$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: +kkMS6Q3OPmLrwgJPPwgAVUV4IOCl4m5QGCIU9gedU8= Subject key identifier: FE:E3:9B:9C:F6:55:AF:BF:E5:79:35:2A:D1:87:DE:81:68:A2:7D:9B Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019D2E181004E9E5721CC0229B79A051B72F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0417 Signing time: Fri 27 Mar 2026 07:00:21 +0000 Manifest this update: Fri 27 Mar 2026 07:00:21 +0000 Manifest next update: Sat 28 Mar 2026 07:00:21 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: ZuySP7qxhyGnwlV5LA9Hy3bABtrZqm6QjxJsi8CPw/4=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2e:18:10:04:e9:e5:72:1c:c0:22:9b:79:a0:51:b7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Mar 27 07:00:21 2026 GMT Not After : Mar 28 07:00:21 2026 GMT Subject: CN=fee39b9cf655afbfe579352ad187de8168a27d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:a1:23:e5:47:7f:11:95:dd:8c:4a:2e:46: ca:17:91:3b:ba:ed:50:01:86:31:a0:a1:21:83:f3: f8:f3:8c:3b:b6:a9:18:8e:51:d2:ea:54:e2:bf:8d: b8:2c:d2:9a:74:7a:c1:7b:a8:45:3e:42:74:c2:61: bc:84:60:74:8d:b8:b6:9f:2b:5d:5d:2b:c7:93:b6: d6:78:a8:a0:7f:1a:f3:65:2a:40:0b:57:d0:2a:3e: 9d:48:3b:8f:d3:02:3f:56:f5:3e:43:71:9c:fb:99: 4f:bf:ca:f3:62:4b:a2:1e:09:1e:8c:48:c7:b0:bf: c7:3f:19:81:db:3f:4e:81:da:46:a5:9a:0b:e5:5d: b3:d6:b4:4b:72:e0:ed:2d:0b:20:49:c8:1e:c0:22: 48:28:eb:ab:99:78:5a:ce:e8:fe:59:29:8b:7b:b9: 37:c8:92:dc:12:5d:d8:0b:41:cb:13:16:68:48:c1: 42:26:ef:29:a6:5b:ce:63:63:be:9d:c8:e6:17:44: be:54:51:53:23:99:a1:9c:e0:39:7e:5c:44:99:6c: 4d:28:8a:60:b6:2b:9c:ef:5a:9f:6e:74:09:83:54: 93:7c:92:e2:f6:af:24:05:13:3f:e9:ae:f9:85:56: a0:6c:51:a5:52:58:04:08:62:c1:53:ba:a5:32:6e: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E3:9B:9C:F6:55:AF:BF:E5:79:35:2A:D1:87:DE:81:68:A2:7D:9B X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a3:bf:6b:69:b0:ca:8a:26:b1:ff:5f:e3:da:55:57:d5:0e: d5:77:18:cb:39:f8:90:57:30:0a:7c:58:26:ca:bd:a7:a2:55: 7c:e2:d5:44:c4:46:bb:77:14:48:9b:40:1a:48:63:2b:9e:54: 0f:8f:15:6e:cf:c9:e2:41:8b:3c:80:2a:3f:ef:e5:75:1e:59: 68:ea:10:59:8b:4b:bd:e4:a3:fd:c9:09:8e:fb:8e:2f:b9:18: f5:1b:4c:ac:ee:81:38:c5:4b:40:1f:18:69:b4:8d:b5:e7:56: ac:77:e7:5d:92:c8:1e:4b:e2:85:cc:d4:60:59:94:95:fa:c0: 1f:6f:15:70:e3:2b:1b:6d:30:09:b3:2b:97:a1:88:c4:c2:b9: b8:26:06:d2:9c:18:28:73:c0:4d:5a:82:7b:85:4b:44:ae:45: 8e:10:91:37:3c:f2:78:38:66:73:32:e2:bf:a8:b9:54:4b:bd: c3:b0:5f:75:bb:80:86:f4:90:e9:44:b3:ef:0f:26:4d:ba:9a: 05:b5:18:2b:80:8e:4c:bf:78:ca:42:fb:8e:db:8e:c4:df:29: 0d:94:a0:a6:56:da:c3:3e:a9:b5:35:61:00:90:b1:63:12:89: 77:4b:c3:57:e0:93:fd:97:6b:e9:78:03:d8:3b:d3:8b:a9:3c: ab:96:ce:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0uGBAE6eVyHMAim3mgUbcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMzI3MDcwMDIxWhcNMjYwMzI4MDcwMDIxWjAzMTEwLwYDVQQD EyhmZWUzOWI5Y2Y2NTVhZmJmZTU3OTM1MmFkMTg3ZGU4MTY4YTI3ZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun2hI+VHfxGV3YxKLkbKF5E7uu1Q AYYxoKEhg/P484w7tqkYjlHS6lTiv424LNKadHrBe6hFPkJ0wmG8hGB0jbi2nytd XSvHk7bWeKigfxrzZSpAC1fQKj6dSDuP0wI/VvU+Q3Gc+5lPv8rzYkuiHgkejEjH sL/HPxmB2z9OgdpGpZoL5V2z1rRLcuDtLQsgScgewCJIKOurmXhazuj+WSmLe7k3 yJLcEl3YC0HLExZoSMFCJu8pplvOY2O+ncjmF0S+VFFTI5mhnOA5flxEmWxNKIpg tiuc71qfbnQJg1STfJLi9q8kBRM/6a75hVagbFGlUlgECGLBU7qlMm7SYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7jm5z2Va+/5Xk1KtGH3oFoon2bMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKO/a2mw yoomsf9f49pVV9UO1XcYyzn4kFcwCnxYJsq9p6JVfOLVRMRGu3cUSJtAGkhjK55U D48Vbs/J4kGLPIAqP+/ldR5ZaOoQWYtLveSj/ckJjvuOL7kY9RtMrO6BOMVLQB8Y abSNtedWrHfnXZLIHkvihczUYFmUlfrAH28VcOMrG20wCbMrl6GIxMK5uCYG0pwY KHPATVqCe4VLRK5FjhCRNzzyeDhmczLiv6i5VEu9w7BfdbuAhvSQ6USz7w8mTbqa BbUYK4COTL94ykL7jtuOxN8pDZSgplbawz6ptTVhAJCxYxKJd0vDV+CT/Zdr6XgD 2DvTi6k8q5bOcw== -----END CERTIFICATE-----Generated at Fri Mar 27 10:11:12 2026 by rpki-client