$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft File: k-JyYRE58V0DfXpL5UVpbNKFOGc.mft (raw, json) Hash identifier: alFjHH0WbtKixTDZyaa7wcJHiXIrO3on1bhXXY8oWpI= Subject key identifier: 9B:B5:DB:00:77:14:70:F2:F8:1D:71:C8:35:57:21:92:61:F1:A4:45 Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67 Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867 Certificate serial: 01A0D6153BEAC89C3278A940FB2BE1A9D72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft Manifest number: 0227 Signing time: Fri 25 Sep 2026 01:01:50 +0000 Manifest this update: Fri 25 Sep 2026 01:01:50 +0000 Manifest next update: Sat 26 Sep 2026 01:01:50 +0000 Files and hashes: 1: 4g2sjyOA2S88ULGM_X6L9fja_a4.roa (hash: T/G8ygcKFjJNJsjuU7faDGLDHIo+LXS8+f+JHgj88Xc=) 2: 6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa (hash: H//sNvbW8q6Jr+E30OLRetMY0kia9eUAQ2KhFNgiTUs=) 3: 7n0wkQwarTtnYv8PrRiMrWmkikg.roa (hash: dsJKZ1TCZYVerK75Wiv1ffLxPP075w9GEHIB+oUlOx0=) 4: EhpBhJARc4X2eG8NnhZ_KCq4Tqk.roa (hash: S4p02xann0rC2wLhbi5Psq0nb1Jxkjtlkr7kCAMN7Kc=) 5: K-KFv2ywyMppzBzTy_lEtojdLTU.roa (hash: 28NmMoA3sjhuKkfN3w+6Un5F6/GD1m7hb06udz3zdRI=) 6: OS9El_lE1YFidGkD6u7b5PW_Swk.roa (hash: kc1xeHQSX9yaoh8FDTkRuRX1sg9TtwB9rWtzmmLQbkU=) 7: RA43K4xHLg-UdXvnE5BBpylAcLE.roa (hash: fhI37DL7Mkohtwdyy2ionkNQqG8nPhswdJI9hVbypAg=) 8: WRfWp6HbqiLrJdTcEFqGTR_haxY.roa (hash: zRStM1z0fS/dDt32gvvFhDITrhGZhwjd4CFo2EuaBzY=) 9: abZqCK-5KuH2tfKsI4SD5xjvWzE.roa (hash: GEORyf1vDmMauAzxfhABnWujhX3+RLKPCLKT2awN3CE=) 10: cujgpcZMo-u6-uAPJgjn05vZZY8.roa (hash: /gwhlQJjmiLq2vNQ7oIXxqrvTIMx9w5D/yDlNU/SfBg=) 11: k-JyYRE58V0DfXpL5UVpbNKFOGc.crl (hash: s2x0Dp7+kBaYWUn10FoevG0diUGxRtK8rKWMmUkn1Ss=) 12: zuanRU6GjD_pKM_NpLif7F2dutc.roa (hash: Iwopv9pLKL4yIGea+CD2F7DsAC5y9wfK3pZKzWTqDe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:15:3b:ea:c8:9c:32:78:a9:40:fb:2b:e1:a9:d7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e272611139f15d037d7a4be545696cd2853867 Validity Not Before: Sep 25 01:01:50 2026 GMT Not After : Sep 26 01:01:50 2026 GMT Subject: CN=9bb5db00771470f2f81d71c83557219261f1a445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:96:3f:48:77:96:51:cb:dd:63:98:70:ca: 29:87:4f:9e:af:45:99:b7:71:7c:f1:b0:26:b6:4b: 2f:29:cd:2c:56:46:25:24:37:3d:66:19:11:80:ed: 02:5f:00:8e:bb:e1:86:3a:a7:24:61:52:a6:c6:73: 5a:ff:14:0c:38:51:ec:f3:ae:c8:68:3f:a0:08:72: a6:4f:b4:37:5e:78:0e:d9:df:8d:62:6b:42:56:c4: 73:eb:02:19:7f:a8:f9:8f:d2:3e:f4:27:46:00:2c: 91:18:87:5d:f4:93:1f:1c:7c:b8:c8:84:aa:ff:66: 75:e1:ce:cd:e4:84:e5:05:ce:89:36:e4:d5:07:85: a8:db:61:d8:d5:f3:c8:50:6f:08:7a:eb:d4:ee:cc: b0:4a:1b:45:6b:c0:e5:46:07:8f:f6:6d:a3:9c:c3: 46:b3:02:10:3f:16:67:74:9b:9b:3d:83:45:7a:49: 