$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: 0/w+7VxbteCvsH4M3N6EZ6KiyUsruGk2NyykaHh+yyo= Subject key identifier: C4:08:71:40:7C:62:2A:B0:75:A2:1B:B6:AA:92:29:91:2F:AE:96:23 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019FA82BBC391DBA060691B3F57296A3D763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0560 Signing time: Tue 28 Jul 2026 10:01:06 +0000 Manifest this update: Tue 28 Jul 2026 10:01:06 +0000 Manifest next update: Wed 29 Jul 2026 10:01:06 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: Q4Ae9YqMTUsB5dzE2pKoNzHn9Bwzt97mvr8G/XigkZU=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 10: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:bc:39:1d:ba:06:06:91:b3:f5:72:96:a3:d7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jul 28 10:01:06 2026 GMT Not After : Jul 29 10:01:06 2026 GMT Subject: CN=c40871407c622ab075a21bb6aa9229912fae9623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:c6:c7:5e:5f:50:79:bd:2b:cd:68:c8:89: 10:31:49:40:0f:ba:93:56:c0:5c:b9:46:55:aa:18: 38:e4:0c:8e:65:4d:9a:e3:10:6e:a1:f2:46:06:bf: b6:fd:1b:27:f3:f5:d6:10:26:6f:99:7b:6a:84:fc: 65:63:7d:91:33:2f:40:a1:9e:9c:b8:97:d8:c3:32: 32:4b:58:c8:51:6e:28:e9:a0:64:89:fb:05:f4:f3: e2:78:8f:3a:74:b2:0a:be:b6:96:c4:3a:7d:d2:5c: 2e:88:23:a3:35:09:41:9c:dd:54:65:bc:5f:77:bf: 08:c8:99:7c:5d:a9:00:90:7b:27:e6:05:27:1f:e2: b3:6e:f3:2a:bd:7c:14:20:e9:f1:44:3c:9f:43:08: 29:a5:cb:98:1b:f8:a3:d5:e6:3c:a3:bc:48:3f:a6: 4f:ee:37:66:6a:be:62:f6:ad:92:88:17:b6:1a:ff: 07:58:04:16:e0:93:e3:2c:cd:bf:44:32:f5:95:cb: dd:b0:e8:d8:a4:98:07:42:0c:43:f1:c6:6d:a2:e3: 49:41:31:af:cd:90:02:b1:73:18:2c:76:bd:8b:7f: 0d:1f:5c:c1:d2:b8:2e:e4:d5:a6:e3:64:88:51:eb: 7f:a7:1b:1a:90:93:2c:37:a4:7b:bf:f1:ca:8d:ab: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:71:40:7C:62:2A:B0:75:A2:1B:B6:AA:92:29:91:2F:AE:96:23 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8b:fd:b4:bd:bd:6f:d1:c4:2e:7a:ff:a2:0a:16:bd:78:47: 15:ac:35:e6:68:30:18:97:31:81:36:30:33:35:9b:fe:e6:a3: 86:68:89:9f:39:b4:f2:1d:b1:47:32:69:10:48:2a:f0:2a:a6: 6f:f0:b2:1a:32:99:09:99:04:91:7b:61:1a:ce:08:41:3b:80: cd:1e:f9:7e:ea:d4:f3:12:3d:9c:9b:34:17:2a:54:da:21:0e: 22:f1:45:c4:94:18:c4:35:61:a7:a1:3d:91:42:db:3d:d7:c6: ae:f2:fb:44:ed:fc:f9:92:e8:c5:81:c9:7b:c8:62:75:bd:c4: b0:16:33:85:ad:fe:82:23:c3:53:ad:71:4a:97:c3:6e:64:37: e7:3a:74:61:d5:1d:e0:e7:11:80:18:ce:06:19:ad:20:a0:30: f1:4a:30:65:f9:f3:c7:98:6f:88:5a:40:d9:c5:ad:8c:ed:05: 38:ea:6e:83:63:c8:6c:15:87:bb:ed:8e:76:f1:d2:eb:ef:3a: 91:c4:ad:64:7f:63:ce:5e:bf:67:f4:ac:8b:10:fc:6b:1d:a1: 91:bb:03:f1:54:3c:6e:78:a8:92:db:04:99:4e:7d:4c:48:7e: 4c:df:e9:d2:e2:b2:d8:ab:d8:ea:63:f4:79:81:2e:42:69:65: 2c:79:19:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK7w5HboGBpGz9XKWo9djMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNzI4MTAwMTA2WhcNMjYwNzI5MTAwMTA2WjAzMTEwLwYDVQQD EyhjNDA4NzE0MDdjNjIyYWIwNzVhMjFiYjZhYTkyMjk5MTJmYWU5NjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT3Gx15fUHm9K81oyIkQMUlAD7qT VsBcuUZVqhg45AyOZU2a4xBuofJGBr+2/Rsn8/XWECZvmXtqhPxlY32RMy9AoZ6c uJfYwzIyS1jIUW4o6aBkifsF9PPieI86dLIKvraWxDp90lwuiCOjNQlBnN1UZbxf d78IyJl8XakAkHsn5gUnH+KzbvMqvXwUIOnxRDyfQwgppcuYG/ij1eY8o7xIP6ZP 7jdmar5i9q2SiBe2Gv8HWAQW4JPjLM2/RDL1lcvdsOjYpJgHQgxD8cZtouNJQTGv zZACsXMYLHa9i38NH1zB0rgu5NWm42SIUet/pxsakJMsN6R7v/HKjaureQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQIcUB8YiqwdaIbtqqSKZEvrpYjMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYv9tL29 b9HELnr/ogoWvXhHFaw15mgwGJcxgTYwMzWb/uajhmiJnzm08h2xRzJpEEgq8Cqm b/CyGjKZCZkEkXthGs4IQTuAzR75furU8xI9nJs0FypU2iEOIvFFxJQYxDVhp6E9 kULbPdfGrvL7RO38+ZLoxYHJe8hidb3EsBYzha3+giPDU61xSpfDbmQ35zp0YdUd 4OcRgBjOBhmtIKAw8UowZfnzx5hviFpA2cWtjO0FOOpug2PIbBWHu+2OdvHS6+86 kcStZH9jzl6/Z/SsixD8ax2hkbsD8VQ8bnioktsEmU59TEh+TN/p0uKy2KvY6mP0 eYEuQmllLHkZQQ== -----END CERTIFICATE-----Generated at Tue Jul 28 16:03:08 2026 by rpki-client