$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: 5xckdRC0OUUlWLMdFd+AwneAYpmbkKs9XjufWerBZ34= Subject key identifier: AE:94:B7:A5:48:41:88:3C:4B:E1:97:BA:AA:55:71:24:41:81:07:AA Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 01A1C3D498B2543328A01710F700C8D28309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 1459 Signing time: Tue 10 Nov 2026 05:00:52 +0000 Manifest this update: Tue 10 Nov 2026 05:00:52 +0000 Manifest next update: Wed 11 Nov 2026 05:00:52 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 1-hb19mdI_t8mKtuNbtby2D1HE0E.roa (hash: jcOYD7AE0FqD3JKvlPPueqZV5Q+Nu1NLlSwe5Glm784=) 3: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 4: 9q50kG_riEUPt-scfGdki5ASYkw.roa (hash: JxgNWnECobtZ+p3Ufnx5SSxYpaKvTy6RNLrzJM+LjPA=) 5: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 6: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 7: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 8: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 9: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: iQji1hMh2ro9OWamER/g0I0qFlW5lMOIaveLOLC5Owk=) 10: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 11: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 12: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 13: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 22:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c3:d4:98:b2:54:33:28:a0:17:10:f7:00:c8:d2:83:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Nov 10 05:00:52 2026 GMT Not After : Nov 11 05:00:52 2026 GMT Subject: CN=ae94b7a54841883c4be197baaa557124418107aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:df:02:ec:b1:70:1f:f7:1f:01:81:6e:e2: 0d:fb:e8:ec:80:dc:e0:02:66:8a:19:d1:2d:ad:89: 56:a9:30:5a:3d:88:5f:85:3d:68:43:cb:02:b0:32: da:39:62:b5:a9:56:a0:50:47:94:f7:e8:86:33:49: 68:1d:d0:58:e0:72:73:67:1c:b0:79:74:58:13:28: 32:c8:91:b1:5d:1f:44:d9:a3:54:ab:cd:d1:d5:25: 30:cb:38:be:4d:f0:ee:15:f1:3b:81:29:fc:5c:b1: b3:1e:ac:ba:7c:6c:ef:75:c9:e7:1b:38:27:4d:d5: e1:c3:ac:83:25:d4:10:80:09:11:b7:bc:43:11:26: c2:72:dc:d5:11:19:2f:20:42:07:16:53:1d:7a:eb: 59:63:a5:2c:25:fb:2b:ba:ff:b2:c7:71:fe:d8:e1: 0d:34:3d:83:0c:47:a0:aa:67:50:0e:e4:33:91:b7: 59:8f:03:0b:15:f7:0c:d5:52:18:f2:6d:43:55:0c: 2e:8a:f5:d8:34:2a:98:1b:12:b2:47:c0:25:fd:d0: c2:f5:7c:c0:18:d0:90:2a:c1:ec:37:bb:e7:30:51: a4:5f:e1:91:20:8b:5f:bf:10:e2:61:a3:d4:ec:ef: d3:30:7d:a0:6c:f2:97:7a:f5:74:99:99:21:57:61: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:94:B7:A5:48:41:88:3C:4B:E1:97:BA:AA:55:71:24:41:81:07:AA X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ba:a5:99:21:6c:62:ce:f0:92:f3:77:d7:27:24:88:b8:ac: 06:f4:63:95:8d:7d:ae:3d:65:1a:a0:04:ff:1e:2b:8b:71:98: 25:98:f8:3a:c4:c6:49:8a:19:cc:8f:44:24:e5:94:51:0f:72: 25:a5:1b:c9:94:7e:01:8b:86:41:a0:8f:87:bf:c7:a8:54:c4: 89:72:1e:5a:79:4b:ec:68:b5:d2:34:ab:46:94:b2:3e:45:36: 10:53:7d:d2:a1:ad:43:f2:21:df:de:2c:1f:e9:4e:a9:b8:f6: 09:47:4f:95:ed:bc:04:bd:be:c2:f1:e4:45:ab:7d:f7:f2:53: bf:10:dc:1f:71:6c:e9:7a:e4:14:ee:17:7d:c4:d2:e5:6a:be: 8a:3d:ee:41:f2:52:15:36:b5:3c:47:43:1a:37:55:29:4e:7d: e7:1b:de:52:dd:67:43:69:ed:24:d1:c5:dc:e3:eb:cd:4b:9f: c3:ae:1a:35:48:e6:e9:20:7b:a9:79:32:c8:40:55:2a:ff:9f: bb:1a:7c:20:df:68:ae:ee:90:9d:2a:4f:30:28:17:ef:45:c0: 17:a8:f1:b5:16:23:36:e1:00:eb:d1:e6:be:4f:60:a4:3e:8a: 61:6d:eb:7c:b9:69:61:46:25:66:51:db:99:14:dc:a5:8a:4d: 89:bc:23:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHD1JiyVDMooBcQ9wDI0oMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYxMTEwMDUwMDUyWhcNMjYxMTExMDUwMDUyWjAzMTEwLwYDVQQD EyhhZTk0YjdhNTQ4NDE4ODNjNGJlMTk3YmFhYTU1NzEyNDQxODEwN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSnfAuyxcB/3HwGBbuIN++jsgNzg AmaKGdEtrYlWqTBaPYhfhT1oQ8sCsDLaOWK1qVagUEeU9+iGM0loHdBY4HJzZxyw eXRYEygyyJGxXR9E2aNUq83R1SUwyzi+TfDuFfE7gSn8XLGzHqy6fGzvdcnnGzgn TdXhw6yDJdQQgAkRt7xDESbCctzVERkvIEIHFlMdeutZY6UsJfsruv+yx3H+2OEN ND2DDEegqmdQDuQzkbdZjwMLFfcM1VIY8m1DVQwuivXYNCqYGxKyR8Al/dDC9XzA GNCQKsHsN7vnMFGkX+GRIItfvxDiYaPU7O/TMH2gbPKXevV0mZkhV2GwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6Ut6VIQYg8S+GXuqpVcSRBgQeqMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErqlmSFs Ys7wkvN31yckiLisBvRjlY19rj1lGqAE/x4ri3GYJZj4OsTGSYoZzI9EJOWUUQ9y JaUbyZR+AYuGQaCPh7/HqFTEiXIeWnlL7Gi10jSrRpSyPkU2EFN90qGtQ/Ih394s H+lOqbj2CUdPle28BL2+wvHkRat99/JTvxDcH3Fs6XrkFO4XfcTS5Wq+ij3uQfJS FTa1PEdDGjdVKU595xveUt1nQ2ntJNHF3OPrzUufw64aNUjm6SB7qXkyyEBVKv+f uxp8IN9oru6QnSpPMCgX70XAF6jxtRYjNuEA69Hmvk9gpD6KYW3rfLlpYUYlZlHb mRTcpYpNibwjUA== -----END CERTIFICATE-----Generated at Tue Nov 10 08:07:44 2026 by rpki-client