$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: awKYhrW2ec7739+oCciYdYC2ivZU1uagj2IPKz/JCmA= Subject key identifier: 77:3E:EF:97:00:A9:C0:BB:B2:A5:AA:5A:6D:BE:4E:D0:6D:14:CA:8E Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A1DB388A6DFC2C109D34E36A703D4D7883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0F2E Signing time: Sat 14 Nov 2026 18:01:18 +0000 Manifest this update: Sat 14 Nov 2026 18:01:18 +0000 Manifest next update: Sun 15 Nov 2026 18:01:18 +0000 Files and hashes: 1: 4XZnkEKp-uK_gTMIZt6YebiBv1k.roa (hash: DdSenes6KRRZzkLiTnmZJz9e6S5719MOIJUSLiKWFDs=) 2: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=) 3: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: NFloBrHGSOn2P81YzzhwiajjbpPAiSTibu9iiR6v0BA=) 4: GnStT-POC5UGkoTEHzhMgY47yLE.roa (hash: YojptsrWu7SyCL6K8FoBnOB5c0dK7WvThjLcuV1Ct/0=) 5: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 6: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=) 7: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 9: yvcdVOQJQVFB2pQJalrHWMllL-k.roa (hash: KbrKNE2dhgHdH/9U8YQI6hzWv2o+CIOcYTmCUBWWIWY=) 10: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:db:38:8a:6d:fc:2c:10:9d:34:e3:6a:70:3d:4d:78:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Nov 14 18:01:18 2026 GMT Not After : Nov 15 18:01:18 2026 GMT Subject: CN=773eef9700a9c0bbb2a5aa5a6dbe4ed06d14ca8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:e2:10:a7:87:b5:f5:1a:bb:2c:98:16:cd: 79:ae:1f:f2:69:38:4e:f8:76:b0:c5:74:d6:73:27: 1e:12:90:99:1f:4b:d2:70:b1:e8:56:63:19:2e:0e: 03:af:2a:6f:48:16:a8:2e:40:52:21:1f:8d:06:90: cd:90:64:5f:92:c6:24:af:06:77:4a:2f:df:ba:5e: dd:49:51:66:f0:68:56:75:42:fd:15:37:6b:39:82: 02:3c:88:a4:61:0b:6b:7c:b8:4c:48:19:03:12:3f: a5:4a:7b:1d:ed:68:7a:2c:1d:17:6b:23:4e:ad:c9: 17:e4:71:ea:0e:b8:59:dc:fa:a7:95:a8:0f:0b:4c: d5:a3:0d:79:1c:d1:29:69:29:3c:53:83:07:05:73: 96:c9:ce:34:eb:af:87:71:45:2b:c1:73:28:6b:ba: 57:36:18:93:2d:90:23:f5:a4:98:9b:98:fa:a0:9d: f2:68:6d:73:aa:f5:dd:c2:bd:1b:20:e7:18:bf:0b: 93:8d:2b:38:05:b1:e1:94:b5:1a:66:41:df:c8:55: 00:34:1a:87:f6:8b:51:ba:d9:46:cd:86:61:f8:20: 56:3f:f6:fa:43:28:ff:df:da:44:cb:68:2a:c5:73: 42:a1:e4:1d:0e:bb:39:f2:43:e6:be:3d:22:4d:44: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:EF:97:00:A9:C0:BB:B2:A5:AA:5A:6D:BE:4E:D0:6D:14:CA:8E X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:da:b0:18:48:7c:0d:c5:14:ac:4f:57:d2:2f:34:13:18:76: 26:4a:f7:08:36:fb:84:aa:67:dd:01:e5:a0:67:b1:2b:7b:10: 44:a0:32:19:4c:bf:c3:9f:b5:b1:99:2b:3f:a7:83:10:e4:b2: fa:bb:90:80:3f:b2:2e:cd:3c:ec:58:e7:76:66:78:2e:a7:bf: 88:1a:86:e4:9a:41:64:3b:78:16:44:26:02:d3:00:de:57:f9: 18:92:f6:b6:65:eb:90:0d:90:d5:a4:c5:6f:5b:ad:64:a4:f0: 44:c5:87:a8:1a:b2:cb:c1:90:0c:13:7a:83:68:0a:d3:11:19: e0:03:31:79:35:99:c2:66:a0:a7:7e:a0:43:47:6c:36:5d:e6: ea:dc:20:5a:c2:8f:ce:c2:e4:f4:a3:76:fd:44:91:be:45:4e: 7e:1c:88:50:d8:12:45:6d:ee:a0:75:7e:61:37:36:4c:c8:a3: 82:d8:c9:a8:3a:27:66:ab:f9:a8:ad:ed:83:d6:02:05:41:be: 30:f8:68:6c:a9:1e:8c:29:f4:09:32:eb:df:f9:b8:4f:e5:49: a3:a5:00:e5:86:86:6a:f6:7a:37:55:57:10:23:f9:2c:51:d2: 62:66:07:ac:c6:78:a2:c7:6e:09:06:6d:77:22:a2:8c:e2:15: fc:de:ec:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHbOIpt/CwQnTTjanA9TXiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYxMTE0MTgwMTE4WhcNMjYxMTE1MTgwMTE4WjAzMTEwLwYDVQQD Eyg3NzNlZWY5NzAwYTljMGJiYjJhNWFhNWE2ZGJlNGVkMDZkMTRjYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxviEKeHtfUauyyYFs15rh/yaThO +HawxXTWcyceEpCZH0vScLHoVmMZLg4DrypvSBaoLkBSIR+NBpDNkGRfksYkrwZ3 Si/ful7dSVFm8GhWdUL9FTdrOYICPIikYQtrfLhMSBkDEj+lSnsd7Wh6LB0XayNO rckX5HHqDrhZ3PqnlagPC0zVow15HNEpaSk8U4MHBXOWyc4066+HcUUrwXMoa7pX NhiTLZAj9aSYm5j6oJ3yaG1zqvXdwr0bIOcYvwuTjSs4BbHhlLUaZkHfyFUANBqH 9otRutlGzYZh+CBWP/b6Qyj/39pEy2gqxXNCoeQdDrs58kPmvj0iTUQ1fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc+75cAqcC7sqWqWm2+TtBtFMqOMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9qwGEh8 DcUUrE9X0i80Exh2Jkr3CDb7hKpn3QHloGexK3sQRKAyGUy/w5+1sZkrP6eDEOSy +ruQgD+yLs087FjndmZ4Lqe/iBqG5JpBZDt4FkQmAtMA3lf5GJL2tmXrkA2Q1aTF b1utZKTwRMWHqBqyy8GQDBN6g2gK0xEZ4AMxeTWZwmagp36gQ0dsNl3m6twgWsKP zsLk9KN2/USRvkVOfhyIUNgSRW3uoHV+YTc2TMijgtjJqDonZqv5qK3tg9YCBUG+ MPhobKkejCn0CTLr3/m4T+VJo6UA5YaGavZ6N1VXECP5LFHSYmYHrMZ4osduCQZt dyKijOIV/N7sdQ== -----END CERTIFICATE-----Generated at Sat Nov 14 21:30:31 2026 by rpki-client