$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 04/WU2V2nUjKspbcgWCHvD0+7gLOOg3Ng1SZ3XO+Aoc= Subject key identifier: FD:AF:48:E2:12:7D:9C:DE:7E:E8:88:4E:65:6E:EB:45:21:FC:C3:22 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A0C143F57FF312CE480D0D358BFF10C4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0E99 Signing time: Mon 21 Sep 2026 00:00:51 +0000 Manifest this update: Mon 21 Sep 2026 00:00:51 +0000 Manifest next update: Tue 22 Sep 2026 00:00:51 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 8ZSmlaNpnTzCqxU8lUFfD+W0qINE5KmSRtbKf54hu7c=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 7: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (hash: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=) 8: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 9: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 10: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 11: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:43:f5:7f:f3:12:ce:48:0d:0d:35:8b:ff:10:c4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 21 00:00:51 2026 GMT Not After : Sep 22 00:00:51 2026 GMT Subject: CN=fdaf48e2127d9cde7ee8884e656eeb4521fcc322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:4d:37:57:c8:ea:dc:a4:f2:d2:a0:b3:c0: 7f:8d:a9:0c:ce:92:21:8e:d9:8c:f3:18:16:2b:48: 91:53:4a:8e:26:2a:47:6f:69:38:f3:de:1d:59:2b: 25:b7:53:9e:4f:dd:43:1f:ac:36:14:de:44:07:84: b4:78:f6:58:52:e8:0b:35:05:b8:d0:b1:d3:ba:87: 50:47:16:54:04:0e:a2:db:82:a2:1b:05:81:02:4b: 64:c3:07:ff:39:0e:97:c5:09:6e:cb:84:ee:ef:01: 66:ea:65:8c:53:1b:07:cc:44:7e:83:54:46:ed:e2: bc:b9:17:7b:c7:31:be:f8:76:cf:1f:d6:b6:fc:b0: 94:57:1e:1a:ba:18:6f:6c:e5:d1:db:5b:4b:df:70: 98:38:77:29:68:48:06:b9:d9:d1:32:f9:42:10:a0: b4:69:20:6d:a4:dc:ec:7f:5e:32:d3:6f:08:f2:a2: 48:30:94:0e:fa:9e:6e:a8:69:b6:6a:47:0a:0b:9c: e3:1a:56:7d:7b:d1:ca:76:fd:98:47:bc:15:32:4e: ca:5f:46:6b:7a:d4:d7:83:0a:3a:3a:dd:29:6b:8f: 16:92:b8:6b:7d:7e:fd:b4:37:3e:53:63:c8:e8:58: 36:19:b5:98:36:5f:26:e2:55:3d:87:91:d1:fb:70: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AF:48:E2:12:7D:9C:DE:7E:E8:88:4E:65:6E:EB:45:21:FC:C3:22 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5f:f5:46:44:3c:12:9d:6a:f6:41:8f:22:12:7c:e2:8f:e4: e5:8a:19:78:ac:60:ba:1c:7d:38:53:1a:e2:e2:ad:b7:a3:2f: 71:fe:dc:bf:98:90:e3:df:0e:43:9e:00:92:d3:55:69:c7:15: 78:fe:67:93:58:10:5b:4a:44:b3:b7:67:dc:64:be:19:bb:de: a0:7e:ac:9e:5b:9a:af:17:27:da:c3:16:a9:a9:ef:6b:f2:00: dc:d5:46:4b:b5:40:ac:6a:b6:dc:cb:ea:fc:9e:a2:21:35:cc: f1:e1:7e:6c:a3:76:56:57:5c:0e:5a:2d:62:28:92:ea:51:86: e0:55:ec:72:a9:b4:a5:8b:83:b7:91:70:6a:6b:dc:fd:16:4e: dc:7d:ef:de:97:51:42:86:19:aa:39:3a:e2:cd:96:82:9a:bf: 72:95:72:db:9b:6d:a2:a2:27:c1:94:e8:e8:0d:e3:7c:bb:00: 8c:11:4d:e3:d5:c3:ee:b9:af:6a:f5:99:10:e8:6a:a8:e5:a5: 81:c8:ae:e9:58:aa:22:63:ab:60:ac:7d:6b:2d:a5:de:d6:9c: ef:44:bf:1b:31:86:4d:5f:87:a1:a2:38:8a:6a:a1:ca:19:29: 3f:b5:b7:21:0d:a8:fc:0e:70:9c:ad:c5:c3:08:a8:f3:29:be: ef:0c:1c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBQ/V/8xLOSA0NNYv/EMTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTIxMDAwMDUxWhcNMjYwOTIyMDAwMDUxWjAzMTEwLwYDVQQD EyhmZGFmNDhlMjEyN2Q5Y2RlN2VlODg4NGU2NTZlZWI0NTIxZmNjMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYJNN1fI6tyk8tKgs8B/jakMzpIh jtmM8xgWK0iRU0qOJipHb2k4894dWSslt1OeT91DH6w2FN5EB4S0ePZYUugLNQW4 0LHTuodQRxZUBA6i24KiGwWBAktkwwf/OQ6XxQluy4Tu7wFm6mWMUxsHzER+g1RG 7eK8uRd7xzG++HbPH9a2/LCUVx4auhhvbOXR21tL33CYOHcpaEgGudnRMvlCEKC0 aSBtpNzsf14y028I8qJIMJQO+p5uqGm2akcKC5zjGlZ9e9HKdv2YR7wVMk7KX0Zr etTXgwo6Ot0pa48WkrhrfX79tDc+U2PI6Fg2GbWYNl8m4lU9h5HR+3CPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2vSOISfZzefuiITmVu60Uh/MMiMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV/1RkQ8 Ep1q9kGPIhJ84o/k5YoZeKxguhx9OFMa4uKtt6Mvcf7cv5iQ498OQ54AktNVaccV eP5nk1gQW0pEs7dn3GS+GbveoH6snluarxcn2sMWqanva/IA3NVGS7VArGq23Mvq /J6iITXM8eF+bKN2VldcDlotYiiS6lGG4FXscqm0pYuDt5Fwamvc/RZO3H3v3pdR QoYZqjk64s2Wgpq/cpVy25ttoqInwZTo6A3jfLsAjBFN49XD7rmvavWZEOhqqOWl gciu6ViqImOrYKx9ay2l3tac70S/GzGGTV+HoaI4imqhyhkpP7W3IQ2o/A5wnK3F wwio8ym+7wwc0w== -----END CERTIFICATE-----Generated at Mon Sep 21 03:28:30 2026 by rpki-client