$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: i87eulIoAjE5Un0NMbOhJEOwhhLCxG7NyjjmWGPg94M= Subject key identifier: 5D:34:56:B3:F3:0E:D6:BA:CD:E7:29:9D:D3:A1:A7:50:BD:80:49:11 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A1BA6386400BFC248447C04A77BEA4F8DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0F1D Signing time: Sun 08 Nov 2026 09:00:46 +0000 Manifest this update: Sun 08 Nov 2026 09:00:46 +0000 Manifest next update: Mon 09 Nov 2026 09:00:46 +0000 Files and hashes: 1: 4XZnkEKp-uK_gTMIZt6YebiBv1k.roa (hash: DdSenes6KRRZzkLiTnmZJz9e6S5719MOIJUSLiKWFDs=) 2: 8XrW66dn6aX1xmzBfwG411jolgw.roa (hash: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=) 3: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: NuNhjUZ1Y+QKP7SDmTbkCVPCi5kTWhHagpL7Pp9FyOI=) 4: GnStT-POC5UGkoTEHzhMgY47yLE.roa (hash: YojptsrWu7SyCL6K8FoBnOB5c0dK7WvThjLcuV1Ct/0=) 5: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 6: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=) 7: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 9: yvcdVOQJQVFB2pQJalrHWMllL-k.roa (hash: KbrKNE2dhgHdH/9U8YQI6hzWv2o+CIOcYTmCUBWWIWY=) 10: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Nov 2026 08:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ba:63:86:40:0b:fc:24:84:47:c0:4a:77:be:a4:f8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Nov 8 09:00:46 2026 GMT Not After : Nov 9 09:00:46 2026 GMT Subject: CN=5d3456b3f30ed6bacde7299dd3a1a750bd804911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:1e:9a:6a:6b:bc:c0:26:8b:af:0e:8a:a3: 52:36:f9:23:c9:76:dd:3c:44:93:28:c2:9e:5a:cb: c9:48:17:c7:ee:0d:99:a4:98:d9:66:e0:23:54:71: 3b:7b:2a:27:1e:37:f7:31:79:a7:4e:66:a1:78:f4: fb:20:2f:51:ff:8d:68:d1:da:d6:5a:32:72:a7:7d: fd:06:f8:ff:3b:a9:60:fe:e6:65:0f:d4:7b:33:a5: d4:4a:ff:5b:53:4a:b8:aa:6b:13:21:d5:13:b3:49: 5f:5a:0d:aa:81:de:db:3b:45:89:50:0d:df:34:31: c4:cd:65:4e:9d:72:a1:21:30:61:60:9a:e3:19:40: 05:d7:50:34:01:81:25:16:ad:18:79:d5:6c:96:64: 5a:b8:8d:1f:42:8e:21:72:e9:72:04:c7:fd:00:0e: 52:6e:3a:67:fd:14:96:1c:60:da:5e:44:80:87:84: df:67:52:e4:17:8f:8d:87:d5:55:0d:ab:be:7a:94: 22:82:3c:02:c9:83:47:83:74:d5:e2:e5:e9:b3:80: 8b:44:be:16:ca:22:01:3a:38:c4:e4:58:74:f7:e1: a5:f3:f9:20:0b:d0:ab:8d:aa:a0:2e:aa:24:c9:a5: f4:76:c0:49:11:30:de:8b:c5:63:71:e7:ca:d2:34: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:56:B3:F3:0E:D6:BA:CD:E7:29:9D:D3:A1:A7:50:BD:80:49:11 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:34:93:34:64:eb:56:fc:33:ee:63:ce:84:f8:e0:e1:f6:9f: 50:25:dc:f3:02:79:2a:9b:20:bb:d6:7c:72:31:d0:d2:9d:87: 3f:0d:37:ea:cb:33:d8:80:01:0b:0b:9a:75:eb:ff:ee:60:33: bc:d8:ef:3d:a4:11:ec:0f:ba:8a:32:ed:be:2f:3e:42:b3:c2: 9e:14:89:f9:83:8b:14:31:c2:b1:c3:ff:b0:4b:83:19:c6:29: 51:d8:e4:87:25:fc:d4:46:90:d7:37:20:65:b7:c0:c1:38:02: e6:7f:2f:84:7a:46:b5:92:89:d2:7e:2a:47:33:4f:07:28:af: 54:e9:99:02:8b:51:d5:96:3f:2f:9f:2d:d1:f3:03:66:bd:b6: 1e:f3:41:af:79:b1:9e:0e:fa:c9:22:dd:aa:8d:5a:98:53:01: 6e:dc:21:db:4d:ea:8b:6d:9e:9e:dc:9d:00:a7:c9:ab:70:9d: d7:d9:d9:81:e0:fe:69:be:c7:f3:c6:f8:d9:ab:8c:dd:dc:70: 94:dc:31:60:f9:68:9b:95:52:ea:43:98:4d:94:20:69:98:11: 0b:13:3c:6c:13:47:1c:52:0e:18:0f:e8:23:53:d6:25:43:67: 31:b7:a1:8b:b8:ec:60:e3:d0:18:c7:7b:ac:51:3e:ba:7e:c0: 07:c7:a6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaG6Y4ZAC/wkhEfASne+pPjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYxMTA4MDkwMDQ2WhcNMjYxMTA5MDkwMDQ2WjAzMTEwLwYDVQQD Eyg1ZDM0NTZiM2YzMGVkNmJhY2RlNzI5OWRkM2ExYTc1MGJkODA0OTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk0emmprvMAmi68OiqNSNvkjyXbd PESTKMKeWsvJSBfH7g2ZpJjZZuAjVHE7eyonHjf3MXmnTmahePT7IC9R/41o0drW WjJyp339Bvj/O6lg/uZlD9R7M6XUSv9bU0q4qmsTIdUTs0lfWg2qgd7bO0WJUA3f NDHEzWVOnXKhITBhYJrjGUAF11A0AYElFq0YedVslmRauI0fQo4hculyBMf9AA5S bjpn/RSWHGDaXkSAh4TfZ1LkF4+Nh9VVDau+epQigjwCyYNHg3TV4uXps4CLRL4W yiIBOjjE5Fh09+Gl8/kgC9CrjaqgLqokyaX0dsBJETDei8VjcefK0jQeLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF00VrPzDta6zecpndOhp1C9gEkRMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjSTNGTr Vvwz7mPOhPjg4fafUCXc8wJ5Kpsgu9Z8cjHQ0p2HPw036ssz2IABCwuadev/7mAz vNjvPaQR7A+6ijLtvi8+QrPCnhSJ+YOLFDHCscP/sEuDGcYpUdjkhyX81EaQ1zcg ZbfAwTgC5n8vhHpGtZKJ0n4qRzNPByivVOmZAotR1ZY/L58t0fMDZr22HvNBr3mx ng76ySLdqo1amFMBbtwh203qi22entydAKfJq3Cd19nZgeD+ab7H88b42auM3dxw lNwxYPlom5VS6kOYTZQgaZgRCxM8bBNHHFIOGA/oI1PWJUNnMbehi7jsYOPQGMd7 rFE+un7AB8emgw== -----END CERTIFICATE-----Generated at Sun Nov 8 18:23:28 2026 by rpki-client