$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: xUqDJsG/soi53oFn+CNn2j8iZc/zTSLAOa/m3Nr1Y58= Subject key identifier: 8B:09:1F:E0:2C:35:B0:13:37:40:5B:8A:81:57:CF:D5:E9:2A:66:CD Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01A0D0B6FAA4CA8359AC03CA7A3D17EDDC5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1A7A Signing time: Thu 24 Sep 2026 00:00:47 +0000 Manifest this update: Thu 24 Sep 2026 00:00:47 +0000 Manifest next update: Fri 25 Sep 2026 00:00:47 +0000 Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=) 2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=) 3: BK5B6j0pOrP-0n45ysOZUO_W2Ik.roa (hash: Tm+MlSuHSZKObOf6UFy7bJ2UoejKvsimnwaGrhrRaDw=) 4: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=) 5: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=) 6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=) 7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: L4EhbD23TH7syILLmYf2FB68p0gS9O83cvh7RV7tlsI=) 8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=) 9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=) 10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:fa:a4:ca:83:59:ac:03:ca:7a:3d:17:ed:dc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Sep 24 00:00:47 2026 GMT Not After : Sep 25 00:00:47 2026 GMT Subject: CN=8b091fe02c35b01337405b8a8157cfd5e92a66cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:0c:59:fb:93:1b:1b:99:c1:a5:53:b8:36: 69:e2:19:ad:d8:7b:26:e5:15:d5:b0:3f:7b:7d:47: 64:bd:a9:6c:c4:31:a9:00:33:86:78:d4:61:ea:54: c0:3f:c6:fc:a1:0f:48:14:37:33:40:92:90:c6:d5: 42:55:9b:b7:4d:11:93:1b:77:c1:d6:5f:1d:b8:6c: b6:7d:0b:56:c0:86:b3:e4:c7:83:e0:8d:40:a5:2c: 87:bd:47:04:19:e7:43:bf:24:ec:3b:31:f7:01:57: 48:18:ab:c2:61:26:6e:a4:de:36:3c:f1:87:c2:ec: 59:f7:b1:85:3c:a0:7a:83:09:bd:31:b0:f6:5d:de: 5f:be:b6:c5:63:75:df:24:93:90:bb:93:ad:0b:91: 80:17:77:2f:ef:b5:33:9f:58:a6:fe:56:da:90:7a: 83:91:dc:01:f3:21:2c:e0:86:43:f3:51:89:10:21: 38:52:ba:3e:eb:92:f9:87:34:5b:39:71:ab:37:6c: 08:84:4b:2b:72:fe:7a:d0:8d:d7:31:ee:f8:a8:74: 07:8a:80:5f:bb:13:1c:e9:9d:0c:b4:d8:79:6b:3d: 36:79:ef:94:19:c4:4e:e5:0f:73:db:63:b0:40:a7: 6e:15:71:8e:6d:82:32:98:b1:3b:b2:ad:32:13:2f: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:09:1F:E0:2C:35:B0:13:37:40:5B:8A:81:57:CF:D5:E9:2A:66:CD X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:8c:e1:b3:ba:3a:63:b0:b0:58:ce:53:9c:70:ff:27:7f: b9:30:6d:1c:87:c6:eb:28:73:5b:76:86:00:19:94:c0:9a:af: 32:c9:f5:87:fc:d4:04:b6:a6:1a:17:91:b1:bd:5a:e2:da:60: 32:04:12:0f:e9:d2:b9:c8:f4:a8:f1:62:85:ec:f0:f5:c1:0d: 97:bf:0a:e6:67:29:ff:4f:db:17:aa:63:b6:10:1e:2e:e3:6f: f4:da:e0:de:61:58:2e:3e:ce:d6:9b:38:bf:1e:30:30:09:d7: 46:df:54:a9:41:1f:c7:58:bd:1a:4e:2a:ed:72:75:22:fd:bc: b4:8f:c4:ea:10:28:6c:38:e6:77:49:73:9c:4c:cf:15:38:f1: 37:f8:77:80:b1:ba:d2:f6:26:32:e8:fa:ea:8d:3b:45:dc:b9: 89:76:72:28:0e:0d:c5:c2:96:fe:c5:25:86:ba:c8:b9:4b:d5: 27:8c:78:c0:66:4c:95:5c:19:7f:1e:b6:8e:b9:e0:30:7d:f1: 85:28:ee:e0:28:2a:a8:95:12:dc:61:be:97:21:8d:0d:6e:bc: d5:b3:b6:8c:2b:3c:ca:b2:3a:3a:79:b0:30:de:ae:f4:70:c7: b6:83:65:68:d7:79:d8:bf:43:7b:7c:6c:cc:9b:f2:ea:1b:46: 31:54:aa:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtvqkyoNZrAPKej0X7dxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwOTI0MDAwMDQ3WhcNMjYwOTI1MDAwMDQ3WjAzMTEwLwYDVQQD Eyg4YjA5MWZlMDJjMzViMDEzMzc0MDViOGE4MTU3Y2ZkNWU5MmE2NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7oMWfuTGxuZwaVTuDZp4hmt2Hsm 5RXVsD97fUdkvalsxDGpADOGeNRh6lTAP8b8oQ9IFDczQJKQxtVCVZu3TRGTG3fB 1l8duGy2fQtWwIaz5MeD4I1ApSyHvUcEGedDvyTsOzH3AVdIGKvCYSZupN42PPGH wuxZ97GFPKB6gwm9MbD2Xd5fvrbFY3XfJJOQu5OtC5GAF3cv77Uzn1im/lbakHqD kdwB8yEs4IZD81GJECE4Uro+65L5hzRbOXGrN2wIhEsrcv560I3XMe74qHQHioBf uxMc6Z0MtNh5az02ee+UGcRO5Q9z22OwQKduFXGObYIymLE7sq0yEy+K0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsJH+AsNbATN0BbioFXz9XpKmbNMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbOM4bO6 OmOwsFjOU5xw/yd/uTBtHIfG6yhzW3aGABmUwJqvMsn1h/zUBLamGheRsb1a4tpg MgQSD+nSucj0qPFihezw9cENl78K5mcp/0/bF6pjthAeLuNv9Nrg3mFYLj7O1ps4 vx4wMAnXRt9UqUEfx1i9Gk4q7XJ1Iv28tI/E6hAobDjmd0lznEzPFTjxN/h3gLG6 0vYmMuj66o07Rdy5iXZyKA4NxcKW/sUlhrrIuUvVJ4x4wGZMlVwZfx62jrngMH3x hSju4CgqqJUS3GG+lyGNDW681bO2jCs8yrI6OnmwMN6u9HDHtoNlaNd52L9De3xs zJvy6htGMVSqgQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:19:51 2026 by rpki-client