$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: J2hKONQ6M2X343r8Ov5W6FsQbTV5pMO58mYgQX0sId8= Subject key identifier: 24:9A:E8:97:D5:D8:75:84:89:50:10:9C:A4:91:68:65:75:26:6A:32 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019E53A3EBA1CC2BDF0C6A339F635B81DCF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 1171 Signing time: Sat 23 May 2026 07:01:52 +0000 Manifest this update: Sat 23 May 2026 07:01:52 +0000 Manifest next update: Sun 24 May 2026 07:01:52 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: lrle0wc1mAUVV8ne2+1KQ5yjm7/gvxH+U045TXoTTQU=) 7: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 8: _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (hash: 43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=) 9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 10: qOS44k4K1WSKtUKGLEhRxJxPEas.roa (hash: FW03t2tk2X1t0JN65p0CDI9DvEztasvMAKi+nwmwwnw=) 11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 May 2026 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:53:a3:eb:a1:cc:2b:df:0c:6a:33:9f:63:5b:81:dc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: May 23 07:01:52 2026 GMT Not After : May 24 07:01:52 2026 GMT Subject: CN=249ae897d5d875848950109ca491686575266a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:ed:89:9e:8f:36:e8:8f:7e:a7:53:c0:1c: 00:8c:5c:1a:26:3b:ea:7f:c0:24:06:b1:18:f4:91: 52:d4:4c:51:59:98:f4:1d:78:b4:0c:d9:c8:ee:20: fa:3f:08:2a:d5:5e:06:4e:af:a4:0c:b9:31:01:e0: 80:96:18:c3:92:df:a5:66:5e:cd:21:03:88:71:88: 6b:ce:11:b2:3d:2c:2d:68:c5:fd:f6:6a:6f:27:80: 23:0f:f0:5b:d3:e7:a1:a1:b0:c4:ca:1e:0a:a5:51: 33:bb:84:14:f1:10:6d:a8:57:c1:cc:3e:cf:71:7c: ec:0e:89:e3:0a:42:fe:3e:cc:65:60:f9:d4:39:15: 7c:96:2f:d9:64:39:28:4d:00:d3:82:73:fd:a5:52: 8e:e9:1c:b0:40:67:47:1b:9a:7e:42:fc:22:14:ac: 7a:df:30:25:9d:57:de:ca:c3:fe:28:bb:14:1f:55: d2:8a:b1:fb:fb:07:35:a0:78:60:44:62:8a:2f:00: a9:af:ad:9e:04:1b:39:c0:c0:03:06:6d:61:b0:36: 32:15:27:89:f5:04:9d:f4:bf:12:17:d6:99:0a:d5: 52:8f:df:04:f3:52:82:ce:e5:67:e8:a0:d7:51:df: cc:47:d9:a4:1a:39:f5:f0:ed:33:86:b2:1d:a4:90: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:E8:97:D5:D8:75:84:89:50:10:9C:A4:91:68:65:75:26:6A:32 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:40:4f:8d:37:1f:07:17:9d:e4:1e:29:a5:26:f5:ac:53:60: 31:b6:e9:d3:49:54:41:68:22:f1:c1:ea:f7:6b:96:e8:bb:b2: 07:f3:8f:cb:e2:57:1f:6b:f1:0d:cc:1e:35:17:1b:d6:41:52: 19:eb:6b:1b:38:29:29:b6:66:89:be:8f:46:46:b1:29:90:bf: 8b:6a:cf:bb:94:42:ce:a5:bd:49:e2:e6:4c:b1:1d:e6:9d:d6: c2:2c:71:07:ef:81:6a:43:25:81:8c:a0:00:2e:33:66:1e:8a: a9:ba:40:97:08:7e:1d:a6:18:a7:6d:bd:c9:43:06:0f:8a:5f: 7b:3e:a5:21:a3:34:dd:7d:3a:21:4c:0d:6f:08:93:4e:57:f6: 18:23:86:0a:f8:0d:eb:3e:26:28:fa:29:9f:27:dc:b0:1a:1b: 2b:56:2d:97:98:b1:ea:33:9f:88:b2:39:84:80:ef:ad:51:37: 8a:da:62:fe:e5:c3:e8:4f:5c:ee:ec:66:14:54:b1:af:0e:a4: 70:07:c5:1c:be:7e:19:77:dc:16:3f:a6:e6:ef:dc:dc:b0:fd: 08:37:f5:07:1c:11:f7:2c:f4:ec:cb:5a:98:cc:9b:c8:b8:9c: 39:6a:5e:1c:57:68:7f:fd:2c:6a:d2:9a:8b:2e:e5:ad:8e:04: b4:f2:bd:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5To+uhzCvfDGozn2NbgdzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwNTIzMDcwMTUyWhcNMjYwNTI0MDcwMTUyWjAzMTEwLwYDVQQD EygyNDlhZTg5N2Q1ZDg3NTg0ODk1MDEwOWNhNDkxNjg2NTc1MjY2YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00PtiZ6PNuiPfqdTwBwAjFwaJjvq f8AkBrEY9JFS1ExRWZj0HXi0DNnI7iD6Pwgq1V4GTq+kDLkxAeCAlhjDkt+lZl7N IQOIcYhrzhGyPSwtaMX99mpvJ4AjD/Bb0+ehobDEyh4KpVEzu4QU8RBtqFfBzD7P cXzsDonjCkL+PsxlYPnUORV8li/ZZDkoTQDTgnP9pVKO6RywQGdHG5p+QvwiFKx6 3zAlnVfeysP+KLsUH1XSirH7+wc1oHhgRGKKLwCpr62eBBs5wMADBm1hsDYyFSeJ 9QSd9L8SF9aZCtVSj98E81KCzuVn6KDXUd/MR9mkGjn18O0zhrIdpJBFeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSa6JfV2HWEiVAQnKSRaGV1JmoyMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUBPjTcf Bxed5B4ppSb1rFNgMbbp00lUQWgi8cHq92uW6LuyB/OPy+JXH2vxDcweNRcb1kFS GetrGzgpKbZmib6PRkaxKZC/i2rPu5RCzqW9SeLmTLEd5p3WwixxB++BakMlgYyg AC4zZh6KqbpAlwh+HaYYp229yUMGD4pfez6lIaM03X06IUwNbwiTTlf2GCOGCvgN 6z4mKPopnyfcsBobK1Ytl5ix6jOfiLI5hIDvrVE3itpi/uXD6E9c7uxmFFSxrw6k cAfFHL5+GXfcFj+m5u/c3LD9CDf1BxwR9yz07MtamMybyLicOWpeHFdof/0satKa iy7lrY4EtPK9/A== -----END CERTIFICATE-----Generated at Sat May 23 18:30:51 2026 by rpki-client