$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: 5zBG9ZrHOgegEqOCru2V5Mk+Hzf4BR/ofZdt58detaY= Subject key identifier: 9D:9C:0E:C6:70:9E:EC:CE:04:02:D6:D4:82:23:F4:FE:FB:86:96:54 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019828FF48D98652AC37F114FAC7BCC359C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0D72 Signing time: Sun 20 Jul 2025 18:01:15 +0000 Manifest this update: Sun 20 Jul 2025 18:01:15 +0000 Manifest next update: Mon 21 Jul 2025 18:01:15 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: TWwygTHDdrCptMH57GJLbsPX8tEzYjHZvfCG8ZxKZtY=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:ff:48:d9:86:52:ac:37:f1:14:fa:c7:bc:c3:59:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jul 20 18:01:15 2025 GMT Not After : Jul 21 18:01:15 2025 GMT Subject: CN=9d9c0ec6709eecce0402d6d48223f4fefb869654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:75:49:53:0f:06:b3:f3:89:21:5f:24:cb: 04:a9:2a:b6:36:17:a6:73:d8:06:e0:f5:a2:8f:41: 03:5e:a2:01:da:71:6b:72:7e:5c:87:47:0d:1b:e1: ac:91:3b:ae:01:5d:c5:ec:bf:94:24:a5:41:9b:15: 41:f4:78:b6:47:f2:0f:9e:64:10:13:e5:a0:13:5e: 39:3f:a9:35:6c:62:5c:e4:29:f6:70:77:51:ab:de: aa:2d:35:66:6c:74:72:a8:32:64:7c:85:77:af:46: 58:74:a7:79:ac:00:13:81:e7:24:8e:cc:4f:af:be: 6b:87:4c:72:da:36:49:45:3a:fb:68:2f:55:5d:0f: 92:8f:cf:a6:ec:61:df:71:a3:46:9a:74:4b:f2:ca: 28:cc:ee:bd:a7:d2:0f:4b:d3:28:00:26:62:e7:c9: 6b:59:f2:5b:6a:83:ac:64:9b:f7:d9:9d:5a:b7:e2: 75:b4:29:33:db:42:47:a3:24:09:6c:39:4d:ff:48: 50:63:c2:13:fe:d3:8b:84:0c:82:b9:a8:41:e0:06: 94:45:d6:1d:bc:c2:aa:7a:f4:6a:33:83:97:17:4a: d2:28:09:a0:7a:16:74:f3:48:bf:89:02:09:c6:a0: 27:42:db:66:ce:14:b7:f5:ca:1d:26:24:d5:ec:11: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9C:0E:C6:70:9E:EC:CE:04:02:D6:D4:82:23:F4:FE:FB:86:96:54 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c3:8c:d7:ca:9d:e8:09:15:91:b6:1e:fe:b9:c5:e5:13:fc: 33:cf:03:30:84:d7:5c:85:46:dc:93:4e:0b:0f:79:ab:85:76: d5:7a:55:20:1d:b5:03:1f:a8:e4:68:85:92:71:25:54:71:86: 52:f0:76:f2:45:4d:c1:55:4c:b9:71:40:3d:b5:28:96:25:9e: a6:ba:1d:b3:f2:93:35:ed:77:7a:4d:d7:c9:ad:10:b6:08:d1: cf:e5:91:8e:85:2d:28:7c:f0:13:84:a2:8e:ac:f4:f4:a2:fa: 72:79:ec:24:52:85:85:3e:78:2b:36:08:e2:b0:68:64:7e:cc: 9b:d0:a4:13:ca:69:dd:a1:8f:b7:b0:c6:fa:78:e0:0f:11:6a: b2:51:29:48:6c:d1:d8:45:10:4a:ea:5f:c0:e2:16:a2:5e:0e: ae:66:59:d0:42:3d:83:85:11:99:dc:40:f1:8a:a2:1a:af:7b: 9a:0a:c6:a0:af:01:d1:a1:bb:c1:a3:8a:f0:02:d8:2e:2f:c9: bc:29:d7:77:42:6b:af:96:24:27:a8:54:96:f3:37:c0:6a:2a: 20:9f:42:73:0e:6a:1a:6e:63:37:8c:59:6a:1d:fc:a2:04:cf: c4:94:cb:0b:58:48:b3:2e:7e:cf:1f:e1:ec:6c:ce:84:c6:6c: 96:fc:e5:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgo/0jZhlKsN/EU+se8w1nHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwNzIwMTgwMTE1WhcNMjUwNzIxMTgwMTE1WjAzMTEwLwYDVQQD Eyg5ZDljMGVjNjcwOWVlY2NlMDQwMmQ2ZDQ4MjIzZjRmZWZiODY5NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlid1SVMPBrPziSFfJMsEqSq2Nhem c9gG4PWij0EDXqIB2nFrcn5ch0cNG+GskTuuAV3F7L+UJKVBmxVB9Hi2R/IPnmQQ E+WgE145P6k1bGJc5Cn2cHdRq96qLTVmbHRyqDJkfIV3r0ZYdKd5rAATgeckjsxP r75rh0xy2jZJRTr7aC9VXQ+Sj8+m7GHfcaNGmnRL8soozO69p9IPS9MoACZi58lr WfJbaoOsZJv32Z1at+J1tCkz20JHoyQJbDlN/0hQY8IT/tOLhAyCuahB4AaURdYd vMKqevRqM4OXF0rSKAmgehZ080i/iQIJxqAnQttmzhS39codJiTV7BHLtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2cDsZwnuzOBALW1IIj9P77hpZUMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8OM18qd 6AkVkbYe/rnF5RP8M88DMITXXIVG3JNOCw95q4V21XpVIB21Ax+o5GiFknElVHGG UvB28kVNwVVMuXFAPbUoliWeprods/KTNe13ek3Xya0QtgjRz+WRjoUtKHzwE4Si jqz09KL6cnnsJFKFhT54KzYI4rBoZH7Mm9CkE8pp3aGPt7DG+njgDxFqslEpSGzR 2EUQSupfwOIWol4OrmZZ0EI9g4URmdxA8YqiGq97mgrGoK8B0aG7waOK8ALYLi/J vCnXd0Jrr5YkJ6hUlvM3wGoqIJ9Ccw5qGm5jN4xZah38ogTPxJTLC1hIsy5+zx/h 7GzOhMZslvzliQ== -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:33 2025 by rpki-client