$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: 4Z1aVXDlHuTiushie6cq5NkwSWv+AtVZhyZrjqg7eFE= Subject key identifier: DA:25:20:1E:E9:D6:66:84:FF:74:6F:F7:A3:E8:1C:AE:FB:63:59:E0 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 0198284855E76C35E922E1B3C5072E463C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 1721 Signing time: Sun 20 Jul 2025 14:41:25 +0000 Manifest this update: Sun 20 Jul 2025 14:41:25 +0000 Manifest next update: Mon 21 Jul 2025 14:41:25 +0000 Files and hashes: 1: 0thlGR6Fv-qUrpD4YBqsEljSQk0.roa (hash: t1HJ4JOe+BPdJypQBQLv5tG/+PXkQHDxYZLotiQGEkQ=) 2: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=) 3: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=) 4: 3jk_L-Kap6izFBuJISi2VDGBM7c.roa (hash: SiLCn4NY/b4Hmu3M8YzzUYZeOOzOry3i+PWl6++nskw=) 5: 9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa (hash: raB+O2AS/JTjr8iMHBGswQfqoUX8OI+aiElvdmvcZ50=) 6: A65uyV26SsED-QTWYQKp5Gv0rNo.roa (hash: ZTOzPOdVS5PATBBOqZEZpuRX8yTK/iXDN/Fy3kOQjeE=) 7: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=) 8: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (hash: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=) 9: BtUSMQYrMiXrz8PT4gbKkp8KMzo.roa (hash: MhygUK83+6wJufXl8GG1Zo7sHLD1N46TiaJVKQtyfzQ=) 10: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=) 11: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=) 12: IbhS6h3nTSvMTH1bZLFoGSouwG0.roa (hash: mE7Z7M3WJDW8Xxj5N/cTaa8dFMKyZgrGuttacm28HxI=) 13: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=) 14: SC9yZhU9PNS8QTNjN_qrNv_eW3Q.roa (hash: U3jGOjd33mOISo0lcKw17gPp1Hb2/jkFzcISZ7nMSSw=) 15: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=) 16: Srd8y1uDTsRNNh5zxuhGC_3_ynA.roa (hash: RJvVVf3BXtar1QBf5Qs0uslArz8hoyrD19vpCenWfYQ=) 17: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=) 18: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=) 19: _BrKG4qFUAeG8b8VjxlwGkP_cOo.roa (hash: 6iUyRKK4LL6pEeYz+9QKQh7MzqtDFv6/vdl575D8vKI=) 20: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=) 21: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=) 22: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=) 23: dp_5byGPXCGbQvqYjPeo9uM021U.roa (hash: heIFyAGkqEk9pZ8/LM8InXoMTEqO9qdygCNFzMgCzHI=) 24: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=) 25: iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa (hash: l01+ksHSTRyaSzPORryEG5uT2aEVHezKBQmwrK+X8Zs=) 26: lX3rRAPz9F8BPxbsIulUth9zmtg.roa (hash: eoaguB0B1U4+OB+Tbnc82zIbw18sEzTCQ1o3nJux9nU=) 27: nRiXx1Cy-0W2GAGPF1eHDoWTRmk.roa (hash: DNHjNYm1Xu/Gv6zjTAG7OGLWylmQFWZFReqXZHqEfyQ=) 28: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=) 29: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: PjWb72dKE9oVutAfvd1knIDCuiU213UU9QTtFReLTdk=) 30: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=) 31: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=) 32: vB2mYLl-xpJ0Cq2pgFmm7hPz5-I.roa (hash: HlHkoQbOa1Me9Kya+Z65Q2TAdCYsxm5jyaE8OV2FKvQ=) 33: vSdatVQs0601qTINAZOSvBKTvqI.roa (hash: J4sc3fJ3ayPM9GpaLds0smNkt4N6lvQ+RxikjlgB/Sc=) 34: w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa (hash: UGtK6mkQR0p+bkmWUcnTpaGOQfPntDOlSxu2DwZdk1o=) 35: yHnvcCyxL9DiNKgoynw0YsPtMEA.roa (hash: 3cqBDixt8W2IKnu70ZX2oXW2VcR8MoEC6zWNq0ijnrs=) 