$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: m7Ok2uiK6SOYRwJefstXFLhz+Q1cN/68Wvshfrp+e4Y= Subject key identifier: FA:FF:FE:AB:7B:80:4B:AF:04:66:79:25:DA:86:13:65:3B:04:0F:61 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 01A174A7489300F5E0C2BAA871C6D13EFD03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 1430 Signing time: Sun 25 Oct 2026 20:01:22 +0000 Manifest this update: Sun 25 Oct 2026 20:01:22 +0000 Manifest next update: Mon 26 Oct 2026 20:01:22 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 1-hb19mdI_t8mKtuNbtby2D1HE0E.roa (hash: jcOYD7AE0FqD3JKvlPPueqZV5Q+Nu1NLlSwe5Glm784=) 3: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 4: 9q50kG_riEUPt-scfGdki5ASYkw.roa (hash: JxgNWnECobtZ+p3Ufnx5SSxYpaKvTy6RNLrzJM+LjPA=) 5: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 6: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 7: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 8: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 9: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: jac2cN9LsSzdhMdmAwtsb7gXHJNk9u5ZbJbgKf+/WWc=) 10: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 11: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 12: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 13: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:74:a7:48:93:00:f5:e0:c2:ba:a8:71:c6:d1:3e:fd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Oct 25 20:01:22 2026 GMT Not After : Oct 26 20:01:22 2026 GMT Subject: CN=fafffeab7b804baf04667925da8613653b040f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:9a:88:bb:f3:07:53:5a:73:6b:c6:3c:40: d1:d6:39:03:63:79:8a:0f:9f:5b:02:fa:2f:48:1d: 3e:c1:4e:a9:ab:8a:91:1b:89:75:07:aa:57:44:a1: f3:45:c4:8e:78:70:2a:e8:82:51:49:37:19:18:2b: 5d:c0:ce:98:70:7e:9c:e6:9b:15:a5:d4:8f:9d:2f: bb:af:fa:06:08:0e:34:27:96:99:45:60:bc:3c:5d: 94:e0:3e:b8:6a:ab:12:b6:f7:46:36:95:83:86:8e: 79:86:ef:db:f1:aa:5a:24:71:c0:5e:01:d8:50:af: d5:4c:f1:5f:af:b5:4b:e0:d2:d8:76:8f:e2:ad:cc: e1:7d:fd:79:50:39:05:73:ae:6c:00:f2:8c:83:08: e2:07:5b:36:7b:78:f1:ad:0f:38:15:9b:d3:ca:1c: 51:21:20:d3:52:29:ed:f2:31:98:a3:03:e4:22:0f: 1e:6c:ad:9d:ea:43:19:c5:ac:bc:62:fd:6e:7f:b5: 6a:5e:12:23:d0:5d:f0:1c:39:cb:ed:e8:53:56:6c: 33:70:2e:3c:c4:86:25:a3:f1:42:a3:0c:e8:35:4c: 9b:4a:69:92:cf:ed:9f:29:ed:65:5a:12:6b:43:5e: 8a:87:cd:c3:ed:9f:04:a1:71:8a:7d:03:73:f7:50: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:FE:AB:7B:80:4B:AF:04:66:79:25:DA:86:13:65:3B:04:0F:61 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7e:6f:0a:13:9b:b1:5d:35:ea:f7:0c:9b:e2:8a:be:ee:52: 7c:0a:62:4a:9b:8c:e6:31:3b:81:03:69:6e:4f:81:c1:5b:6d: fd:2c:0e:fb:0a:b0:de:67:a0:4b:8f:17:e4:c6:56:85:d0:0a: 45:ee:1b:cf:6c:66:b8:fa:fd:b5:4f:a2:20:31:9d:63:79:c9: 4d:65:8a:9f:be:9e:50:6e:e8:6e:47:2d:8d:41:78:c4:55:12: dd:5a:e7:3f:34:79:b9:7d:9f:0c:17:b4:01:9a:ec:0a:18:0f: ea:5b:b7:57:cf:48:56:96:93:c3:f6:5f:30:c3:bc:76:4b:d5: a3:08:d0:a7:85:25:36:64:ab:05:9e:84:d1:eb:61:e8:17:76: 0b:6a:6b:ac:b8:ba:6e:1e:f7:8e:1e:2d:ae:a2:33:94:f2:3f: b0:75:c9:04:bc:d7:39:9d:be:76:a9:66:45:0a:ef:dc:66:0f: 77:e9:30:cc:22:9e:c7:9d:fe:83:a4:1a:bf:19:a7:28:0a:53: 2d:38:fa:66:98:94:a1:74:7f:69:e5:ff:e7:98:70:73:8d:83: fd:50:98:77:bb:a3:18:35:45:98:ac:c3:cd:30:16:30:bb:70: eb:3d:c6:ca:d7:ed:c4:1a:ee:56:44:e4:9e:cb:be:0e:54:44: 46:94:15:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF0p0iTAPXgwrqoccbRPv0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYxMDI1MjAwMTIyWhcNMjYxMDI2MjAwMTIyWjAzMTEwLwYDVQQD EyhmYWZmZmVhYjdiODA0YmFmMDQ2Njc5MjVkYTg2MTM2NTNiMDQwZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDiaiLvzB1Nac2vGPEDR1jkDY3mK D59bAvovSB0+wU6pq4qRG4l1B6pXRKHzRcSOeHAq6IJRSTcZGCtdwM6YcH6c5psV pdSPnS+7r/oGCA40J5aZRWC8PF2U4D64aqsStvdGNpWDho55hu/b8apaJHHAXgHY UK/VTPFfr7VL4NLYdo/irczhff15UDkFc65sAPKMgwjiB1s2e3jxrQ84FZvTyhxR ISDTUint8jGYowPkIg8ebK2d6kMZxay8Yv1uf7VqXhIj0F3wHDnL7ehTVmwzcC48 xIYlo/FCowzoNUybSmmSz+2fKe1lWhJrQ16Kh83D7Z8EoXGKfQNz91DvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPr//qt7gEuvBGZ5JdqGE2U7BA9hMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH5vChOb sV016vcMm+KKvu5SfApiSpuM5jE7gQNpbk+BwVtt/SwO+wqw3megS48X5MZWhdAK Re4bz2xmuPr9tU+iIDGdY3nJTWWKn76eUG7obkctjUF4xFUS3VrnPzR5uX2fDBe0 AZrsChgP6lu3V89IVpaTw/ZfMMO8dkvVowjQp4UlNmSrBZ6E0eth6Bd2C2prrLi6 bh73jh4trqIzlPI/sHXJBLzXOZ2+dqlmRQrv3GYPd+kwzCKex53+g6QavxmnKApT LTj6ZpiUoXR/aeX/55hwc42D/VCYd7ujGDVFmKzDzTAWMLtw6z3GytftxBruVkTk nsu+DlRERpQVpA== -----END CERTIFICATE-----Generated at Mon Oct 26 04:01:59 2026 by rpki-client