$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json) Hash identifier: 0BXfgr2Z7LPjAmLk3bMjMhgSPLbM7H7fkajMd3UP3Hs= Subject key identifier: 96:8F:14:17:C8:4B:7B:87:46:91:22:D7:56:8C:02:FB:A8:41:F1:9A Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Certificate serial: 01A17C292F1E284BFF33AD412163D23DF92B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft Manifest number: 09A5 Signing time: Tue 27 Oct 2026 07:00:36 +0000 Manifest this update: Tue 27 Oct 2026 07:00:36 +0000 Manifest next update: Wed 28 Oct 2026 07:00:36 +0000 Files and hashes: 1: 94nhDQ03X2C_sCq8pROOXKpKYk8.roa (hash: DB4yUhz7BiaKhvABLMcmWy4lPnyDdpPwcDsvic6Cbbc=) 2: L6qUGypGGqDhbn2upcQrm5Pn4Z4.roa (hash: rixk+RWWliguKxAZ4UhqaYkPsPUxRlrAyW3vwO3G3Us=) 3: LjSdr9B9wj4mWtq3IlEvttfmMjU.roa (hash: i/sgZvK4PH/mcXlmFcLob0Fsos8xZHi/OSJT6TIAm9Y=) 4: WRu3Cv0xdmjOWoG2ZswVIKB_5Sg.roa (hash: FwZzTrgAJmCKVOp+9WkS40wNzmiqfA8Zg/3n5/Fzn+o=) 5: _kfQnIvokKk-y7iMkfTNGrYDSBI.roa (hash: IN950bWiQvkE36QDsIQmKPWvfr6QjmrhvENhQOpRe20=) 6: fMMDFT6e2w-Bc-seWRAaUFt0QSI.roa (hash: 9wfe4T86807zWhFXODkpd4t2xLBZDuBu9/t6XFoJZvQ=) 7: gCZGddOFDvIofw6Khaf6NPsf9No.roa (hash: Cxv2xvprn3bBXB2hR8mzha98ZrK5VBbIdggBrjhBjdg=) 8: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: dcVsXNeI3+F+0Q7mK+Gx1huasAl5dHCMB5PjNSVm9g4=) 9: i1vtDmcAQtLnl3aUwuFV5Y7pniQ.roa (hash: o/VJxrOKOc4lTo64AaLCZvlgh1gGriQWC8Vg/CMyrW8=) 10: qxH47r_0TcDeX5ES5YUjI25GYyQ.roa (hash: CGRzVhzV19X7JKFYRyC0oRcV0F12u4MUVNB5RsQk09s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:29:2f:1e:28:4b:ff:33:ad:41:21:63:d2:3d:f9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Validity Not Before: Oct 27 07:00:36 2026 GMT Not After : Oct 28 07:00:36 2026 GMT Subject: CN=968f1417c84b7b87469122d7568c02fba841f19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:f3:bc:32:dd:75:1c:7f:8b:94:2d:93:ef: 94:82:2b:b2:20:30:18:9b:93:71:51:f1:81:cf:70: ca:dd:05:96:c9:06:dd:a5:7b:6f:fb:a5:1f:2b:c4: 38:cd:bf:55:46:c2:dc:96:67:00:13:43:61:49:ce: 17:75:64:91:f7:20:66:63:50:03:fd:cf:36:1b:27: 18:30:5f:bf:36:37:d6:4c:13:83:34:96:c3:c6:b3: 3e:82:9c:4e:c0:39:05:c2:be:39:1b:c7:7b:c3:11: d6:b3:76:82:25:28:18:2a:ad:cb:a6:58:f7:6c:ed: 89:fb:8e:59:5f:27:c8:eb:64:18:9b:1b:26:c5:5d: a1:4c:6f:a3:06:49:55:6d:fe:37:ad:03:46:c4:f6: ae:c6:e5:57:bd:90:63:b3:78:bb:f4:51:49:08:f6: bf:5d:28:07:93:25:14:ff:62:83:35:b3:ef:8c:01: ec:d6:de:2e:69:5f:20:b3:11:20:69:ce:46:b8:69: db:be:e7:1d:ad:56:73:4c:c4:e6:12:22:50:c5:3d: 