$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: K2vruvnvpXpw7PMCGK6FS8LKEV8wGxAR+rUyMbWXLQk= Subject key identifier: 1D:2F:CF:51:6E:A5:11:6E:FF:7B:4B:90:79:86:AB:74:52:18:0E:CD Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A0703647503B4C60B4573030E88C9C98DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0E6D Signing time: Sat 05 Sep 2026 06:16:40 +0000 Manifest this update: Sat 05 Sep 2026 06:16:40 +0000 Manifest next update: Sun 06 Sep 2026 06:16:40 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: huxCn5UsYkB5XK+8/I98/OWaoVIUVH8FJcCp3dNzrBM=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: PQO2hcV7XNNe1K-3-5PH9bQKqT0.roa (hash: aW02WRcgdroknFFj4vScvuH20uNQMG1muB63TMLP0sQ=) 5: bNVcTEQWuBJOVEkJKvvpn0x1LQY.roa (hash: db/7CXm5TJpdUEcZf0SNVrz/OUOOmbh0qZYabVLKMZk=) 6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 7: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 8: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=) 9: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 10: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 11: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Sep 2026 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:70:36:47:50:3b:4c:60:b4:57:30:30:e8:8c:9c:98:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 5 06:16:40 2026 GMT Not After : Sep 6 06:16:40 2026 GMT Subject: CN=1d2fcf516ea5116eff7b4b907986ab7452180ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:89:ad:21:a1:80:49:b3:02:9c:73:54:21: ad:11:4e:81:4f:ce:47:b0:79:12:f8:e4:99:1a:4b: d4:1d:b4:50:44:55:81:1f:79:cd:7f:be:30:36:2a: 1f:4d:20:fb:3d:db:69:30:c3:9e:46:4e:ae:b3:95: fb:78:b6:ee:b5:48:04:e3:ad:a8:65:25:e7:39:98: 4b:58:96:df:ba:ec:e4:d1:a3:b0:9d:1d:c7:48:fa: eb:cb:b8:ed:ae:54:25:2e:bd:48:54:e0:c2:fc:da: ec:a9:bb:6e:a9:02:a1:00:23:d4:bc:9e:aa:71:69: 00:55:ca:c3:6b:27:3a:55:ef:90:64:53:e5:43:17: 4b:fe:af:1e:35:43:bc:46:10:aa:a1:3f:11:a7:36: 9d:8a:91:7a:3c:bd:5c:31:4d:62:4a:c1:ed:c2:f1: 86:56:16:27:c6:38:1d:bf:ec:14:6b:d6:3e:9e:97: c3:90:26:c3:62:f7:06:77:53:08:10:25:16:85:e4: ca:20:2b:61:f1:f9:2e:8a:0a:6d:19:80:79:72:8a: bf:ee:52:c6:bb:39:7c:a7:e1:d9:5e:24:2a:78:b2: 22:81:da:d0:3d:c8:ce:88:ff:f0:a8:72:f2:a7:ff: ad:99:49:77:bd:24:c4:90:e6:93:24:54:60:2a:c5: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:CF:51:6E:A5:11:6E:FF:7B:4B:90:79:86:AB:74:52:18:0E:CD X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:91:94:71:0a:71:01:1d:44:4b:4d:dc:53:f1:f4:1c:81:7e: f4:2f:c7:06:c8:47:9f:77:70:98:bd:07:be:53:b9:b3:5d:9d: bd:ce:6f:c3:8e:89:22:2e:41:15:7b:a5:9a:7c:29:18:e1:e8: 30:d0:b4:3b:d0:64:1b:6f:a6:56:77:9b:76:2e:c8:64:77:08: 70:ab:a0:be:4b:7f:7c:d7:1d:81:25:5c:0c:28:29:23:7f:e8: 4b:d4:83:9f:e3:99:01:f1:e0:2d:fe:98:ef:a7:33:4a:70:a4: fb:7b:53:6d:89:85:87:19:60:ec:99:77:59:51:ee:7f:de:fe: d9:e0:91:b0:0c:bf:1e:45:b1:e8:3b:f3:f7:ec:be:87:01:82: 34:4c:b8:4e:3a:cd:a2:ef:23:74:77:03:61:92:a4:3f:79:91: 77:e2:60:5f:7e:21:7d:92:19:f4:43:85:3c:3b:e2:f4:2b:4d: 3f:54:f4:a7:64:7b:4a:fb:61:c9:14:9d:c5:27:89:41:2d:fd: cd:f5:6b:79:06:c4:5a:5a:13:0e:1f:e5:97:12:04:88:0c:a4: a7:ed:e6:1c:d2:b6:07:c5:9b:c0:34:b5:df:f8:66:8e:a6:d0: e2:d0:8e:ea:a5:9f:95:e2:c9:2d:29:be:96:32:53:ba:2f:1f: 8e:94:8a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBwNkdQO0xgtFcwMOiMnJjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTA1MDYxNjQwWhcNMjYwOTA2MDYxNjQwWjAzMTEwLwYDVQQD EygxZDJmY2Y1MTZlYTUxMTZlZmY3YjRiOTA3OTg2YWI3NDUyMTgwZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnCJrSGhgEmzApxzVCGtEU6BT85H sHkS+OSZGkvUHbRQRFWBH3nNf74wNiofTSD7PdtpMMOeRk6us5X7eLbutUgE462o ZSXnOZhLWJbfuuzk0aOwnR3HSPrry7jtrlQlLr1IVODC/NrsqbtuqQKhACPUvJ6q cWkAVcrDayc6Ve+QZFPlQxdL/q8eNUO8RhCqoT8RpzadipF6PL1cMU1iSsHtwvGG VhYnxjgdv+wUa9Y+npfDkCbDYvcGd1MIECUWheTKICth8fkuigptGYB5coq/7lLG uzl8p+HZXiQqeLIigdrQPcjOiP/wqHLyp/+tmUl3vSTEkOaTJFRgKsXjOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0vz1FupRFu/3tLkHmGq3RSGA7NMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpGUcQpx AR1ES03cU/H0HIF+9C/HBshHn3dwmL0HvlO5s12dvc5vw46JIi5BFXulmnwpGOHo MNC0O9BkG2+mVnebdi7IZHcIcKugvkt/fNcdgSVcDCgpI3/oS9SDn+OZAfHgLf6Y 76czSnCk+3tTbYmFhxlg7Jl3WVHuf97+2eCRsAy/HkWx6Dvz9+y+hwGCNEy4TjrN ou8jdHcDYZKkP3mRd+JgX34hfZIZ9EOFPDvi9CtNP1T0p2R7SvthyRSdxSeJQS39 zfVreQbEWloTDh/llxIEiAykp+3mHNK2B8WbwDS13/hmjqbQ4tCO6qWfleLJLSm+ ljJTui8fjpSKgA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:39:01 2026 by rpki-client