$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: ksfQiMz9XabVoPB92pA6LIQoF1uHy8v5fJANLt1Fk90= Subject key identifier: 37:23:8E:9E:C8:81:42:E4:B0:12:1F:B0:02:C1:50:29:20:09:F8:04 Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 01A03F727AF51050DDF7434D46E298BFC2A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 020D Signing time: Wed 26 Aug 2026 19:01:02 +0000 Manifest this update: Wed 26 Aug 2026 19:01:02 +0000 Manifest next update: Thu 27 Aug 2026 19:01:02 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: GcWE/y4zTjAeKFmWPwLpa/qlLiqnOLFhh1M6n5aFono=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3f:72:7a:f5:10:50:dd:f7:43:4d:46:e2:98:bf:c2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Aug 26 19:01:02 2026 GMT Not After : Aug 27 19:01:02 2026 GMT Subject: CN=37238e9ec88142e4b0121fb002c150292009f804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3f:96:9d:5a:e8:8c:e6:0a:94:b6:7b:52:c4: d7:07:db:12:21:d9:32:d6:1b:7c:b7:76:c4:1b:c9: a6:85:3a:1d:cc:65:53:fd:a4:32:07:33:35:e8:33: a0:c4:b2:8f:71:4c:89:db:ca:ad:73:23:04:56:f9: 51:61:3b:b7:01:dd:f4:31:a7:72:6c:00:af:eb:ad: bb:c8:f4:35:f8:0a:d1:8b:4d:5c:00:5b:6c:c9:03: d1:db:83:c8:01:61:0b:61:12:0f:9c:38:75:92:28: 12:f3:6d:65:6f:ad:75:96:97:b5:00:76:db:4b:bd: 4f:0a:36:88:52:c4:46:7b:48:77:3b:f4:46:54:cf: 99:04:d9:96:3e:21:7b:46:a4:2c:77:4c:12:26:cd: 9f:12:a3:9d:98:14:95:21:f8:b9:e8:5e:9f:11:be: 0b:3b:9f:69:3f:d8:e0:a8:e2:bd:e3:df:c6:41:a9: 35:96:a8:b2:f1:1b:a9:10:3a:2e:c7:fe:b5:33:18: 22:cc:d0:7b:6a:46:66:53:9f:32:df:a3:77:87:bb: de:63:2d:bf:4d:a9:f9:30:2c:52:fb:70:7c:66:8b: a7:fa:cf:39:13:93:bf:2a:91:9f:c1:c8:9e:a8:b1: 2c:95:ff:3c:53:93:fa:ed:66:c4:e0:3f:ec:f1:d4: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:23:8E:9E:C8:81:42:E4:B0:12:1F:B0:02:C1:50:29:20:09:F8:04 X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:46:66:55:b1:61:00:0a:bf:ff:79:ce:92:22:21:60:90: 28:fb:10:2e:05:ef:f5:5d:11:bb:01:05:21:f9:ad:39:b2:13: 1a:4e:82:51:27:64:b1:dc:3b:35:35:6a:d5:ba:3b:06:2f:db: d4:04:35:b2:aa:0c:a3:b5:36:d0:a3:0d:c3:22:49:3d:68:ef: 5b:e5:a1:c3:5c:2a:32:7c:f4:c8:78:18:8c:f7:ed:26:9a:70: 4d:d7:04:b2:c7:7e:4e:0d:56:47:d2:f6:29:f9:6d:fb:a2:45: 41:63:23:79:eb:e1:06:ba:f0:f3:b5:67:db:65:7d:95:df:91: 97:66:02:e8:0d:11:1f:02:87:79:38:a1:5e:08:4a:e6:a2:35: f9:1a:47:f3:52:cd:05:56:bb:5a:53:2e:b9:8a:61:4c:7d:9a: ff:db:e5:46:bf:32:ef:58:3e:ef:a0:39:ef:86:3d:fe:8c:01: 9c:15:fa:c9:b1:dc:e5:6a:b1:87:47:0c:5d:69:98:ab:bf:c3: 3b:46:07:85:f1:26:bd:31:17:f2:fa:d4:be:9d:02:70:6f:f8: 8f:d6:e6:36:c8:cd:b4:29:7a:16:89:d5:59:6e:f1:f1:13:06: 4b:a4:9d:f3:ba:71:ca:38:80:02:05:a8:64:84:40:30:78:ec: 8a:80:e9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA/cnr1EFDd90NNRuKYv8KmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwODI2MTkwMTAyWhcNMjYwODI3MTkwMTAyWjAzMTEwLwYDVQQD EygzNzIzOGU5ZWM4ODE0MmU0YjAxMjFmYjAwMmMxNTAyOTIwMDlmODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T+WnVrojOYKlLZ7UsTXB9sSIdky 1ht8t3bEG8mmhTodzGVT/aQyBzM16DOgxLKPcUyJ28qtcyMEVvlRYTu3Ad30Mady bACv6627yPQ1+ArRi01cAFtsyQPR24PIAWELYRIPnDh1kigS821lb611lpe1AHbb S71PCjaIUsRGe0h3O/RGVM+ZBNmWPiF7RqQsd0wSJs2fEqOdmBSVIfi56F6fEb4L O59pP9jgqOK949/GQak1lqiy8RupEDoux/61MxgizNB7akZmU58y36N3h7veYy2/ Tan5MCxS+3B8Zoun+s85E5O/KpGfwcieqLEslf88U5P67WbE4D/s8dQpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcjjp7IgULksBIfsALBUCkgCfgEMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd9GZlWx YQAKv/95zpIiIWCQKPsQLgXv9V0RuwEFIfmtObITGk6CUSdksdw7NTVq1bo7Bi/b 1AQ1sqoMo7U20KMNwyJJPWjvW+Whw1wqMnz0yHgYjPftJppwTdcEssd+Tg1WR9L2 Kflt+6JFQWMjeevhBrrw87Vn22V9ld+Rl2YC6A0RHwKHeTihXghK5qI1+RpH81LN BVa7WlMuuYphTH2a/9vlRr8y71g+76A574Y9/owBnBX6ybHc5Wqxh0cMXWmYq7/D O0YHhfEmvTEX8vrUvp0CcG/4j9bmNsjNtCl6FonVWW7x8RMGS6Sd87pxyjiAAgWo ZIRAMHjsioDp9g== -----END CERTIFICATE-----Generated at Thu Aug 27 04:01:41 2026 by rpki-client