22:47:f7:17:d1:17:e8:21:62:93:ef:7a:f1:7e:aa: 24:2b:50:2d:3d:2c:a2:b3:40:9f:61:20:a3:13:fa: f9:da:9e:32:20:df:4e:ba:b2:79:03:64:a7:c9:db: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:14:17:C8:4B:7B:87:46:91:22:D7:56:8C:02:FB:A8:41:F1:9A X509v3 Authority Key Identifier: keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d2:f7:72:65:4f:4c:e2:14:62:4b:8c:e9:55:90:2d:d1:ed: 88:e5:21:86:be:de:90:18:45:22:ee:c1:81:d8:28:8b:e7:49: ee:74:b3:7e:31:41:31:e0:b7:c1:12:a8:4f:b8:dc:00:77:46: 2d:f8:8f:5c:ec:eb:99:8d:ff:c6:f6:64:e5:16:b7:59:88:a3: 97:f1:48:d0:85:ca:37:c3:4a:3f:1d:fd:00:58:2d:86:b9:9c: ae:ff:04:bb:4a:fa:ec:63:6e:c2:b2:fe:df:24:5c:d1:8d:9f: 3c:62:02:6d:73:bb:cd:a4:06:d0:d3:af:4a:7b:0f:11:1d:31: 4e:d2:e3:29:a3:fc:ee:32:3c:ed:2d:bc:4c:7d:0a:ed:ea:17: 78:e8:1b:ff:16:1c:1c:26:f6:80:aa:2f:dc:20:69:7b:96:5e: 84:ce:49:85:5e:b8:cf:49:4a:e6:8f:36:6f:e8:92:5e:85:f7: e5:b2:e7:09:08:1a:73:7c:f4:9f:20:92:ff:2d:fc:b7:67:d2: 43:d9:5f:5d:3c:74:0d:0a:25:02:39:28:84:73:42:05:d4:a6: 03:d8:e9:04:22:52:ea:81:17:d5:03:76:f5:5d:b5:53:53:64: 82:85:d9:03:a2:e5:3c:5c:0d:3b:a0:eb:40:bd:4d:89:ac:b8: 22:b0:2e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8KS8eKEv/M61BIWPSPfkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1 YmU3OWIwHhcNMjYxMDI3MDcwMDM2WhcNMjYxMDI4MDcwMDM2WjAzMTEwLwYDVQQD Eyg5NjhmMTQxN2M4NGI3Yjg3NDY5MTIyZDc1NjhjMDJmYmE4NDFmMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkDzvDLddRx/i5Qtk++UgiuyIDAY m5NxUfGBz3DK3QWWyQbdpXtv+6UfK8Q4zb9VRsLclmcAE0NhSc4XdWSR9yBmY1AD /c82GycYMF+/NjfWTBODNJbDxrM+gpxOwDkFwr45G8d7wxHWs3aCJSgYKq3Lplj3 bO2J+45ZXyfI62QYmxsmxV2hTG+jBklVbf43rQNGxPauxuVXvZBjs3i79FFJCPa/ XSgHkyUU/2KDNbPvjAHs1t4uaV8gsxEgac5GuGnbvucdrVZzTMTmEiJQxT0iR/cX 0RfoIWKT73rxfqokK1AtPSyis0CfYSCjE/r52p4yIN9OurJ5A2SnydtqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaPFBfIS3uHRpEi11aMAvuoQfGaMB8GA1UdIwQY MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt YTI1ZTE0ZDUzOWEyLzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9L3cmVP TOIUYkuM6VWQLdHtiOUhhr7ekBhFIu7Bgdgoi+dJ7nSzfjFBMeC3wRKoT7jcAHdG LfiPXOzrmY3/xvZk5Ra3WYijl/FI0IXKN8NKPx39AFgthrmcrv8Eu0r67GNuwrL+ 3yRc0Y2fPGICbXO7zaQG0NOvSnsPER0xTtLjKaP87jI87S28TH0K7eoXeOgb/xYc HCb2gKov3CBpe5ZehM5JhV64z0lK5o82b+iSXoX35bLnCQgac3z0nyCS/y38t2fS Q9lfXTx0DQolAjkohHNCBdSmA9jpBCJS6oEX1QN29V21U1NkgoXZA6LlPFwNO6Dr QL1Niay4IrAuxA== -----END CERTIFICATE-----Generated at Tue Oct 27 09:20:46 2026 by rpki-client