$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json) Hash identifier: Nc3m0UXJaJoxqmCeS00N9QN62Ns5k+NdC6cwm+uBqtY= Subject key identifier: 50:06:20:82:6A:CE:63:9F:80:9E:2A:00:55:EB:0E:29:CE:26:6B:A6 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 01A0DACCF45687ED96C86DDF9D8FED45BDD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft Manifest number: 1A9D Signing time: Fri 25 Sep 2026 23:00:59 +0000 Manifest this update: Fri 25 Sep 2026 23:00:59 +0000 Manifest next update: Sat 26 Sep 2026 23:00:59 +0000 Files and hashes: 1: 5RrePjfBfgFsb1dfhghTvm6VuXQ.roa (hash: kBSyv/KZQ0qJXn8NAa0tIDmtlcQIduDFV8hiLoM2Mcw=) 2: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (hash: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk=) 3: EFOJ5hBQeND6qpOwej-hMBPDrb4.roa (hash: 64pmfHtYGatuKBycpEHQu6TCsuyqMwyKSXfipltHlOU=) 4: HMYMrzVLN168eCAt_VV9QEMc1vE.roa (hash: WNkIhTv4maTJmnFA0xAIC09aoeLQEEiiGXxq3HqPXJ4=) 5: WUu3HDK7_b9UY0uEWE1eCFmRxi8.roa (hash: vFNR8Uj+MyPWrDQ7TG/uWi1P+9M7J9xGwepHob8miIw=) 6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: FwiF2bXylVsAVR/YVw/JyOhVk0UGHD26c9/s2g1L2CA=) 7: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (hash: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY=) 8: qBpYYsX5EY1iMFA0Pj4QSJlPDjU.asa (hash: Z0r1rVJzdOHFwXXuyD4RMI8J3uhDKI5yg8b1DBp6vzE=) 9: qpb9tX8sfLyt6D276zZ0qYuN9GQ.roa (hash: bRF4+8TUZLsEoI3KAZWa9IvCW2TSQ5hlcXoGFeSa3Vg=) 10: utVvz_2zL-EeYbGI4JyxvPVNUDo.asa (hash: 7iy+jOFotMzLTvIA5sNqjzvMdNUTu9coEXVSF+yDsMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cc:f4:56:87:ed:96:c8:6d:df:9d:8f:ed:45:bd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Sep 25 23:00:59 2026 GMT Not After : Sep 26 23:00:59 2026 GMT Subject: CN=500620826ace639f809e2a0055eb0e29ce266ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:36:00:9f:84:a9:1e:bb:a1:da:9b:7a:d8: 48:2d:95:31:9d:fe:77:c4:e1:f9:1e:de:70:3b:19: 85:bd:ce:b1:f1:41:4f:35:d4:d8:b8:a8:de:44:b1: 83:50:f6:05:b5:4e:3b:d9:e6:2b:c6:17:11:9c:a1: 26:f0:dd:4b:af:5b:e3:05:a0:63:32:ba:fd:97:58: db:cf:64:b1:2e:81:df:93:5a:56:ff:65:b1:de:dc: 07:7d:80:93:cd:c2:fa:11:7c:d3:ee:fc:2d:93:29: 6a:d4:85:fb:43:be:cd:71:c7:41:c6:be:67:a8:77: 68:da:cf:7e:ec:ce:24:a3:dd:f1:02:c1:2b:80:26: 19:8b:c1:7f:6e:9a:42:22:6e:56:20:c4:64:57:24: fd:e3:44:3a:99:bc:64:91:37:29:1e:c6:2e:62:ce: 4e:bf:44:25:8f:47:6d:40:45:b6:01:bf:d3:df:7e: 