$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: 17szeScK0gt12LjvwuDPJR4w5+z1ka4NKuM/l/y/DQ8= Subject key identifier: DC:E5:D6:85:CD:A1:63:BA:BD:F7:4A:59:55:9B:D5:E8:E9:31:EA:74 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019918772BF362E7510B8D71128CF3E11866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0DEE Signing time: Fri 05 Sep 2025 06:01:27 +0000 Manifest this update: Fri 05 Sep 2025 06:01:27 +0000 Manifest next update: Sat 06 Sep 2025 06:01:27 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: rTnkqhBLUZlvHy6vTCe4ym21oBmLIFLwsPNU6olCMBU=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:18:77:2b:f3:62:e7:51:0b:8d:71:12:8c:f3:e1:18:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Sep 5 06:01:27 2025 GMT Not After : Sep 6 06:01:27 2025 GMT Subject: CN=dce5d685cda163babdf74a59559bd5e8e931ea74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:6c:11:59:e8:5b:55:d1:9c:f9:b4:23:d9: 4e:a6:dc:49:52:45:b7:67:37:e4:32:1e:ab:3d:b3: bc:c6:13:1e:a9:32:2f:81:b0:57:fd:6f:69:00:10: 93:ef:b9:86:9a:0c:a4:20:f5:af:2c:95:5f:c0:84: 22:c8:15:27:77:8a:ec:12:6e:03:45:92:5a:a9:ea: 33:cb:c3:1f:f2:c6:ee:02:36:ce:dc:df:a1:09:b3: 34:b3:3f:86:11:d9:18:a8:d8:10:d3:4f:96:3c:d0: 8d:5e:2e:e1:f3:5f:78:ef:ae:24:f3:d4:eb:fc:9d: 48:3a:79:e4:05:60:f2:2b:14:8b:0d:3d:f6:97:70: be:16:65:00:7c:c1:9b:bc:3a:2e:6d:d4:5a:50:02: 07:e3:09:e7:5f:eb:0f:93:8e:e7:ba:7e:88:18:4d: 10:0c:d5:94:5f:18:cf:3e:7b:67:8a:d1:8d:44:b0: 57:c5:82:05:d6:75:95:58:dd:15:16:74:0e:64:71: a8:9d:6d:58:3d:1a:e1:b6:e3:e5:1b:2c:93:58:ab: 3a:98:6e:77:0a:e5:cb:55:ef:45:7f:6c:cd:d6:27: 4a:da:fb:22:65:10:88:68:ab:d9:a0:c4:64:52:05: 7c:c5:a1:33:5f:23:ca:cb:ed:8e:88:14:a0:80:9c: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E5:D6:85:CD:A1:63:BA:BD:F7:4A:59:55:9B:D5:E8:E9:31:EA:74 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4e:2b:ef:b7:16:f7:91:11:96:12:4d:6c:c3:73:48:01:ec: 1d:58:e8:5b:8b:fd:75:95:b6:05:7c:c3:ed:5e:1d:ea:9d:08: ca:e7:76:8c:1b:4a:fc:47:3a:ae:64:39:5b:e9:22:8b:9c:91: 73:91:7d:5a:d4:c6:a4:c4:73:ba:d8:37:3b:21:0d:1e:12:38: 4e:dc:2e:b5:fa:0f:34:d1:c7:14:44:66:6c:dd:a8:f5:7e:ad: 5d:0e:02:8e:54:1c:bb:f3:ef:38:57:d2:e0:c6:9b:19:45:eb: ac:e3:72:89:c0:bf:e8:80:88:59:18:53:8f:09:28:66:91:80: a8:a4:25:f6:33:45:2f:58:f6:38:93:b2:d0:4e:fd:cc:07:08: 70:cf:16:ec:00:d7:b2:c0:d2:33:44:5a:be:d6:7a:ea:05:c6: 5d:00:b5:cf:73:3c:14:22:4d:9f:3e:77:3d:58:3e:f4:17:14: a7:6e:84:a0:c8:3c:78:df:cd:49:ec:a2:0d:ac:95:25:2e:9d: bb:5a:e0:ea:3f:bb:fb:b9:0b:b1:5a:e8:8c:f8:bb:81:cd:3e: c2:72:c0:a8:e2:7e:56:20:90:49:ef:f6:4c:78:a9:26:1c:8c: df:59:35:88:14:64:99:47:a9:d7:d3:39:4d:8d:be:71:a6:79: 3a:8f:eb:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkYdyvzYudRC41xEozz4RhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwOTA1MDYwMTI3WhcNMjUwOTA2MDYwMTI3WjAzMTEwLwYDVQQD EyhkY2U1ZDY4NWNkYTE2M2JhYmRmNzRhNTk1NTliZDVlOGU5MzFlYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA419sEVnoW1XRnPm0I9lOptxJUkW3 ZzfkMh6rPbO8xhMeqTIvgbBX/W9pABCT77mGmgykIPWvLJVfwIQiyBUnd4rsEm4D RZJaqeozy8Mf8sbuAjbO3N+hCbM0sz+GEdkYqNgQ00+WPNCNXi7h8194764k89Tr /J1IOnnkBWDyKxSLDT32l3C+FmUAfMGbvDoubdRaUAIH4wnnX+sPk47nun6IGE0Q DNWUXxjPPntnitGNRLBXxYIF1nWVWN0VFnQOZHGonW1YPRrhtuPlGyyTWKs6mG53 CuXLVe9Ff2zN1idK2vsiZRCIaKvZoMRkUgV8xaEzXyPKy+2OiBSggJyQAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzl1oXNoWO6vfdKWVWb1ejpMep0MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk4r77cW 95ERlhJNbMNzSAHsHVjoW4v9dZW2BXzD7V4d6p0Iyud2jBtK/Ec6rmQ5W+kii5yR c5F9WtTGpMRzutg3OyENHhI4TtwutfoPNNHHFERmbN2o9X6tXQ4CjlQcu/PvOFfS 4MabGUXrrONyicC/6ICIWRhTjwkoZpGAqKQl9jNFL1j2OJOy0E79zAcIcM8W7ADX ssDSM0RavtZ66gXGXQC1z3M8FCJNnz53PVg+9BcUp26EoMg8eN/NSeyiDayVJS6d u1rg6j+7+7kLsVrojPi7gc0+wnLAqOJ+ViCQSe/2THipJhyM31k1iBRkmUep19M5 TY2+caZ5Oo/rcg== -----END CERTIFICATE-----Generated at Fri Sep 5 14:00:10 2025 by rpki-client