$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: E8vqIHIE0BcG1gyaVBBP819VH4G27CUcmcAQwW7N2UU= Subject key identifier: 7C:08:1E:1B:AA:EF:36:BE:34:C8:41:9B:21:79:B2:4C:E4:1D:AD:22 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 0198304AF54FA1C7D48290F83C6098EEAE17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0A00 Signing time: Tue 22 Jul 2025 04:01:15 +0000 Manifest this update: Tue 22 Jul 2025 04:01:15 +0000 Manifest next update: Wed 23 Jul 2025 04:01:15 +0000 Files and hashes: 1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: sBx9E/9xm4rYSnIR4YoinyPMEozDIUyW9gLTqMT2Jtk=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:30:4a:f5:4f:a1:c7:d4:82:90:f8:3c:60:98:ee:ae:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jul 22 04:01:15 2025 GMT Not After : Jul 23 04:01:15 2025 GMT Subject: CN=7c081e1baaef36be34c8419b2179b24ce41dad22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:77:f9:db:38:03:43:ff:ae:6b:ca:75:0b:36: 8c:5b:f0:4e:86:1b:6a:eb:41:3d:67:1c:6e:e7:0f: 1a:6c:c6:22:fb:9f:c6:44:ed:d9:7c:12:01:ce:cb: ac:69:13:9c:ac:82:12:03:5f:9d:9c:14:75:fd:b0: c5:03:eb:a2:bc:e3:d9:10:5b:f8:2a:8a:4e:6b:11: 54:bc:71:7f:aa:1a:d4:5a:e6:ee:13:08:6c:ee:6c: 3c:b2:38:67:49:b3:a5:38:51:f4:d0:55:ee:d0:b5: 20:dc:08:24:10:25:83:6e:f1:10:5b:a7:aa:f6:e3: c5:7d:ad:8c:2b:fa:e2:2a:42:66:37:3b:56:55:bd: 32:2a:9b:cf:7b:b2:86:89:b7:2c:be:08:2f:ab:2f: 95:8b:da:56:a8:7a:dc:47:11:0e:dc:96:ff:cf:a6: 65:b5:1f:84:25:9b:6c:73:b6:bd:31:46:d5:d8:16: 7e:a8:cc:71:42:05:29:0d:42:f7:56:0b:6a:0f:02: 8a:2e:88:60:fe:3a:bf:bc:d2:9b:79:67:4b:7c:ea: 17:b3:23:90:f3:6b:02:d9:a3:51:43:8a:56:cc:cf: fd:da:81:e6:2b:81:29:7b:7c:87:bd:07:5f:20:8f: 00:b6:4c:cf:dd:55:28:3f:4b:12:7c:e3:73:81:5d: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:08:1E:1B:AA:EF:36:BE:34:C8:41:9B:21:79:B2:4C:E4:1D:AD:22 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ed:7b:c6:72:61:b3:b2:75:6b:ff:02:bd:64:59:fc:93:8b: 42:58:1c:66:b1:8b:9a:3d:41:6c:ea:42:75:2c:a1:e7:5f:54: 40:17:75:6b:6c:e2:99:e9:f8:01:e3:de:ef:eb:28:4f:4e:e3: c2:ca:50:2b:cf:fa:71:a6:bc:b4:dd:77:d4:4c:34:db:bc:04: d2:ac:16:e5:14:0e:30:1a:03:a1:36:0d:e6:43:ba:a1:a8:55: 20:56:0e:9c:bc:27:b7:ab:43:d0:a4:07:ea:64:d2:e4:59:ec: 81:96:c2:40:a1:ac:03:24:6e:86:32:7f:e2:2b:d0:a9:22:2b: a1:55:5b:d8:bf:fe:51:75:4a:a4:07:ba:ed:dc:43:b4:d4:b4: c8:b5:ed:5f:ca:45:aa:1c:69:4b:0e:91:ce:fb:1d:31:8f:b0: cd:d0:f2:e8:75:fe:a2:be:c0:47:8a:cc:a8:42:e8:f2:f5:ac: 37:eb:d0:5a:0e:e8:ff:91:5c:bf:73:51:09:ef:58:d1:9f:6f: e4:ba:e1:6e:68:72:e6:63:74:88:f8:9a:2f:17:7c:b0:f2:4e: b3:87:1c:33:73:99:99:86:a9:47:a5:01:82:50:d6:cd:e1:52: 60:b3:ab:54:c4:46:07:3f:a5:20:50:eb:61:23:77:db:7b:a5: e4:11:86:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgwSvVPocfUgpD4PGCY7q4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwNzIyMDQwMTE1WhcNMjUwNzIzMDQwMTE1WjAzMTEwLwYDVQQD Eyg3YzA4MWUxYmFhZWYzNmJlMzRjODQxOWIyMTc5YjI0Y2U0MWRhZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Xf52zgDQ/+ua8p1CzaMW/BOhhtq 60E9Zxxu5w8abMYi+5/GRO3ZfBIBzsusaROcrIISA1+dnBR1/bDFA+uivOPZEFv4 KopOaxFUvHF/qhrUWubuEwhs7mw8sjhnSbOlOFH00FXu0LUg3AgkECWDbvEQW6eq 9uPFfa2MK/riKkJmNztWVb0yKpvPe7KGibcsvggvqy+Vi9pWqHrcRxEO3Jb/z6Zl tR+EJZtsc7a9MUbV2BZ+qMxxQgUpDUL3VgtqDwKKLohg/jq/vNKbeWdLfOoXsyOQ 82sC2aNRQ4pWzM/92oHmK4Epe3yHvQdfII8AtkzP3VUoP0sSfONzgV04wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwIHhuq7za+NMhBmyF5skzkHa0iMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAru17xnJh s7J1a/8CvWRZ/JOLQlgcZrGLmj1BbOpCdSyh519UQBd1a2zimen4AePe7+soT07j wspQK8/6caa8tN131Ew027wE0qwW5RQOMBoDoTYN5kO6oahVIFYOnLwnt6tD0KQH 6mTS5FnsgZbCQKGsAyRuhjJ/4ivQqSIroVVb2L/+UXVKpAe67dxDtNS0yLXtX8pF qhxpSw6RzvsdMY+wzdDy6HX+or7AR4rMqELo8vWsN+vQWg7o/5Fcv3NRCe9Y0Z9v 5Lrhbmhy5mN0iPiaLxd8sPJOs4ccM3OZmYapR6UBglDWzeFSYLOrVMRGBz+lIFDr YSN323ul5BGGRQ== -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:32 2025 by rpki-client