$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: B4NBXOMnY0MVamCVgDKfETor2V7LMIqA+j28ZJ9lHBo= Subject key identifier: F4:30:C4:3B:24:5C:22:79:B1:BD:8A:82:B5:00:13:61:FA:E2:91:96 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019A085C37B9CF1123C581A03BE2F59457A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 026E Signing time: Tue 21 Oct 2025 20:00:52 +0000 Manifest this update: Tue 21 Oct 2025 20:00:52 +0000 Manifest next update: Wed 22 Oct 2025 20:00:52 +0000 Files and hashes: 1: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (hash: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=) 2: BDQDuKOE6HSldICs31YDXppOWyI.roa (hash: Ox3x2X8HRRb+xIBqwpqttFpUUTKWFHSb3CgZaB3s/b4=) 3: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=) 4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: sohsNHjAH66haGW5mIBOaF2Vwp71LoQR6O2gXROn5ac=) 5: LsjKvJfqEFM9fPtcTMmtOAbaLZo.roa (hash: gN2HlTiepxEVT7qJh1ObS9vb0d8/kqy8eI9gfEpnRzk=) 6: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=) 7: ZI7vOrG6oAyS8YfJbBpZewDNGXQ.roa (hash: npYfXMzfry1oEZ/+7tKck9ENcVNUZ6jLLVA2nOAVsn8=) 8: lHoepiCpX7g78Ng_Suk_7keCehI.roa (hash: JX1GmHVZEyU6jv7xs+Gm8SluiSfi45q37cjpO1lCp5M=) 9: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (hash: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=) 10: qMKOIrCowr-evIF2TKMj48rb5ME.roa (hash: AsnmGDasDlnURHsWZv2Xw6xs4e4snEFqyNhGTwaLi9I=) 11: qnICZYiLbrGPlJAYqEcKvQ2CjqQ.roa (hash: HnPlRq2/eM18ZCRGQnjr87vL3s3tKW/ZrixlOUg/qKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:5c:37:b9:cf:11:23:c5:81:a0:3b:e2:f5:94:57:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Oct 21 20:00:52 2025 GMT Not After : Oct 22 20:00:52 2025 GMT Subject: CN=f430c43b245c2279b1bd8a82b5001361fae29196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:a1:ce:e9:ca:f1:5e:d1:07:0e:6a:bb:e4: d7:04:c9:2e:67:ed:f3:5c:3d:08:da:a1:e3:d8:3d: bd:df:67:11:b6:39:d8:2d:21:91:1d:b8:9d:e5:7a: 51:0b:4e:a2:31:bf:33:33:0a:3e:16:70:af:42:79: 60:d3:b6:eb:1a:bb:c3:91:de:30:7a:ba:0d:78:33: 61:94:db:ef:00:da:01:2a:ad:c6:a9:1d:d8:d1:1a: f2:1e:13:c4:8e:12:e6:7e:6c:54:05:f8:65:ba:cb: 82:8b:86:ab:48:a4:e6:4e:64:50:b9:17:7a:49:9e: b4:d1:f5:3a:66:8b:51:87:e8:16:41:10:a8:63:99: a5:ba:b2:24:10:86:59:44:94:53:34:96:2f:9c:97: df:a7:f3:59:14:b3:74:52:a8:a0:77:55:7d:49:5f: 26:07:b4:fc:f1:92:ab:a0:9c:02:38:47:88:7a:bc: