$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: CMsZKqqmNxqvUIS48T/wJiTMXrktJ8o63HrKHSJaUCM= Subject key identifier: 0B:B4:2F:F2:E4:A7:36:7E:26:10:F4:33:5E:BF:13:F7:EF:07:C1:DF Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019EBE7FD02A6788B283ECB6A5B1A0FF8482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 04E7 Signing time: Sat 13 Jun 2026 01:01:47 +0000 Manifest this update: Sat 13 Jun 2026 01:01:47 +0000 Manifest next update: Sun 14 Jun 2026 01:01:47 +0000 Files and hashes: 1: 0Hde166TZ8cOeYRDZBvGcnkowsw.roa (hash: qHe/Fb1SXZPDfsFybAYuKlH/X0tukUHCuNBNiEKAWfI=) 2: 1N12BIRxHI41mSTm69ziM417BQM.roa (hash: NWf2Ua6LuyO93ISX0t9PKrDP/YCuJk+SJvYdsbwbYYE=) 3: 6LIia5tMqbvxBKtY8BThO4xtAtc.roa (hash: +QLjKfCjIW6L5WkiIdYTEn/5q6ZYatBqzC1HJld3e54=) 4: FfkicRnds0SyM8Ri9Cp-q39uDR8.roa (hash: biBnPAucsy15z3WhNtWi3egdIRrJTjNrL9lhRCi/Suk=) 5: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: D8YqDlbZWvtwLYQwXnW3criXpj2sY+nPGGlQboABT60=) 6: NWaj7UwQJNpphq6A0KnyXEoRFy0.roa (hash: m2ilvS5ZvsuV1nGSihhJAUP32WTnDiYym9uVmCodM6s=) 7: X6Wyo1Nxo3DvPC0B0Jf1i8G3hqI.roa (hash: Kov0ii0fyGyD54eIG6eszxy4Wp/ixqF+zLVhtmB6pGk=) 8: g26RPZK6YExXyAYxiox0pH5Upvk.roa (hash: vtcEdbjodmT9ogpS1TjT9OhkB3pBDSvD+MwrAzlPjuc=) 9: nOuq0aXPzGttRKtofgh6vrnPbcQ.roa (hash: Kw/J3XFC7aME9qkhBNr2Z9SXook+hVkqEbqiRv5vLa8=) 10: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (hash: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0=) 11: yhRIOnTpPbWhti1RrtqQMliwotE.roa (hash: sPDOjagJPBV8blENyQcTrbddZKQCM0gJadLIMm2Nmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:7f:d0:2a:67:88:b2:83:ec:b6:a5:b1:a0:ff:84:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jun 13 01:01:47 2026 GMT Not After : Jun 14 01:01:47 2026 GMT Subject: CN=0bb42ff2e4a7367e2610f4335ebf13f7ef07c1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:25:68:a5:22:69:03:e8:b5:fb:97:72:a3: fc:37:d6:0c:e3:be:b2:c1:af:ba:f1:1d:8d:69:e3: 80:36:33:d4:6a:e6:8f:70:e8:34:89:ff:ec:0f:d8: b1:b4:ae:83:a4:3a:4f:7e:c0:ce:44:45:11:8c:dc: a9:68:ed:b9:1e:03:8c:de:51:f4:fe:f6:a9:95:4a: 74:87:f1:22:7a:7d:3c:ba:2c:0e:c2:d0:97:f8:0e: 34:9c:3f:70:21:05:60:6e:ab:0f:f0:6b:df:59:94: b3:69:85:47:c9:e4:30:21:a2:32:f1:ca:c1:ef:e5: a9:0d:80:b9:d4:27:cf:01:a8:18:3f:86:9f:1f:0c: a5:7f:ba:31:b4:34:e6:82:67:58:f1:77:9f:f0:59: 08:cd:57:58:f3:db:fa:fd:0f:fe:db:76:39:97:64: a7:59:59:0c:74:6c:4a:8f:d2:c3:70:2c:51:30:db: 