$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: vkVebSjQZnWeRrkudPmmzAEQNX98ymWwltQst0dro9k= Subject key identifier: DC:D6:D3:C5:34:1F:33:5E:DF:7D:C3:C1:D6:5A:B1:A8:9C:27:BA:AE Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019E2024408F1BAB1457BA740E08E085A17C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0495 Signing time: Wed 13 May 2026 07:01:47 +0000 Manifest this update: Wed 13 May 2026 07:01:47 +0000 Manifest next update: Thu 14 May 2026 07:01:47 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: so2Eex5sz5OdRIimAtN/tEtM9YtMrEfL7b88TvdT+cg=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 10: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:20:24:40:8f:1b:ab:14:57:ba:74:0e:08:e0:85:a1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: May 13 07:01:47 2026 GMT Not After : May 14 07:01:47 2026 GMT Subject: CN=dcd6d3c5341f335edf7dc3c1d65ab1a89c27baae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:79:99:c6:92:52:23:a0:09:93:e2:d5:7c: 5f:07:ad:66:f0:a4:69:42:3b:f1:84:58:89:48:6f: fa:56:c3:6c:58:b6:6b:60:4e:e2:c8:4b:52:a0:8e: 67:38:fd:0c:d4:29:98:00:6c:6a:fe:c2:54:d9:c8: 59:24:87:23:1c:dc:5f:f7:a6:c9:6f:ae:1c:71:08: 9c:9f:f5:c6:6f:3b:22:ac:cc:44:16:2c:c1:f6:4e: 18:4f:d4:28:61:bb:ec:3f:47:2f:88:cc:50:43:1f: aa:b6:95:88:95:90:0e:12:55:84:cd:34:b7:6b:a9: ad:1a:23:6c:0a:4d:2a:20:f9:42:e5:a3:1c:60:4e: cb:4a:e0:04:23:2a:10:6a:92:c8:c0:3a:6a:dd:78: 59:7d:aa:cf:f9:3d:e5:6f:c5:c3:0c:e6:9e:d1:c3: ab:4c:bf:46:1d:60:9b:1b:8c:ec:72:d5:8c:dc:c0: 20:1e:3f:cb:20:1e:f9:31:9b:0a:9b:05:80:e3:17: 1c:b0:6d:f4:61:b1:42:50:25:6b:43:ac:3b:82:1b: fd:62:07:ba:00:bc:2a:46:48:9f:86:fb:78:98:57: aa:7b:be:09:0c:86:28:93:aa:0d:b7:a6:d1:1a:56: fb:e6:bc:06:9b:03:87:b9:4e:31:31:b4:52:c5:36: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:D3:C5:34:1F:33:5E:DF:7D:C3:C1:D6:5A:B1:A8:9C:27:BA:AE X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:ba:85:1a:81:8d:e2:30:96:7f:ea:be:7a:bf:99:f6:f0: 32:b0:6c:fa:ce:ab:aa:f3:c7:27:97:a7:39:dd:c1:99:d4:75: bc:e0:dd:db:ff:2d:5f:3c:18:50:69:b5:cd:e1:92:1b:09:e2: aa:d3:9c:17:20:d4:a9:88:09:9f:1f:35:ac:9c:92:df:4b:fa: da:45:41:06:34:94:88:66:06:cc:89:3a:44:18:18:90:58:5f: 10:72:11:40:54:11:57:b0:0e:10:0e:c6:2f:b8:72:fb:59:65: e5:84:6b:6d:06:bd:d9:23:9c:16:0e:4a:bb:9b:f1:30:f0:04: 0e:9d:50:06:69:44:e7:62:af:c3:a8:b1:08:43:5e:81:9d:7f: db:14:88:d4:42:87:64:50:2e:3b:2d:93:09:d8:af:e1:d5:15: c7:15:b6:c2:9e:87:02:46:48:54:2c:11:c4:88:c2:28:41:c8: 49:81:62:17:72:4a:9e:db:74:30:6d:2c:b0:4b:fc:be:46:a7: 15:f7:cd:1c:fe:94:cf:3f:f9:5f:df:a3:f6:64:aa:b4:40:06: 90:c4:7d:36:34:b0:48:56:5e:2d:9d:25:9c:dd:bf:85:11:aa: 63:ec:02:73:f5:98:76:ca:f9:4f:d2:94:00:72:b2:49:e1:f9: 89:59:77:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4gJECPG6sUV7p0DgjghaF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNTEzMDcwMTQ3WhcNMjYwNTE0MDcwMTQ3WjAzMTEwLwYDVQQD EyhkY2Q2ZDNjNTM0MWYzMzVlZGY3ZGMzYzFkNjVhYjFhODljMjdiYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ15mcaSUiOgCZPi1XxfB61m8KRp QjvxhFiJSG/6VsNsWLZrYE7iyEtSoI5nOP0M1CmYAGxq/sJU2chZJIcjHNxf96bJ b64ccQicn/XGbzsirMxEFizB9k4YT9QoYbvsP0cviMxQQx+qtpWIlZAOElWEzTS3 a6mtGiNsCk0qIPlC5aMcYE7LSuAEIyoQapLIwDpq3XhZfarP+T3lb8XDDOae0cOr TL9GHWCbG4zsctWM3MAgHj/LIB75MZsKmwWA4xccsG30YbFCUCVrQ6w7ghv9Yge6 ALwqRkifhvt4mFeqe74JDIYok6oNt6bRGlb75rwGmwOHuU4xMbRSxTbrPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzW08U0HzNe333DwdZasaicJ7quMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw+6hRqB jeIwln/qvnq/mfbwMrBs+s6rqvPHJ5enOd3BmdR1vODd2/8tXzwYUGm1zeGSGwni qtOcFyDUqYgJnx81rJyS30v62kVBBjSUiGYGzIk6RBgYkFhfEHIRQFQRV7AOEA7G L7hy+1ll5YRrbQa92SOcFg5Ku5vxMPAEDp1QBmlE52Kvw6ixCENegZ1/2xSI1EKH ZFAuOy2TCdiv4dUVxxW2wp6HAkZIVCwRxIjCKEHISYFiF3JKntt0MG0ssEv8vkan FffNHP6Uzz/5X9+j9mSqtEAGkMR9NjSwSFZeLZ0lnN2/hRGqY+wCc/WYdsr5T9KU AHKySeH5iVl3WQ== -----END CERTIFICATE-----Generated at Wed May 13 10:50:57 2026 by rpki-client