dc:9a:c0:b6:ca:cb:df:dd:a4:5c:9f:c4:25:b9:bd: de:f4:35:28:26:1a:70:58:ee:80:7d:cd:a4:a5:46: 1a:f7:5d:f5:d1:95:6b:ef:25:9c:ad:9b:07:ed:f0: 03:8b:0f:16:40:92:76:bf:91:8a:97:9d:63:ff:ab: 9e:61:94:cd:a7:0a:24:37:fe:ea:28:2f:ff:71:9a: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:30:C4:3B:24:5C:22:79:B1:BD:8A:82:B5:00:13:61:FA:E2:91:96 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1f:1d:a6:9f:f9:2a:02:0c:d9:8b:e8:2a:98:61:37:04:5c: b8:72:a5:45:0a:32:45:5d:de:4b:68:da:c9:b0:1b:19:21:4f: 76:60:67:e1:93:9f:e8:c6:9a:76:b2:bc:ec:bf:fd:26:15:ba: d6:c9:31:ba:32:00:ce:0e:e0:a8:bc:76:93:16:e5:b4:3e:8e: 5f:74:15:fd:a9:49:61:40:31:3a:7d:d8:f7:71:ae:04:3e:12: d4:a0:88:0e:e5:d4:93:5a:47:20:d7:25:08:8b:1b:ea:41:78: 89:39:b1:1e:45:05:1b:46:93:c7:0d:1a:fe:88:19:14:b3:bc: cb:d1:ba:75:6c:3a:1f:e5:7a:e7:2f:68:ae:00:86:ea:6a:73: 36:f7:84:54:53:e5:bf:63:df:f5:01:d2:33:14:33:c3:ca:40: 00:54:c7:01:08:01:93:d6:6f:a8:e1:f2:ba:97:a5:f5:fe:bb: 9f:90:c2:17:b0:1a:bb:02:55:b0:76:36:16:c9:42:94:5e:fa: ca:19:11:19:af:bf:c9:cd:3f:99:f1:7d:8a:55:dc:ab:9b:a2: 55:0d:13:9b:8e:9b:dc:46:a2:61:d0:49:53:39:ed:37:33:84: f6:e6:b6:53:7d:a0:62:78:74:c7:b7:99:bf:16:01:c9:ea:75: ca:87:ad:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIXDe5zxEjxYGgO+L1lFenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMDIxMjAwMDUyWhcNMjUxMDIyMjAwMDUyWjAzMTEwLwYDVQQD EyhmNDMwYzQzYjI0NWMyMjc5YjFiZDhhODJiNTAwMTM2MWZhZTI5MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GChzunK8V7RBw5qu+TXBMkuZ+3z XD0I2qHj2D2932cRtjnYLSGRHbid5XpRC06iMb8zMwo+FnCvQnlg07brGrvDkd4w eroNeDNhlNvvANoBKq3GqR3Y0RryHhPEjhLmfmxUBfhlusuCi4arSKTmTmRQuRd6 SZ600fU6ZotRh+gWQRCoY5mlurIkEIZZRJRTNJYvnJffp/NZFLN0Uqigd1V9SV8m B7T88ZKroJwCOEeIerzcmsC2ysvf3aRcn8Qlub3e9DUoJhpwWO6Afc2kpUYa9131 0ZVr7yWcrZsH7fADiw8WQJJ2v5GKl51j/6ueYZTNpwokN/7qKC//cZr0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQwxDskXCJ5sb2KgrUAE2H64pGWMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex8dpp/5 KgIM2YvoKphhNwRcuHKlRQoyRV3eS2jaybAbGSFPdmBn4ZOf6MaadrK87L/9JhW6 1skxujIAzg7gqLx2kxbltD6OX3QV/alJYUAxOn3Y93GuBD4S1KCIDuXUk1pHINcl CIsb6kF4iTmxHkUFG0aTxw0a/ogZFLO8y9G6dWw6H+V65y9orgCG6mpzNveEVFPl v2Pf9QHSMxQzw8pAAFTHAQgBk9ZvqOHyupel9f67n5DCF7AauwJVsHY2FslClF76 yhkRGa+/yc0/mfF9ilXcq5uiVQ0Tm46b3EaiYdBJUzntNzOE9ua2U32gYnh0x7eZ vxYByep1yoetbA== -----END CERTIFICATE-----Generated at Tue Oct 21 23:41:23 2025 by rpki-client