$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: zOqymGxfE1MB8/xoM8O9s+ayu1XDoMpxbeO7Usk2Db4= Subject key identifier: 66:91:F1:B1:37:94:08:59:1E:A8:87:7A:2D:07:A3:D9:D1:82:8C:8F Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019E99CD2F5114FF19A263D3FF745761CB85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0D6E Signing time: Fri 05 Jun 2026 22:00:21 +0000 Manifest this update: Fri 05 Jun 2026 22:00:21 +0000 Manifest next update: Sat 06 Jun 2026 22:00:21 +0000 Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: kr6tVxuStnYSAKjDKavjO9qwieETSw2HFWNmOsY+N5g=) 2: EOj3AgYdcchPeXzFo3MmkUnpC5c.roa (hash: UJxOCXl/zk57bLmMvjQmQo6So76eGqObXBhqM5bOFjU=) 3: FWMBoEPbEZJ9LWll1hHdYguPc1Q.roa (hash: D3IyHTq+1EEVMSrIYYDUg4SrD3tjS/LwJPAsUzG8Cnk=) 4: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 5: NFV8_rlpMbYJWC5GtsaC08jVRLk.roa (hash: bXitEDnu53nb2nGB6+lObhnl3YIH0YhpwjL7l9qv+QU=) 6: OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa (hash: NUQ/hLaY/s6wtpegscjb37Ii8FsiiXqqFFzr8BzeZgs=) 7: Vfrj1CjwXIt_tA2vbVO6W0Q8sww.roa (hash: mvOhadzyYlNh3bwJh8QRN9BDoPYKpsh/DrQUaDTKRJg=) 8: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 9: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=) 10: m2aCEWRSbYINPhfk7dIfOHcCZMQ.roa (hash: zF+FldUbeFBdo73eCEVXfBTgillyEx/Bek9AHg5vsQM=) 11: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 12: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 22:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:99:cd:2f:51:14:ff:19:a2:63:d3:ff:74:57:61:cb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jun 5 22:00:21 2026 GMT Not After : Jun 6 22:00:21 2026 GMT Subject: CN=6691f1b1379408591ea8877a2d07a3d9d1828c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:ec:ee:97:15:bc:f7:ce:56:77:23:16:29: 62:6e:9c:e7:92:21:74:32:59:40:d1:eb:af:70:20: 12:2a:6d:19:66:50:b3:ca:a4:93:b0:92:00:b9:bb: f8:7b:15:fd:a3:53:7d:6b:e4:86:e0:b8:ce:66:d0: f5:69:2e:a9:88:c2:b4:8f:22:ed:1f:88:18:c6:a2: e2:1f:70:37:a9:6a:e2:bb:b3:9a:13:88:e1:88:c0: d7:05:99:45:d3:87:2c:5b:e2:fb:01:3a:ae:17:cc: 0f:a0:66:e7:64:6d:3b:fc:b1:00:23:fe:2d:1e:db: 50:41:0f:ad:2e:80:68:dc:24:56:c1:cc:b5:63:be: 11:b0:12:56:82:5b:6e:d1:65:30:75:05:ec:9f:63: 9e:02:a8:fb:51:ad:73:5a:40:fe:ab:3f:d6:7a:87: c7:54:21:03:29:97:4d:06:bf:46:80:cb:cd:de:54: cc:a3:2c:90:6e:3f:ed:85:1e:98:bc:02:bb:fa:6b: 