$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft File: GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json) Hash identifier: MoqTiz6otkHNYm9wVwPe8zW9D1rMnSYpsiy7Do2OdjM= Subject key identifier: 58:81:5D:D1:FA:0D:45:E0:02:4C:EC:D7:02:23:E4:67:07:39:55:FA Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019F8FEBBFF0A5BF82BD95D0368423226B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft Manifest number: 19D6 Signing time: Thu 23 Jul 2026 17:00:19 +0000 Manifest this update: Thu 23 Jul 2026 17:00:19 +0000 Manifest next update: Fri 24 Jul 2026 17:00:19 +0000 Files and hashes: 1: 1-RE5LtI-oYEUM5q0cKhJC4JO_3U.roa (hash: d7tHq0/WDiMxn6UKxVk4uWzuZHMqABk4mVDBFTvFdTs=) 2: 1pNj_76j6mMS3u4BpN5gcHIvm34.roa (hash: xSQfQP+EsZm2U+T+O/IykU1NqD6pAYR1qJHp244VQts=) 3: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (hash: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc=) 4: 3Q_yMiwTyac3O9Accnhg5KfD92Q.roa (hash: 2pKWPuyute5RJlYJfS0zr4oGa9jeGylHhVM1CLmLS3M=) 5: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (hash: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=) 6: 8qNwSVXXyja-Upc0_aieggvdQIU.roa (hash: zNkFU7IYtNNfYotnSm3ZTjA411Lt5oYubwmagNZ4HjY=) 7: DGPg_6OySU-5_1CNaUhVpEnE0sA.roa (hash: Xsn77nVfWLOHF4Zu1CDTRjwh92V4w8afHTRpj+iO2WY=) 8: EQb9mmgozc2dFnsuq4jywus8yQk.roa (hash: wsI0vTsTYLSK1LBFmElYsk56lwkqSir+VnPC8w8SzwM=) 9: FaTlS0VMGNtX4uQfF3c-b5WkoRg.roa (hash: uYjng2N/XV/58VptMfNU/xYrDmehs5ElOuhEptwc1f4=) 10: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: bvKohvK/0rOn+luvkLe0TIE30hBD3K1qgsjn7ZQ96fE=) 11: HcrhRtfROyUtMyYdwEAqxsg1wig.roa (hash: u1rHBHJGzvgEOJg1heYgUCIOqnoD1iQ2J3moBSCOEfQ=) 12: J-77ZlXsX9U2N93n4AsioUY-n30.roa (hash: 176hXqJ10VD2B6wOqNZJ0R5KmjVOqUfFRwDGeoXMTzY=) 13: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (hash: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw=) 14: LFO_dwVuiToZyRlC0BjA3g88zwU.roa (hash: hfjrWpDJpqF9tTWC1wGwI/6VVl0udrnkbVZ6IWru+FQ=) 15: LJaTMA7hzqrxIKqt1N8qKcGjpzQ.roa (hash: dKpW/NNNJvCP5rCPr1Wf+Aj+IhMSdVYLHgvIte9eB14=) 16: LXLoDDkFQ6Eq-e9PSLxcNL1CWjE.roa (hash: UP/S0T2fNsIataI6RSCXJsw8ziGyFwyIJrVoyNWrhrQ=) 17: NTpN21eL3Rsp6kn_8ipm7Sd9W5Q.roa (hash: nLprapUqPV9Ri3l6oKOQrylBfkeWz8n1WoTNn+XlF64=) 18: SQRKv0Z6_hmqtMPRpJ8gU8-qRNg.roa (hash: 2pACudLrBk6yGw4NBGywXzJ+cVqO1szI/T9hnvWe6SY=) 19: TPuALIMyKHTAJN5eUnqBGspsy3E.roa (hash: ebun0C4ydv6bPmHr73fW6etob8nrsagGkwWDv5pcdsU=) 20: dcJdXzJ-mfGJKvyfWbSiqaH_6WY.roa (hash: GJy3mH/1r+OkIziIM5lql75oJ1wuwRYU8Vo91NHIZbI=) 21: dny3tReQLhVMkluPT2fnIL0-PDE.roa (hash: n9SThQXODaWNDc9q3fwExfhrE1fksgEVeXfy0EUzNVw=) 22: emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa (hash: UslOLiX4wEz1eptieEOecWhikavAl/mlrbTGzuC2lHU=) 23: hJ99v2p-kjtGOUcKBEPiUv62q80.roa (hash: x0WHYTjVa1fBBNhi71QSt5FoK7FqF26Qyuiibh4AUiY=) 24: n-5zEzSs351qrnGuBMspmFZCEI0.roa (hash: MYJupN5IEmr6ZufnYdbMso7OMy/8DIghG/NxlYmVwKI=) 25: okyZecfvIRqZODTkhqFVtVBqWlo.roa (hash: JURGYJBnqyW45CKjgzH7wE+F8JuOD/bJVrdaAV1cAA4=) 26: xhYmgGiF89Fz7bZhNjTbr52OYzc.roa (hash: Y8zNHkd72sloXAusIAjhHWfHMe8tp3rm6YXqz7dcQSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:eb:bf:f0:a5:bf:82:bd:95:d0:36:84:23:22:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jul 