$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: M9IAZx5LiYkU2099ediHqrBKqmYqSolIWTypMMTGQB8= Subject key identifier: 4D:CE:33:88:4F:14:EB:20:D1:87:EF:96:8B:44:2B:81:F3:D8:C7:09 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019E0C2E8BA1EBAB58EBEB5C3E018735499F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 114C Signing time: Sat 09 May 2026 10:00:37 +0000 Manifest this update: Sat 09 May 2026 10:00:37 +0000 Manifest next update: Sun 10 May 2026 10:00:37 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: 5kYch1veTzKCBYSN8/gjBiIRwTvBvlhRnHoj2ZnCZsc=) 7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=) 9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=) 11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 May 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:0c:2e:8b:a1:eb:ab:58:eb:eb:5c:3e:01:87:35:49:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: May 9 10:00:37 2026 GMT Not After : May 10 10:00:37 2026 GMT Subject: CN=4dce33884f14eb20d187ef968b442b81f3d8c709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:6a:3a:ce:05:0b:54:f0:cb:77:04:6a:81: b7:4c:f7:ce:3a:83:7e:04:b8:2c:75:56:8e:03:49: 0a:53:67:f1:1d:a3:a1:02:f5:0c:cc:d1:a8:9b:d2: a3:fe:ca:bd:c8:02:c1:86:c6:46:ed:a4:d2:00:1d: b4:92:02:14:57:48:9c:c5:66:ce:44:d8:57:13:cb: 6f:98:55:5b:ee:65:b3:9b:6d:0e:f3:31:ba:27:8f: e8:14:82:9b:ef:52:37:4e:b4:6e:92:20:9b:5e:16: 97:cf:b4:48:5e:fc:23:ef:30:54:d0:ab:0c:e3:5f: b0:95:a0:2b:20:d7:e7:a1:3d:11:62:dd:c1:be:8c: 9b:50:ca:bb:e7:59:49:94:03:86:e9:30:45:ef:46: 3a:de:6d:aa:64:37:9d:81:f1:ef:35:f3:dc:0d:72: 70:ac:be:3b:30:c5:2e:47:2e:72:47:4d:87:49:65: e2:12:c8:12:3e:ce:50:8d:b1:2f:2e:b9:a1:a5:9b: 0b:6d:14:c3:94:d7:3b:16:3f:1c:ea:5a:bc:b5:12: 32:a3:ce:e3:29:84:63:2a:cf:83:b1:29:3b:3b:37: ce:de:5f:08:24:d7:94:ac:de:ce:d3:d9:21:04:72: 6f:ce:db:60:e2:7c:51:4a:72:b5:b2:fc:75:b7:5b: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:33:88:4F:14:EB:20:D1:87:EF:96:8B:44:2B:81:F3:D8:C7:09 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8b:1d:f0:70:b5:43:47:93:1b:ab:36:df:c8:aa:96:20:c0: a5:8f:26:d8:5b:27:43:73:d1:71:76:7f:18:f8:60:eb:54:ad: f4:75:b7:44:69:5b:75:0c:1d:7c:95:1c:8f:9a:9e:02:18:c1: d2:79:ec:ff:e0:07:bb:b1:eb:b8:12:e6:94:e1:26:f2:39:a4: b1:f7:ad:fa:ad:0c:e7:9f:11:f2:88:22:36:13:ec:e1:e6:7e: 40:c0:45:44:17:eb:44:ec:cd:ba:39:83:72:aa:71:dd:65:d9: 25:da:23:76:3d:93:9d:ee:e2:f7:a7:56:ee:82:38:13:05:20: 3c:7f:0f:73:9f:4b:27:22:1d:4e:b9:07:ac:1a:b4:bd:fb:2e: e8:74:c1:4a:23:4d:4c:44:23:ae:34:53:10:f0:23:46:6f:d0: 69:a5:ce:9b:d9:b2:74:b1:e8:5a:a6:15:eb:f3:d4:f3:a0:99: 12:92:9b:10:c8:ce:84:59:50:65:66:b7:fe:b7:7a:82:63:01: b9:41:a9:70:ef:1c:ed:43:c9:22:d7:a6:7b:40:35:14:4f:0a: b4:96:f4:92:ea:22:cc:00:8a:14:6a:f9:7f:c6:6f:fc:ea:dd: 55:a5:77:ab:41:2b:71:a0:40:7b:9f:38:b3:e0:7b:1c:af:da: d7:f8:1e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4MLouh66tY6+tcPgGHNUmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwNTA5MTAwMDM3WhcNMjYwNTEwMTAwMDM3WjAzMTEwLwYDVQQD Eyg0ZGNlMzM4ODRmMTRlYjIwZDE4N2VmOTY4YjQ0MmI4MWYzZDhjNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHRqOs4FC1Twy3cEaoG3TPfOOoN+ BLgsdVaOA0kKU2fxHaOhAvUMzNGom9Kj/sq9yALBhsZG7aTSAB20kgIUV0icxWbO RNhXE8tvmFVb7mWzm20O8zG6J4/oFIKb71I3TrRukiCbXhaXz7RIXvwj7zBU0KsM 41+wlaArINfnoT0RYt3BvoybUMq751lJlAOG6TBF70Y63m2qZDedgfHvNfPcDXJw rL47MMUuRy5yR02HSWXiEsgSPs5QjbEvLrmhpZsLbRTDlNc7Fj8c6lq8tRIyo87j KYRjKs+DsSk7OzfO3l8IJNeUrN7O09khBHJvzttg4nxRSnK1svx1t1vKFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3OM4hPFOsg0YfvlotEK4Hz2McJMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASosd8HC1 Q0eTG6s238iqliDApY8m2FsnQ3PRcXZ/GPhg61St9HW3RGlbdQwdfJUcj5qeAhjB 0nns/+AHu7HruBLmlOEm8jmksfet+q0M558R8ogiNhPs4eZ+QMBFRBfrROzNujmD cqpx3WXZJdojdj2Tne7i96dW7oI4EwUgPH8Pc59LJyIdTrkHrBq0vfsu6HTBSiNN TEQjrjRTEPAjRm/QaaXOm9mydLHoWqYV6/PU86CZEpKbEMjOhFlQZWa3/rd6gmMB uUGpcO8c7UPJIteme0A1FE8KtJb0kuoizACKFGr5f8Zv/OrdVaV3q0ErcaBAe584 s+B7HK/a1/gebg== -----END CERTIFICATE-----Generated at Sat May 9 18:29:24 2026 by rpki-client