$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: hQJeO8C8ll/jwTwQGoGx7eYEMlR8/fJ3X8TJGSfu+Fc= Subject key identifier: C8:2E:62:89:1C:90:DA:5E:CB:A8:22:B7:12:5A:B3:48:53:3B:9B:D4 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019D31F4CB54AB44B3F1FDD735CB431313FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0419 Signing time: Sat 28 Mar 2026 01:00:19 +0000 Manifest this update: Sat 28 Mar 2026 01:00:19 +0000 Manifest next update: Sun 29 Mar 2026 01:00:19 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: eslX9GpIZONRcTTkoFjxbXvQxEyMQTFzOLYI2kU0nVE=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:f4:cb:54:ab:44:b3:f1:fd:d7:35:cb:43:13:13:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Mar 28 01:00:19 2026 GMT Not After : Mar 29 01:00:19 2026 GMT Subject: CN=c82e62891c90da5ecba822b7125ab348533b9bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:30:db:d7:88:63:23:c9:b4:dc:da:d6:56: e8:4b:b0:06:59:06:3d:6d:58:71:fd:12:b3:81:c2: 16:8b:19:5f:dd:fa:91:1c:53:0b:e7:57:d3:fe:a8: 18:a2:33:07:96:d9:0b:fd:f0:53:f1:ff:03:42:f2: d8:de:7c:2b:20:3b:14:69:7f:8f:ef:3d:8f:dd:52: 6c:45:7a:09:26:8a:ec:09:c8:b2:43:be:22:82:75: 6a:a2:4e:e4:e0:a9:ea:dd:e8:db:57:5d:0c:dc:c4: c8:6b:df:19:ad:3e:a7:12:fe:72:eb:6a:5b:81:d2: c6:d9:a6:03:4e:17:b6:0f:54:3c:39:75:22:0e:db: 5f:98:ad:05:f1:85:85:b7:6b:56:1e:6c:7a:38:9e: 39:b9:13:5f:38:4c:5b:d6:c4:8c:bd:e6:4d:d2:9f: f5:ab:78:dc:c0:fa:ca:d4:d9:ef:4b:e1:4b:88:05: 04:be:92:a8:88:50:cd:71:d5:d7:1a:29:03:a0:fc: 41:64:98:41:e1:c9:de:e7:f3:4a:a6:6a:48:4a:e2: 33:ed:e9:2b:91:f8:f2:fd:38:15:79:8a:f8:5c:82: ad:19:49:b1:e5:6e:0d:6d:df:d2:4b:13:77:d1:b1: 0a:ed:ad:47:58:8d:c3:09:f6:55:47:2f:55:f7:12: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2E:62:89:1C:90:DA:5E:CB:A8:22:B7:12:5A:B3:48:53:3B:9B:D4 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f0:54:e5:7c:8f:fc:2e:44:40:eb:1f:7e:b1:7a:ec:99:19: 1b:c6:a0:87:bc:73:53:fd:13:a2:b6:81:7e:7b:f6:d6:65:af: 47:e5:a9:55:f9:54:11:a8:66:e4:4e:61:f1:5d:97:2d:b8:dc: 85:41:e6:ef:00:ec:3a:d5:aa:b4:5d:03:6a:c5:f8:87:20:bd: 9c:60:54:b2:99:4a:21:22:5f:aa:9e:23:bc:eb:e5:2e:17:6b: 64:f8:86:ba:cd:c3:a8:2c:ab:2b:6c:f9:3d:d2:00:c3:61:e1: 67:a2:f6:17:a9:7e:2e:1c:06:cf:71:23:b3:ec:a5:3c:8d:2f: c7:c0:06:d5:c3:fd:c9:74:b0:17:a3:75:06:d0:86:e7:c6:5b: c5:3c:25:b6:39:ec:e2:a6:27:fc:80:4c:61:67:82:53:0e:0d: 1b:b0:40:eb:a2:cd:74:73:90:97:5e:ff:06:8c:72:ed:2c:d7: 19:6b:1f:ef:44:74:c1:ea:44:ae:9b:2a:04:62:25:f9:7b:f2: 45:cc:03:e0:ad:c3:a1:fb:9f:be:bd:ce:83:dd:84:39:03:c7: 70:21:23:26:47:74:fd:ca:c8:18:2c:84:2f:8c:f7:4a:70:9d: a9:5b:94:c3:a6:d1:ed:1a:ae:d8:31:a7:8f:16:ce:88:f5:aa: 0d:83:79:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0x9MtUq0Sz8f3XNctDExP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMzI4MDEwMDE5WhcNMjYwMzI5MDEwMDE5WjAzMTEwLwYDVQQD EyhjODJlNjI4OTFjOTBkYTVlY2JhODIyYjcxMjVhYjM0ODUzM2I5YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIsw29eIYyPJtNza1lboS7AGWQY9 bVhx/RKzgcIWixlf3fqRHFML51fT/qgYojMHltkL/fBT8f8DQvLY3nwrIDsUaX+P 7z2P3VJsRXoJJorsCciyQ74ignVqok7k4Knq3ejbV10M3MTIa98ZrT6nEv5y62pb gdLG2aYDThe2D1Q8OXUiDttfmK0F8YWFt2tWHmx6OJ45uRNfOExb1sSMveZN0p/1 q3jcwPrK1NnvS+FLiAUEvpKoiFDNcdXXGikDoPxBZJhB4cne5/NKpmpISuIz7ekr kfjy/TgVeYr4XIKtGUmx5W4Nbd/SSxN30bEK7a1HWI3DCfZVRy9V9xJJAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMguYokckNpey6gitxJas0hTO5vUMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/BU5XyP /C5EQOsffrF67JkZG8agh7xzU/0ToraBfnv21mWvR+WpVflUEahm5E5h8V2XLbjc hUHm7wDsOtWqtF0DasX4hyC9nGBUsplKISJfqp4jvOvlLhdrZPiGus3DqCyrK2z5 PdIAw2HhZ6L2F6l+LhwGz3Ejs+ylPI0vx8AG1cP9yXSwF6N1BtCG58ZbxTwltjns 4qYn/IBMYWeCUw4NG7BA66LNdHOQl17/Boxy7SzXGWsf70R0wepErpsqBGIl+Xvy RcwD4K3Dofufvr3Og92EOQPHcCEjJkd0/crIGCyEL4z3SnCdqVuUw6bR7Rqu2DGn jxbOiPWqDYN56A== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:09 2026 by rpki-client