$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: 4mQ9d6apGwzHr0WTohX7OOtfPa6bvTNE5vuTxatfhxI= Subject key identifier: 91:28:4F:6E:5E:0C:99:74:C4:0E:64:73:7D:43:9A:88:F1:D7:30:F7 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 01A10700DF0E9645190FEF3E778718A39262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 061A Signing time: Sun 04 Oct 2026 13:00:59 +0000 Manifest this update: Sun 04 Oct 2026 13:00:59 +0000 Manifest next update: Mon 05 Oct 2026 13:00:59 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 2oUCAmQ_JBLLzK9lNtPeqSU_xMk.roa (hash: Y9xlUpgRZjeRhxT7Uz6aik8QvK6gVshg+R8VfpRfP+A=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: 8dtoZcVA82_bFoICfbYGeSr6QLE.roa (hash: zj9vEtiqk32dRZWAG047WGx6N1C5sZIlxGfiVzIU5cA=) 5: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 6: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: WiMl+S5nPbQz/JsvK7W9Giea1F+UejAfYUFw7Ff9qXM=) 7: I6oLG3dm7ddv6spHYQtsETlJMWo.roa (hash: keMPx8DSwHVMHVz8Rsk2ht0T92tQ/T9DceCxLpXjRwI=) 8: Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa (hash: 9eFCsDkuGfIqNhJvWLEWzC5tEEtK4gEuKMDK5LAI2X4=) 9: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 10: ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa (hash: LnaAJuj99vAMW7ciXruEozC3uPYJ6VZLPCj09EMLZA0=) 11: g7raxSm3_Gd1W67GWI98P-YJ6e8.roa (hash: E+IMIxEsz77jqGUmol6mnW+1sPJh8YL/IAo2w/YvhXo=) 12: i5N-SROQ36wWhJUpPxoOy6LKbDo.roa (hash: rA5BkggNvEXpNXTT/SzWVgwrQNAJo++ubLlIUv4drvE=) 13: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:07:00:df:0e:96:45:19:0f:ef:3e:77:87:18:a3:92:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Oct 4 13:00:59 2026 GMT Not After : Oct 5 13:00:59 2026 GMT Subject: CN=91284f6e5e0c9974c40e64737d439a88f1d730f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:0f:8f:0c:86:8c:c9:df:14:41:22:30:6c: 1b:43:01:05:41:38:11:69:a2:ae:ae:23:af:d6:96: 7a:35:b7:c8:31:cb:7c:34:89:df:91:2c:a0:81:d6: bc:3d:df:94:9c:03:9c:24:95:86:f1:1b:4b:e4:ba: bd:40:04:0e:bd:33:a8:86:60:fd:7f:25:af:89:fb: 37:04:e3:40:6a:44:8f:3e:a9:1e:7d:8e:17:75:37: 9d:c8:76:ed:9b:5d:ca:32:bb:f0:bc:8b:81:63:10: 30:0a:f4:7f:bb:10:a7:5b:fe:42:a5:93:c7:0a:df: 26:bc:39:fe:b6:41:26:d8:00:6a:8b:fe:47:0e:28: 7c:3b:e6:85:6e:b4:b6:c3:62:a2:80:d2:7d:cb:47: d6:ef:90:87:84:fe:e6:b9:86:df:85:e0:79:ac:e8: 82:c7:95:48:52:0b:09:94:e7:81:33:9d:d0:33:64: