$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: KsepJAyKfuvPPKmBv4y/jF71l6goBtca1dclQ5n9Zvk= Subject key identifier: B4:08:91:54:89:1D:D3:BE:BF:12:4D:75:60:77:79:D6:97:2B:52:1E Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019F1A1F6D769FCCD78EC0E297D1A8170488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 188D Signing time: Tue 30 Jun 2026 20:01:34 +0000 Manifest this update: Tue 30 Jun 2026 20:01:34 +0000 Manifest next update: Wed 01 Jul 2026 20:01:34 +0000 Files and hashes: 1: 1-vE35X7cA95yo4co5xI4LRsygqE.roa (hash: GArZfb9HlabGHSj6lQqBP09tmUxt9yZTyafscM2AVng=) 2: 8F-O76TUkmlsiOgCnmM_6nJTd4g.roa (hash: Jg+vMGJ/IvxZ8SnVP3JTyVdc1ply2v1uAg9EFIKmJK4=) 3: FTIPS48Za-3OrX5WFeE1aDhy1I0.roa (hash: JfooxlcoS4oq09eFTznhIKolKx+OEbrJm7ESIobakUg=) 4: Fh-Fpr_uHjcMFD06n24XprpSG1M.roa (hash: FmZcmk95+iBFV9lKN3BmY/9kElMyaU+AZ6vmkOB1orM=) 5: H_-983GgKYxhkkt3nnpQcnHg30Y.roa (hash: Vd3cVl32ciW8wDwlKvX6dteoTksKbjaVlUmvnCCj7EU=) 6: KQlwkPmpk1DLGUyeI2rVK9lNE7E.roa (hash: bwKf8d6A05QgLcfG48aYiSBWbkKSxoVtSdwZtCZpE+U=) 7: Oqt--JM-bQkAEwluYF_VbCJNXBk.roa (hash: qgtHHT2LrCzQJdNXo2JdjcQzzNmHNGHV0c6PUoEL78k=) 8: bCNLowmF60GtTgq9MrPewL3-uQM.roa (hash: 6XTgGY9inLGGmIYKO2xERVTl3h4QMDusQwowddy15I8=) 9: ejTvaV2blN9QenSFLNnrpBZq49g.roa (hash: Y7jff0ticwpNpSgfsyRoCcnLBtZbRBWqW7cbBoyiVCM=) 10: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: d0L0BCapPwJ+U58rjGHDAeQWo7taHFSMxl6KS3Td+VQ=) 11: nq6pDF5PCk2N9cPjSjfM50wXO9w.roa (hash: G1Ywhcu+WSXWGvbw/G0u1TXbTpmgtQzLkStG8DNuRus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1a:1f:6d:76:9f:cc:d7:8e:c0:e2:97:d1:a8:17:04:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jun 30 20:01:34 2026 GMT Not After : Jul 1 20:01:34 2026 GMT Subject: CN=b4089154891dd3bebf124d75607779d6972b521e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1b:d5:dc:70:c8:b4:2c:57:f3:ba:8f:24:75: fc:fc:ce:f5:1a:89:93:ff:03:9d:a1:24:28:c3:75: cf:f5:22:55:b9:b1:52:46:fb:46:1d:05:7c:8e:4c: 3d:3f:aa:8d:79:dd:c4:60:b8:b6:e5:55:1c:76:3c: 40:52:f5:e0:16:2e:82:d6:59:2e:5b:32:22:08:b0: 54:d3:20:a0:45:1f:dc:9d:a9:f8:03:ac:e9:46:76: e9:4d:94:e8:70:fc:13:61:7b:6b:52:6e:b3:47:c7: 80:b4:39:c3:1e:7a:8e:70:2f:41:93:e1:61:d9:2f: be:c3:4c:13:14:a8:2f:2f:85:75:0e:a0:51:71:15: fd:5b:d4:7f:55:ed:2a:64:b3:05:d9:94:0f:90:98: 7c:f8:95:aa:7d:ce:37:e0:ac:e3:e4:df:77:44:fa: 98:09:7f:9d:30:66:e6:30:a5:10:98:c8:d3:d6:0d: 