$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: xkVLaDZI4mFlQomiyDGQYwJJsEHfTkl4XMuWWielgnE= Subject key identifier: 90:6E:87:B8:00:DE:3F:F9:0D:7E:57:D8:42:8E:7A:28:66:1E:E0:89 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019D25F1E975AF6A1C3A0B4078023C7B6662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 1890 Signing time: Wed 25 Mar 2026 17:01:43 +0000 Manifest this update: Wed 25 Mar 2026 17:01:43 +0000 Manifest next update: Thu 26 Mar 2026 17:01:43 +0000 Files and hashes: 1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=) 2: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=) 3: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=) 4: 3Q_yMiwTyac3O9Accnhg5KfD92Q.roa (hash: 2pKWPuyute5RJlYJfS0zr4oGa9jeGylHhVM1CLmLS3M=) 5: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=) 6: 9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa (hash: oEqQojHh2aVK9IWAizqhwBRsxK4M9mlqa6pebuySDfE=) 7: DGPg_6OySU-5_1CNaUhVpEnE0sA.roa (hash: Xsn77nVfWLOHF4Zu1CDTRjwh92V4w8afHTRpj+iO2WY=) 8: Dg57u4ys1bTlL8pLuHGvnVFYSNw.roa (hash: r/oRyoO8ZH4/jVinfaTnLetdrLoBZnt11pFEZIFP7VY=) 9: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: qGmtrJKGNR/4R8mrKm4uf1cg2BOB41gETPiuNhpft4U=) 10: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (hash: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ=) 11: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=) 12: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=) 13: LFO_dwVuiToZyRlC0BjA3g88zwU.roa (hash: hfjrWpDJpqF9tTWC1wGwI/6VVl0udrnkbVZ6IWru+FQ=) 14: LJaTMA7hzqrxIKqt1N8qKcGjpzQ.roa (hash: dKpW/NNNJvCP5rCPr1Wf+Aj+IhMSdVYLHgvIte9eB14=) 15: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=) 16: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=) 17: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=) 18: Z3V9TUK8r_FHToolycVMTDaUt6s.roa (hash: P5lyG9E35XlKCrzdnPlPZUSNkm6dswkn04uQqnS0qVI=) 19: ZyVnmvJN0yIID0-dwQrcXmjY9VA.roa (hash: q9igcRUqon9S/2eYkbsUmIWEB+JdxtvBxWbuRQimv3Y=) 20: dny3tReQLhVMkluPT2fnIL0-PDE.roa (hash: n9SThQXODaWNDc9q3fwExfhrE1fksgEVeXfy0EUzNVw=) 21: emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa (hash: UslOLiX4wEz1eptieEOecWhikavAl/mlrbTGzuC2lHU=) 22: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=) 23: n-5zEzSs351qrnGuBMspmFZCEI0.roa (hash: MYJupN5IEmr6ZufnYdbMso7OMy/8DIghG/NxlYmVwKI=) 24: okyZecfvIRqZODTkhqFVtVBqWlo.roa (hash: JURGYJBnqyW45CKjgzH7wE+F8JuOD/bJVrdaAV1cAA4=) 25: pY6dEwMcS1gIOrRtGnBkqmpfKCk.roa (hash: JP24dMSjHqtH5tjJ36BZcsOHYGx6NJpMpZ/DQIeN1mg=) 26: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:e9:75:af:6a:1c:3a:0b:40:78:02:3c:7b:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Mar 25 17:01:43 2026 GMT Not After : Mar 26 17:01:43 2026 GMT Subject: CN=906e87b800de3ff90d7e57d8428e7a28661ee089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:9e:7b:e6:df:4c:c3:79:02:ab:ab:75:3a: