$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: fLL7muRHvC3jv7N5d+O51rf97YXncQSPywhF3PQVafA= Subject key identifier: BF:D1:2A:BB:01:9F:8A:A1:4D:0A:CA:92:A9:FC:D6:96:4D:D5:AB:CE Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 01983570B47BCD8575F7153A94F7479D4367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 07EC Signing time: Wed 23 Jul 2025 04:00:35 +0000 Manifest this update: Wed 23 Jul 2025 04:00:35 +0000 Manifest next update: Thu 24 Jul 2025 04:00:35 +0000 Files and hashes: 1: 4uRgRpGbLoXPg7toWaPiH-1C8Hg.roa (hash: RWW+PTSZT30qqVVeyDtR8WjZoVYE1N5EjQjj6pbH+Iw=) 2: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 3: BA5KV0qch7eRwK8iNS7Ginv7mPo.roa (hash: g51hA9Af6Sjh5mXBBikwTAuq5cVrwKqU5G3PZcvqOEg=) 4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 5: FafnGioXQ9wljFkhuJJdCKFjkww.roa (hash: eKLUYDySvMyLsJDItXiTd2pY6vCov8KOTfhRVaTgfs8=) 6: HpOi7c_S_v8OgGfAcW8YhSlJRVk.roa (hash: CM7jTteVy3XFQV9Gw/Amlvv4uEMdN4ootFhXdwUocaA=) 7: P7Ra8L-BqlGvnqo-q2fXNcc20sY.roa (hash: 0xQnB3yY0fEpMVOW8NiEqqQNCblWPYqWGXrmAPV6twc=) 8: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 9: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: iXDUBkyDFe7kW281FMXDjD3G/7ySZ5l5/76sG5HeuDg=) 10: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 11: nOpnpLk5NAJl0__AJ-3xslH07XY.roa (hash: We/d0dc/Anxfxl6Kd0nGwLns+hE9jp/nOrjRS2Waut0=) 12: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:70:b4:7b:cd:85:75:f7:15:3a:94:f7:47:9d:43:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Jul 23 04:00:35 2025 GMT Not After : Jul 24 04:00:35 2025 GMT Subject: CN=bfd12abb019f8aa14d0aca92a9fcd6964dd5abce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0c:ed:87:7e:71:78:eb:bc:b6:92:02:9b:ab: 94:ec:75:af:30:c0:a0:82:c1:e1:53:d1:bf:d9:5f: 00:7b:c4:82:a1:0b:2f:36:f5:63:c0:79:6d:48:41: a6:90:2d:25:c9:8f:e1:1b:b3:eb:3e:da:7f:5b:11: 3e:a7:d5:bc:42:2a:fd:d9:6c:31:84:bc:f6:1a:42: ae:6c:23:ec:36:43:49:73:97:19:49:e1:ba:56:d0: c7:01:b6:7a:cb:1c:db:ef:0c:09:f0:02:c8:f8:12: 6c:d8:29:a7:62:af:25:93:8c:6f:c2:1e:dd:f2:16: 34:46:4a:a8:12:fe:0f:b8:8c:07:73:f9:c0:f9:60: 12:d6:10:95:36:94:c7:ab:be:d0:d1:aa:9e:db:7c: e3:9e:70:7c:cf:08:52:a6:08:ec:66:5e:a3:04:14: fc:9a:89:fb:dd:7b:d1:f1:b9:d5:7b:0d:ee:a2:ac: 77:a1:ce:69:62:ff:92:6f:7a:c9:7e:a6:06:82:dd: 