$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: WNPEkGxkWwIwqAfBqZIHGZsGQgQmkkLb7ZmB1GyMf50= Subject key identifier: 95:1C:04:32:8C:52:2A:7F:CB:98:9E:4F:17:DA:79:E5:6B:89:EF:72 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A09020CABDF9FB9F190EAA8B1B91E8C6FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0E7F Signing time: Fri 11 Sep 2026 11:01:03 +0000 Manifest this update: Fri 11 Sep 2026 11:01:03 +0000 Manifest next update: Sat 12 Sep 2026 11:01:03 +0000 Files and hashes: 1: 2vyrNEfeIOD6xcLTqFu0oLa-5G4.roa (hash: uFqWVlm0cwnANk3/QwT5C/PcbdcVaXWkyGLU3XeB7yE=) 2: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 3: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 7V2sGKI3ufpI4M7lZ+zGgHRz/QxofBcL69VHXmKs9D4=) 4: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 5: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 7: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 8: i536I-ayrDn5uau328WAcV3xqS0.roa (hash: OfbLI9YXTmvxu2gEIcYeYiXzwlAZoObo2hHIuI7VBac=) 9: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 10: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 11: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 12: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 12 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:90:20:ca:bd:f9:fb:9f:19:0e:aa:8b:1b:91:e8:c6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 11 11:01:03 2026 GMT Not After : Sep 12 11:01:03 2026 GMT Subject: CN=951c04328c522a7fcb989e4f17da79e56b89ef72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:5f:1d:c4:dd:2e:33:4b:cd:2f:54:8f:85: 86:a0:73:c8:ae:75:c7:4f:05:92:c3:92:82:ed:15: 6f:78:04:b7:88:ce:21:f6:1e:da:ad:fd:3d:41:08: 33:4f:56:75:3c:51:bf:0e:c1:47:3c:d2:b6:b0:e8: 18:6c:4a:7f:da:eb:8b:64:58:0c:f5:2f:d7:2e:27: 23:72:26:c3:78:f4:e2:5e:0a:e8:f0:ad:c0:4a:b1: ec:c3:9f:4c:50:0e:3c:31:40:27:7f:6d:73:60:3e: fb:1a:61:14:bf:a6:1f:9e:76:3e:98:95:d6:73:cb: bb:48:03:22:70:6c:6f:d2:ac:d1:1c:3c:2d:2e:c7: 9f:5d:b2:c6:77:eb:5b:83:39:1c:b4:a9:b3:9f:bf: ca:5c:7d:2e:18:cb:83:93:af:63:13:72:7c:94:a8: 58:b1:2c:40:bc:76:37:01:ef:31:2a:13:14:b7:e9: 65:36:ed:65:d4:82:25:44:9c:80:a4:1a:bf:62:7f: 2e:ac:45:e0:01:4d:78:0f:cd:bf:92:db:77:b2:f1: ca:6c:ff:bc:61:c8:b3:d9:73:de:3c:5b:fd:9d:e7: 1b:dd:cb:ea:52:df:4d:40:b6:96:02:e3:be:ea:2a: 2a:ad:51:24:44:20:69:d7:b1:7e:97:58:d7:2d:72: 06:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:04:32:8C:52:2A:7F:CB:98:9E:4F:17:DA:79:E5:6B:89:EF:72 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:13:1f:95:20:27:4a:ed:27:04:e8:d5:17:12:95:38:c2:67: 5b:bf:4b:68:d8:e6:42:89:d5:73:18:9e:f8:39:96:94:16:e7: 7d:9f:0f:78:c5:a9:49:89:76:6c:85:4b:ff:a2:40:1c:7a:3a: 10:fa:6e:8e:cf:60:e5:8e:fb:76:98:90:ba:50:89:a3:83:02: 99:72:07:f2:1d:8e:e9:0f:82:8d:88:3c:ba:77:3f:04:c8:ff: 34:0b:a1:c0:32:33:b4:4b:39:4c:60:fe:31:a7:08:f7:58:0e: 82:a0:72:df:19:63:98:35:6d:6c:9c:b7:6c:a9:98:00:45:ae: b8:89:da:c7:02:7d:ae:f1:43:70:f4:b9:32:08:58:9d:37:14: 9a:66:e5:ec:b3:2d:a9:d8:5d:ce:20:07:da:a2:d0:5a:4a:16: d9:09:a2:0a:d0:fb:59:59:9d:12:8b:0d:68:e9:69:e4:53:bd: a9:af:a4:12:8d:a7:45:65:fd:fc:77:14:61:73:50:40:90:b1: 4b:44:ac:12:13:a1:f7:31:ca:74:de:27:51:bb:30:c7:63:79: 49:68:23:4a:98:d3:d7:f4:e2:42:a3:97:5f:f6:71:98:65:09: 77:81:80:99:be:dc:09:b2:83:a2:46:84:78:88:7f:65:40:54: 19:3a:45:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCQIMq9+fufGQ6qixuR6Mb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTExMTEwMTAzWhcNMjYwOTEyMTEwMTAzWjAzMTEwLwYDVQQD Eyg5NTFjMDQzMjhjNTIyYTdmY2I5ODllNGYxN2RhNzllNTZiODllZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMBfHcTdLjNLzS9Uj4WGoHPIrnXH TwWSw5KC7RVveAS3iM4h9h7arf09QQgzT1Z1PFG/DsFHPNK2sOgYbEp/2uuLZFgM 9S/XLicjcibDePTiXgro8K3ASrHsw59MUA48MUAnf21zYD77GmEUv6YfnnY+mJXW c8u7SAMicGxv0qzRHDwtLsefXbLGd+tbgzkctKmzn7/KXH0uGMuDk69jE3J8lKhY sSxAvHY3Ae8xKhMUt+llNu1l1IIlRJyApBq/Yn8urEXgAU14D82/ktt3svHKbP+8 Yciz2XPePFv9necb3cvqUt9NQLaWAuO+6ioqrVEkRCBp17F+l1jXLXIGbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUcBDKMUip/y5ieTxfaeeVrie9yMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRMflSAn Su0nBOjVFxKVOMJnW79LaNjmQonVcxie+DmWlBbnfZ8PeMWpSYl2bIVL/6JAHHo6 EPpujs9g5Y77dpiQulCJo4MCmXIH8h2O6Q+CjYg8unc/BMj/NAuhwDIztEs5TGD+ MacI91gOgqBy3xljmDVtbJy3bKmYAEWuuInaxwJ9rvFDcPS5MghYnTcUmmbl7LMt qdhdziAH2qLQWkoW2QmiCtD7WVmdEosNaOlp5FO9qa+kEo2nRWX9/HcUYXNQQJCx S0SsEhOh9zHKdN4nUbswx2N5SWgjSpjT1/TiQqOXX/ZxmGUJd4GAmb7cCbKDokaE eIh/ZUBUGTpFOA== -----END CERTIFICATE-----Generated at Fri Sep 11 14:19:42 2026 by rpki-client