fb:3d:a2:b1:c9:88:07:bd:73:d9:30:55:85:87:8e: 74:de:ba:9c:53:63:14:67:00:86:5f:bd:16:65:12: a0:4e:46:6a:21:23:54:01:c6:40:ec:e9:30:ec:7e: 24:f7:54:0d:1c:be:bd:3a:b8:23:b0:73:a8:1b:55: 95:6a:8c:d3:fa:c5:b3:08:e0:4d:a0:dd:db:77:88: 79:d1:14:17:74:c5:49:c9:0c:c6:a7:3f:09:bd:dd: e6:c1:44:d0:51:b9:95:9b:33:f1:9b:99:1c:58:c4: b0:7e:80:30:d7:e4:92:19:65:d0:32:37:cf:e6:34: d4:36:3a:da:a5:b5:31:d7:25:ab:30:87:7e:de:69: 92:63:92:00:ee:a8:ae:14:c6:7d:58:ff:0a:c4:2d: 4f:97:a7:96:c8:36:10:d2:53:6d:0f:5e:e9:b0:53: ee:0e:8f:a0:8c:7f:75:86:4b:a2:45:4c:c5:20:0a: 8d:58:dd:8c:35:d2:b5:88:25:b7:55:57:a2:24:05: 8b:00:77:5f:51:46:df:01:22:6b:51:4f:f1:14:98: b6:f2:a5:c3:31:aa:8d:09:91:60:d6:c8:a3:f3:0e: 85:11:b2:21:79:ee:e2:3e:30:22:ad:4c:a5:ae:ba: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6E:87:B8:00:DE:3F:F9:0D:7E:57:D8:42:8E:7A:28:66:1E:E0:89 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ff:ed:2d:f0:99:28:5a:a2:70:f8:5a:72:a7:ba:96:ce:97: c1:b8:2d:b1:2c:37:8d:30:75:15:c6:88:c9:33:93:2e:9e:a0: 29:4a:7e:c6:bb:d5:53:3d:46:ef:ea:e5:b7:ae:54:0f:a0:91: a5:7e:2f:b9:23:24:ed:32:ae:45:b8:7a:bc:82:6e:eb:51:2a: a8:3f:b7:4d:16:43:cb:75:ee:e8:70:e6:f1:f0:f8:d8:ef:34: af:dd:14:65:1f:e0:68:c5:03:6f:a3:ec:3d:75:a3:13:84:56: 5d:5a:87:50:55:82:a5:02:15:43:5e:79:9d:d0:f9:d6:7d:0a: e9:ae:13:ed:3d:20:0b:54:74:29:7c:dc:27:da:0e:85:f3:8b: 38:7d:f8:8b:6a:90:dc:52:a8:d3:36:1c:66:40:1f:69:fb:6d: 19:48:92:28:f3:09:dc:f1:95:fc:d8:06:e9:0b:10:f0:60:fa: f9:29:2e:df:d6:a4:23:3e:ca:58:75:1a:fb:c8:99:f7:4a:e6: 68:ea:a8:90:98:a1:76:ec:2e:2c:68:15:ec:cc:57:42:9d:d6: 16:76:a0:c8:0c:af:31:a1:31:ac:ee:80:ec:92:79:aa:0c:e9: b5:7c:fc:dc:3d:aa:cc:18:4b:2d:bc:10:29:92:51:c9:31:e5: 51:55:f9:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8el1r2ocOgtAeAI8e2ZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMzI1MTcwMTQzWhcNMjYwMzI2MTcwMTQzWjAzMTEwLwYDVQQD Eyg5MDZlODdiODAwZGUzZmY5MGQ3ZTU3ZDg0MjhlN2EyODY2MWVlMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGyee+bfTMN5AqurdTr7PaKxyYgH vXPZMFWFh4503rqcU2MUZwCGX70WZRKgTkZqISNUAcZA7Okw7H4k91QNHL69Orgj sHOoG1WVaozT+sWzCOBNoN3bd4h50RQXdMVJyQzGpz8Jvd3mwUTQUbmVmzPxm5kc WMSwfoAw1+SSGWXQMjfP5jTUNjrapbUx1yWrMId+3mmSY5IA7qiuFMZ9WP8KxC1P l6eWyDYQ0lNtD17psFPuDo+gjH91hkuiRUzFIAqNWN2MNdK1iCW3VVeiJAWLAHdf UUbfASJrUU/xFJi28qXDMaqNCZFg1sij8w6FEbIhee7iPjAirUylrrqRKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBuh7gA3j/5DX5X2EKOeihmHuCJMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk//tLfCZ KFqicPhacqe6ls6XwbgtsSw3jTB1FcaIyTOTLp6gKUp+xrvVUz1G7+rlt65UD6CR pX4vuSMk7TKuRbh6vIJu61EqqD+3TRZDy3Xu6HDm8fD42O80r90UZR/gaMUDb6Ps PXWjE4RWXVqHUFWCpQIVQ155ndD51n0K6a4T7T0gC1R0KXzcJ9oOhfOLOH34i2qQ 3FKo0zYcZkAfafttGUiSKPMJ3PGV/NgG6QsQ8GD6+Sku39akIz7KWHUa+8iZ90rm aOqokJihduwuLGgV7MxXQp3WFnagyAyvMaExrO6A7JJ5qgzptXz83D2qzBhLLbwQ KZJRyTHlUVX5fQ== -----END CERTIFICATE-----Generated at Thu Mar 26 03:31:12 2026 by rpki-client