$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 5mxQfNq7mkJGKuNdfD8KfqpURgNVLpTWxa61W+occRg= Subject key identifier: 5F:71:30:64:89:3F:15:36:30:09:40:F1:36:8C:F3:31:06:0F:8A:84 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A0E1749479D24D65BBBA0D4723B172C4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0EAA Signing time: Sun 27 Sep 2026 06:01:48 +0000 Manifest this update: Sun 27 Sep 2026 06:01:48 +0000 Manifest next update: Mon 28 Sep 2026 06:01:48 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: dlWTXOtbWmByvjIJ014t/4mlI++dNAPafDJnzk7i1aU=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: J06g-djClR2bYsX3QAbP6cOy4nc.roa (hash: 4iPhGL5OxQ4I9Wq/RBTaQYcoXtYvOjco+4VlJmWFQIo=) 5: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 7: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 8: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (hash: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=) 9: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 10: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 11: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 12: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:74:94:79:d2:4d:65:bb:ba:0d:47:23:b1:72:c4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 27 06:01:48 2026 GMT Not After : Sep 28 06:01:48 2026 GMT Subject: CN=5f713064893f1536300940f1368cf331060f8a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:30:9d:45:14:33:31:da:be:2e:d0:a4:71: 68:d4:60:01:58:05:5f:43:12:b7:b3:63:28:37:ea: a4:af:28:c1:09:be:2f:39:27:42:bc:ad:1d:d8:da: 20:f8:da:d4:ad:12:db:20:0e:31:cb:73:71:35:9d: 78:80:04:3f:8a:d1:b6:ee:12:2a:49:27:fb:c3:75: 78:47:62:bd:0d:3d:7e:3f:00:57:24:a7:2e:37:11: 62:0d:8c:31:86:ce:9e:c9:43:66:74:ea:30:76:d0: 67:b0:51:bc:4a:69:72:d8:03:a4:73:54:a6:a4:7c: 7f:dc:c1:7e:dc:8f:db:f9:04:e0:2f:eb:70:a1:ab: b6:de:6a:f1:3e:dd:59:5f:33:e2:5f:c2:23:4f:13: 46:65:42:9b:33:78:7d:37:46:4d:58:87:91:49:8f: 13:f6:a4:96:e2:e6:fa:d8:43:c1:98:69:53:8f:73: e1:d2:73:27:76:d6:d5:1f:f4:45:92:aa:19:10:80: 4a:9d:28:1a:c7:7c:31:c0:aa:54:c4:ce:b4:e2:11: e3:e7:1c:ec:2f:3b:05:73:ca:b6:a6:e8:04:3c:b2: 78:aa:b6:2b:62:65:07:d1:16:a7:a5:64:2d:55:ac: 92:f7:46:36:0d:82:b5:f3:03:cd:0c:32:d6:f8:9f: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:30:64:89:3F:15:36:30:09:40:F1:36:8C:F3:31:06:0F:8A:84 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:02:a8:bf:ec:d6:88:2f:4f:55:54:14:f6:23:dc:c3:df: 86:2a:aa:62:b4:06:cd:5d:44:d1:b1:c4:89:2a:1e:d5:90:c1: 40:4f:5b:3f:93:ce:17:d0:21:dd:d3:4c:d3:91:27:40:05:7f: 98:4b:58:ae:7e:f8:1d:6a:bf:73:2c:e8:8e:2a:ee:7e:f7:7d: 2f:29:92:97:c2:18:c0:8c:80:7b:ac:9f:5a:00:c7:a3:38:24: ce:1f:9f:95:39:9a:1a:18:b1:27:7f:7f:53:ac:5f:c8:9f:a3: 00:d0:71:ec:d5:b7:ae:57:f9:99:90:ff:15:1f:18:5e:62:56: 1f:68:eb:93:ac:fa:45:30:a7:d1:2d:d7:61:49:ac:bf:0d:2c: 30:31:6e:5c:47:17:10:92:24:75:ce:e8:42:d3:33:ad:96:87: 69:2d:b1:23:c2:ac:a6:67:32:94:f3:99:8e:47:44:3f:8a:2b: 6b:92:0b:fb:f2:87:dd:7c:e4:c9:9d:0a:d0:cc:b7:0c:bc:7e: b0:63:04:3a:1a:b4:90:27:0c:c9:38:94:01:c2:55:86:60:0a: d4:68:5c:49:97:11:68:08:13:ce:82:1e:8c:2f:d3:23:ed:3b: b9:7e:28:e2:06:fb:47:72:b2:be:3f:ad:e8:26:2a:c7:36:61: fa:12:78:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhdJR50k1lu7oNRyOxcsTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTI3MDYwMTQ4WhcNMjYwOTI4MDYwMTQ4WjAzMTEwLwYDVQQD Eyg1ZjcxMzA2NDg5M2YxNTM2MzAwOTQwZjEzNjhjZjMzMTA2MGY4YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4wwnUUUMzHavi7QpHFo1GABWAVf QxK3s2MoN+qkryjBCb4vOSdCvK0d2Nog+NrUrRLbIA4xy3NxNZ14gAQ/itG27hIq SSf7w3V4R2K9DT1+PwBXJKcuNxFiDYwxhs6eyUNmdOowdtBnsFG8Smly2AOkc1Sm pHx/3MF+3I/b+QTgL+twoau23mrxPt1ZXzPiX8IjTxNGZUKbM3h9N0ZNWIeRSY8T 9qSW4ub62EPBmGlTj3Ph0nMndtbVH/RFkqoZEIBKnSgax3wxwKpUxM604hHj5xzs LzsFc8q2pugEPLJ4qrYrYmUH0RanpWQtVayS90Y2DYK18wPNDDLW+J9hGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9xMGSJPxU2MAlA8TaM8zEGD4qEMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX8CqL/s 1ogvT1VUFPYj3MPfhiqqYrQGzV1E0bHEiSoe1ZDBQE9bP5POF9Ah3dNM05EnQAV/ mEtYrn74HWq/cyzojirufvd9LymSl8IYwIyAe6yfWgDHozgkzh+flTmaGhixJ39/ U6xfyJ+jANBx7NW3rlf5mZD/FR8YXmJWH2jrk6z6RTCn0S3XYUmsvw0sMDFuXEcX EJIkdc7oQtMzrZaHaS2xI8KspmcylPOZjkdEP4ora5IL+/KH3XzkyZ0K0My3DLx+ sGMEOhq0kCcMyTiUAcJVhmAK1GhcSZcRaAgTzoIejC/TI+07uX4o4gb7R3Kyvj+t 6CYqxzZh+hJ4Bg== -----END CERTIFICATE-----Generated at Sun Sep 27 08:27:13 2026 by rpki-client