29:5b:48:e2:09:dc:37:31:ed:a1:e3:04:7c:3d:4c: 42:77:27:32:7b:6e:49:a2:1e:42:5f:25:aa:5a:e2: 6b:d7:8e:73:01:1f:60:7b:48:83:35:41:f1:3c:d8: 89:b6:5e:b9:8f:dd:ef:83:e6:cd:a9:86:f7:8e:80: 04:d9:d1:ca:01:82:0d:c5:95:91:54:b2:78:f1:4d: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B4:2F:F2:E4:A7:36:7E:26:10:F4:33:5E:BF:13:F7:EF:07:C1:DF X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:90:06:c5:b6:17:cb:2c:f1:7f:7a:9b:47:da:10:97:e9:8b: f7:c5:3a:04:e9:c2:e8:11:bd:c3:57:83:ff:67:af:29:84:d9: 82:22:54:ba:53:74:5b:1c:00:03:c7:6a:fd:26:5a:fd:db:0d: f8:b2:77:d1:db:80:ae:c2:2e:8e:b7:05:37:69:6f:d6:e9:fe: 6b:e6:4f:30:69:92:68:ff:22:69:7c:bb:ef:14:38:cb:8d:30: 61:9d:34:a9:56:34:66:e4:4a:70:0b:87:03:62:d1:a4:f1:eb: 96:6c:8e:5d:f9:69:34:f5:9e:96:3b:31:5f:76:b7:8f:bf:00: 42:d7:2f:2f:0e:6e:be:b5:3b:7f:09:08:09:39:fd:d4:62:e5: 0b:57:2f:62:2a:7a:e5:eb:92:5a:a6:df:af:32:8c:38:b3:a2: ad:7c:ce:dc:fb:22:89:dd:ec:8c:e1:c2:68:b0:fc:a1:e1:bd: 1c:3a:78:7c:ac:8a:96:b2:0a:6d:75:9d:c3:46:c6:a3:cc:89: 67:0f:08:7b:a3:94:c1:23:ac:60:ad:6f:1e:15:a9:0d:60:9b: de:0a:63:78:64:51:f3:e0:75:d2:72:dc:56:50:2a:e0:51:dc: 34:82:49:05:f3:d3:25:25:43:32:e4:6f:c6:9e:26:98:75:e0: 36:28:8c:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+f9AqZ4iyg+y2pbGg/4SCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwNjEzMDEwMTQ3WhcNMjYwNjE0MDEwMTQ3WjAzMTEwLwYDVQQD EygwYmI0MmZmMmU0YTczNjdlMjYxMGY0MzM1ZWJmMTNmN2VmMDdjMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDglaKUiaQPotfuXcqP8N9YM476y wa+68R2NaeOANjPUauaPcOg0if/sD9ixtK6DpDpPfsDOREURjNypaO25HgOM3lH0 /vaplUp0h/Eien08uiwOwtCX+A40nD9wIQVgbqsP8GvfWZSzaYVHyeQwIaIy8crB 7+WpDYC51CfPAagYP4afHwylf7oxtDTmgmdY8Xef8FkIzVdY89v6/Q/+23Y5l2Sn WVkMdGxKj9LDcCxRMNspW0jiCdw3Me2h4wR8PUxCdycye25Joh5CXyWqWuJr145z AR9ge0iDNUHxPNiJtl65j93vg+bNqYb3joAE2dHKAYINxZWRVLJ48U35gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu0L/LkpzZ+JhD0M16/E/fvB8HfMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5AGxbYX yyzxf3qbR9oQl+mL98U6BOnC6BG9w1eD/2evKYTZgiJUulN0WxwAA8dq/SZa/dsN +LJ30duArsIujrcFN2lv1un+a+ZPMGmSaP8iaXy77xQ4y40wYZ00qVY0ZuRKcAuH A2LRpPHrlmyOXflpNPWeljsxX3a3j78AQtcvLw5uvrU7fwkICTn91GLlC1cvYip6 5euSWqbfrzKMOLOirXzO3Psiid3sjOHCaLD8oeG9HDp4fKyKlrIKbXWdw0bGo8yJ Zw8Ie6OUwSOsYK1vHhWpDWCb3gpjeGRR8+B10nLcVlAq4FHcNIJJBfPTJSVDMuRv xp4mmHXgNiiMmw== -----END CERTIFICATE-----Generated at Sat Jun 13 09:58:46 2026 by rpki-client