$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: wbs9st1zG66iFxaeNEIXz4sV3D3d3/eO17AQpoqQalI= Subject key identifier: 49:18:DA:DE:42:A0:DD:E6:F3:52:41:9B:41:58:BD:33:4A:5E:EC:5D Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A172EF471BF72530B034833568AF22B1FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 1318 Signing time: Sun 25 Oct 2026 12:00:46 +0000 Manifest this update: Sun 25 Oct 2026 12:00:46 +0000 Manifest next update: Mon 26 Oct 2026 12:00:46 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: zxkkCWBRVKIDbTZBW/rMk1GnPzoXlFa1uOhRBIWap7U=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:72:ef:47:1b:f7:25:30:b0:34:83:35:68:af:22:b1:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Oct 25 12:00:46 2026 GMT Not After : Oct 26 12:00:46 2026 GMT Subject: CN=4918dade42a0dde6f352419b4158bd334a5eec5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:08:d4:bb:8f:cc:4a:ea:6f:26:96:8f:21: ed:a1:5d:8d:67:12:43:d7:02:1b:ba:bd:93:1d:8a: 7a:4d:62:6c:ea:cf:22:8a:e4:d0:9d:50:ae:b1:45: ee:67:2b:b8:a9:78:b3:86:02:0e:9d:bb:25:66:77: a7:50:ff:23:d7:b0:b6:bb:06:34:53:00:93:13:f2: 80:ab:04:84:1f:75:62:44:61:c5:f8:a5:a7:b6:c5: 35:23:2a:b3:7f:96:2c:63:c0:22:77:c8:75:a6:fc: d6:00:6d:66:9e:03:35:66:26:d8:5a:9e:a8:50:5f: 08:95:94:0f:c7:4e:5e:d2:d8:cb:83:b6:e9:ed:c1: f0:f0:ae:a8:39:6e:7a:10:60:25:07:7d:88:bc:37: 41:88:59:c8:ed:53:fb:c2:3a:52:bb:9f:fd:cb:75: 77:e7:30:6f:00:46:09:ca:c3:92:b3:3f:70:6c:ae: 8a:12:34:93:09:13:72:21:57:d6:ee:bd:1c:10:18: 36:66:ec:6b:e3:f5:f4:87:5c:c1:e2:f8:9b:59:17: c4:29:55:46:23:21:06:e9:44:5e:4f:87:17:e6:93: 48:0f:c7:ff:46:fd:a1:83:d4:4f:be:ce:48:66:77: 4d:b7:dd:5f:7b:7d:4e:42:35:7e:bd:68:7e:2f:4e: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:DA:DE:42:A0:DD:E6:F3:52:41:9B:41:58:BD:33:4A:5E:EC:5D X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4b:39:4f:5e:f8:be:bf:7b:40:b7:cf:94:73:1c:83:94:46: b0:ea:a4:26:83:e2:37:00:42:60:23:b3:4e:11:3a:5d:75:5d: 73:f5:56:a4:e2:fe:58:b6:16:23:6f:81:c6:ef:c9:48:c9:69: 26:c5:90:bb:68:5a:84:b5:ac:3a:ca:06:e6:d8:cd:66:63:20: 2f:16:c3:4f:ec:ba:ce:72:af:1d:80:86:8d:58:f8:9f:9b:56: ea:90:29:6a:4f:65:fb:ed:09:8e:40:b5:8f:63:09:d9:b6:1b: c7:17:ac:5c:ed:2c:d9:f8:4e:76:29:cb:a7:bf:88:d5:ad:24: c4:7c:ee:9b:fd:ca:38:c2:cb:ed:cd:c4:3a:d0:67:17:ae:46: 14:a1:35:25:c1:ae:3c:31:5b:9e:5c:a5:66:d7:71:1b:99:da: de:0d:59:41:02:9e:05:df:1b:ec:06:65:04:5b:63:40:e9:ac: 2a:53:f3:41:8d:65:71:62:36:69:4c:05:8d:5f:a0:fc:b3:68: f1:01:9e:4e:eb:8b:e2:06:2a:02:f5:b5:7b:b7:83:7b:cb:68: 04:a7:21:d4:3d:c1:4f:e0:a0:b9:0d:c4:bb:80:c3:7c:4c:cb: e2:f6:8c:19:4b:e7:00:b6:46:66:2c:0a:b6:17:71:be:66:09: ac:cb:6e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFy70cb9yUwsDSDNWivIrH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMDI1MTIwMDQ2WhcNMjYxMDI2MTIwMDQ2WjAzMTEwLwYDVQQD Eyg0OTE4ZGFkZTQyYTBkZGU2ZjM1MjQxOWI0MTU4YmQzMzRhNWVlYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKkI1LuPzErqbyaWjyHtoV2NZxJD 1wIbur2THYp6TWJs6s8iiuTQnVCusUXuZyu4qXizhgIOnbslZnenUP8j17C2uwY0 UwCTE/KAqwSEH3ViRGHF+KWntsU1Iyqzf5YsY8Aid8h1pvzWAG1mngM1ZibYWp6o UF8IlZQPx05e0tjLg7bp7cHw8K6oOW56EGAlB32IvDdBiFnI7VP7wjpSu5/9y3V3 5zBvAEYJysOSsz9wbK6KEjSTCRNyIVfW7r0cEBg2Zuxr4/X0h1zB4vibWRfEKVVG IyEG6UReT4cX5pNID8f/Rv2hg9RPvs5IZndNt91fe31OQjV+vWh+L06vwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkY2t5CoN3m81JBm0FYvTNKXuxdMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEs5T174 vr97QLfPlHMcg5RGsOqkJoPiNwBCYCOzThE6XXVdc/VWpOL+WLYWI2+Bxu/JSMlp JsWQu2hahLWsOsoG5tjNZmMgLxbDT+y6znKvHYCGjVj4n5tW6pApak9l++0JjkC1 j2MJ2bYbxxesXO0s2fhOdinLp7+I1a0kxHzum/3KOMLL7c3EOtBnF65GFKE1JcGu PDFbnlylZtdxG5na3g1ZQQKeBd8b7AZlBFtjQOmsKlPzQY1lcWI2aUwFjV+g/LNo 8QGeTuuL4gYqAvW1e7eDe8toBKch1D3BT+CguQ3Eu4DDfEzL4vaMGUvnALZGZiwK thdxvmYJrMtuZw== -----END CERTIFICATE-----Generated at Sun Oct 25 18:48:25 2026 by rpki-client