6c:4a:82:45:a0:02:e3:4f:75:bd:8d:bc:95:f8:ae: de:27:4a:18:35:9e:f8:94:b3:41:23:87:d7:cd:15: 82:41:a5:09:72:b4:14:9d:de:5a:0c:7f:00:d7:17: 21:fe:c4:24:9b:57:2f:4c:e9:d2:5e:2b:77:45:6a: 7f:b5:05:b4:93:6e:df:1d:6d:3f:b5:4e:58:5d:55: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:06:20:82:6A:CE:63:9F:80:9E:2A:00:55:EB:0E:29:CE:26:6B:A6 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b9:46:35:18:1d:43:cd:1a:b5:dc:71:ea:96:32:44:82:bb: d8:32:f4:f4:f2:09:10:c0:f4:51:bc:d8:8c:36:b4:52:bb:97: 18:a9:04:26:96:44:6a:7e:b6:09:e8:66:63:14:c2:1b:7e:4c: 68:e5:4b:7b:21:0d:1f:6f:b9:78:21:94:c1:c3:94:c4:5f:29: df:0d:21:64:c0:66:f7:6d:18:06:47:7a:d1:74:7a:8d:0d:e0: 14:35:73:21:b4:dc:2b:f8:87:57:e5:b7:87:d0:e3:1f:74:2f: 5b:4b:70:43:67:72:d8:c5:d9:0f:4b:a6:60:10:69:e8:d8:9e: 70:29:aa:c2:ce:bd:8f:52:0f:90:61:df:13:5d:08:17:27:96: 82:94:4e:68:df:bd:b8:cb:04:7c:68:3d:38:4e:21:25:e5:6b: 2f:bf:05:81:36:5a:e5:6c:3c:51:14:dc:95:d3:a1:9f:f3:d4: 24:62:48:c2:bc:cb:3a:18:95:23:db:de:c3:30:c5:0f:0c:fd: 12:27:e1:47:f0:37:d5:c0:53:85:27:4b:de:f6:10:d3:b6:d5: a4:c5:79:ae:ed:36:83:57:68:1b:b9:28:01:60:59:8d:35:4b: 47:91:fc:2a:9a:3f:58:07:0c:70:b4:69:b6:7b:b6:da:85:36: f4:81:46:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazPRWh+2WyG3fnY/tRb3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjYwOTI1MjMwMDU5WhcNMjYwOTI2MjMwMDU5WjAzMTEwLwYDVQQD Eyg1MDA2MjA4MjZhY2U2MzlmODA5ZTJhMDA1NWViMGUyOWNlMjY2YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlY2AJ+EqR67odqbethILZUxnf53 xOH5Ht5wOxmFvc6x8UFPNdTYuKjeRLGDUPYFtU472eYrxhcRnKEm8N1Lr1vjBaBj Mrr9l1jbz2SxLoHfk1pW/2Wx3twHfYCTzcL6EXzT7vwtkylq1IX7Q77NccdBxr5n qHdo2s9+7M4ko93xAsErgCYZi8F/bppCIm5WIMRkVyT940Q6mbxkkTcpHsYuYs5O v0Qlj0dtQEW2Ab/T335sSoJFoALjT3W9jbyV+K7eJ0oYNZ74lLNBI4fXzRWCQaUJ crQUnd5aDH8A1xch/sQkm1cvTOnSXit3RWp/tQW0k27fHW0/tU5YXVUznQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAGIIJqzmOfgJ4qAFXrDinOJmumMB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhblGNRgd Q80atdxx6pYyRIK72DL09PIJEMD0UbzYjDa0UruXGKkEJpZEan62CehmYxTCG35M aOVLeyENH2+5eCGUwcOUxF8p3w0hZMBm920YBkd60XR6jQ3gFDVzIbTcK/iHV+W3 h9DjH3QvW0twQ2dy2MXZD0umYBBp6NiecCmqws69j1IPkGHfE10IFyeWgpROaN+9 uMsEfGg9OE4hJeVrL78FgTZa5Ww8URTcldOhn/PUJGJIwrzLOhiVI9vewzDFDwz9 EifhR/A31cBThSdL3vYQ07bVpMV5ru02g1doG7koAWBZjTVLR5H8Kpo/WAcMcLRp tnu22oU29IFGHg== -----END CERTIFICATE-----Generated at Sat Sep 26 04:42:24 2026 by rpki-client