$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: WPpCmPPkT/mooNDmbMKQsLhOCxUzTnrrqvp/bt3kEhU= Subject key identifier: CE:AA:5B:3B:71:89:32:DD:DB:26:E9:D5:1B:56:FE:4A:46:34:A6:64 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019EBEEC77DE28B16C20FAB24A0FAF815FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0D83 Signing time: Sat 13 Jun 2026 03:00:28 +0000 Manifest this update: Sat 13 Jun 2026 03:00:28 +0000 Manifest next update: Sun 14 Jun 2026 03:00:28 +0000 Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: mzAoYXKQXBEWz9DepbwgNAUAJ73nXKSpEv3e9YuMvCM=) 2: EOj3AgYdcchPeXzFo3MmkUnpC5c.roa (hash: UJxOCXl/zk57bLmMvjQmQo6So76eGqObXBhqM5bOFjU=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa (hash: NUQ/hLaY/s6wtpegscjb37Ii8FsiiXqqFFzr8BzeZgs=) 5: PXUEThXrMGouCYgr_yi3-daiDvE.roa (hash: iv3ZI6ycGYw3gyGWXsZNQzdt8OIK73JOyd7SS9lf5Dk=) 6: StKopN7mKY_G686fwWfLGQIs1ZE.roa (hash: Lt0qVcoh5gF6hn1K+QcayMd775gMjWFzF0XYTOVMzcE=) 7: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 8: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=) 9: m2aCEWRSbYINPhfk7dIfOHcCZMQ.roa (hash: zF+FldUbeFBdo73eCEVXfBTgillyEx/Bek9AHg5vsQM=) 10: mMhcTAUsEq-DNycXZbZCJR0srtQ.roa (hash: IfB3ppygA/MuKvduBRn6Oad+w/QpUoS9p6uwhj/GpXM=) 11: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 12: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ec:77:de:28:b1:6c:20:fa:b2:4a:0f:af:81:5f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jun 13 03:00:28 2026 GMT Not After : Jun 14 03:00:28 2026 GMT Subject: CN=ceaa5b3b718932dddb26e9d51b56fe4a4634a664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:51:be:96:6d:e8:0a:27:48:93:c8:f8:6c: 48:9c:11:e1:72:a1:d1:58:2a:39:9f:55:9d:06:f5: 57:c1:72:2c:6a:31:8d:75:2d:45:ab:17:25:3b:72: b9:6e:2c:d0:12:ab:72:08:2b:95:62:e4:a6:fe:c3: 0e:d1:50:88:2d:f4:85:6a:ef:a5:f2:30:76:d6:68: 1e:e0:07:84:ca:5e:c1:99:9f:1a:4b:05:0a:be:5c: a0:a9:ec:cb:aa:f6:94:e4:3f:e9:88:32:51:bc:c1: b6:10:e2:7d:80:1c:6d:7c:ee:c8:0f:69:7e:d5:9e: 6b:d1:46:cd:24:1c:c9:14:56:e5:28:05:51:b2:09: 3f:b8:1e:65:01:2f:9f:36:f9:6a:77:f6:f9:94:cd: 18:0f:c4:09:63:b1:ff:b6:c3:a2:5f:fd:ec:23:aa: 9c:32:bd:41:f5:4a:02:f1:db:f5:e6:56:9a:b1:a2: da:eb:84:43:b3:3e:e2:a0:fe:9e:26:58:86:17:da: 0c:a4:f3:ca:4e:79:5e:a7:23:49:27:c6:f2:80:27: 19:12:7c:0e:df:ea:41:50:4d:f8:ad:75:97:46:cf: 0f:4d:a9:d4:a8:ab:c1:35:eb:da:74:dc:5e:af:5c: 76:5b:22:9a:50:18:1a:e5:fb:e0:ea:94:03:41:82: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:5B:3B:71:89:32:DD:DB:26:E9:D5:1B:56:FE:4A:46:34:A6:64 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:78:4f:17:ba:b8:f7:29:14:aa:06:a1:be:89:87:87:3e:e4: 2c:95:a8:a7:50:bd:6d:73:48:0e:5b:10:2e:32:ef:06:8a:70: 56:5b:57:87:da:40:a3:c9:72:12:39:30:31:3c:ab:cd:c7:6c: ab:68:b1:7c:94:e5:b0:41:ac:c3:c4:71:91:f9:1c:89:b2:7a: b0:e4:1a:75:56:bb:55:ab:72:a5:96:52:06:8b:af:0f:7f:f5: 36:11:d3:cf:8b:1f:a1:52:1e:96:46:8e:da:58:3d:da:a8:5b: b9:f0:3a:68:2f:54:36:7b:a2:e0:0b:4e:41:3b:bd:75:08:51: 80:95:2f:8d:90:42:38:d3:4a:3d:74:70:59:56:61:b8:46:bc: 3f:3b:ec:e7:ff:69:6c:6b:20:6c:b0:49:7c:a7:2f:d5:ed:59: f1:61:ab:4f:60:9c:03:8b:24:fa:e9:bf:f4:07:cd:bc:02:bd: 67:b4:a6:ba:7a:fe:4e:73:55:0a:e7:a4:7e:99:19:ec:3f:56: fd:05:20:f0:85:80:4f:bb:23:09:59:3e:a9:02:1b:2e:db:a5: 93:80:79:08:18:20:90:5f:dd:d0:f8:e4:29:93:99:46:19:27: ca:da:ee:a0:69:a3:f2:ce:77:5f:7d:5b:de:5f:3f:a8:f4:2f: f0:5f:0d:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7HfeKLFsIPqySg+vgV/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwNjEzMDMwMDI4WhcNMjYwNjE0MDMwMDI4WjAzMTEwLwYDVQQD EyhjZWFhNWIzYjcxODkzMmRkZGIyNmU5ZDUxYjU2ZmU0YTQ2MzRhNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jNRvpZt6AonSJPI+GxInBHhcqHR WCo5n1WdBvVXwXIsajGNdS1FqxclO3K5bizQEqtyCCuVYuSm/sMO0VCILfSFau+l 8jB21mge4AeEyl7BmZ8aSwUKvlygqezLqvaU5D/piDJRvMG2EOJ9gBxtfO7ID2l+ 1Z5r0UbNJBzJFFblKAVRsgk/uB5lAS+fNvlqd/b5lM0YD8QJY7H/tsOiX/3sI6qc Mr1B9UoC8dv15laasaLa64RDsz7ioP6eJliGF9oMpPPKTnlepyNJJ8bygCcZEnwO 3+pBUE34rXWXRs8PTanUqKvBNevadNxer1x2WyKaUBga5fvg6pQDQYJyQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6qWztxiTLd2ybp1RtW/kpGNKZkMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXhPF7q4 9ykUqgahvomHhz7kLJWop1C9bXNIDlsQLjLvBopwVltXh9pAo8lyEjkwMTyrzcds q2ixfJTlsEGsw8RxkfkcibJ6sOQadVa7VatypZZSBouvD3/1NhHTz4sfoVIelkaO 2lg92qhbufA6aC9UNnui4AtOQTu9dQhRgJUvjZBCONNKPXRwWVZhuEa8Pzvs5/9p bGsgbLBJfKcv1e1Z8WGrT2CcA4sk+um/9AfNvAK9Z7Smunr+TnNVCuekfpkZ7D9W /QUg8IWAT7sjCVk+qQIbLtulk4B5CBggkF/d0PjkKZOZRhknytruoGmj8s53X31b 3l8/qPQv8F8NLg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:10:04 2026 by rpki-client