23 17:00:19 2026 GMT Not After : Jul 24 17:00:19 2026 GMT Subject: CN=58815dd1fa0d45e0024cecd70223e467073955fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:6e:b1:f2:0d:66:a7:87:60:02:fa:2e:7e: 22:ea:52:c4:1c:1c:14:52:ab:b8:14:ab:35:fd:f5: 9f:6b:25:01:cc:3d:93:e2:af:b4:f0:7d:1a:7c:25: 17:ee:63:ec:91:7f:49:8d:6e:c9:f5:4b:fc:a1:7f: 07:25:44:8d:0f:88:1d:48:8a:ba:bb:bb:92:23:bf: e3:3f:a2:7f:48:ef:67:fe:67:72:79:b1:21:1e:48: 27:e4:5a:08:c8:0a:20:d7:53:cd:61:78:74:ea:25: f7:46:cb:39:d4:b9:3d:be:b5:2d:89:ba:38:37:92: 9c:89:a9:98:eb:94:ba:c2:30:c0:dd:08:53:9b:2f: 2c:5c:6f:75:cd:43:43:c7:36:2b:75:c2:2f:c9:56: 0d:ef:be:72:5f:08:60:9d:8d:64:6f:af:b1:2f:88: e4:0a:61:d4:b4:d5:98:66:c1:44:4a:ca:b7:f8:24: 4e:b3:81:ed:12:65:77:52:66:f4:be:11:e1:78:29: b2:04:c9:36:95:ff:f7:3f:6a:27:b4:35:83:3b:22: 83:38:6f:0e:f3:a8:54:e0:a2:b3:88:da:46:c5:f3: 59:14:82:fb:46:d5:8b:c1:1f:ca:86:6c:bd:97:f1: 88:84:78:dc:85:82:86:69:5b:c8:46:c7:de:7c:47: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:5D:D1:FA:0D:45:E0:02:4C:EC:D7:02:23:E4:67:07:39:55:FA X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ff:6a:c4:9b:89:a8:37:e5:22:bf:4e:d7:93:2f:8e:5a:48: d0:de:02:27:80:88:55:fe:4d:6c:08:ad:68:d2:b0:bc:da:27: 7f:27:85:1e:17:ff:0f:fc:7f:23:01:71:68:3a:ba:d9:8e:3c: 24:fa:2e:26:4e:58:c6:f0:b4:4f:e4:69:79:ea:d4:52:ff:d4: 1d:9a:7f:66:e4:4f:66:5b:60:b6:6d:cd:cf:60:fe:ca:7f:b1: a5:61:68:be:fb:51:e2:87:c1:f2:ad:0e:74:db:44:d4:32:91: 0f:1b:e2:89:1b:ed:06:2c:17:81:91:08:0f:9a:3f:32:7f:7d: 0c:1a:9e:1a:98:62:77:45:4a:c4:8e:d2:58:c8:2d:3c:6f:c0: 0b:8c:2d:a8:11:26:e7:0d:51:fe:e0:5c:69:94:b3:b0:f6:e2: e4:c1:30:58:eb:55:72:28:8c:70:1e:7f:ef:8c:0d:de:53:4d: 6b:31:9a:f8:56:0d:b4:1d:83:c4:1e:0d:da:14:f3:35:da:14: 6c:7b:48:47:0f:59:85:8f:77:eb:2e:61:12:73:40:f6:cc:e6: 18:8a:b7:87:93:ea:98:e9:bf:ae:61:ca:d0:ee:82:e4:61:79: 1e:68:b2:06:21:d7:32:c0:1f:a0:d6:b5:45:46:7e:20:49:b0: 59:c2:e7:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P67/wpb+CvZXQNoQjIms/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwNzIzMTcwMDE5WhcNMjYwNzI0MTcwMDE5WjAzMTEwLwYDVQQD Eyg1ODgxNWRkMWZhMGQ0NWUwMDI0Y2VjZDcwMjIzZTQ2NzA3Mzk1NWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DxusfINZqeHYAL6Ln4i6lLEHBwU Uqu4FKs1/fWfayUBzD2T4q+08H0afCUX7mPskX9JjW7J9Uv8oX8HJUSND4gdSIq6 u7uSI7/jP6J/SO9n/mdyebEhHkgn5FoIyAog11PNYXh06iX3Rss51Lk9vrUtibo4 N5KciamY65S6wjDA3QhTmy8sXG91zUNDxzYrdcIvyVYN775yXwhgnY1kb6+xL4jk CmHUtNWYZsFESsq3+CROs4HtEmV3Umb0vhHheCmyBMk2lf/3P2ontDWDOyKDOG8O 86hU4KKziNpGxfNZFIL7RtWLwR/Khmy9l/GIhHjchYKGaVvIRsfefEcWAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiBXdH6DUXgAkzs1wIj5GcHOVX6MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbf9qxJuJ qDflIr9O15MvjlpI0N4CJ4CIVf5NbAitaNKwvNonfyeFHhf/D/x/IwFxaDq62Y48 JPouJk5YxvC0T+RpeerUUv/UHZp/ZuRPZltgtm3Nz2D+yn+xpWFovvtR4ofB8q0O dNtE1DKRDxviiRvtBiwXgZEID5o/Mn99DBqeGphid0VKxI7SWMgtPG/AC4wtqBEm 5w1R/uBcaZSzsPbi5MEwWOtVciiMcB5/74wN3lNNazGa+FYNtB2DxB4N2hTzNdoU bHtIRw9ZhY936y5hEnNA9szmGIq3h5PqmOm/rmHK0O6C5GF5HmiyBiHXMsAfoNa1 RUZ+IEmwWcLnIA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:41:20 2026 by rpki-client