$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: D/YlzDCL0e4Cx4c4t1YipmvFOo+5n0tmgi0gQfhj+5Q= Subject key identifier: 0B:B5:A6:AA:92:CF:BA:BF:5C:3E:B9:4E:29:84:0E:5F:53:BA:83:BF Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 01A0BF228B6D48FB85609222C1124CFA4D6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 13D1 Signing time: Sun 20 Sep 2026 14:05:07 +0000 Manifest this update: Sun 20 Sep 2026 14:05:07 +0000 Manifest next update: Mon 21 Sep 2026 14:05:07 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 1-hb19mdI_t8mKtuNbtby2D1HE0E.roa (hash: jcOYD7AE0FqD3JKvlPPueqZV5Q+Nu1NLlSwe5Glm784=) 3: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 4: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 5: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 6: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 7: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: j1D6togPRlWJ/twFaz5KgbaXtTn8IIKoS08ejH5DgeQ=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa (hash: nMWSXjyhyxXgusKdou/8sfu2TMwgZlwVJi6zwp1S97s=) 12: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 13: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:22:8b:6d:48:fb:85:60:92:22:c1:12:4c:fa:4d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Sep 20 14:05:07 2026 GMT Not After : Sep 21 14:05:07 2026 GMT Subject: CN=0bb5a6aa92cfbabf5c3eb94e29840e5f53ba83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:7d:61:38:99:13:8a:5a:fb:cc:ea:df:f2: e0:27:7b:f8:43:d4:98:5f:78:6f:b4:29:7b:8f:64: 49:4a:20:c0:2e:8a:c7:13:aa:47:1b:0b:37:85:f6: b6:6c:08:f5:a1:66:0d:dc:57:da:31:52:7c:da:37: 39:98:c7:4e:6d:fe:d0:92:23:97:2d:00:1d:3e:cc: da:e3:58:ad:57:e2:c1:1b:93:a0:b8:7d:eb:05:6d: 55:f6:f9:a3:37:73:ed:55:08:ea:71:95:17:b1:ba: 3f:fe:42:dd:b3:5a:4b:50:e4:ae:d2:37:8d:01:56: c2:c5:b3:57:c9:37:e8:ce:20:d5:c9:08:86:e3:0d: 8e:cc:2c:c5:f7:c6:e1:4a:75:c0:63:4c:5a:ab:52: 95:26:f8:2c:81:0d:b0:98:65:1f:be:ad:c4:ab:68: 11:0e:ad:50:f0:e9:19:85:48:2b:ce:6e:9a:ec:83: dd:b9:ec:42:6b:17:b5:2a:9f:82:62:ed:3f:af:31: d8:54:10:9e:b4:35:5f:be:00:ca:68:94:e2:25:ca: 1f:29:83:44:63:73:51:45:bd:2a:55:6b:dd:9a:26: 80:7b:0e:9e:1d:a8:17:d2:d8:9f:94:df:e5:f9:3f: 85:ec:e1:1e:02:45:95:99:69:38:15:f6:63:d4:6d: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:A6:AA:92:CF:BA:BF:5C:3E:B9:4E:29:84:0E:5F:53:BA:83:BF X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d4:4c:21:26:db:90:14:e5:43:2c:4d:b4:15:0c:05:17:bf: 36:20:77:c6:47:b5:3e:5d:e4:78:30:91:56:88:ed:a2:f1:41: 43:59:2b:e2:c0:79:1d:ff:0f:82:ea:23:84:77:15:43:6c:be: 14:69:e9:82:8d:bc:53:35:b2:cc:b3:bc:67:31:fb:61:4f:11: aa:bc:e6:fd:a8:37:41:42:a1:b0:b8:50:36:7c:3d:78:dd:a2: db:ce:87:35:43:72:e5:2a:0e:5a:c6:bd:b1:6c:b0:f1:12:c3: 74:f1:3b:b5:41:38:6e:41:31:30:49:23:bc:19:06:28:4d:26: bc:a5:2f:fb:04:25:0d:1f:e5:d9:eb:dc:a0:a2:5b:4f:85:5f: d4:97:66:45:18:e2:84:a6:1b:f9:b4:77:f4:94:0b:1f:da:41: b1:cc:ff:e4:e2:0b:d2:5f:e7:c5:9f:8a:ed:29:89:b2:fc:ab: 2b:fd:df:38:5e:d9:ee:dd:84:8b:1d:91:3c:76:af:e8:2a:fc: 77:c9:90:1f:88:c9:08:03:e0:4b:8c:fa:54:0a:25:fc:fc:13: 32:bb:63:81:53:f5:7d:3e:4c:ac:ab:46:86:8a:f8:6f:2a:02: 08:4e:fd:a6:f3:46:6e:81:ea:4c:76:c4:2b:9c:9d:df:e5:29: ab:e9:43:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/IottSPuFYJIiwRJM+k1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwOTIwMTQwNTA3WhcNMjYwOTIxMTQwNTA3WjAzMTEwLwYDVQQD EygwYmI1YTZhYTkyY2ZiYWJmNWMzZWI5NGUyOTg0MGU1ZjUzYmE4M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApih9YTiZE4pa+8zq3/LgJ3v4Q9SY X3hvtCl7j2RJSiDALorHE6pHGws3hfa2bAj1oWYN3FfaMVJ82jc5mMdObf7QkiOX LQAdPsza41itV+LBG5OguH3rBW1V9vmjN3PtVQjqcZUXsbo//kLds1pLUOSu0jeN AVbCxbNXyTfoziDVyQiG4w2OzCzF98bhSnXAY0xaq1KVJvgsgQ2wmGUfvq3Eq2gR Dq1Q8OkZhUgrzm6a7IPduexCaxe1Kp+CYu0/rzHYVBCetDVfvgDKaJTiJcofKYNE Y3NRRb0qVWvdmiaAew6eHagX0tiflN/l+T+F7OEeAkWVmWk4FfZj1G3xlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu1pqqSz7q/XD65TimEDl9TuoO/MB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9RMISbb kBTlQyxNtBUMBRe/NiB3xke1Pl3keDCRVojtovFBQ1kr4sB5Hf8PguojhHcVQ2y+ FGnpgo28UzWyzLO8ZzH7YU8Rqrzm/ag3QUKhsLhQNnw9eN2i286HNUNy5SoOWsa9 sWyw8RLDdPE7tUE4bkExMEkjvBkGKE0mvKUv+wQlDR/l2evcoKJbT4Vf1JdmRRji hKYb+bR39JQLH9pBscz/5OIL0l/nxZ+K7SmJsvyrK/3fOF7Z7t2Eix2RPHav6Cr8 d8mQH4jJCAPgS4z6VAol/PwTMrtjgVP1fT5MrKtGhor4byoCCE79pvNGboHqTHbE K5yd3+Upq+lDYg== -----END CERTIFICATE-----Generated at Sun Sep 20 22:35:06 2026 by rpki-client