$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: DozoO9CDVcEYKGCIt99yvT3bOvXdgINaSWDBLqd0Vfk= Subject key identifier: 04:CB:61:E5:55:B0:9E:90:DA:A9:D1:F8:D3:AE:89:11:53:77:62:C8 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019F90FF2B6E808FA2A4494C82B211324166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0554 Signing time: Thu 23 Jul 2026 22:01:09 +0000 Manifest this update: Thu 23 Jul 2026 22:01:09 +0000 Manifest next update: Fri 24 Jul 2026 22:01:09 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: 3NSIUurfpLq2sHBDmxKe1EZqqKvsGNQq5UNFPwtXL8c=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 10: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:2b:6e:80:8f:a2:a4:49:4c:82:b2:11:32:41:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jul 23 22:01:09 2026 GMT Not After : Jul 24 22:01:09 2026 GMT Subject: CN=04cb61e555b09e90daa9d1f8d3ae8911537762c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:7d:98:2d:8c:b1:b4:30:4c:41:1d:cb:06: bb:65:69:a2:32:ad:0e:b6:78:f2:c7:47:8f:b7:9f: 4b:39:ed:79:40:f6:e8:ea:96:45:6a:ab:0f:7c:ce: e1:cc:5c:4d:0a:d0:a1:a4:79:09:67:dd:25:98:cd: da:58:24:83:46:74:9d:4f:65:a5:9c:6f:42:e0:a3: ad:15:3a:38:9e:d4:63:8d:58:1c:83:78:12:aa:9f: 94:6a:93:65:be:98:8c:61:2b:e3:1c:81:dd:34:b1: 13:ba:dc:eb:cd:02:e8:9a:f9:b8:12:0c:2d:44:f0: 70:d4:ab:15:84:2e:45:02:47:26:ad:39:14:82:8f: 34:b9:ba:8d:8c:32:c8:8e:08:fa:13:d0:7a:f7:83: ba:86:23:ae:07:e5:ba:7c:ff:11:bd:1a:33:df:6d: a7:ae:c3:57:b2:b4:25:4e:c1:23:3d:a7:5e:21:fa: e3:13:a0:8e:89:b2:d0:40:9e:a9:8d:15:6b:ac:36: 09:19:7b:4b:d9:84:c6:b2:b3:76:6d:21:91:11:bd: ad:09:a6:62:89:25:a5:0d:14:81:06:80:cf:a2:89: 7e:ad:b3:47:5d:b3:0d:95:e6:5d:db:41:82:7a:12: 3e:d6:e8:1f:d6:19:13:71:aa:43:7b:3a:08:94:59: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:61:E5:55:B0:9E:90:DA:A9:D1:F8:D3:AE:89:11:53:77:62:C8 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:93:ef:97:8c:c7:8e:e6:ec:b1:c2:81:66:14:df:82:06:25: da:8c:00:2f:72:8f:1c:cb:fa:cc:94:de:98:2e:8c:1d:b0:3b: 79:f7:5d:66:ef:0f:c3:d3:c0:56:32:17:84:d2:40:7d:3e:d6: f2:2d:aa:ae:ec:68:72:2d:36:36:ea:bf:4d:22:55:85:e6:37: cc:f1:d8:bc:dc:a9:ee:26:f2:22:af:13:5f:ab:87:b4:74:5c: 8f:2b:ff:72:98:3f:ba:ea:65:2c:94:1a:d6:93:fd:c8:cb:72: 33:95:83:f4:b8:ed:f6:c9:e0:c5:9d:85:be:9c:24:ae:00:fc: b9:2d:ba:58:b2:95:f4:e3:8c:99:bd:65:2b:ec:b5:f3:b5:09: a4:b8:11:71:bb:b1:ea:d7:95:6c:13:e0:1e:a7:77:9f:d9:64: 8f:1b:c6:a3:25:77:cd:1f:1f:7e:34:49:29:2d:ae:07:18:eb: f1:86:25:36:d7:7b:86:83:c6:ae:7b:2a:c5:eb:2c:cc:b3:4f: 53:66:a0:88:dc:67:6e:dd:e7:22:39:36:df:50:a2:38:81:e7: 42:83:21:1e:67:03:3c:f7:53:69:0f:a6:d3:80:a3:6b:8a:ba: ec:8d:cc:d3:7a:89:82:a7:06:a0:69:9c:fe:e3:d3:81:7a:40: 1b:07:d5:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/ytugI+ipElMgrIRMkFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNzIzMjIwMTA5WhcNMjYwNzI0MjIwMTA5WjAzMTEwLwYDVQQD EygwNGNiNjFlNTU1YjA5ZTkwZGFhOWQxZjhkM2FlODkxMTUzNzc2MmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrZ9mC2MsbQwTEEdywa7ZWmiMq0O tnjyx0ePt59LOe15QPbo6pZFaqsPfM7hzFxNCtChpHkJZ90lmM3aWCSDRnSdT2Wl nG9C4KOtFTo4ntRjjVgcg3gSqp+UapNlvpiMYSvjHIHdNLETutzrzQLomvm4Egwt RPBw1KsVhC5FAkcmrTkUgo80ubqNjDLIjgj6E9B694O6hiOuB+W6fP8RvRoz322n rsNXsrQlTsEjPadeIfrjE6COibLQQJ6pjRVrrDYJGXtL2YTGsrN2bSGREb2tCaZi iSWlDRSBBoDPool+rbNHXbMNleZd20GCehI+1ugf1hkTcapDezoIlFkgUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATLYeVVsJ6Q2qnR+NOuiRFTd2LIMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5Pvl4zH jubsscKBZhTfggYl2owAL3KPHMv6zJTemC6MHbA7efddZu8Pw9PAVjIXhNJAfT7W 8i2qruxoci02Nuq/TSJVheY3zPHYvNyp7ibyIq8TX6uHtHRcjyv/cpg/uuplLJQa 1pP9yMtyM5WD9Ljt9sngxZ2FvpwkrgD8uS26WLKV9OOMmb1lK+y187UJpLgRcbux 6teVbBPgHqd3n9lkjxvGoyV3zR8ffjRJKS2uBxjr8YYlNtd7hoPGrnsqxesszLNP U2agiNxnbt3nIjk231CiOIHnQoMhHmcDPPdTaQ+m04Cja4q67I3M03qJgqcGoGmc /uPTgXpAGwfVig== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:04 2026 by rpki-client