f9:9b:6b:fd:14:f6:84:ef:2a:d3:4f:f0:29:bd:e0: 54:bc:a2:38:85:fa:c4:5f:e4:dc:11:79:a8:76:36: df:d5:46:1a:bb:4d:b4:86:2d:d2:4e:dc:da:a7:12: b0:1c:33:60:86:af:1c:d9:7e:86:3e:b8:1b:11:c8: 3f:5f:b9:d1:70:16:0c:d0:f8:4f:e4:b5:91:df:7a: 88:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:4F:6E:5E:0C:99:74:C4:0E:64:73:7D:43:9A:88:F1:D7:30:F7 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d4:b3:86:b1:45:e0:a6:fd:d0:bb:90:94:f6:1e:6d:dd:d1: 8c:06:7c:e8:fa:74:eb:26:29:35:9d:7a:9d:50:28:8a:a0:d0: bb:29:0d:41:3f:07:9e:e1:5e:6e:f1:91:1d:70:c8:8a:58:0b: 26:f9:1d:58:dc:39:6b:03:bf:bb:c2:0f:52:11:db:0d:2a:d8: 2c:6e:13:38:8d:5f:93:0a:3e:05:13:2c:ae:1e:52:84:e1:03: 99:d7:ac:87:e0:ad:90:9a:98:e1:f4:6a:5a:58:30:59:70:21: 38:20:9c:0c:59:2f:8d:b8:b2:7a:c7:44:98:21:b7:a7:cc:0f: f8:fb:6a:29:ac:71:b5:20:da:f4:b9:50:4f:0a:3d:02:86:6b: 18:bb:47:4e:a6:2a:6e:1d:5b:d9:2e:68:e6:ea:0b:d0:c4:51: eb:06:f9:fc:f2:81:b4:72:25:9a:9f:d3:dd:32:31:36:65:87: 26:83:9d:dd:9c:54:de:fc:77:8a:51:c7:ba:fa:34:15:61:41: 2b:16:2d:0e:d3:23:44:8c:8b:c5:f6:6d:d9:7c:30:e3:83:6f: 5a:5e:21:bd:1c:d9:52:16:0a:ec:6b:75:05:15:61:94:7b:a7: 05:ae:f2:17:c2:c6:35:0d:f1:45:ca:b3:3a:4b:ba:69:b2:7a: 4c:30:cf:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEHAN8OlkUZD+8+d4cYo5JiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYxMDA0MTMwMDU5WhcNMjYxMDA1MTMwMDU5WjAzMTEwLwYDVQQD Eyg5MTI4NGY2ZTVlMGM5OTc0YzQwZTY0NzM3ZDQzOWE4OGYxZDczMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFoPjwyGjMnfFEEiMGwbQwEFQTgR aaKuriOv1pZ6NbfIMct8NInfkSyggda8Pd+UnAOcJJWG8RtL5Lq9QAQOvTOohmD9 fyWvifs3BONAakSPPqkefY4XdTedyHbtm13KMrvwvIuBYxAwCvR/uxCnW/5CpZPH Ct8mvDn+tkEm2ABqi/5HDih8O+aFbrS2w2KigNJ9y0fW75CHhP7muYbfheB5rOiC x5VIUgsJlOeBM53QM2T5m2v9FPaE7yrTT/ApveBUvKI4hfrEX+TcEXmodjbf1UYa u020hi3STtzapxKwHDNghq8c2X6GPrgbEcg/X7nRcBYM0PhP5LWR33qImQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEoT25eDJl0xA5kc31Dmojx1zD3MB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtSzhrFF 4Kb90LuQlPYebd3RjAZ86Pp06yYpNZ16nVAoiqDQuykNQT8HnuFebvGRHXDIilgL JvkdWNw5awO/u8IPUhHbDSrYLG4TOI1fkwo+BRMsrh5ShOEDmdesh+CtkJqY4fRq WlgwWXAhOCCcDFkvjbiyesdEmCG3p8wP+PtqKaxxtSDa9LlQTwo9AoZrGLtHTqYq bh1b2S5o5uoL0MRR6wb5/PKBtHIlmp/T3TIxNmWHJoOd3ZxU3vx3ilHHuvo0FWFB KxYtDtMjRIyLxfZt2Xww44NvWl4hvRzZUhYK7Gt1BRVhlHunBa7yF8LGNQ3xRcqz Oku6abJ6TDDP8w== -----END CERTIFICATE-----Generated at Sun Oct 4 17:40:37 2026 by rpki-client