$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: 5hMv9yfoR73rl5rm6cxgrQR7CRhNdEEpK29qsE87G/s= Subject key identifier: D4:0F:D0:36:D9:09:CE:94:0C:49:69:43:03:E7:A7:B2:DF:55:85:19 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 01A0C10CB003BC3416AA31D26A14002D6458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 13D2 Signing time: Sun 20 Sep 2026 23:00:29 +0000 Manifest this update: Sun 20 Sep 2026 23:00:29 +0000 Manifest next update: Mon 21 Sep 2026 23:00:29 +0000 Files and hashes: 1: 0qcRgVORJ6l9UlTI2CKPLzjbfog.roa (hash: wvJhHDw0n2QTgzGbPUH8xt0FfoOscXlBHhG0tJvFt98=) 2: 1-hb19mdI_t8mKtuNbtby2D1HE0E.roa (hash: jcOYD7AE0FqD3JKvlPPueqZV5Q+Nu1NLlSwe5Glm784=) 3: 2EkuPAqVHEWEKp6ASw2K5zmACQk.roa (hash: n72y5YkbbuFUJAYmxmxnzR7f3ZsUZLnhTxeGIE67Cko=) 4: FLjvYn5Mu6OSQ1vmJsficIZ3oAg.roa (hash: WAKAnnjMgQbJs7Wfu2NA1DQe3FG0M4jG7s2jCVV8t08=) 5: LKqcV__iHBkuJmHBTgVTMKe7jfs.roa (hash: LzRNG01pbqOOrg9Ke+0IrSjljXKIcSklaBxsB5gc1AU=) 6: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (hash: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY=) 7: U74ViGODTud33ngPAmj4w73NK6o.roa (hash: 8g7ud1guSPB+L+sklXn8DfQQ/RtzcbmpgZcJ8hWX/2M=) 8: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: nh38eSPU53EMxAJZkc87KkSCrbf6RpUbRCHBC8MbnLY=) 9: ajUdjtPuTYK4cJ-GDNgzwU_V7QU.roa (hash: zq0p6TTpyxJr1rlBswAzuDS0To2T7g83akxmSzfwXWY=) 10: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (hash: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU=) 11: kjHXW8vauzCuo-9Ga5vkf2LvfBs.roa (hash: nMWSXjyhyxXgusKdou/8sfu2TMwgZlwVJi6zwp1S97s=) 12: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (hash: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=) 13: qzDK1lhCM39SxM8PACxbyKkom_M.roa (hash: nfWxgyb2gt4+A8mM3hL0XhTI+0dXdf9+3PuS2IdhMMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:0c:b0:03:bc:34:16:aa:31:d2:6a:14:00:2d:64:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Sep 20 23:00:29 2026 GMT Not After : Sep 21 23:00:29 2026 GMT Subject: CN=d40fd036d909ce940c49694303e7a7b2df558519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:ef:71:09:8e:ad:49:33:ac:58:d0:d5:93: 7c:30:b6:99:95:63:d9:de:66:68:55:cd:e1:8e:da: dd:4a:58:76:b6:00:d8:42:c4:96:ec:c1:2a:3a:b4: 4d:0a:3a:61:a2:70:27:25:41:04:1f:23:48:ec:76: 17:dc:2c:8f:e0:89:5a:e9:fc:98:44:85:62:cb:d5: 42:cb:d7:68:0c:6e:c8:35:c9:59:b7:50:e5:0e:5d: ac:1f:28:81:2c:72:e5:30:c5:b8:0b:37:3a:77:27: b9:58:ff:60:63:ec:38:00:81:9f:38:8c:18:16:df: 68:65:5c:a6:8e:47:63:3f:90:92:14:54:dd:18:d0: 