$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: iyMsc3phgCuDVJogPH+xC5L8BIWMBX4lVhYAlL1N82o= Subject key identifier: B7:BB:01:94:B6:81:AC:2A:FA:F3:14:D0:C4:04:29:77:8E:01:54:97 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01A17D73B0ED8C30226353B3C2D78A23B390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1AD4 Signing time: Tue 27 Oct 2026 13:01:36 +0000 Manifest this update: Tue 27 Oct 2026 13:01:36 +0000 Manifest next update: Wed 28 Oct 2026 13:01:36 +0000 Files and hashes: 1: 1--hiUTrEckgrpBP2C9AhPZaLCuU.roa (hash: hZosXMGFTMCsg0ali2MoomLaNUOKXPKxuZkEtuBYPHI=) 2: 1U2bVCNRf9vaGLb9qPM9UK8HCYw.roa (hash: EFUnACgC0DKk64Khsd2HlRjHYsrDoeBjNn53Q4PRDu8=) 3: BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa (hash: Tm+MlSuHSZKObOf6UFy7bJ2UoejKvsimnwaGrhrRaDw=) 4: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 5: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 8r1BWTwggPx1d8qHJfBgiAh4rys+40rMwxeS4DGWDnM=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:73:b0:ed:8c:30:22:63:53:b3:c2:d7:8a:23:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Oct 27 13:01:36 2026 GMT Not After : Oct 28 13:01:36 2026 GMT Subject: CN=b7bb0194b681ac2afaf314d0c40429778e015497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:de:73:b8:f6:a5:04:ba:ea:53:5e:ea:5c: a7:ad:01:d0:69:77:fb:73:9d:3e:f8:d4:88:1a:89: 4d:d7:ca:6f:62:93:b9:c9:12:88:90:f3:ff:73:65: a4:d0:db:71:50:d9:f9:94:84:e5:aa:5e:27:cf:58: cb:2f:b3:60:59:de:59:c8:b8:30:2f:a4:1b:6d:35: 11:0f:0e:9d:a7:32:a8:5f:6e:cc:38:05:08:cd:a7: 39:94:61:91:da:4b:56:c5:65:2c:2d:e5:58:f4:f9: e2:23:65:cd:78:05:2a:0e:15:53:13:1f:b5:57:0c: d3:dd:5c:f6:aa:f4:95:70:95:47:06:fc:96:e8:b1: 8e:a2:ef:78:5e:ff:bc:00:74:ed:d5:ac:b4:7b:df: 2e:f0:39:67:9d:d8:2c:93:1e:7b:6b:5e:81:ec:b8: 64:d8:17:79:9e:3b:64:94:67:94:04:7b:28:f7:0c: 5d:bc:12:dc:cd:3f:a8:db:16:4d:3d:63:c8:b3:01: c3:82:ae:8b:bb:6a:ec:1d:42:46:57:29:81:96:c3: 30:cf:e9:5a:1a:f0:73:88:6c:19:fe:84:d6:d3:9b: a7:be:18:e6:03:11:dc:b4:5a:fe:65:16:6f:42:1c: fa:99:a4:b1:35:38:47:d5:ef:5c:66:45:39:b8:77: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:01:94:B6:81:AC:2A:FA:F3:14:D0:C4:04:29:77:8E:01:54:97 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4d:23:f7:e5:a1:11:b6:b5:dc:0f:39:18:1e:66:f4:4f:2d: 85:f6:13:dc:95:7b:1e:f2:ce:a3:ae:d8:53:ae:6c:c1:62:42: 0b:0a:2e:23:d0:a3:b6:7c:3d:6e:a7:fe:0a:a2:19:76:89:8d: d7:cd:0f:05:b1:9d:80:44:94:3a:55:56:a2:b3:fa:d8:dc:e9: 78:e7:9b:39:0f:06:97:50:fe:8d:2f:3d:12:0e:18:ce:4f:51: ae:89:d7:f6:35:5e:5e:7a:de:0b:9d:18:b6:1d:d1:79:f0:a8: cd:f5:ff:69:e0:67:d6:10:14:88:b0:f9:d5:a8:67:0e:9b:c9: e7:f8:cc:01:9d:06:23:96:cb:f7:01:b0:a8:fd:73:20:30:bd: ed:ac:5c:30:e0:8b:74:d7:3f:2c:73:ec:63:22:15:4a:e0:8b: fb:85:3e:99:40:7c:d7:4d:54:db:92:4d:b7:55:08:ca:cb:89: 9c:f9:b0:7b:d0:2b:4d:70:41:d7:2e:37:de:61:c6:2a:d9:00: 02:6c:e4:3a:0a:cb:ff:de:d0:f2:0a:b3:94:ce:0e:25:2f:b0: 0a:5f:e3:ce:73:33:32:70:7e:cc:63:52:e5:da:1d:f3:12:ff: 8d:a0:db:42:f4:b7:e7:f3:00:7b:e3:cf:0e:20:4b:8d:e6:c5: 0c:7f:f7:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9c7DtjDAiY1OzwteKI7OQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYxMDI3MTMwMTM2WhcNMjYxMDI4MTMwMTM2WjAzMTEwLwYDVQQD EyhiN2JiMDE5NGI2ODFhYzJhZmFmMzE0ZDBjNDA0Mjk3NzhlMDE1NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtajec7j2pQS66lNe6lynrQHQaXf7 c50++NSIGolN18pvYpO5yRKIkPP/c2Wk0NtxUNn5lITlql4nz1jLL7NgWd5ZyLgw L6QbbTURDw6dpzKoX27MOAUIzac5lGGR2ktWxWUsLeVY9PniI2XNeAUqDhVTEx+1 VwzT3Vz2qvSVcJVHBvyW6LGOou94Xv+8AHTt1ay0e98u8Dlnndgskx57a16B7Lhk 2Bd5njtklGeUBHso9wxdvBLczT+o2xZNPWPIswHDgq6Lu2rsHUJGVymBlsMwz+la GvBziGwZ/oTW05unvhjmAxHctFr+ZRZvQhz6maSxNThH1e9cZkU5uHeTOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe7AZS2gawq+vMU0MQEKXeOAVSXMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk0j9+Wh Eba13A85GB5m9E8thfYT3JV7HvLOo67YU65swWJCCwouI9Cjtnw9bqf+CqIZdomN 180PBbGdgESUOlVWorP62NzpeOebOQ8Gl1D+jS89Eg4Yzk9RronX9jVeXnreC50Y th3RefCozfX/aeBn1hAUiLD51ahnDpvJ5/jMAZ0GI5bL9wGwqP1zIDC97axcMOCL dNc/LHPsYyIVSuCL+4U+mUB8101U25JNt1UIysuJnPmwe9ArTXBB1y433mHGKtkA AmzkOgrL/97Q8gqzlM4OJS+wCl/jznMzMnB+zGNS5dod8xL/jaDbQvS35/MAe+PP DiBLjebFDH/3XQ== -----END CERTIFICATE-----Generated at Tue Oct 27 18:51:13 2026 by rpki-client