$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: ++xf4kq6oixIzQwMzguovlrpmZZ9HUKNFAHieCIFPdk= Subject key identifier: 7F:97:D3:4E:76:3D:14:84:58:F2:B5:A2:00:D6:AB:CF:AC:E1:07:47 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 01A0CDEC9449F46A16810A44BB1383C67602 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 05FB Signing time: Wed 23 Sep 2026 11:00:28 +0000 Manifest this update: Wed 23 Sep 2026 11:00:28 +0000 Manifest next update: Thu 24 Sep 2026 11:00:28 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 3: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: 3kRtK7rWez2QgJ0jyuKE7OiKW7dm1vvZO7170sLit+4=) 5: I6oLG3dm7ddv6spHYQtsETlJMWo.roa (hash: keMPx8DSwHVMHVz8Rsk2ht0T92tQ/T9DceCxLpXjRwI=) 6: Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa (hash: 9eFCsDkuGfIqNhJvWLEWzC5tEEtK4gEuKMDK5LAI2X4=) 7: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 8: UaDo_BT2LcEP_zURCB9RbFxkQbA.roa (hash: wqnHfwG1lUfRQ7Htl0lN1tjaK6i63SCJO0QAnE5rZNQ=) 9: ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa (hash: LnaAJuj99vAMW7ciXruEozC3uPYJ6VZLPCj09EMLZA0=) 10: cQ52tUzWll-pMyyKqI8p4AB-MNo.roa (hash: bxR3X3yZRop2aXatfRKBWJD++1XD0ikvu76wT8tJNzE=) 11: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 12: i5N-SROQ36wWhJUpPxoOy6LKbDo.roa (hash: rA5BkggNvEXpNXTT/SzWVgwrQNAJo++ubLlIUv4drvE=) 13: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:ec:94:49:f4:6a:16:81:0a:44:bb:13:83:c6:76:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Sep 23 11:00:28 2026 GMT Not After : Sep 24 11:00:28 2026 GMT Subject: CN=7f97d34e763d148458f2b5a200d6abcface10747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:4c:5b:d5:de:4f:df:89:ea:56:f2:f2:f0: 4c:ea:8f:46:ee:d5:0f:a9:5d:5f:7a:f9:f9:1c:81: 01:8a:88:f5:1b:31:f6:a8:6d:61:9f:4f:1c:08:98: bb:81:bd:52:2d:6a:eb:ef:8a:ff:69:57:b9:d1:52: 2c:31:6e:db:63:a1:f4:9d:d7:77:6c:e5:23:ce:85: f9:3e:b5:83:c8:c9:11:0f:e5:7f:29:fb:ef:62:80: 5c:6d:bf:9e:9a:04:99:e4:83:b6:8d:fa:02:76:46: 6e:85:6d:44:24:fa:6f:11:b0:fd:10:bc:90:b5:f4: 99:e4:4f:bd:90:ea:b0:82:c6:f1:ad:93:18:bc:e5: 78:52:9a:17:42:09:fb:36:42:d0:ce:84:b8:50:59: 81:b8:dc:e2:4e:3e:a7:40:03:89:36:82:5d:72:50: 86:67:d5:85:da:c1:96:15:33:a3:49:17:ac:a9:ce: 43:23:8c:fe:23:01:4d:78:d6:94:7a:7d:15:cf:f0: d7:00:6b:84:d7:a3:66:71:f0:46:81:bb:3b:f0:c2: b3:95:c7:3a:66:25:59:e3:4c:04:3f:a0:2e:d3:d2: 36:ee:5a:fd:fe:37:ca:c8:57:68:4e:7d:1d:47:52: b9:ad:95:27:0b:e2:63:2d:28:af:4d:10:5d:00:7e: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:97:D3:4E:76:3D:14:84:58:F2:B5:A2:00:D6:AB:CF:AC:E1:07:47 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e3:09:50:58:80:4f:8d:ac:21:4b:99:1f:15:40:29:fb:2f: c6:4e:8a:fe:d3:b1:73:a5:17:0c:7b:a1:a3:21:ac:88:1b:31: df:87:69:26:e8:11:e8:21:1f:10:27:40:13:39:42:49:09:d3: 67:da:e6:5b:95:3c:c5:ca:cd:b6:fc:b3:ab:86:58:8b:72:a4: 54:80:91:2e:ae:66:3a:da:73:df:f4:1a:d8:67:e1:74:22:d9: aa:7a:5e:12:5d:4e:5f:b4:34:67:ae:7c:0e:ae:99:23:0b:95: eb:15:b6:95:9a:38:a6:dd:83:c8:8c:9f:c1:7c:44:c1:d6:f6: bd:16:67:eb:6d:18:73:c9:9c:d7:9d:92:be:66:67:b2:af:99: 44:fd:ed:f2:6e:ac:08:72:5b:a7:2f:7d:b6:ae:b9:b4:fc:51: 67:57:7e:ac:6d:e0:e1:22:d8:f0:56:0b:dc:59:65:39:29:26: 94:a3:61:8e:2b:62:da:3f:02:9c:5a:85:91:1d:2c:82:f9:32: 1f:18:8c:38:a4:07:ae:93:ea:11:32:44:9e:aa:7b:76:36:bc: ff:a7:02:5e:f9:67:0b:be:c4:59:de:eb:75:9e:31:c0:00:12: d5:a7:d4:50:6e:d5:09:db:9c:81:b3:8e:b3:a3:78:10:49:47: 7f:1d:1b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDN7JRJ9GoWgQpEuxODxnYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwOTIzMTEwMDI4WhcNMjYwOTI0MTEwMDI4WjAzMTEwLwYDVQQD Eyg3Zjk3ZDM0ZTc2M2QxNDg0NThmMmI1YTIwMGQ2YWJjZmFjZTEwNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdMW9XeT9+J6lby8vBM6o9G7tUP qV1fevn5HIEBioj1GzH2qG1hn08cCJi7gb1SLWrr74r/aVe50VIsMW7bY6H0ndd3 bOUjzoX5PrWDyMkRD+V/KfvvYoBcbb+emgSZ5IO2jfoCdkZuhW1EJPpvEbD9ELyQ tfSZ5E+9kOqwgsbxrZMYvOV4UpoXQgn7NkLQzoS4UFmBuNziTj6nQAOJNoJdclCG Z9WF2sGWFTOjSResqc5DI4z+IwFNeNaUen0Vz/DXAGuE16NmcfBGgbs78MKzlcc6 ZiVZ40wEP6Au09I27lr9/jfKyFdoTn0dR1K5rZUnC+JjLSivTRBdAH77yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+X0052PRSEWPK1ogDWq8+s4QdHMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+MJUFiA T42sIUuZHxVAKfsvxk6K/tOxc6UXDHuhoyGsiBsx34dpJugR6CEfECdAEzlCSQnT Z9rmW5U8xcrNtvyzq4ZYi3KkVICRLq5mOtpz3/Qa2GfhdCLZqnpeEl1OX7Q0Z658 Dq6ZIwuV6xW2lZo4pt2DyIyfwXxEwdb2vRZn620Yc8mc152SvmZnsq+ZRP3t8m6s CHJbpy99tq65tPxRZ1d+rG3g4SLY8FYL3FllOSkmlKNhjiti2j8CnFqFkR0sgvky HxiMOKQHrpPqETJEnqp7dja8/6cCXvlnC77EWd7rdZ4xwAAS1afUUG7VCducgbOO s6N4EElHfx0bpQ== -----END CERTIFICATE-----Generated at Wed Sep 23 15:04:42 2026 by rpki-client