63:65:a5:8a:16:63:66:9f:f1:dc:62:f1:0a:11:eb: 9b:be:82:b7:69:d5:8a:35:7b:36:a1:4a:a5:2e:e6: 6f:7f:db:e5:ec:b3:66:80:30:bd:3a:54:f3:f8:9e: f7:d3:2e:e6:c7:86:3a:d5:37:24:8e:dd:11:54:ab: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:F1:B1:37:94:08:59:1E:A8:87:7A:2D:07:A3:D9:D1:82:8C:8F X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:31:d4:cb:35:19:ed:d9:1a:03:c9:2c:e5:70:ab:53:f4:6c: 20:75:4e:3c:64:3c:48:50:da:f0:7e:d2:21:65:6f:41:d9:17: 01:6c:ad:49:04:be:b4:7f:40:7b:65:c9:2d:72:ac:aa:27:13: 6b:3b:8c:0f:47:89:99:48:75:c6:6a:d9:c9:df:cb:a5:63:90: 7b:56:88:a3:1e:7e:83:ca:43:81:f1:d7:45:ef:16:a2:cd:ef: 37:be:42:3e:0c:9a:db:4a:12:58:5d:a6:f1:cd:af:71:1d:d4: f6:b5:5c:98:6c:b5:92:07:09:71:a5:67:00:2f:40:cf:70:92: d7:d5:20:08:dc:49:44:18:d8:84:8e:e2:80:d4:1f:e9:5c:42: 5e:68:53:c3:bb:26:b1:55:6a:22:b9:72:1c:6d:1d:9a:01:e5: c8:01:4e:3a:92:17:4b:c4:4b:15:a6:20:58:00:c5:c2:a4:8a: aa:69:bb:d2:d6:48:8b:92:f4:72:d4:0b:e6:4b:96:88:76:1d: 7c:7e:ef:cd:56:2a:a2:68:1d:0e:9e:db:02:36:07:bb:3e:97: a9:e1:f6:10:c1:71:cb:fe:5d:6f:72:c8:dc:69:3a:f1:45:2d: 95:5c:74:b0:d7:87:a8:0d:ff:c5:30:17:83:32:1b:e2:00:e2: e7:52:cd:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6ZzS9RFP8ZomPT/3RXYcuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwNjA1MjIwMDIxWhcNMjYwNjA2MjIwMDIxWjAzMTEwLwYDVQQD Eyg2NjkxZjFiMTM3OTQwODU5MWVhODg3N2EyZDA3YTNkOWQxODI4YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAHs7pcVvPfOVncjFilibpznkiF0 MllA0euvcCASKm0ZZlCzyqSTsJIAubv4exX9o1N9a+SG4LjOZtD1aS6piMK0jyLt H4gYxqLiH3A3qWriu7OaE4jhiMDXBZlF04csW+L7ATquF8wPoGbnZG07/LEAI/4t HttQQQ+tLoBo3CRWwcy1Y74RsBJWgltu0WUwdQXsn2OeAqj7Ua1zWkD+qz/WeofH VCEDKZdNBr9GgMvN3lTMoyyQbj/thR6YvAK7+mtjZaWKFmNmn/HcYvEKEeubvoK3 adWKNXs2oUqlLuZvf9vl7LNmgDC9OlTz+J730y7mx4Y61Tckjt0RVKuxmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaR8bE3lAhZHqiHei0Ho9nRgoyPMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjHUyzUZ 7dkaA8ks5XCrU/RsIHVOPGQ8SFDa8H7SIWVvQdkXAWytSQS+tH9Ae2XJLXKsqicT azuMD0eJmUh1xmrZyd/LpWOQe1aIox5+g8pDgfHXRe8Wos3vN75CPgya20oSWF2m 8c2vcR3U9rVcmGy1kgcJcaVnAC9Az3CS19UgCNxJRBjYhI7igNQf6VxCXmhTw7sm sVVqIrlyHG0dmgHlyAFOOpIXS8RLFaYgWADFwqSKqmm70tZIi5L0ctQL5kuWiHYd fH7vzVYqomgdDp7bAjYHuz6XqeH2EMFxy/5db3LI3Gk68UUtlVx0sNeHqA3/xTAX gzIb4gDi51LNRg== -----END CERTIFICATE-----Generated at Sat Jun 6 06:25:44 2026 by rpki-client