$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: ncbjOt/QlAArRQFaWX/b1zO47WDKjqPZs6LsHYTxCJQ= Subject key identifier: 20:47:66:6C:9B:72:BF:13:F0:93:47:E8:E7:10:B4:8F:79:EC:DC:22 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019A4E4F8F8248E58363BE323435853A8659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0B27 Signing time: Tue 04 Nov 2025 10:00:28 +0000 Manifest this update: Tue 04 Nov 2025 10:00:28 +0000 Manifest next update: Wed 05 Nov 2025 10:00:28 +0000 Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: LwqBjrt2/jidXGL9EDlW/aAgcd7YYh3Nx0nApP8/2PM=) 3: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=) 4: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=) 5: HHx5PgT40c8odAvxk1P-fxWePlA.roa (hash: zPsSrq/ptkyDcwkMCUxFQsAp1K70phIRO2z3d5q6bK8=) 6: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=) 7: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=) 8: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=) 9: o0CQ-6MywHICo_xO6JVYrovLnaI.roa (hash: z9rRzR4IXOVwVGTGGEfUd7SIN6ihlxFiSh4at67AG5g=) 10: wWtKIfnyuy5Pwsg7v1x01k_AkAs.roa (hash: 9+2f6OaYEE6gwGcro5Uy8iHzJQ0Asb4j3ndklknXQsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:8f:82:48:e5:83:63:be:32:34:35:85:3a:86:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Nov 4 10:00:28 2025 GMT Not After : Nov 5 10:00:28 2025 GMT Subject: CN=2047666c9b72bf13f09347e8e710b48f79ecdc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:1c:59:53:71:b8:f9:e6:f6:a6:20:a5:2d: 10:af:d0:29:21:30:ec:25:fc:55:0a:e1:f2:7d:5a: f9:3c:ce:f1:e8:21:c1:2b:0c:81:c4:bc:7e:db:24: a9:d0:0b:4c:4a:0b:ec:ad:66:61:d5:e7:12:e3:d0: 34:2d:cb:ae:43:c0:b8:6f:ea:76:52:77:ff:aa:33: 3d:5f:49:5f:a7:27:ba:04:c4:d0:ba:5a:0e:86:e6: c3:0b:52:e4:3e:29:96:ee:6f:48:7d:75:04:53:8c: 15:6c:a8:23:5b:1d:72:b5:99:43:3e:e2:60:e3:76: 32:89:e4:65:35:48:e8:f5:29:8d:2a:95:2d:be:f4: 51:a5:90:7a:08:0d:fa:55:0e:84:83:6e:0e:b1:2b: 5d:fd:b2:77:59:0f:d1:30:bd:e1:87:b3:92:27:c0: 2e:70:78:51:05:72:2e:63:1f:20:ac:27:39:c5:3e: ed:49:f3:75:d9:e0:0c:a9:7e:dc:83:52:84:21:52: 4c:34:12:6e:bc:d1:89:4a:7a:9f:97:cc:f1:72:9b: 02:91:16:dd:47:ae:80:3a:7b:84:4f:d3:19:da:93: 04:07:ab:00:e4:73:9a:80:61:95:08:bb:72:49:af: 94:5e:39:bf:17:11:7b:9d:25:d0:fe:41:02:2e:8f: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:66:6C:9B:72:BF:13:F0:93:47:E8:E7:10:B4:8F:79:EC:DC:22 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ef:3a:30:b5:8e:28:44:fb:b1:b9:a7:21:ce:6d:1f:5b:14: 5b:9d:33:62:b4:9c:d6:51:29:75:86:3f:38:28:bf:36:6e:4d: 9c:02:70:4c:4a:a2:15:ea:33:45:62:9e:1f:ba:17:19:db:37: 33:07:f6:ee:f8:5b:b2:ba:64:2b:6d:6f:4b:ed:40:3f:68:c3: 12:0e:3c:63:6d:f4:39:2b:5d:39:bc:c0:dc:e8:30:38:ec:fe: 57:94:b2:fa:58:5c:9c:6b:a9:95:2d:b4:d1:f2:c7:7b:9a:68: 43:42:f9:70:86:40:70:82:16:67:32:d2:6c:91:c5:fb:09:43: ac:43:6d:fb:72:bb:03:d5:a0:0b:57:09:dd:47:63:1e:47:8c: 6c:3c:48:82:6a:8e:5a:ce:bc:14:b4:7f:8c:2b:82:81:3e:bd: 6c:ed:19:92:30:b1:31:14:82:47:50:74:13:0e:ed:a8:7b:3a: 53:f1:e9:65:63:40:f2:8c:bd:f0:4e:20:d1:17:a9:5a:e0:76: 31:10:eb:43:5b:ff:23:67:27:a6:1e:a0:97:b1:5c:a7:67:9e: 82:93:03:29:45:3e:0b:50:1f:4a:01:65:3b:bf:c7:34:4d:3a: 08:e0:b5:2e:1a:6a:de:d4:6a:c4:22:c4:42:58:d9:78:7c:ac: 8d:db:7a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT4+CSOWDY74yNDWFOoZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjUxMTA0MTAwMDI4WhcNMjUxMTA1MTAwMDI4WjAzMTEwLwYDVQQD EygyMDQ3NjY2YzliNzJiZjEzZjA5MzQ3ZThlNzEwYjQ4Zjc5ZWNkYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV8cWVNxuPnm9qYgpS0Qr9ApITDs JfxVCuHyfVr5PM7x6CHBKwyBxLx+2ySp0AtMSgvsrWZh1ecS49A0LcuuQ8C4b+p2 Unf/qjM9X0lfpye6BMTQuloOhubDC1LkPimW7m9IfXUEU4wVbKgjWx1ytZlDPuJg 43YyieRlNUjo9SmNKpUtvvRRpZB6CA36VQ6Eg24OsStd/bJ3WQ/RML3hh7OSJ8Au cHhRBXIuYx8grCc5xT7tSfN12eAMqX7cg1KEIVJMNBJuvNGJSnqfl8zxcpsCkRbd R66AOnuET9MZ2pMEB6sA5HOagGGVCLtySa+UXjm/FxF7nSXQ/kECLo9LKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBHZmybcr8T8JNH6OcQtI957NwiMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPe86MLWO KET7sbmnIc5tH1sUW50zYrSc1lEpdYY/OCi/Nm5NnAJwTEqiFeozRWKeH7oXGds3 Mwf27vhbsrpkK21vS+1AP2jDEg48Y230OStdObzA3OgwOOz+V5Sy+lhcnGuplS20 0fLHe5poQ0L5cIZAcIIWZzLSbJHF+wlDrENt+3K7A9WgC1cJ3UdjHkeMbDxIgmqO Ws68FLR/jCuCgT69bO0ZkjCxMRSCR1B0Ew7tqHs6U/HpZWNA8oy98E4g0RepWuB2 MRDrQ1v/I2cnph6gl7Fcp2eegpMDKUU+C1AfSgFlO7/HNE06COC1Lhpq3tRqxCLE QljZeHysjdt6DQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:20:13 2025 by rpki-client