01:81:aa:da:83:3f:a2:54:fc:da:4e:a5:ca:20:60: f7:e6:be:0d:d0:9a:9f:bc:7e:b9:6e:10:0e:6b:3b: 79:f9:48:3a:db:e8:67:47:2d:14:67:8d:e5:91:c4: 0e:7f:b1:d1:1e:cd:4c:ac:22:db:46:49:90:2b:c6: e6:35:bc:c2:2b:60:8c:f9:b2:ab:30:51:8d:2a:f1: 8b:b1:ef:20:00:96:ef:c3:c2:db:fa:82:66:82:47: f5:98:2b:21:f2:e0:a9:95:1f:3a:84:42:82:ca:b4: 18:93:36:00:a0:d1:49:d3:97:43:ac:98:be:6c:f1: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:D0:36:D9:09:CE:94:0C:49:69:43:03:E7:A7:B2:DF:55:85:19 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0d:43:09:10:e9:cd:39:12:dc:15:8a:77:cb:de:fc:a0:b7: a5:18:e9:0f:b1:24:29:1c:24:92:3d:36:c1:fc:a6:0f:9f:db: aa:73:6d:72:9e:f2:67:30:f0:a3:47:65:10:7c:99:c3:c6:cc: a1:8a:45:fa:4b:14:88:46:5b:48:68:ce:4d:4d:1f:ed:97:1e: aa:32:e9:a1:f8:fe:82:ab:50:35:d7:3f:a8:28:10:83:a1:6d: d2:fa:55:03:cb:d6:aa:94:cd:d4:d7:79:c6:53:d7:27:2c:0e: 64:99:46:70:6f:52:06:25:ee:1d:ec:d2:0b:e3:8b:e1:a3:5a: 63:15:06:2d:04:a6:f9:4c:a8:e3:8e:79:cb:7a:81:d0:08:c7: a7:1b:fb:43:01:cd:61:d3:09:07:f9:b9:6d:34:e4:b8:74:90: 8b:f2:55:c3:ec:68:b7:ea:55:4b:10:36:08:3a:c8:14:8b:c7: ad:66:b7:f5:e4:46:7f:66:c6:c2:5d:94:39:c0:3d:13:bd:61: 65:67:06:b5:d6:15:9d:1f:51:3b:4e:55:a6:a5:b0:95:54:a4: ee:fb:58:02:25:c1:c5:89:54:05:9a:0e:62:47:cf:38:02:96: 67:51:b0:0c:c4:e1:45:bc:89:2f:85:b6:ac:9a:4d:fe:6b:66: 0d:15:50:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBDLADvDQWqjHSahQALWRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwOTIwMjMwMDI5WhcNMjYwOTIxMjMwMDI5WjAzMTEwLwYDVQQD EyhkNDBmZDAzNmQ5MDljZTk0MGM0OTY5NDMwM2U3YTdiMmRmNTU4NTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ArvcQmOrUkzrFjQ1ZN8MLaZlWPZ 3mZoVc3hjtrdSlh2tgDYQsSW7MEqOrRNCjphonAnJUEEHyNI7HYX3CyP4Ila6fyY RIViy9VCy9doDG7INclZt1DlDl2sHyiBLHLlMMW4Czc6dye5WP9gY+w4AIGfOIwY Ft9oZVymjkdjP5CSFFTdGNABgaragz+iVPzaTqXKIGD35r4N0JqfvH65bhAOazt5 +Ug62+hnRy0UZ43lkcQOf7HRHs1MrCLbRkmQK8bmNbzCK2CM+bKrMFGNKvGLse8g AJbvw8Lb+oJmgkf1mCsh8uCplR86hEKCyrQYkzYAoNFJ05dDrJi+bPFIUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQP0DbZCc6UDElpQwPnp7LfVYUZMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA1DCRDp zTkS3BWKd8ve/KC3pRjpD7EkKRwkkj02wfymD5/bqnNtcp7yZzDwo0dlEHyZw8bM oYpF+ksUiEZbSGjOTU0f7ZceqjLpofj+gqtQNdc/qCgQg6Ft0vpVA8vWqpTN1Nd5 xlPXJywOZJlGcG9SBiXuHezSC+OL4aNaYxUGLQSm+Uyo4455y3qB0AjHpxv7QwHN YdMJB/m5bTTkuHSQi/JVw+xot+pVSxA2CDrIFIvHrWa39eRGf2bGwl2UOcA9E71h ZWcGtdYVnR9RO05VpqWwlVSk7vtYAiXBxYlUBZoOYkfPOAKWZ1GwDMThRbyJL4W2 rJpN/mtmDRVQDg== -----END CERTIFICATE-----Generated at Mon Sep 21 07:19:56 2026 by rpki-client