$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: z9Z0E+7RlmG6ygaCMQ2i73ukTMVm/PZ1xywFif7CD50= Subject key identifier: 65:07:63:E2:36:7E:80:2F:1C:34:D9:8D:7F:35:22:19:F0:52:1D:F7 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A0BF5522D8DFA5943F97A640D833ECA1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0E98 Signing time: Sun 20 Sep 2026 15:00:22 +0000 Manifest this update: Sun 20 Sep 2026 15:00:22 +0000 Manifest next update: Mon 21 Sep 2026 15:00:22 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: HRVJ1MpcmZio4XTTtvCWHOL2mDolquVuZWVlTPbBTCE=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 7: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (hash: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=) 8: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 9: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 10: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 11: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:55:22:d8:df:a5:94:3f:97:a6:40:d8:33:ec:a1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 20 15:00:22 2026 GMT Not After : Sep 21 15:00:22 2026 GMT Subject: CN=650763e2367e802f1c34d98d7f352219f0521df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:6d:7a:7d:9e:f9:17:8b:26:c8:a5:a8:06: 57:f2:a2:d9:32:46:a2:5a:0c:94:ff:33:d9:e3:1c: 33:41:01:95:59:d5:d8:34:96:78:e7:76:c6:76:db: 0c:fd:8d:b0:32:47:20:fe:1e:92:22:0e:c9:5e:1b: a8:dc:9c:e5:a7:aa:55:07:e1:df:31:04:aa:b6:0b: 0b:7f:bf:9b:de:39:2c:2b:ee:ab:95:28:bc:17:f4: e7:4b:c5:ab:c1:f7:f6:0f:87:28:57:73:29:93:8f: 70:a0:8a:83:88:9a:3c:f1:e7:5c:f7:58:ec:24:50: 27:95:5a:ca:2a:6a:e3:e4:b7:c3:80:8b:39:dd:06: 6a:58:a8:ef:8c:62:a9:1f:aa:f0:46:d4:0b:5f:23: e3:0d:54:a7:af:88:e4:d0:5e:49:26:ff:41:f5:5e: 50:18:30:81:f2:2b:08:36:db:fa:2a:01:38:49:a5: 5e:ac:e2:a6:7f:82:a5:e7:14:63:21:d8:7b:1b:c5: e0:71:4d:40:48:38:d2:f2:dc:5e:5f:3e:22:53:cc: b2:f2:95:b4:df:ba:a9:b9:11:d9:da:1e:c9:7b:eb: a0:2b:2f:be:0c:50:9c:11:ff:86:0b:86:5c:ce:c1: b8:78:07:f7:82:53:c3:e3:ed:2a:b6:4e:8d:8b:a8: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:07:63:E2:36:7E:80:2F:1C:34:D9:8D:7F:35:22:19:F0:52:1D:F7 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d7:16:21:49:8c:2f:1e:d0:76:fc:8a:5f:27:c2:ca:30:d2: 77:22:42:4f:39:8b:29:9f:27:95:e4:37:2c:2f:84:c5:d9:03: 0d:50:05:58:0c:19:f3:86:8c:c9:eb:ef:41:d8:d3:70:46:6e: b3:dd:20:35:50:0a:78:0b:29:89:25:3d:4b:c5:47:77:50:46: 91:f2:64:8f:ba:7b:7b:05:83:9b:65:95:17:57:65:ed:ad:81: e7:5d:b1:94:cb:59:95:25:65:11:c9:e1:4c:3c:a9:02:f7:78: c1:e3:3c:b8:8d:09:ff:d9:37:33:92:9a:ac:52:fb:84:fd:ed: 97:e4:2e:12:fe:7b:55:fd:a9:61:22:60:6f:e6:20:6b:c8:e3: 34:30:00:31:15:d9:03:20:98:ba:a7:4d:ef:ee:d0:8b:6c:e3: d2:01:ad:06:60:4a:5e:06:59:ff:a4:93:b5:91:f0:30:df:68: 21:00:4f:db:06:db:8e:b9:e9:c0:26:1b:d5:32:db:9c:9a:e3: 3e:c3:64:4a:6b:09:41:d1:63:79:dd:7d:af:89:88:05:34:79: 97:35:14:f2:83:ba:cf:8f:b7:ab:ca:54:81:65:75:63:e9:ee: 8f:fa:50:85:1f:fb:0d:17:a5:af:6c:bc:08:4d:c1:8a:21:95: 1f:20:bc:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/VSLY36WUP5emQNgz7KHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTIwMTUwMDIyWhcNMjYwOTIxMTUwMDIyWjAzMTEwLwYDVQQD Eyg2NTA3NjNlMjM2N2U4MDJmMWMzNGQ5OGQ3ZjM1MjIxOWYwNTIxZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9ten2e+ReLJsilqAZX8qLZMkai WgyU/zPZ4xwzQQGVWdXYNJZ453bGdtsM/Y2wMkcg/h6SIg7JXhuo3Jzlp6pVB+Hf MQSqtgsLf7+b3jksK+6rlSi8F/TnS8Wrwff2D4coV3Mpk49woIqDiJo88edc91js JFAnlVrKKmrj5LfDgIs53QZqWKjvjGKpH6rwRtQLXyPjDVSnr4jk0F5JJv9B9V5Q GDCB8isINtv6KgE4SaVerOKmf4Kl5xRjIdh7G8XgcU1ASDjS8txeXz4iU8yy8pW0 37qpuRHZ2h7Je+ugKy++DFCcEf+GC4ZczsG4eAf3glPD4+0qtk6Ni6i7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUHY+I2foAvHDTZjX81IhnwUh33MB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtcWIUmM Lx7QdvyKXyfCyjDSdyJCTzmLKZ8nleQ3LC+ExdkDDVAFWAwZ84aMyevvQdjTcEZu s90gNVAKeAspiSU9S8VHd1BGkfJkj7p7ewWDm2WVF1dl7a2B512xlMtZlSVlEcnh TDypAvd4weM8uI0J/9k3M5KarFL7hP3tl+QuEv57Vf2pYSJgb+Yga8jjNDAAMRXZ AyCYuqdN7+7Qi2zj0gGtBmBKXgZZ/6STtZHwMN9oIQBP2wbbjrnpwCYb1TLbnJrj PsNkSmsJQdFjed19r4mIBTR5lzUU8oO6z4+3q8pUgWV1Y+nuj/pQhR/7DRelr2y8 CE3BiiGVHyC8fg== -----END CERTIFICATE-----Generated at Mon Sep 21 01:43:30 2026 by rpki-client