$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: r/xiUV8lH5MW+aUGOsO4VpgOI5S10RT/l2ulhb1hVh0= Subject key identifier: EF:3F:AC:51:D1:4A:35:86:11:9E:BA:DA:22:2F:42:05:8C:86:6C:63 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019D2704AB69F1DB2AACD7087A95CD58B00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0CC7 Signing time: Wed 25 Mar 2026 22:01:50 +0000 Manifest this update: Wed 25 Mar 2026 22:01:50 +0000 Manifest next update: Thu 26 Mar 2026 22:01:50 +0000 Files and hashes: 1: 7Y5_pXpXkGXQz6r3Ag8VuuKYS-E.roa (hash: PcU8D+QmugZnXWhyt6suY1+91eR4RbUDaup9F17x2j0=) 2: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=) 3: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: 5j5+8j5zTuw6zabhypxPmqIYT4GJLwswr422IsS50hE=) 4: K5IYR-8yKQNbaVCfxNruHxfgy8M.roa (hash: k9/AfvQ6thbh49E8qXhYlNeBQ66bqOlH2PyeFk773uY=) 5: S6miaNucSa6NeEC_GGS4tq2izFo.roa (hash: 8+03nZylwUV80dXnpI8qfIF5rMZUoFiALmnLIt2o7b8=) 6: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=) 7: gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa (hash: 3PftaD58PWAe1nqPJMST42Vt40zBG+AVvzxMfB6cylU=) 8: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=) 9: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=) 10: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:ab:69:f1:db:2a:ac:d7:08:7a:95:cd:58:b0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Mar 25 22:01:50 2026 GMT Not After : Mar 26 22:01:50 2026 GMT Subject: CN=ef3fac51d14a3586119ebada222f42058c866c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:5a:cb:a0:60:e8:32:c9:44:1c:65:73:03: 99:19:97:02:12:7f:5b:03:b2:bd:5f:36:2a:98:b0: 95:10:64:be:80:b7:0a:ea:3c:59:6b:49:a1:28:24: 6a:3d:66:62:4c:4c:b5:06:e5:55:4a:8a:5d:2c:30: e5:3b:aa:72:89:20:f1:20:51:68:1f:84:74:80:15: 26:2b:01:c0:8b:ca:d7:b5:2e:c5:d9:29:9f:61:f0: b6:2a:fe:1a:e7:c3:22:51:d2:d9:5e:b1:8c:1d:ee: d1:c6:b3:e0:1e:36:f0:ed:77:7a:1a:2f:9b:c5:2f: b2:40:6a:9a:3d:97:23:ba:b3:34:bd:39:26:69:1e: 49:9c:16:b4:51:6b:08:ad:ba:c3:32:db:a2:42:1b: 47:ab:18:36:69:d8:a1:04:83:97:1f:e8:cc:37:27: 0c:3c:c0:2c:ec:81:65:4f:dc:a2:4d:00:74:01:4d: 02:0f:82:ab:19:48:24:69:91:37:81:1e:43:12:af: b8:cd:56:1a:88:8b:ba:7e:88:e0:4f:c5:39:49:6f: c4:0c:57:c3:90:f5:16:49:ff:29:5c:37:4a:fb:1c: 9d:68:2d:9e:b2:3a:dd:c3:85:f8:3c:0b:b4:38:89: 24:f4:59:ef:53:b2:ec:8c:a9:45:17:ed:13:74:46: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3F:AC:51:D1:4A:35:86:11:9E:BA:DA:22:2F:42:05:8C:86:6C:63 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9f:09:c8:9e:d2:9b:db:65:71:b5:0d:ba:a4:93:20:81:2e: 68:43:e7:b5:cc:59:97:59:a1:22:bd:cc:d2:92:c7:77:e5:0a: 41:84:f1:9e:63:24:ac:ef:0e:30:03:d9:9f:01:a8:67:fb:a1: 31:a8:e3:94:87:e5:3d:23:3d:27:47:de:c3:8c:67:00:34:89: 71:da:fe:cb:11:ba:ce:1f:a6:4e:bc:1c:79:15:09:4d:23:a9: b3:54:35:fa:97:52:66:b1:58:56:54:d1:f1:0c:a9:bc:f1:cb: 63:c0:be:b3:c6:14:4f:e5:6d:c3:a8:14:48:9d:0d:cd:05:d9: 5e:f7:a1:92:5f:ce:7f:05:63:ff:89:32:b0:e4:27:fd:14:ce: 11:37:3d:62:5a:fe:df:d5:2f:94:4b:f1:8a:4a:96:7b:40:01: 9b:23:96:aa:81:d2:03:35:d6:27:9a:31:28:d4:ad:6e:90:6b: c1:33:ba:8b:b8:6e:d0:3c:46:9a:9b:f0:94:99:66:fd:8f:56: 0d:03:86:64:23:12:35:c7:cb:11:c5:8d:47:90:f9:ad:eb:52: b1:5f:8f:b3:81:f1:47:66:64:af:7c:90:a8:89:e5:4d:35:93: 04:20:2a:4d:37:3c:a5:b3:b4:37:29:48:b3:19:54:a3:b5:92: e2:7b:a7:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBKtp8dsqrNcIepXNWLALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMzI1MjIwMTUwWhcNMjYwMzI2MjIwMTUwWjAzMTEwLwYDVQQD EyhlZjNmYWM1MWQxNGEzNTg2MTE5ZWJhZGEyMjJmNDIwNThjODY2YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujNay6Bg6DLJRBxlcwOZGZcCEn9b A7K9XzYqmLCVEGS+gLcK6jxZa0mhKCRqPWZiTEy1BuVVSopdLDDlO6pyiSDxIFFo H4R0gBUmKwHAi8rXtS7F2SmfYfC2Kv4a58MiUdLZXrGMHe7RxrPgHjbw7Xd6Gi+b xS+yQGqaPZcjurM0vTkmaR5JnBa0UWsIrbrDMtuiQhtHqxg2adihBIOXH+jMNycM PMAs7IFlT9yiTQB0AU0CD4KrGUgkaZE3gR5DEq+4zVYaiIu6fojgT8U5SW/EDFfD kPUWSf8pXDdK+xydaC2esjrdw4X4PAu0OIkk9FnvU7LsjKlFF+0TdEbIJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8/rFHRSjWGEZ662iIvQgWMhmxjMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ8JyJ7S m9tlcbUNuqSTIIEuaEPntcxZl1mhIr3M0pLHd+UKQYTxnmMkrO8OMAPZnwGoZ/uh MajjlIflPSM9J0few4xnADSJcdr+yxG6zh+mTrwceRUJTSOps1Q1+pdSZrFYVlTR 8QypvPHLY8C+s8YUT+Vtw6gUSJ0NzQXZXvehkl/OfwVj/4kysOQn/RTOETc9Ylr+ 39UvlEvxikqWe0ABmyOWqoHSAzXWJ5oxKNStbpBrwTO6i7hu0DxGmpvwlJlm/Y9W DQOGZCMSNcfLEcWNR5D5retSsV+Ps4HxR2Zkr3yQqInlTTWTBCAqTTc8pbO0NylI sxlUo7WS4nunpQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:18:01 2026 by rpki-client