$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: qc1hQxSMd5taolpq+TefpYkXaUCa73AABJQNkJYGLMA= Subject key identifier: 15:29:93:64:CF:38:C9:99:CA:7D:98:E5:22:2C:BB:DF:9C:BC:2F:D0 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A0D0B7199E5687DE1A7BFFDFDBF080EE2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0EA1 Signing time: Thu 24 Sep 2026 00:00:55 +0000 Manifest this update: Thu 24 Sep 2026 00:00:55 +0000 Manifest next update: Fri 25 Sep 2026 00:00:55 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: yksCEC1NLehFte1hAxx7hf6uho1f99s9IMWFhrEuD5k=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 7: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (hash: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=) 8: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 9: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 10: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 11: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b7:19:9e:56:87:de:1a:7b:ff:df:db:f0:80:ee:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 24 00:00:55 2026 GMT Not After : Sep 25 00:00:55 2026 GMT Subject: CN=15299364cf38c999ca7d98e5222cbbdf9cbc2fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:9b:e0:5a:87:71:af:56:1e:e6:98:5d:c1: 28:dc:4c:18:e2:2a:cf:9f:b5:fb:be:bc:b7:7b:cb: 57:b1:28:19:fc:c7:92:34:2f:20:ea:50:8b:cf:6b: 5c:10:d5:33:31:2f:20:83:0b:91:ff:4a:f7:5b:6c: ee:97:28:30:e8:ea:df:21:e9:7a:66:76:53:75:8f: bc:ce:26:85:ff:82:c3:06:42:79:4b:93:61:28:34: 71:13:f3:5d:0b:d6:18:eb:9e:75:d1:ca:a5:93:33: 00:dc:a5:e6:6c:e8:ae:fe:e1:2e:7a:71:69:33:0d: 73:3f:c7:86:01:a9:b2:08:19:4b:89:09:ce:af:de: 77:fd:ff:79:2f:5b:e1:f9:5c:73:f1:de:f7:1f:a1: 78:0d:2f:4a:96:d1:a6:7a:30:de:66:03:29:97:4a: e4:21:8d:99:41:6f:e5:ec:68:be:01:68:05:7d:51: 47:e5:37:c8:a1:3c:2f:d0:96:7e:ab:12:7a:8e:74: 18:fa:2e:29:3f:3d:a5:9a:74:1f:9d:ea:cc:44:76: 4d:e8:a8:6d:45:42:a7:90:8c:d6:f0:ce:d0:b4:55: 8f:0a:90:50:46:2d:55:b8:a9:54:51:03:c3:51:a2: dc:99:96:bb:7d:e9:1a:c5:1b:c6:55:1a:69:99:ec: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:29:93:64:CF:38:C9:99:CA:7D:98:E5:22:2C:BB:DF:9C:BC:2F:D0 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6d:9f:d9:56:c7:f2:7d:5c:b4:50:c4:98:2e:24:a3:76:8c: 8b:6f:5a:fd:1c:ad:dd:65:a6:de:87:8d:99:01:dc:3c:ea:22: d9:60:d2:2e:cc:0c:55:14:0e:20:68:6b:fe:47:d9:b3:33:0f: 4b:72:3c:4b:aa:38:bc:6c:a8:9a:bd:1d:c8:b4:7b:cb:2f:a5: 88:18:5e:29:1e:11:25:7d:de:46:e9:f6:87:f6:0a:d9:93:3f: 3c:a9:b2:9e:73:3e:23:e3:8c:7d:b8:a2:dd:53:90:46:47:68: df:c1:83:84:c5:c6:2d:b6:96:ba:b5:b2:e7:cb:81:db:f4:d1: 43:a5:22:ba:94:88:19:19:b0:b6:2d:27:68:e7:93:c8:34:a2: 58:3a:1b:04:82:0e:01:52:e2:3b:a7:2a:7e:bd:96:c3:94:59: 3a:8b:7a:ea:8d:d1:ed:9a:0d:d4:31:dc:3f:91:31:11:41:2c: 76:e5:81:e7:d4:be:74:2f:30:61:c4:63:e5:1b:ca:ea:29:44: 8c:84:ee:3a:da:45:c8:55:ba:25:83:43:db:4f:81:be:1e:7c: 48:02:55:23:31:1a:40:86:a3:47:b6:38:b0:7b:1f:c1:1f:72: f9:b1:01:83:80:48:aa:0d:f3:c4:3b:0e:11:36:33:26:fa:ef: 79:d0:69:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtxmeVofeGnv/39vwgO4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTI0MDAwMDU1WhcNMjYwOTI1MDAwMDU1WjAzMTEwLwYDVQQD EygxNTI5OTM2NGNmMzhjOTk5Y2E3ZDk4ZTUyMjJjYmJkZjljYmMyZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ub4FqHca9WHuaYXcEo3EwY4irP n7X7vry3e8tXsSgZ/MeSNC8g6lCLz2tcENUzMS8ggwuR/0r3W2zulygw6OrfIel6 ZnZTdY+8ziaF/4LDBkJ5S5NhKDRxE/NdC9YY65510cqlkzMA3KXmbOiu/uEuenFp Mw1zP8eGAamyCBlLiQnOr953/f95L1vh+Vxz8d73H6F4DS9KltGmejDeZgMpl0rk IY2ZQW/l7Gi+AWgFfVFH5TfIoTwv0JZ+qxJ6jnQY+i4pPz2lmnQfnerMRHZN6Kht RUKnkIzW8M7QtFWPCpBQRi1VuKlUUQPDUaLcmZa7fekaxRvGVRppmeygHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUpk2TPOMmZyn2Y5SIsu9+cvC/QMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG2f2VbH 8n1ctFDEmC4ko3aMi29a/Ryt3WWm3oeNmQHcPOoi2WDSLswMVRQOIGhr/kfZszMP S3I8S6o4vGyomr0dyLR7yy+liBheKR4RJX3eRun2h/YK2ZM/PKmynnM+I+OMfbii 3VOQRkdo38GDhMXGLbaWurWy58uB2/TRQ6UiupSIGRmwti0naOeTyDSiWDobBIIO AVLiO6cqfr2Ww5RZOot66o3R7ZoN1DHcP5ExEUEsduWB59S+dC8wYcRj5RvK6ilE jITuOtpFyFW6JYND20+Bvh58SAJVIzEaQIajR7Y4sHsfwR9y+bEBg4BIqg3zxDsO ETYzJvrvedBpTQ== -----END CERTIFICATE-----Generated at Thu Sep 24 07:08:47 2026 by rpki-client