$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 8DM/9E3jMftNXcHc/V2qON6RTv01+famnb4WgmAlhQ4= Subject key identifier: 44:5E:A3:98:2C:D4:CF:88:D7:15:A5:09:39:C1:0C:93:7E:A7:64:DB Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01A0C8FD5BC2C37CD532A9FF06BAEFC477BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0E9D Signing time: Tue 22 Sep 2026 12:00:42 +0000 Manifest this update: Tue 22 Sep 2026 12:00:42 +0000 Manifest next update: Wed 23 Sep 2026 12:00:42 +0000 Files and hashes: 1: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (hash: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: igaMqPoN40taBgy6tB6X5Gcaa3EOesAvorVQhEbkszo=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (hash: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=) 5: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 6: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (hash: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=) 7: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (hash: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=) 8: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (hash: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=) 9: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (hash: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=) 10: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 11: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:fd:5b:c2:c3:7c:d5:32:a9:ff:06:ba:ef:c4:77:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Sep 22 12:00:42 2026 GMT Not After : Sep 23 12:00:42 2026 GMT Subject: CN=445ea3982cd4cf88d715a50939c10c937ea764db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:db:e6:1c:93:6d:1e:6d:37:2b:2f:14:5a: e0:78:b0:87:1f:f8:2e:38:ff:d3:a1:ae:2d:b7:71: cf:a6:81:15:78:7b:a1:d9:ff:ff:2b:b6:66:2c:59: f7:c3:e2:66:3c:05:2d:ad:ec:30:0c:a9:6d:24:9b: 5a:ef:51:f9:61:a2:76:ee:3b:77:42:bc:10:8c:39: 86:b3:61:0c:d9:40:88:7f:ad:38:6b:b8:a9:66:6f: 8c:e5:25:9c:77:1c:d2:7d:d3:16:1c:92:4d:5f:c4: e1:58:d8:54:07:ad:3a:5f:25:05:4a:7e:56:45:00: 24:79:5d:61:17:3a:c6:e8:d0:cc:f5:20:69:e8:ff: bc:ee:90:4d:a6:62:97:81:dc:8a:27:41:61:0c:39: 92:e5:be:59:59:fe:b2:a0:a7:75:58:9e:c9:e0:58: ea:34:04:bc:57:83:2a:9b:18:2d:64:e8:e8:53:83: e7:dd:4c:eb:23:1d:ba:22:f9:ee:a9:6f:2f:a4:d7: 9c:e9:9c:86:8b:08:74:6d:f7:6e:1d:15:b1:15:65: db:b1:fb:3f:ef:89:7c:51:3a:c9:79:c1:41:ab:6b: c3:30:37:c9:5f:ce:3c:97:4f:33:be:73:72:0a:d5: 46:c7:fb:26:9f:d8:22:b3:3d:c0:17:66:4c:a3:c3: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5E:A3:98:2C:D4:CF:88:D7:15:A5:09:39:C1:0C:93:7E:A7:64:DB X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:3f:f6:db:c0:fe:0c:85:5a:db:a3:29:e0:77:a3:3b:b3: a6:4e:e6:2a:9f:da:55:10:54:8c:a8:41:6c:e3:2e:fb:71:ef: 17:ce:d7:23:85:17:a0:f4:bb:27:20:bc:db:77:c2:25:79:b4: 5e:02:7a:55:a0:e2:10:5e:be:8c:09:e3:be:16:80:0f:78:8a: fb:65:d5:59:8b:58:9b:38:87:40:6b:60:20:bc:9d:a5:f6:2b: 36:b3:ec:94:50:11:4b:c6:82:2c:37:62:17:2d:20:60:7b:92: 5e:bd:07:2f:69:a7:1a:51:db:e9:d6:cb:1f:d6:98:0c:39:6e: b6:80:0b:e1:f0:8c:af:67:d8:81:3e:61:20:ac:56:02:da:68: 19:e9:ff:a2:a1:bb:7c:3d:e4:df:de:a4:8f:b4:42:19:e4:0e: c5:16:4a:d2:b8:63:3d:03:da:73:92:91:17:d5:bb:a5:fc:96: dd:c6:fb:31:ca:36:f4:ba:f6:ae:bb:b8:1e:37:86:fb:62:95: d1:8c:84:f6:70:d9:7c:43:c9:4c:1b:a0:d1:3a:17:a0:2b:fe: ad:ed:c9:5c:59:07:1e:13:1e:28:b8:ab:90:c9:21:04:2a:cc: c3:c3:5f:b6:a8:5a:2f:b6:bf:b1:c3:46:48:e5:4d:94:98:19: 93:ec:22:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDI/VvCw3zVMqn/BrrvxHe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwOTIyMTIwMDQyWhcNMjYwOTIzMTIwMDQyWjAzMTEwLwYDVQQD Eyg0NDVlYTM5ODJjZDRjZjg4ZDcxNWE1MDkzOWMxMGM5MzdlYTc2NGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHrb5hyTbR5tNysvFFrgeLCHH/gu OP/Toa4tt3HPpoEVeHuh2f//K7ZmLFn3w+JmPAUtrewwDKltJJta71H5YaJ27jt3 QrwQjDmGs2EM2UCIf604a7ipZm+M5SWcdxzSfdMWHJJNX8ThWNhUB606XyUFSn5W RQAkeV1hFzrG6NDM9SBp6P+87pBNpmKXgdyKJ0FhDDmS5b5ZWf6yoKd1WJ7J4Fjq NAS8V4MqmxgtZOjoU4Pn3UzrIx26IvnuqW8vpNec6ZyGiwh0bfduHRWxFWXbsfs/ 74l8UTrJecFBq2vDMDfJX848l08zvnNyCtVGx/smn9gisz3AF2ZMo8P93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEReo5gs1M+I1xWlCTnBDJN+p2TbMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqM/9tvA /gyFWtujKeB3ozuzpk7mKp/aVRBUjKhBbOMu+3HvF87XI4UXoPS7JyC823fCJXm0 XgJ6VaDiEF6+jAnjvhaAD3iK+2XVWYtYmziHQGtgILydpfYrNrPslFARS8aCLDdi Fy0gYHuSXr0HL2mnGlHb6dbLH9aYDDlutoAL4fCMr2fYgT5hIKxWAtpoGen/oqG7 fD3k396kj7RCGeQOxRZK0rhjPQPac5KRF9W7pfyW3cb7Mco29Lr2rru4HjeG+2KV 0YyE9nDZfEPJTBug0ToXoCv+re3JXFkHHhMeKLirkMkhBCrMw8NftqhaL7a/scNG SOVNlJgZk+witg== -----END CERTIFICATE-----Generated at Tue Sep 22 21:36:52 2026 by rpki-client