$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: ZDSbCTjNx6sSNqgukRqEhfQDn9U/ZxVSVPZUnX6yavE= Subject key identifier: E8:B5:C2:53:7A:73:5F:BF:15:26:BD:40:B8:FE:C5:F3:C9:5F:2D:3A Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 01A0C444D60C060478620CB71F48D40B5E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 05F6 Signing time: Mon 21 Sep 2026 14:00:40 +0000 Manifest this update: Mon 21 Sep 2026 14:00:40 +0000 Manifest next update: Tue 22 Sep 2026 14:00:40 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 3: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: NM3vRFkLN+2rUeWGAzqolLBon3j1uI/DxFaNdraenYY=) 5: I6oLG3dm7ddv6spHYQtsETlJMWo.roa (hash: keMPx8DSwHVMHVz8Rsk2ht0T92tQ/T9DceCxLpXjRwI=) 6: Ibbr-NqjH5zT1iy2X07Ezcm81rk.roa (hash: 9eFCsDkuGfIqNhJvWLEWzC5tEEtK4gEuKMDK5LAI2X4=) 7: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 8: UaDo_BT2LcEP_zURCB9RbFxkQbA.roa (hash: wqnHfwG1lUfRQ7Htl0lN1tjaK6i63SCJO0QAnE5rZNQ=) 9: ZUV0jhQ2guh5Znw4r7MK31_OjBE.roa (hash: LnaAJuj99vAMW7ciXruEozC3uPYJ6VZLPCj09EMLZA0=) 10: cQ52tUzWll-pMyyKqI8p4AB-MNo.roa (hash: bxR3X3yZRop2aXatfRKBWJD++1XD0ikvu76wT8tJNzE=) 11: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 12: i5N-SROQ36wWhJUpPxoOy6LKbDo.roa (hash: rA5BkggNvEXpNXTT/SzWVgwrQNAJo++ubLlIUv4drvE=) 13: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:44:d6:0c:06:04:78:62:0c:b7:1f:48:d4:0b:5e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Sep 21 14:00:40 2026 GMT Not After : Sep 22 14:00:40 2026 GMT Subject: CN=e8b5c2537a735fbf1526bd40b8fec5f3c95f2d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:8a:02:e0:db:00:5e:bd:d7:f9:ad:7b:0b: b2:aa:02:ee:d9:0a:c6:b1:2e:8b:82:c8:ab:74:17: 0f:8b:f0:b0:61:34:4e:4d:29:01:b8:c9:b3:c8:7d: 1e:d7:4b:b4:dd:6a:df:aa:e7:02:84:60:a4:55:73: 4e:29:c3:b5:ce:04:ee:1f:7b:36:16:82:2a:7a:ab: f4:35:f7:bd:4f:23:92:17:81:51:a2:5e:6e:34:2d: 9a:16:64:3b:bb:ce:d0:70:e6:c7:0e:cd:f2:2f:30: fe:16:89:cb:b6:1a:f4:13:d0:0b:5e:71:5d:b2:6d: 57:c3:70:2e:97:5e:40:73:fc:88:97:c1:87:2c:99: f8:0d:1b:a7:52:0d:af:24:e1:a3:a9:65:12:af:78: 60:33:12:df:e6:df:99:66:44:04:a4:f6:3a:ae:c8: 45:8c:c0:c5:c6:3c:fa:83:81:f6:2d:41:70:b7:d7: 1f:06:23:54:9f:45:d1:18:ab:c4:78:df:85:ce:2a: 28:5d:23:7a:a2:03:29:94:f7:66:d6:8a:ce:58:bc: d6:1f:5a:e1:4f:ab:dd:22:bf:f7:3f:7d:3a:5d:c2: 6e:03:5a:a5:a6:1d:2c:e8:52:49:71:c2:59:c2:ca: 16:fa:af:55:15:eb:1d:31:98:a0:22:2c:2a:33:97: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B5:C2:53:7A:73:5F:BF:15:26:BD:40:B8:FE:C5:F3:C9:5F:2D:3A X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a6:53:43:29:41:8c:e9:6a:2c:86:98:ba:b8:9b:b8:54:c5: c9:aa:57:42:5f:ed:33:29:b9:68:d3:1e:ba:eb:bd:26:df:cb: ec:44:98:e3:be:ef:02:4e:98:26:86:41:51:b9:20:48:91:79: a6:f3:72:74:8e:55:5e:eb:f6:75:be:a3:b3:ca:3a:5e:3f:20: f1:0b:c4:47:2e:a4:46:f4:39:62:c8:32:7d:bb:67:26:36:47: e5:b8:ac:fb:c4:68:86:23:39:3f:a5:72:b5:11:27:a9:6d:ab: d8:be:95:5b:fe:00:61:74:64:55:9f:67:07:cc:55:2e:45:a4: f5:f2:4e:e8:9f:02:ff:03:4a:86:10:b3:5e:3f:06:89:4a:c8: 95:55:dc:30:93:86:a2:a9:b7:66:46:73:28:0b:de:79:ac:e2: 5a:03:0e:57:a5:4f:53:5c:03:fb:0b:24:16:34:fe:41:0f:d7: 82:be:b6:91:04:72:10:1a:99:88:69:38:ff:37:c7:ee:5b:f4: 78:e9:d2:aa:50:b2:4d:46:33:5f:16:16:c9:8f:3f:77:70:ff: 26:f5:97:eb:89:69:32:a4:6e:ff:14:28:78:ad:16:05:02:db: 53:c1:c6:72:f4:3c:47:93:0a:c6:77:66:60:81:b1:3e:90:4c: 06:63:ca:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDERNYMBgR4Ygy3H0jUC15lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwOTIxMTQwMDQwWhcNMjYwOTIyMTQwMDQwWjAzMTEwLwYDVQQD EyhlOGI1YzI1MzdhNzM1ZmJmMTUyNmJkNDBiOGZlYzVmM2M5NWYyZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSqKAuDbAF691/mtewuyqgLu2QrG sS6LgsirdBcPi/CwYTROTSkBuMmzyH0e10u03WrfqucChGCkVXNOKcO1zgTuH3s2 FoIqeqv0Nfe9TyOSF4FRol5uNC2aFmQ7u87QcObHDs3yLzD+FonLthr0E9ALXnFd sm1Xw3Aul15Ac/yIl8GHLJn4DRunUg2vJOGjqWUSr3hgMxLf5t+ZZkQEpPY6rshF jMDFxjz6g4H2LUFwt9cfBiNUn0XRGKvEeN+FziooXSN6ogMplPdm1orOWLzWH1rh T6vdIr/3P306XcJuA1qlph0s6FJJccJZwsoW+q9VFesdMZigIiwqM5cLJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi1wlN6c1+/FSa9QLj+xfPJXy06MB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6ZTQylB jOlqLIaYuribuFTFyapXQl/tMym5aNMeuuu9Jt/L7ESY477vAk6YJoZBUbkgSJF5 pvNydI5VXuv2db6js8o6Xj8g8QvERy6kRvQ5YsgyfbtnJjZH5bis+8RohiM5P6Vy tREnqW2r2L6VW/4AYXRkVZ9nB8xVLkWk9fJO6J8C/wNKhhCzXj8GiUrIlVXcMJOG oqm3ZkZzKAveeaziWgMOV6VPU1wD+wskFjT+QQ/Xgr62kQRyEBqZiGk4/zfH7lv0 eOnSqlCyTUYzXxYWyY8/d3D/JvWX64lpMqRu/xQoeK0WBQLbU8HGcvQ8R5MKxndm YIGxPpBMBmPKbg== -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:32 2026 by rpki-client