:3b:e4:e9: 6b:d1:19:2c:29:be:a6:46:c0:c6:ab:50:46:bc:23:17:82:50: 05:2d:1d:6f:83:e8:71:dc:af:c6:32:fe:e6:13:cc:b0:dd:0b: 50:bb:00:07:a1:ac:60:60:f2:ef:1c:55:2d:0c:55:b2:43:d3: 1a:5d:dd:96:06:3b:3a:67:43:aa:2d:6c:0b:c2:88:66:77:fd: 41:a1:53:40:72:02:92:c2:e8:0e:49:11:f0:d7:77:8a:51:52: 1e:a2:9d:6d:0d:0d:9c:33:0d:f2:bd:bc:58:11:fe:71:c7:67: e5:d3:8e:90:8f:5d:48:ec:d7:a6:6f:8f:00:ba:71:c3:09:2b: a4:be:51:65:50:de:26:39:a3:49:0f:5f:0f:a3:b3:3d:72:a6: 55:69:95:17:75:96:f3:6f:52:c6:c1:ca:35:b7:f6:d6:4a:33: fb:64:fe:49:8a:71:3b:b7:a8:94:cd:d3:67:f8:46:9b:d9:22: 74:82:94:ea:e2:cc:50:6d:72:68:4e:11:74:93:2e:60:78:5b: 95:2e:4e:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaALTon4j7sFCX8RtkGZnGPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwODE2MTYwMTMxWhcNMjYwODE3MTYwMTMxWjAzMTEwLwYDVQQD Eyg2YWUwMjMxYzdhYzI4ODYxNTYzMmQ3YmZiOWQ1ZDJiOWI4OTczYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi+taxx0Yogs4qQoqiS6/GZ5qlcL TZ5Qgqy2Ax0NGJMnCyjYh0XSKnEphcPZ+OrC+O0IbE2PsJIfZpJKNfM/4isi6YO1 hV+5hN2TAw7QuizhzAwzMsPuJdUnN40rU0LuwZEHpq8tSzOxitPP4hXJIo05UNEM 5AJjKsezCkXELvpvsKs7zlYWafsVg+00bY5vufjHF5xAHOTumXW5xps058BcLnhu LKGwyRitQO9V/PUTX+5IY4fhFfLVmekO36EixTIhGC8Ok5aX7SL2w9FuJppAVgqm OOwriqrFKNLKDc98s7FPRzkAC+y6Z6mKv/6rS4kzmxzhELQD/iaAtamarwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrgIxx6wohhVjLXv7nV0rm4lzocMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJZKxqpq pxAHjSgrvK6UPhIUohGT7EfdKlHkn450M3PYg/d0I4dii1vrHoevxQieGkkuO+Tp a9EZLCm+pkbAxqtQRrwjF4JQBS0db4PocdyvxjL+5hPMsN0LULsAB6GsYGDy7xxV LQxVskPTGl3dlgY7OmdDqi1sC8KIZnf9QaFTQHICksLoDkkR8Nd3ilFSHqKdbQ0N nDMN8r28WBH+ccdn5dOOkI9dSOzXpm+PALpxwwkrpL5RZVDeJjmjSQ9fD6OzPXKm VWmVF3WW829SxsHKNbf21koz+2T+SYpxO7eolM3TZ/hGm9kidIKU6uLMUG1yaE4R dJMuYHhblS5OOw== -----END CERTIFICATE-----Generated at Sun Aug 16 18:41:34 2026 by rpki-client