99:3e:60:d4:b8:3c:4b:b3:db:e0:55:20:88:87:3a: ad:cc:ac:1c:99:76:40:88:d3:8b:4e:c3:f9:51:ec: bc:78:79:98:67:01:0e:88:be:b0:47:b4:80:fc:e2: 36:c4:54:fd:73:eb:3f:82:61:5e:83:4f:6b:7b:5c: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D1:2A:BB:01:9F:8A:A1:4D:0A:CA:92:A9:FC:D6:96:4D:D5:AB:CE X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fb:04:40:25:bd:a9:9a:59:d7:76:85:14:d3:5b:0c:05:aa: 6b:9d:4c:94:ad:a9:f4:cc:52:1c:e8:3c:86:fd:aa:9f:73:55: 13:a4:3e:c3:58:f1:01:7a:78:de:36:90:8e:52:d8:c4:f5:bc: d4:f0:b3:bf:86:49:f8:1b:67:1e:08:d3:a6:75:49:9f:51:ad: 82:79:1a:5a:d0:0d:b1:c0:0a:3c:e1:51:78:b0:ec:6b:91:4f: 6e:51:4e:c6:7b:28:f3:bb:60:89:bc:be:ba:27:01:92:d6:3b: 50:cc:07:89:10:0c:00:32:26:88:b6:2f:91:3a:40:9c:31:d1: 84:20:d8:a3:37:ab:62:4f:c7:d0:d8:4a:ea:81:c4:fc:af:d4: 70:a2:57:c1:3a:68:0c:7c:23:4a:42:6f:63:4d:88:f0:3e:5d: c5:92:db:b4:62:6d:b3:8d:66:55:2b:27:be:2f:c3:c7:be:4b: 9f:97:9c:29:19:18:23:af:8b:83:c3:30:ee:22:b1:51:4b:94: ec:e6:e3:12:42:29:45:cf:7c:69:b7:9c:26:2a:3f:d1:7b:4e: 32:e2:db:6e:d1:a3:b8:0c:c0:d4:4d:d3:51:e0:a1:dd:10:21: 47:b6:85:84:dc:1e:6b:74:60:da:01:6f:3f:13:50:c1:49:23: b7:43:b9:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cLR7zYV19xU6lPdHnUNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUwNzIzMDQwMDM1WhcNMjUwNzI0MDQwMDM1WjAzMTEwLwYDVQQD EyhiZmQxMmFiYjAxOWY4YWExNGQwYWNhOTJhOWZjZDY5NjRkZDVhYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzth35xeOu8tpICm6uU7HWvMMCg gsHhU9G/2V8Ae8SCoQsvNvVjwHltSEGmkC0lyY/hG7PrPtp/WxE+p9W8Qir92Wwx hLz2GkKubCPsNkNJc5cZSeG6VtDHAbZ6yxzb7wwJ8ALI+BJs2CmnYq8lk4xvwh7d 8hY0RkqoEv4PuIwHc/nA+WAS1hCVNpTHq77Q0aqe23zjnnB8zwhSpgjsZl6jBBT8 mon73XvR8bnVew3uoqx3oc5pYv+Sb3rJfqYGgt2ZPmDUuDxLs9vgVSCIhzqtzKwc mXZAiNOLTsP5Uey8eHmYZwEOiL6wR7SA/OI2xFT9c+s/gmFeg09re1w8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/RKrsBn4qhTQrKkqn81pZN1avOMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfsEQCW9 qZpZ13aFFNNbDAWqa51MlK2p9MxSHOg8hv2qn3NVE6Q+w1jxAXp43jaQjlLYxPW8 1PCzv4ZJ+BtnHgjTpnVJn1GtgnkaWtANscAKPOFReLDsa5FPblFOxnso87tgiby+ uicBktY7UMwHiRAMADImiLYvkTpAnDHRhCDYozerYk/H0NhK6oHE/K/UcKJXwTpo DHwjSkJvY02I8D5dxZLbtGJts41mVSsnvi/Dx75Ln5ecKRkYI6+Lg8Mw7iKxUUuU 7ObjEkIpRc98abecJio/0XtOMuLbbtGjuAzA1E3TUeCh3RAhR7aFhNwea3Rg2gFv PxNQwUkjt0O5mA== -----END CERTIFICATE-----Generated at Wed Jul 23 06:14:04 2025 by rpki-client