$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: Tea3XyqzRL53vMupv19Z6zwFPhSwOQa62CrnEeR6USo= Subject key identifier: 93:58:2F:F4:29:22:23:1E:74:EC:ED:2D:BD:AB:52:46:F4:F9:69:BB Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019DA3E61096C04DAFD75FFDF13EE614E6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 0454 Signing time: Sun 19 Apr 2026 04:00:56 +0000 Manifest this update: Sun 19 Apr 2026 04:00:56 +0000 Manifest next update: Mon 20 Apr 2026 04:00:56 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: 9E2r5z1CIXZ8GECTc7hRZmWcXy/H8ei0+FwgurszwqU=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:e6:10:96:c0:4d:af:d7:5f:fd:f1:3e:e6:14:e6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Apr 19 04:00:56 2026 GMT Not After : Apr 20 04:00:56 2026 GMT Subject: CN=93582ff42922231e74eced2dbdab5246f4f969bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:19:be:56:ab:9e:b5:72:b8:a7:94:e0:34: 08:68:85:86:fc:84:c3:75:47:0d:47:c7:08:1a:73: 0c:50:f3:1d:54:49:ea:aa:30:54:65:ac:2a:70:43: 4b:4f:96:5c:87:26:78:5c:87:6e:3f:91:6c:f2:b5: 3f:6f:e0:1d:58:bc:be:30:3b:4b:32:27:18:93:d0: 3d:e8:a4:28:68:f7:97:60:81:20:34:0b:96:82:91: bc:15:f3:9c:64:df:2a:2b:50:09:f9:bd:b9:7d:93: 8c:17:65:0c:1b:8c:c9:d6:c6:a8:61:a4:cd:d2:9f: 72:28:f1:bc:7a:61:d8:ba:65:16:2e:2e:f9:54:a5: 43:fc:05:39:7d:83:f7:87:6c:68:bf:49:0c:a9:d7: 54:3c:3c:16:18:d0:a4:84:7b:cf:c2:54:8a:a7:00: 93:8c:90:e7:22:f8:47:8d:5a:80:aa:c1:0c:a1:de: f4:74:ee:03:83:32:db:16:f4:f3:7a:f2:ce:be:32: fb:b1:ab:cf:56:8e:25:21:84:db:bd:31:73:95:26: 43:fc:91:c9:5c:92:94:d7:c0:a6:91:f5:f8:3e:b6: 71:7b:09:ee:26:39:e0:4e:8d:85:ba:8c:5f:6f:d8: b5:dc:90:93:79:1c:50:36:d1:10:ce:ff:83:96:23: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:2F:F4:29:22:23:1E:74:EC:ED:2D:BD:AB:52:46:F4:F9:69:BB X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:9d:40:c1:ae:b8:c5:d2:9e:16:76:21:24:97:93:7e:e2: ff:f0:be:92:f0:ea:dc:1d:4a:ca:dc:b6:54:8b:e0:1f:fb:25: 79:26:94:51:42:a4:c6:51:59:04:2c:fe:9d:c5:c6:b0:0d:40: e2:e4:d2:5e:28:43:38:ac:54:21:9d:60:31:6d:b2:ba:fd:d2: f2:2c:a9:98:ab:25:c5:04:28:63:d1:3e:a1:33:59:4d:56:dd: b8:dc:00:c6:58:ae:10:b7:e2:51:cf:81:51:34:f0:5b:60:64: cf:f1:b9:ee:8b:11:a8:8f:e3:fd:b1:09:df:e2:a1:0d:b1:88: 1c:49:17:16:4e:ec:90:48:02:f2:91:ef:4f:fb:1c:bb:a2:a2: da:79:a6:68:56:67:0a:ce:b4:f1:2a:84:7a:c4:af:ab:90:12: 30:63:1b:99:2b:24:53:6e:bb:34:9f:f8:34:0c:0b:fc:39:ac: bc:b1:ca:32:3f:72:78:f9:37:c9:0d:70:20:56:fd:b0:de:a6: b5:99:fb:b0:97:8f:2e:9f:fa:64:93:5b:5d:a8:2b:0e:71:26: 03:b5:d3:8e:f5:9e:73:b2:aa:e7:8e:2e:a9:49:ec:76:b7:c9: 2e:ab:e6:17:dd:95:44:b5:4e:93:26:f0:19:49:33:0b:98:fa: c0:bd:f1:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2j5hCWwE2v11/98T7mFOa0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNDE5MDQwMDU2WhcNMjYwNDIwMDQwMDU2WjAzMTEwLwYDVQQD Eyg5MzU4MmZmNDI5MjIyMzFlNzRlY2VkMmRiZGFiNTI0NmY0Zjk2OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BUZvlarnrVyuKeU4DQIaIWG/ITD dUcNR8cIGnMMUPMdVEnqqjBUZawqcENLT5ZchyZ4XIduP5Fs8rU/b+AdWLy+MDtL MicYk9A96KQoaPeXYIEgNAuWgpG8FfOcZN8qK1AJ+b25fZOMF2UMG4zJ1saoYaTN 0p9yKPG8emHYumUWLi75VKVD/AU5fYP3h2xov0kMqddUPDwWGNCkhHvPwlSKpwCT jJDnIvhHjVqAqsEMod70dO4DgzLbFvTzevLOvjL7savPVo4lIYTbvTFzlSZD/JHJ XJKU18CmkfX4PrZxewnuJjngTo2Fuoxfb9i13JCTeRxQNtEQzv+DliO92wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNYL/QpIiMedOztLb2rUkb0+Wm7MB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQmdQMGu uMXSnhZ2ISSXk37i//C+kvDq3B1Kyty2VIvgH/sleSaUUUKkxlFZBCz+ncXGsA1A 4uTSXihDOKxUIZ1gMW2yuv3S8iypmKslxQQoY9E+oTNZTVbduNwAxliuELfiUc+B UTTwW2Bkz/G57osRqI/j/bEJ3+KhDbGIHEkXFk7skEgC8pHvT/scu6Ki2nmmaFZn Cs608SqEesSvq5ASMGMbmSskU267NJ/4NAwL/DmsvLHKMj9yePk3yQ1wIFb9sN6m tZn7sJePLp/6ZJNbXagrDnEmA7XTjvWec7Kq544uqUnsdrfJLqvmF92VRLVOkybw GUkzC5j6wL3xJw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:48:59 2026 by rpki-client