36: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:48:55:e7:6c:35:e9:22:e1:b3:c5:07:2e:46:3c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jul 20 14:41:25 2025 GMT Not After : Jul 21 14:41:25 2025 GMT Subject: CN=da25201ee9d66684ff746ff7a3e81caefb6359e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:6b:74:56:a3:c7:5e:aa:51:f4:07:da:2b: cb:15:44:07:67:cc:a1:f7:29:e0:2c:65:df:ee:3d: 5f:b7:3e:58:fc:ca:ef:70:fc:52:08:bf:cd:1c:c0: 96:08:d2:f6:1d:c1:ef:9d:d7:58:96:53:92:2c:50: 92:ed:35:cc:68:c7:8b:b3:b3:88:8c:7a:45:54:a0: 2c:ab:4e:14:83:bf:e5:84:e7:ec:06:f8:e9:1a:aa: 8c:d0:bd:ab:5f:86:3d:11:1e:49:b2:c8:76:5a:de: e2:df:95:a7:4d:f2:60:f4:b1:f7:77:03:01:80:80: 94:9f:c8:44:bd:9b:56:33:1d:ff:d8:c2:1e:98:a8: 3e:fd:4d:58:0a:a4:1d:d8:3f:46:a7:02:63:24:e8: cc:c0:dd:b3:53:1b:f2:08:77:6d:cb:30:55:82:af: 0e:08:77:9b:db:d7:e1:28:58:a1:37:cc:56:87:75: 05:ed:54:16:7e:a5:9a:73:b9:9f:16:c1:96:12:9c: 75:ac:a1:c8:7e:08:a7:f6:66:a2:61:c8:a9:f3:19: c1:8c:25:81:c3:8d:a7:06:28:03:8d:10:85:b2:77: dc:de:4d:b9:5b:c3:d2:18:34:25:f3:81:63:3e:2c: f7:51:a5:6b:0f:e9:a3:b3:f8:c4:90:5e:3f:18:d5: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:25:20:1E:E9:D6:66:84:FF:74:6F:F7:A3:E8:1C:AE:FB:63:59:E0 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c4:7f:1e:b7:09:65:b2:d2:dc:d4:f5:3f:af:d0:99:73:bb: 19:5b:26:e6:b1:d4:8a:e8:76:c6:01:fb:96:61:47:14:dc:1f: 4c:4d:1f:67:2a:cd:1f:c6:2a:5f:16:98:8c:c3:3e:16:b6:39: 29:21:31:46:ef:a2:9e:d3:93:34:bf:25:bd:df:3c:23:c2:06: 53:24:67:e7:35:31:b4:d3:7e:76:5b:03:9e:a8:f4:d7:41:a6: 84:45:4f:63:37:02:6e:f3:e4:69:8b:e2:17:94:e1:f2:86:2b: c7:94:6e:2f:0d:9a:46:d0:34:6c:d5:2e:6a:eb:17:0b:84:ae: 0e:21:2a:5a:0c:15:94:3b:67:f9:e0:30:07:44:4f:30:98:b1: 67:69:7a:f9:d9:2f:a7:1d:32:9b:18:8d:3c:69:0d:ae:ec:8b: 36:e9:0a:dd:a1:42:f7:fe:66:da:23:01:aa:f6:c3:ad:72:13: 91:9d:dd:d0:10:78:f6:32:1e:78:ce:79:fb:8d:68:0e:10:9c: 7e:f7:67:00:4c:6b:d2:ed:84:68:0c:e9:d7:38:77:95:ae:bd: ec:2c:b0:46:a4:6d:6c:22:9b:f1:06:dc:34:0b:df:7e:e0:54: c2:a6:4c:4c:b4:29:22:e9:2f:d2:9d:b0:74:c0:bc:ed:87:f7: a1:5f:44:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgoSFXnbDXpIuGzxQcuRjxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUwNzIwMTQ0MTI1WhcNMjUwNzIxMTQ0MTI1WjAzMTEwLwYDVQQD EyhkYTI1MjAxZWU5ZDY2Njg0ZmY3NDZmZjdhM2U4MWNhZWZiNjM1OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjldrdFajx16qUfQH2ivLFUQHZ8yh 9yngLGXf7j1ftz5Y/MrvcPxSCL/NHMCWCNL2HcHvnddYllOSLFCS7TXMaMeLs7OI jHpFVKAsq04Ug7/lhOfsBvjpGqqM0L2rX4Y9ER5Jssh2Wt7i35WnTfJg9LH3dwMB gICUn8hEvZtWMx3/2MIemKg+/U1YCqQd2D9GpwJjJOjMwN2zUxvyCHdtyzBVgq8O CHeb29fhKFihN8xWh3UF7VQWfqWac7mfFsGWEpx1rKHIfgin9maiYcip8xnBjCWB w42nBigDjRCFsnfc3k25W8PSGDQl84FjPiz3UaVrD+mjs/jEkF4/GNUESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNolIB7p1maE/3Rv96PoHK77Y1ngMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcR/HrcJ ZbLS3NT1P6/QmXO7GVsm5rHUiuh2xgH7lmFHFNwfTE0fZyrNH8YqXxaYjMM+FrY5 KSExRu+intOTNL8lvd88I8IGUyRn5zUxtNN+dlsDnqj010GmhEVPYzcCbvPkaYvi F5Th8oYrx5RuLw2aRtA0bNUuausXC4SuDiEqWgwVlDtn+eAwB0RPMJixZ2l6+dkv px0ymxiNPGkNruyLNukK3aFC9/5m2iMBqvbDrXITkZ3d0BB49jIeeM55+41oDhCc fvdnAExr0u2EaAzp1zh3la697CywRqRtbCKb8QbcNAvffuBUwqZMTLQpIukv0p2w dMC87Yf3oV9E9Q== -----END CERTIFICATE-----Generated at Sun Jul 20 16:21:27 2025 by rpki-client