$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: LZ/tUd44y5xaC4VLOWQG9VLzU9FSLHH7dG4rfy0gc1I= Subject key identifier: 9B:50:18:35:49:3D:D3:A6:60:33:41:CB:7F:B9:18:BE:A9:BF:0C:D1 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01A08D1F474D3445B6DDC44FD300AF8AD1F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1A57 Signing time: Thu 10 Sep 2026 21:00:32 +0000 Manifest this update: Thu 10 Sep 2026 21:00:32 +0000 Manifest next update: Fri 11 Sep 2026 21:00:32 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa (hash: Tm+MlSuHSZKObOf6UFy7bJ2UoejKvsimnwaGrhrRaDw=) 4: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 5: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: c4nAuiosqPK5INmtZtOpiEqNiHZhru3DqJt/bHW3OAo=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:1f:47:4d:34:45:b6:dd:c4:4f:d3:00:af:8a:d1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Sep 10 21:00:32 2026 GMT Not After : Sep 11 21:00:32 2026 GMT Subject: CN=9b501835493dd3a6603341cb7fb918bea9bf0cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:de:ab:7a:a4:dd:08:c8:1f:1b:4f:2b:de: 53:73:37:e7:ce:df:4a:38:b6:c4:14:db:c3:aa:15: 95:80:e0:86:7b:ca:e8:fb:22:46:2e:8a:44:8e:7b: eb:92:68:33:7a:b2:85:ac:7a:ca:ad:35:8b:4f:e7: ae:4d:18:f8:80:1c:d5:24:0e:cd:77:57:32:d7:86: ca:5d:b7:4f:59:39:27:47:2e:30:3a:f7:4c:9e:b9: 6d:42:be:db:05:79:21:cb:43:ff:34:47:8b:b5:bd: 43:86:93:01:24:62:ce:2d:8d:41:e6:6b:15:a1:9d: c6:42:e3:76:98:da:a4:b7:83:cc:60:aa:00:17:23: ca:c9:9f:d7:26:af:5d:bf:94:f7:16:a8:76:22:a6: b0:da:35:08:74:9e:67:66:dd:e5:63:d2:d5:f3:48: 0d:be:cc:57:f2:38:33:ce:b5:ae:cf:13:09:9b:20: 76:03:a5:3b:65:99:5e:42:fa:46:34:02:5d:9a:e8: 1f:c0:0e:8a:47:15:57:99:59:9f:63:1f:b3:48:bc: d8:2e:60:df:02:10:28:ff:ad:3c:7c:c1:97:59:e3: 5d:4f:73:c6:e6:0c:c9:2f:0a:7c:2d:35:cd:4d:09: 9c:96:46:1f:11:ef:91:fe:32:44:1c:90:17:ed:be: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:18:35:49:3D:D3:A6:60:33:41:CB:7F:B9:18:BE:A9:BF:0C:D1 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:76:25:30:d3:38:38:2f:a1:5e:68:20:e9:bc:fa:e6:7d: 74:c5:28:dd:a9:d2:c7:ed:73:83:68:2e:77:5e:32:48:fa:fa: a1:30:34:aa:40:5a:db:cf:0f:87:14:f9:39:c9:0d:ec:23:75: 6c:94:75:f4:eb:52:0f:cd:da:9c:8d:2d:84:67:43:52:a2:7c: e2:7b:29:f8:af:c2:b8:ff:db:69:88:45:de:30:f1:15:7e:37: 39:cc:5b:7c:57:87:12:97:5c:db:89:2e:d1:af:b1:08:db:91: e7:de:2b:bf:7a:dc:8c:40:b5:c9:fc:fe:0e:ca:8b:e5:8b:b0: a7:d8:c0:0d:e8:31:0e:e9:50:6f:f8:ec:86:02:0a:b1:65:69: 79:e5:49:4e:0a:b4:84:52:8d:fc:73:d5:80:39:9c:6a:f5:94: 89:62:f8:66:92:6c:1a:50:56:39:93:0e:6d:d6:6e:9e:23:7c: fe:31:85:c2:63:4d:ff:57:bf:19:a9:52:f8:ce:6d:87:1e:e5: 19:29:d7:09:68:b3:cd:ef:25:0b:db:99:ca:6d:69:a3:9c:85: 09:22:1e:49:42:8e:5d:66:59:ca:8a:e0:6b:39:17:a0:ab:1e: 02:aa:7e:de:ad:e9:42:53:10:6d:25:a2:01:9a:de:b4:23:8c: 08:67:e7:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCNH0dNNEW23cRP0wCvitH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwOTEwMjEwMDMyWhcNMjYwOTExMjEwMDMyWjAzMTEwLwYDVQQD Eyg5YjUwMTgzNTQ5M2RkM2E2NjAzMzQxY2I3ZmI5MThiZWE5YmYwY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxczeq3qk3QjIHxtPK95Tczfnzt9K OLbEFNvDqhWVgOCGe8ro+yJGLopEjnvrkmgzerKFrHrKrTWLT+euTRj4gBzVJA7N d1cy14bKXbdPWTknRy4wOvdMnrltQr7bBXkhy0P/NEeLtb1DhpMBJGLOLY1B5msV oZ3GQuN2mNqkt4PMYKoAFyPKyZ/XJq9dv5T3Fqh2Iqaw2jUIdJ5nZt3lY9LV80gN vsxX8jgzzrWuzxMJmyB2A6U7ZZleQvpGNAJdmugfwA6KRxVXmVmfYx+zSLzYLmDf AhAo/608fMGXWeNdT3PG5gzJLwp8LTXNTQmclkYfEe+R/jJEHJAX7b7AuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtQGDVJPdOmYDNBy3+5GL6pvwzRMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpt2JTDT ODgvoV5oIOm8+uZ9dMUo3anSx+1zg2gud14ySPr6oTA0qkBa288PhxT5OckN7CN1 bJR19OtSD83anI0thGdDUqJ84nsp+K/CuP/baYhF3jDxFX43OcxbfFeHEpdc24ku 0a+xCNuR594rv3rcjEC1yfz+DsqL5Yuwp9jADegxDulQb/jshgIKsWVpeeVJTgq0 hFKN/HPVgDmcavWUiWL4ZpJsGlBWOZMObdZuniN8/jGFwmNN/1e/GalS+M5thx7l GSnXCWizze8lC9uZym1po5yFCSIeSUKOXWZZyorgazkXoKseAqp+3q3pQlMQbSWi AZretCOMCGfnHg== -----END CERTIFICATE-----Generated at Fri Sep 11 02:08:02 2026 by rpki-client