$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: MwFzk5cj0qYY74ohKb00TSRB85rt25kP/BuS2PjcTqU= Subject key identifier: 9C:70:E6:AF:D2:D7:1F:87:BC:4E:55:82:BC:F4:5F:3C:8C:4E:24:44 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019F1F0EF31F96E9027B6DF5625099931569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0519 Signing time: Wed 01 Jul 2026 19:01:41 +0000 Manifest this update: Wed 01 Jul 2026 19:01:41 +0000 Manifest next update: Thu 02 Jul 2026 19:01:41 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: Qc7O+rZtrnqomgcNIbhuubb1kH2DH5sAVCdMPDqqsio=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 10: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 16:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1f:0e:f3:1f:96:e9:02:7b:6d:f5:62:50:99:93:15:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jul 1 19:01:41 2026 GMT Not After : Jul 2 19:01:41 2026 GMT Subject: CN=9c70e6afd2d71f87bc4e5582bcf45f3c8c4e2444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:be:7f:e6:b9:23:ad:e9:b1:92:f1:f7:64: 75:d5:12:1b:38:a1:4f:47:3d:db:f7:9d:7a:d0:9c: ee:81:67:b5:8a:c0:da:fc:ca:87:31:cd:60:71:82: 00:1c:37:72:e9:8c:6a:44:b4:87:5e:6b:66:5e:97: 2e:9a:7a:23:ac:8e:66:95:ed:97:92:67:4c:ad:b3: d3:26:52:cb:bd:2b:b1:3f:c1:24:a1:35:f9:da:ad: f9:69:91:5f:8c:56:e4:6c:cd:63:d8:06:d0:56:ac: 36:4d:22:10:f5:3e:ce:ec:64:ac:38:13:f3:57:40: fd:71:79:4d:97:aa:18:b7:da:22:66:c9:47:3d:63: 66:07:87:77:ad:a4:4f:e9:c5:f1:8a:10:c5:a7:44: 56:58:f2:ad:68:19:0f:70:3a:63:a0:03:d2:1b:bf: 3e:c4:45:05:05:d8:c2:81:f9:3e:fc:4d:55:62:5b: c7:ae:25:fa:e0:75:8d:24:6a:ba:45:71:99:a1:f6: e2:14:df:13:bd:68:cb:2d:b7:d8:29:f3:69:a6:ae: 07:c1:6a:3b:e6:02:97:d4:d5:ec:63:27:c6:70:77: 2f:d5:28:18:a9:10:99:6c:05:c5:50:28:67:cf:aa: 7c:3d:a7:5d:d2:df:04:e5:64:c2:c6:38:1f:c1:f4: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:E6:AF:D2:D7:1F:87:BC:4E:55:82:BC:F4:5F:3C:8C:4E:24:44 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d9:5b:5e:bb:87:80:fd:10:1a:82:1c:3b:90:cc:39:23:84: 65:ff:8d:55:b7:84:db:3b:ee:88:c9:44:4c:c7:0f:72:99:ca: 29:2b:3e:d0:6e:45:86:74:1a:9a:2d:f8:c1:00:46:db:98:5b: 4e:ca:6f:68:6f:56:58:b1:d5:7d:e4:b8:6e:26:8a:3d:d2:ce: 76:c0:fe:47:5a:46:75:86:8a:4c:ff:14:62:17:44:99:67:a1: f5:59:12:1d:89:17:0d:4a:58:b5:53:24:fb:a1:f5:87:c2:4b: 7c:c6:ca:45:0b:29:c8:a7:4e:cf:7f:d7:69:49:2b:47:0c:a2: 73:b5:6d:d2:f8:6d:53:8e:d4:30:17:22:83:ce:96:7b:b1:dc: 42:4e:91:5c:39:4a:10:2d:a4:a3:17:37:76:7b:de:8b:bb:da: d2:de:4a:37:25:6d:a4:95:59:01:12:80:d0:20:cc:59:08:9b: a2:22:60:bf:b3:bf:32:09:47:84:99:86:8f:2c:19:77:93:50: 77:ee:6a:b2:9f:b0:9d:e7:ba:f4:c7:68:d0:f8:07:69:4f:19: 72:28:94:18:6c:ed:ee:47:bb:3f:e9:ac:0f:3b:31:b0:36:27: 6c:b1:e3:0d:e7:fe:07:c2:83:e0:a5:30:bd:b7:08:e8:ea:1f: 2d:e0:ec:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8fDvMflukCe231YlCZkxVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNzAxMTkwMTQxWhcNMjYwNzAyMTkwMTQxWjAzMTEwLwYDVQQD Eyg5YzcwZTZhZmQyZDcxZjg3YmM0ZTU1ODJiY2Y0NWYzYzhjNGUyNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV++f+a5I63psZLx92R11RIbOKFP Rz3b95160JzugWe1isDa/MqHMc1gcYIAHDdy6YxqRLSHXmtmXpcumnojrI5mle2X kmdMrbPTJlLLvSuxP8EkoTX52q35aZFfjFbkbM1j2AbQVqw2TSIQ9T7O7GSsOBPz V0D9cXlNl6oYt9oiZslHPWNmB4d3raRP6cXxihDFp0RWWPKtaBkPcDpjoAPSG78+ xEUFBdjCgfk+/E1VYlvHriX64HWNJGq6RXGZofbiFN8TvWjLLbfYKfNppq4HwWo7 5gKX1NXsYyfGcHcv1SgYqRCZbAXFUChnz6p8Padd0t8E5WTCxjgfwfTKMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxw5q/S1x+HvE5Vgrz0XzyMTiREMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdlbXruH gP0QGoIcO5DMOSOEZf+NVbeE2zvuiMlETMcPcpnKKSs+0G5FhnQami34wQBG25hb TspvaG9WWLHVfeS4biaKPdLOdsD+R1pGdYaKTP8UYhdEmWeh9VkSHYkXDUpYtVMk +6H1h8JLfMbKRQspyKdOz3/XaUkrRwyic7Vt0vhtU47UMBcig86We7HcQk6RXDlK EC2koxc3dnvei7va0t5KNyVtpJVZARKA0CDMWQiboiJgv7O/MglHhJmGjywZd5NQ d+5qsp+wnee69Mdo0PgHaU8ZciiUGGzt7ke7P+msDzsxsDYnbLHjDef+B8KD4KUw vbcI6OofLeDsaA== -----END CERTIFICATE-----Generated at Thu Jul 2 00:22:26 2026 by rpki-client