$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: 8h+ZSztOXNAnWsQpULouwBoiVN61Ttpn4+zpuefA0Ag= Subject key identifier: 91:FD:9A:EE:65:AA:D1:24:C8:C2:4E:EB:04:B1:02:66:B0:43:66:31 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019E1E36080BA7237C4D076E7531CC1395BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0494 Signing time: Tue 12 May 2026 22:01:57 +0000 Manifest this update: Tue 12 May 2026 22:01:57 +0000 Manifest next update: Wed 13 May 2026 22:01:57 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: sdjwQGbmfu2aS3NjqvjHqQO44TMbuR/RPxpGIclzl+8=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 10: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:36:08:0b:a7:23:7c:4d:07:6e:75:31:cc:13:95:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: May 12 22:01:57 2026 GMT Not After : May 13 22:01:57 2026 GMT Subject: CN=91fd9aee65aad124c8c24eeb04b10266b0436631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:da:6a:53:d9:4f:9b:70:e6:21:0c:91:40: 1d:5a:72:2c:00:ab:86:95:0a:24:ad:53:f2:64:ae: 55:99:57:98:ff:5e:88:b3:98:5c:37:f4:8b:91:07: 7c:e7:9e:44:0a:a3:f4:65:44:a4:08:7f:66:bf:4b: 77:cc:e6:eb:5e:13:d9:91:a6:1f:f2:dd:fe:2a:e6: 6a:5b:fc:5d:b5:f3:b4:d6:fd:3e:70:37:be:8a:f5: f1:ee:90:88:b2:21:8e:f9:b6:bf:cb:23:8e:55:cd: 52:1e:ab:df:f1:70:e0:56:a8:e3:39:da:1d:0f:4d: 1a:17:7f:0f:af:e3:e3:99:d0:b6:b7:d3:b4:f1:b4: 3f:e7:74:9d:0f:be:96:86:de:02:02:bb:81:1d:b6: bf:ad:16:3f:07:00:e1:3a:fd:e3:38:2d:9f:f3:88: cc:44:5f:94:d5:9c:a4:5e:d0:93:f0:4d:cb:22:38: 2f:77:6f:4b:fb:be:74:a9:f7:80:d5:ff:24:5f:7c: f2:75:0f:c0:53:2a:2c:73:bd:4b:67:17:0f:d2:2c: 64:fb:bb:6a:4b:fa:e1:fc:9a:df:77:de:a6:06:44: 03:1c:41:0e:6a:b2:94:95:78:42:9a:21:a6:0e:68: c3:15:da:d9:e4:55:59:1f:84:db:d1:10:62:8d:c1: 59:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FD:9A:EE:65:AA:D1:24:C8:C2:4E:EB:04:B1:02:66:B0:43:66:31 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6f:a3:81:e3:11:ef:d8:eb:03:76:ee:6e:99:71:13:5c:de: 67:7b:59:68:b2:92:af:33:a3:58:3a:98:36:55:f0:3e:9d:3e: a4:f1:ba:13:04:cb:5c:b3:dd:58:34:51:cb:a3:b0:e3:41:4c: 33:0b:d2:c5:94:5e:8b:dd:fd:c2:73:2c:59:ee:9e:02:c0:9f: 1d:a8:76:0a:9a:e9:ff:df:68:1d:a0:57:ef:d5:b3:26:6b:9d: 79:b4:7c:31:84:8c:f3:1f:a0:95:ca:32:a2:44:d7:8f:c0:97: 32:3d:95:d0:f1:b7:75:ed:81:75:28:73:41:1e:ba:fd:58:a3: dc:f8:62:ba:81:e6:f4:6e:d2:69:1f:5b:aa:27:ba:bb:e7:b7: 28:d1:d6:1b:2b:63:82:91:b0:b4:cd:07:14:8e:e4:34:38:3d: 9f:88:5a:ec:3d:2b:ea:25:28:d5:d6:1c:e3:c9:f7:63:d2:cc: 74:ec:3f:c6:68:ed:49:67:a8:c9:04:59:22:23:97:23:cc:3d: 2d:98:30:6a:14:f2:b4:ce:75:8c:79:d1:53:b0:15:e8:cc:a3: b3:b9:d3:72:ce:8d:03:a9:79:4b:cf:33:e6:29:26:a6:f0:4a: a2:17:b4:73:81:9a:b0:40:a6:83:29:6a:3e:e1:ae:ac:b5:f7: ea:e7:44:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNggLpyN8TQdudTHME5W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNTEyMjIwMTU3WhcNMjYwNTEzMjIwMTU3WjAzMTEwLwYDVQQD Eyg5MWZkOWFlZTY1YWFkMTI0YzhjMjRlZWIwNGIxMDI2NmIwNDM2NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPnaalPZT5tw5iEMkUAdWnIsAKuG lQokrVPyZK5VmVeY/16Is5hcN/SLkQd8555ECqP0ZUSkCH9mv0t3zObrXhPZkaYf 8t3+KuZqW/xdtfO01v0+cDe+ivXx7pCIsiGO+ba/yyOOVc1SHqvf8XDgVqjjOdod D00aF38Pr+PjmdC2t9O08bQ/53SdD76Wht4CAruBHba/rRY/BwDhOv3jOC2f84jM RF+U1ZykXtCT8E3LIjgvd29L+750qfeA1f8kX3zydQ/AUyosc71LZxcP0ixk+7tq S/rh/Jrfd96mBkQDHEEOarKUlXhCmiGmDmjDFdrZ5FVZH4Tb0RBijcFZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH9mu5lqtEkyMJO6wSxAmawQ2YxMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsm+jgeMR 79jrA3bubplxE1zeZ3tZaLKSrzOjWDqYNlXwPp0+pPG6EwTLXLPdWDRRy6Ow40FM MwvSxZRei939wnMsWe6eAsCfHah2Cprp/99oHaBX79WzJmudebR8MYSM8x+glcoy okTXj8CXMj2V0PG3de2BdShzQR66/Vij3PhiuoHm9G7SaR9bqie6u+e3KNHWGytj gpGwtM0HFI7kNDg9n4ha7D0r6iUo1dYc48n3Y9LMdOw/xmjtSWeoyQRZIiOXI8w9 LZgwahTytM51jHnRU7AV6Myjs7nTcs6NA6l5S88z5ikmpvBKohe0c4GasECmgylq PuGurLX36udERA== -----END CERTIFICATE-----Generated at Wed May 13 04:50:04 2026 by rpki-client