$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 1toksvo5PssHXJqgigLxorTwbkmEO6R51AUi0eQchBc= Subject key identifier: 19:05:DF:4A:05:09:A7:51:DD:25:D1:AF:0F:15:95:04:E1:F6:44:E2 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A09EA0B605E2929753A52D77BA3BED5BD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0E87 Signing time: Mon 14 Sep 2026 06:35:27 +0000 Manifest this update: Mon 14 Sep 2026 06:35:27 +0000 Manifest next update: Tue 15 Sep 2026 06:35:27 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: iChYgOdBXrgenROaYEymmvA/qWx7jJbybplFFDu2bcc=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 7: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (hash: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=) 8: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 9: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 10: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 11: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Sep 2026 06:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:9e:a0:b6:05:e2:92:97:53:a5:2d:77:ba:3b:ed:5b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 14 06:35:27 2026 GMT Not After : Sep 15 06:35:27 2026 GMT Subject: CN=1905df4a0509a751dd25d1af0f159504e1f644e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:aa:20:7c:a5:04:97:6c:99:0e:3b:b9:47: 64:be:94:c7:b6:d7:dd:0f:9e:35:4d:a8:61:1d:e3: f1:f0:80:4f:ac:df:01:85:5d:6d:99:95:21:00:b9: a7:43:e2:70:3b:a3:d3:b9:a2:12:d5:35:dd:dc:de: b2:32:fe:5d:16:40:db:a1:19:b3:dc:ae:1a:8f:e5: 7d:6b:70:13:be:8b:2f:3d:06:ad:06:f3:08:4c:60: 05:0c:e6:53:66:60:43:10:62:3d:6f:1f:29:d4:d7: d2:47:cf:76:1e:84:6a:71:70:ac:b2:0c:09:ed:1d: da:ed:18:d4:4b:d6:91:5a:f0:de:5f:59:e4:92:c1: d9:af:ac:76:b7:8e:0d:79:70:cf:5f:61:68:f9:32: f8:2b:10:a6:6e:0e:58:bc:d2:44:63:23:c4:a6:6b: 57:6e:36:70:7f:4d:4e:bd:5f:3e:c7:ac:50:00:fd: 82:a7:76:c6:09:df:cb:e8:cb:75:de:1c:5f:53:0f: ac:c5:32:3e:72:0d:87:34:83:4e:89:04:b9:70:fc: 7b:8f:40:ca:5f:aa:b2:58:16:ed:cb:1f:b1:4d:9c: 3c:dc:2a:83:d9:ba:c9:f6:31:47:89:1d:6d:bb:d3: b9:ca:a6:9e:ed:83:65:76:4b:67:12:21:2d:6f:05: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:05:DF:4A:05:09:A7:51:DD:25:D1:AF:0F:15:95:04:E1:F6:44:E2 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:48:06:e9:df:b0:c2:80:48:75:68:3c:3d:38:3d:f4:ee:0f: d0:0d:36:c0:10:50:f1:e9:d5:e1:bd:76:79:9b:f5:ce:a4:c2: b3:42:e3:aa:6f:46:63:04:bd:65:ad:0c:55:4c:a6:d5:0b:dc: 0b:0b:f1:8b:3e:e5:4b:64:65:96:35:7f:77:4a:b8:80:67:8b: d5:19:bd:f3:29:67:23:d0:5d:c6:90:61:9e:fc:aa:e0:66:fb: 34:66:2d:b0:08:e4:ce:7d:0b:fa:d7:11:5b:d8:c4:03:a6:47: a6:76:50:13:ca:8d:16:ec:d8:36:3f:bb:f4:cb:c5:61:f2:e9: 9e:44:06:a3:6c:7d:3f:7c:f6:2f:c9:82:00:54:f1:ea:56:22: 7e:18:cb:9f:27:54:f8:44:08:ca:68:93:c3:54:a6:48:65:80: 9f:eb:7a:35:6e:9f:7a:96:52:4a:cb:b2:4d:2d:3c:af:c1:54: 78:8e:72:ae:88:eb:c4:af:ac:a7:c5:f2:a9:60:12:3b:be:d0: 8a:81:4f:d7:ed:88:82:a5:35:b1:49:80:ff:86:7f:6f:6d:ab: c6:07:28:44:9b:5c:37:e7:6e:c8:dc:47:6c:ee:e0:f8:2f:5a: a1:7d:ca:32:8d:72:78:ee:1b:a3:00:59:eb:b0:12:0d:9c:a7: ae:a7:75:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCeoLYF4pKXU6Utd7o77VvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTE0MDYzNTI3WhcNMjYwOTE1MDYzNTI3WjAzMTEwLwYDVQQD EygxOTA1ZGY0YTA1MDlhNzUxZGQyNWQxYWYwZjE1OTUwNGUxZjY0NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/yqIHylBJdsmQ47uUdkvpTHttfd D541TahhHePx8IBPrN8BhV1tmZUhALmnQ+JwO6PTuaIS1TXd3N6yMv5dFkDboRmz 3K4aj+V9a3ATvosvPQatBvMITGAFDOZTZmBDEGI9bx8p1NfSR892HoRqcXCssgwJ 7R3a7RjUS9aRWvDeX1nkksHZr6x2t44NeXDPX2Fo+TL4KxCmbg5YvNJEYyPEpmtX bjZwf01OvV8+x6xQAP2Cp3bGCd/L6Mt13hxfUw+sxTI+cg2HNINOiQS5cPx7j0DK X6qyWBbtyx+xTZw83CqD2brJ9jFHiR1tu9O5yqae7YNldktnEiEtbwWcqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkF30oFCadR3SXRrw8VlQTh9kTiMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEgG6d+w woBIdWg8PTg99O4P0A02wBBQ8enV4b12eZv1zqTCs0Ljqm9GYwS9Za0MVUym1Qvc Cwvxiz7lS2RlljV/d0q4gGeL1Rm98ylnI9BdxpBhnvyq4Gb7NGYtsAjkzn0L+tcR W9jEA6ZHpnZQE8qNFuzYNj+79MvFYfLpnkQGo2x9P3z2L8mCAFTx6lYifhjLnydU +EQIymiTw1SmSGWAn+t6NW6fepZSSsuyTS08r8FUeI5yrojrxK+sp8XyqWASO77Q ioFP1+2IgqU1sUmA/4Z/b22rxgcoRJtcN+duyNxHbO7g+C9aoX3KMo1yeO4bowBZ 67ASDZynrqd1FQ== -----END CERTIFICATE-----Generated at Mon Sep 14 15:15:36 2026 by rpki-client