54:0e:99:4c:4d:f7:65:17:98:64:50:1a:b6:94:fd: 1d:99:fd:83:7a:11:9d:89:72:ef:8d:e8:71:e8:4b: be:41:7a:df:d4:73:e6:3e:fc:3f:68:0f:77:83:0d: b0:eb:87:78:8c:2f:81:71:52:dc:8c:f9:21:69:e9: a7:a0:f7:71:46:2b:69:e5:a6:5e:27:46:6d:ff:8a: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B5:DB:00:77:14:70:F2:F8:1D:71:C8:35:57:21:92:61:F1:A4:45 X509v3 Authority Key Identifier: keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:20:57:cb:48:f4:dc:dd:03:23:44:88:05:82:36:6b:97:24: 49:93:80:32:f1:17:d5:81:3e:cb:15:eb:64:c0:aa:ff:08:be: 77:f9:9b:92:14:23:b2:4f:df:cf:ba:d9:8f:d3:f0:a6:05:d2: ee:bf:31:6e:db:60:6e:b1:79:c8:cb:f2:0b:40:95:50:76:2d: 62:45:76:a4:99:6e:3c:4f:d3:a4:dd:8b:0c:95:be:2e:50:02: 8a:8f:c0:80:a2:1b:3e:0a:81:25:48:a1:e3:c4:30:47:d7:3f: fb:1e:4e:be:35:90:a3:35:5f:d8:4a:e1:1a:86:51:8d:2f:44: e6:cc:81:52:da:7c:5c:aa:12:a4:cf:4b:d5:fa:2d:18:68:4e: 05:01:fe:cc:9d:70:a7:3a:75:d3:2c:da:e1:c9:84:12:25:d0: 77:ad:da:0f:2f:c2:5d:1d:f8:b1:5a:a4:4e:3f:5c:48:f3:d4: 0f:14:1b:7a:b6:d5:a8:79:51:7a:24:f2:ad:84:03:dd:f0:8f: b0:be:cd:05:a4:42:2f:1a:11:dc:9e:09:74:20:20:8f:7d:d7: 45:af:f9:fb:36:b0:1c:de:5c:b3:8a:43:e1:75:9a:76:e5:78: ed:21:12:b9:53:61:d0:e5:c6:79:45:61:75:ac:50:65:e7:b2: b9:4a:02:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWFTvqyJwyeKlA+yvhqdcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTI3MjYxMTEzOWYxNWQwMzdkN2E0YmU1NDU2OTZjZDI4 NTM4NjcwHhcNMjYwOTI1MDEwMTUwWhcNMjYwOTI2MDEwMTUwWjAzMTEwLwYDVQQD Eyg5YmI1ZGIwMDc3MTQ3MGYyZjgxZDcxYzgzNTU3MjE5MjYxZjFhNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RSWP0h3llHL3WOYcMoph0+er0WZ t3F88bAmtksvKc0sVkYlJDc9ZhkRgO0CXwCOu+GGOqckYVKmxnNa/xQMOFHs867I aD+gCHKmT7Q3XngO2d+NYmtCVsRz6wIZf6j5j9I+9CdGACyRGIdd9JMfHHy4yISq /2Z14c7N5ITlBc6JNuTVB4Wo22HY1fPIUG8IeuvU7sywShtFa8DlRgeP9m2jnMNG swIQPxZndJubPYNFeklUDplMTfdlF5hkUBq2lP0dmf2DehGdiXLvjehx6Eu+QXrf 1HPmPvw/aA93gw2w64d4jC+BcVLcjPkhaemnoPdxRitp5aZeJ0Zt/4rObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu12wB3FHDy+B1xyDVXIZJh8aRFMB8GA1UdIwQY MBaAFJPicmEROfFdA316S+VFaWzShThnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kYjQyYWItNDljYy00MjdkLTg2Y2Et NDdhMmMyNTBlNWFhLzEvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9kYjQyYWItNDljYy00MjdkLTg2Y2EtNDdhMmMyNTBlNWFh LzEvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCBXy0j0 3N0DI0SIBYI2a5ckSZOAMvEX1YE+yxXrZMCq/wi+d/mbkhQjsk/fz7rZj9PwpgXS 7r8xbttgbrF5yMvyC0CVUHYtYkV2pJluPE/TpN2LDJW+LlACio/AgKIbPgqBJUih 48QwR9c/+x5OvjWQozVf2ErhGoZRjS9E5syBUtp8XKoSpM9L1fotGGhOBQH+zJ1w pzp10yza4cmEEiXQd63aDy/CXR34sVqkTj9cSPPUDxQberbVqHlReiTyrYQD3fCP sL7NBaRCLxoR3J4JdCAgj33XRa/5+zawHN5cs4pD4XWaduV47SESuVNh0OXGeUVh daxQZeeyuUoCfg== -----END CERTIFICATE-----Generated at Fri Sep 25 04:55:16 2026 by rpki-client