$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: QCAxxxKL9yeZkmnsc4HvIDJ5EG3qK+4wk52BE2NBPo8= Subject key identifier: D6:2A:AB:F0:FF:C5:23:B0:2D:ED:AF:9D:D4:7E:2A:2B:C9:F8:97:50 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019E7A4368F3945E0095BA4D89A05281D1E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 1185 Signing time: Sat 30 May 2026 19:01:38 +0000 Manifest this update: Sat 30 May 2026 19:01:38 +0000 Manifest next update: Sun 31 May 2026 19:01:38 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: gG8jFCPWWzNvgqagxuhL3k496XcpHmkqMfVXN/f99iE=) 7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=) 9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=) 11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 31 May 2026 19:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:7a:43:68:f3:94:5e:00:95:ba:4d:89:a0:52:81:d1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: May 30 19:01:38 2026 GMT Not After : May 31 19:01:38 2026 GMT Subject: CN=d62aabf0ffc523b02dedaf9dd47e2a2bc9f89750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:22:1f:8d:81:67:d8:c4:d5:1a:44:f2:64: ce:4a:8d:b0:03:a9:20:77:2f:98:9d:c3:15:8a:5d: 9f:e8:4e:a3:d6:ad:9c:24:13:63:00:4a:9e:56:a0: b3:e0:99:29:d8:4b:b6:fc:61:b5:bb:30:28:07:c7: 43:18:9d:32:23:af:f6:b8:92:43:bf:ae:62:ca:3b: 50:b9:e1:5c:0d:a3:8b:db:a1:12:f5:55:e8:c3:78: ee:c0:9f:6b:59:80:40:bd:4d:e9:87:39:09:8f:5e: e4:7f:c5:ec:fd:31:d6:e0:ce:3d:01:bb:b8:c6:ee: 8b:17:e6:df:61:2c:91:c7:a5:d3:49:5e:5e:93:30: f1:b8:ac:11:16:ad:df:a3:f6:0e:b7:84:44:9d:15: 7e:55:c3:68:11:e4:1c:1c:eb:4e:5e:19:4f:9b:2a: 2f:4c:70:50:6f:1e:d0:6d:2b:48:ac:ae:ce:43:5a: ae:9e:82:fc:ff:34:e3:f3:bb:31:db:04:08:ac:24: ba:4a:3d:32:b3:f9:10:b4:e2:39:20:6a:cb:8f:5b: 18:0a:de:6f:db:53:7c:d4:1f:96:36:78:eb:e5:b2: 37:77:84:5c:bd:a2:a3:94:9b:ea:a4:bf:e6:f7:26: cf:49:6e:8c:1c:bf:bd:99:fc:18:b2:2b:a1:45:33: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2A:AB:F0:FF:C5:23:B0:2D:ED:AF:9D:D4:7E:2A:2B:C9:F8:97:50 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:77:d9:ef:6f:30:fe:d6:9f:fb:26:42:02:7c:96:9e:68:c4: f9:65:19:b0:aa:eb:7f:23:02:fb:59:9a:e2:c6:68:78:52:1d: a8:bc:b1:4a:51:d7:93:79:69:ec:96:35:3c:1f:d0:57:62:b9: c7:f7:1f:64:4b:4f:94:4a:77:27:76:bb:76:8c:70:f0:9a:ec: 7e:f4:9d:ff:c5:1e:02:f4:85:52:0a:0a:23:d8:36:2c:97:1a: 5f:e6:cd:24:1e:90:5d:75:81:a1:81:6f:99:bf:6b:af:4a:aa: c6:fd:df:34:f3:97:fa:4c:08:87:15:39:83:fb:95:5b:6b:90: 55:61:ed:35:60:4f:04:90:39:72:db:f3:c1:34:67:21:4e:d3: f3:86:40:fb:60:1e:9c:dd:6a:e8:26:1c:5a:13:7c:98:67:e1: 40:33:d1:29:b7:6e:03:e2:af:ee:06:03:4a:ae:09:11:1d:0e: 09:5d:07:d7:4b:08:14:48:18:a6:c0:8d:bf:69:2c:cf:23:93: e8:ad:b4:24:5a:5b:62:43:fd:d9:0b:5f:84:de:16:fa:95:61: 4e:0b:0e:00:75:0e:fe:f8:36:67:1b:cc:f6:2b:06:5f:39:6c: df:4c:41:b0:05:c5:f3:28:fc:3a:2d:90:28:ab:36:31:39:4f: 53:b5:92:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ56Q2jzlF4AlbpNiaBSgdHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwNTMwMTkwMTM4WhcNMjYwNTMxMTkwMTM4WjAzMTEwLwYDVQQD EyhkNjJhYWJmMGZmYzUyM2IwMmRlZGFmOWRkNDdlMmEyYmM5Zjg5NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNMiH42BZ9jE1RpE8mTOSo2wA6kg dy+YncMVil2f6E6j1q2cJBNjAEqeVqCz4Jkp2Eu2/GG1uzAoB8dDGJ0yI6/2uJJD v65iyjtQueFcDaOL26ES9VXow3juwJ9rWYBAvU3phzkJj17kf8Xs/THW4M49Abu4 xu6LF+bfYSyRx6XTSV5ekzDxuKwRFq3fo/YOt4REnRV+VcNoEeQcHOtOXhlPmyov THBQbx7QbStIrK7OQ1qunoL8/zTj87sx2wQIrCS6Sj0ys/kQtOI5IGrLj1sYCt5v 21N81B+WNnjr5bI3d4RcvaKjlJvqpL/m9ybPSW6MHL+9mfwYsiuhRTOjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYqq/D/xSOwLe2vndR+KivJ+JdQMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXfZ728w /taf+yZCAnyWnmjE+WUZsKrrfyMC+1ma4sZoeFIdqLyxSlHXk3lp7JY1PB/QV2K5 x/cfZEtPlEp3J3a7doxw8JrsfvSd/8UeAvSFUgoKI9g2LJcaX+bNJB6QXXWBoYFv mb9rr0qqxv3fNPOX+kwIhxU5g/uVW2uQVWHtNWBPBJA5ctvzwTRnIU7T84ZA+2Ae nN1q6CYcWhN8mGfhQDPRKbduA+Kv7gYDSq4JER0OCV0H10sIFEgYpsCNv2kszyOT 6K20JFpbYkP92QtfhN4W+pVhTgsOAHUO/vg2ZxvM9isGXzls30xBsAXF8yj8Oi2Q KKs2MTlPU7WSRw== -----END CERTIFICATE-----Generated at Sun May 31 00:29:32 2026 by rpki-client