35:1f:bb:84:d0:a5:8a:2f:35:bb:eb:fc:83:b7:d4: cd:98:76:47:44:55:25:dd:a8:02:7d:b9:d7:65:5b: 53:03:ae:79:00:d0:0b:5d:ff:ae:16:e2:5a:84:d1: 8f:88:14:e8:ed:6e:c0:98:7d:d5:d8:85:29:11:e9: cb:ba:c6:c6:69:1c:43:e3:bc:45:60:3b:39:5d:60: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:08:91:54:89:1D:D3:BE:BF:12:4D:75:60:77:79:D6:97:2B:52:1E X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:37:73:cf:2e:68:1d:ea:b7:63:ad:d1:a5:03:45:c8:76:8f: 1b:dd:3b:82:07:4b:2e:34:6f:6e:4f:81:1a:af:5d:e8:3c:43: d2:f0:a5:e5:5b:04:2c:f2:79:37:40:7b:e3:28:7b:49:75:46: 11:14:95:53:0f:3c:88:c5:3b:f3:4b:a2:99:89:7d:3a:3c:8f: f5:86:88:4f:a7:db:ae:7a:b9:b1:bd:a8:8b:e0:ee:57:1e:8d: 51:cf:8a:80:01:8f:9c:78:ae:d6:76:5f:34:cc:58:f4:a8:57: 16:60:d0:e3:ef:ac:dc:48:45:46:52:24:c0:64:8d:f5:c1:09: 12:68:8d:10:53:6a:14:3a:1d:bb:f2:0d:d8:52:c5:1e:77:c3: 99:77:ea:07:47:de:88:f5:7b:12:23:b4:92:93:1d:5e:07:90: 17:07:87:48:c4:30:18:b8:e8:f0:cb:2b:e0:de:44:7c:ff:70: 77:92:e8:fe:02:6f:52:36:fc:89:52:d0:c5:a2:71:6d:4a:f8: cb:41:dc:3a:88:ad:f3:8a:06:7e:3a:6b:a4:04:23:1d:ed:2b: 37:ce:29:70:44:87:c0:36:7e:52:c3:f4:0b:c1:60:21:44:24: 21:73:d3:70:0a:88:76:2b:33:dd:09:df:21:e3:6b:84:a6:8b: bc:ed:33:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8aH212n8zXjsDil9GoFwSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwNjMwMjAwMTM0WhcNMjYwNzAxMjAwMTM0WjAzMTEwLwYDVQQD EyhiNDA4OTE1NDg5MWRkM2JlYmYxMjRkNzU2MDc3NzlkNjk3MmI1MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hvV3HDItCxX87qPJHX8/M71GomT /wOdoSQow3XP9SJVubFSRvtGHQV8jkw9P6qNed3EYLi25VUcdjxAUvXgFi6C1lku WzIiCLBU0yCgRR/cnan4A6zpRnbpTZTocPwTYXtrUm6zR8eAtDnDHnqOcC9Bk+Fh 2S++w0wTFKgvL4V1DqBRcRX9W9R/Ve0qZLMF2ZQPkJh8+JWqfc434Kzj5N93RPqY CX+dMGbmMKUQmMjT1g01H7uE0KWKLzW76/yDt9TNmHZHRFUl3agCfbnXZVtTA655 ANALXf+uFuJahNGPiBTo7W7AmH3V2IUpEenLusbGaRxD47xFYDs5XWB8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQIkVSJHdO+vxJNdWB3edaXK1IeMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjdzzy5o Heq3Y63RpQNFyHaPG907ggdLLjRvbk+BGq9d6DxD0vCl5VsELPJ5N0B74yh7SXVG ERSVUw88iMU780uimYl9OjyP9YaIT6fbrnq5sb2oi+DuVx6NUc+KgAGPnHiu1nZf NMxY9KhXFmDQ4++s3EhFRlIkwGSN9cEJEmiNEFNqFDodu/IN2FLFHnfDmXfqB0fe iPV7EiO0kpMdXgeQFweHSMQwGLjo8Msr4N5EfP9wd5Lo/gJvUjb8iVLQxaJxbUr4 y0HcOoit84oGfjprpAQjHe0rN84pcESHwDZ+UsP0C8FgIUQkIXPTcAqIdisz3Qnf IeNrhKaLvO0zlQ== -----END CERTIFICATE-----Generated at Tue Jun 30 22:44:43 2026 by rpki-client