$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: GtpBsXXtNMvbngz6V34THw6oz5tvTVQ5V3VtHFOiu6k= Subject key identifier: 43:CC:67:1A:2B:BC:03:0E:5E:94:FC:2E:A7:EB:2D:E5:14:39:45:23 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019CA8D8AEF34E3A6A6DA2391D26EAF2D5E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 03D2 Signing time: Sun 01 Mar 2026 10:01:38 +0000 Manifest this update: Sun 01 Mar 2026 10:01:38 +0000 Manifest next update: Mon 02 Mar 2026 10:01:38 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: CAR2vNCM5A5BN202ln2BSe3ofNTXy+1ByaOB90Zcy1E=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 10: ryQMgFWZ3jNBbogxwI7g21J7R8Y.roa (hash: I6znAGDxaUZ6tiOUv1X3x50QNtWRlxAeBxeiC8CikHg=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:d8:ae:f3:4e:3a:6a:6d:a2:39:1d:26:ea:f2:d5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Mar 1 10:01:38 2026 GMT Not After : Mar 2 10:01:38 2026 GMT Subject: CN=43cc671a2bbc030e5e94fc2ea7eb2de514394523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:85:a9:8c:0d:ff:d6:a5:cd:d2:a3:ff:26: 33:31:fa:71:d3:60:2b:77:6b:dc:76:53:43:19:b4: b4:98:e3:61:71:34:04:3f:3b:ae:ee:fa:9f:c1:33: c8:d7:6e:e3:c1:5f:b7:9f:9e:ea:ad:ae:28:b1:b8: 12:90:55:69:7c:cb:bb:4b:5a:6f:21:7b:35:02:12: 30:b9:a8:67:b8:2d:b4:67:cf:ee:f4:18:1c:a2:83: 06:56:ee:7a:f7:f6:45:58:46:ca:73:4b:a0:3e:86: c9:fe:79:73:f2:3f:35:53:fd:ac:fc:7b:65:f3:42: 50:13:b3:9b:e3:f9:d5:16:00:43:02:91:d4:0b:76: 4a:0c:79:5b:d4:15:ee:d2:4b:a5:c9:5d:2e:20:b3: 18:bd:41:96:2f:1e:95:50:d8:71:ce:4b:fb:ed:43: 90:a2:bf:21:c1:73:5b:f1:d6:5d:e8:1f:cf:39:a4: fd:ac:c8:ab:34:de:2c:74:79:9f:5a:7f:dd:1a:b1: 92:6f:b8:26:a1:fc:39:68:28:d8:8b:f1:91:85:e5: 44:f4:94:06:cc:f5:17:95:27:84:54:fb:3b:5d:d5: ec:24:41:ac:d6:2a:d9:f7:81:d1:5e:aa:48:9b:eb: b0:e9:f0:dc:cf:a9:1a:d7:42:6a:bc:9b:22:1c:c4: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:67:1A:2B:BC:03:0E:5E:94:FC:2E:A7:EB:2D:E5:14:39:45:23 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:87:03:e2:3c:7e:57:1e:c6:4c:97:60:40:e1:7c:4a:77: 99:f8:5e:b1:f9:10:f3:92:9f:f5:18:71:d4:d0:59:16:7a:90: 02:5e:5b:b3:61:92:2a:bc:df:ae:25:cd:41:38:97:56:0a:15: 88:25:b2:6e:e1:e6:63:fa:b9:a6:34:64:c2:f7:78:d9:83:34: 73:47:a9:d0:15:0d:a5:f8:50:8f:55:6d:98:db:8e:1b:59:bc: 36:30:94:51:3a:0a:31:fb:1d:ca:bd:99:49:02:a9:1d:cc:ed: 2e:44:c3:70:b8:77:2e:56:37:1a:1d:19:28:b4:b6:ad:95:03: cf:26:8a:7d:d9:46:34:50:71:79:00:53:02:22:f8:ae:2a:7e: a0:be:33:c3:c2:00:31:95:4e:9a:b2:98:ff:9c:20:87:95:6d: 85:b7:7b:48:8d:9d:31:dc:f6:d1:8e:7e:ff:84:39:51:64:ae: 19:d1:42:ea:e4:e0:18:78:e0:7a:ec:b7:d9:22:db:a3:0b:d8: cb:6d:bd:bb:0f:18:77:0f:19:df:1f:78:20:dd:88:db:bf:7e: b0:66:91:be:15:fe:af:57:d7:7c:2f:0e:b5:0a:72:f3:8e:09: a8:0d:f3:b5:29:94:c4:c7:63:99:56:f8:10:07:22:30:29:f2: 4a:bf:b0:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyo2K7zTjpqbaI5HSbq8tXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMzAxMTAwMTM4WhcNMjYwMzAyMTAwMTM4WjAzMTEwLwYDVQQD Eyg0M2NjNjcxYTJiYmMwMzBlNWU5NGZjMmVhN2ViMmRlNTE0Mzk0NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMeFqYwN/9alzdKj/yYzMfpx02Ar d2vcdlNDGbS0mONhcTQEPzuu7vqfwTPI127jwV+3n57qra4osbgSkFVpfMu7S1pv IXs1AhIwuahnuC20Z8/u9BgcooMGVu569/ZFWEbKc0ugPobJ/nlz8j81U/2s/Htl 80JQE7Ob4/nVFgBDApHUC3ZKDHlb1BXu0kulyV0uILMYvUGWLx6VUNhxzkv77UOQ or8hwXNb8dZd6B/POaT9rMirNN4sdHmfWn/dGrGSb7gmofw5aCjYi/GRheVE9JQG zPUXlSeEVPs7XdXsJEGs1irZ94HRXqpIm+uw6fDcz6ka10JqvJsiHMTjuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPMZxorvAMOXpT8LqfrLeUUOUUjMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdSHA+I8 flcexkyXYEDhfEp3mfhesfkQ85Kf9Rhx1NBZFnqQAl5bs2GSKrzfriXNQTiXVgoV iCWybuHmY/q5pjRkwvd42YM0c0ep0BUNpfhQj1VtmNuOG1m8NjCUUToKMfsdyr2Z SQKpHcztLkTDcLh3LlY3Gh0ZKLS2rZUDzyaKfdlGNFBxeQBTAiL4rip+oL4zw8IA MZVOmrKY/5wgh5Vthbd7SI2dMdz20Y5+/4Q5UWSuGdFC6uTgGHjgeuy32SLbowvY y229uw8Ydw8Z3x94IN2I279+sGaRvhX+r1fXfC8OtQpy844JqA3ztSmUxMdjmVb4 EAciMCnySr+w7w== -----END CERTIFICATE-----Generated at Sun Mar 1 18:22:05 2026 by rpki-client