$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: R1SVQBw3zckaGtF48qdRqQ9BJHs3imrkn2xzNVLCjLg= Subject key identifier: 5B:28:B3:55:E3:20:1C:F2:1B:BF:BF:1C:EE:E5:84:38:38:F8:97:BE Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019A05FFDEB7181AAB5459C7093CADFD0D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0E69 Signing time: Tue 21 Oct 2025 09:00:45 +0000 Manifest this update: Tue 21 Oct 2025 09:00:45 +0000 Manifest next update: Wed 22 Oct 2025 09:00:45 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: II6pYuV/oAVBT/ZpGKabNyxHoxvpsxomzRLGZ23nhDE=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:ff:de:b7:18:1a:ab:54:59:c7:09:3c:ad:fd:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Oct 21 09:00:45 2025 GMT Not After : Oct 22 09:00:45 2025 GMT Subject: CN=5b28b355e3201cf21bbfbf1ceee5843838f897be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:ee:07:8a:f1:90:c0:ba:dd:32:c5:31:10: 99:5d:31:19:69:72:c9:ec:18:5a:df:98:64:c0:2a: dc:01:70:79:99:62:fe:5f:60:16:6a:6a:9d:ec:bb: 8a:3c:31:72:0f:3e:d7:f2:c2:4c:88:c4:ea:47:6d: 3d:1e:ad:49:8a:a0:db:41:38:eb:3c:fe:53:41:9d: 7d:2b:a4:74:80:31:0b:5b:81:38:b5:5b:cb:80:fd: e9:99:94:f8:6b:c6:00:bd:30:3d:16:d3:8a:5d:73: b9:c6:27:37:51:2b:34:48:dd:c9:aa:f3:27:cf:82: 0a:2a:b7:6b:94:b7:13:ce:73:6f:0a:f1:63:9f:df: 31:cd:89:1e:12:53:8f:9d:a3:f0:19:d7:18:89:98: 49:8b:03:f9:e2:ee:52:c3:9d:0d:99:c2:7e:6a:6a: 6d:c4:dd:99:b6:5e:bc:05:ef:03:63:1b:a0:f8:a1: 9b:79:43:77:8d:33:53:e5:13:d7:87:4d:09:2d:2b: 91:10:3f:32:7d:d4:5a:98:0e:06:08:29:a1:61:ab: 80:b0:51:8e:a7:e1:dc:d4:55:d2:a2:9b:d7:f3:67: 8f:1c:a9:1a:12:7e:34:9f:39:de:39:5d:50:bf:bf: 79:8f:92:12:67:38:b5:2f:9c:23:da:32:72:a9:e0: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:B3:55:E3:20:1C:F2:1B:BF:BF:1C:EE:E5:84:38:38:F8:97:BE X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8d:c1:fa:f7:3e:8e:a0:c4:e0:cd:3b:33:21:c5:2c:1b:4c: 23:b4:79:96:0c:b5:81:9c:22:99:49:27:96:d1:4e:af:51:79: 14:87:fa:8d:bd:97:ea:15:e0:d6:aa:19:82:ad:4b:4f:44:26: ac:47:11:8c:52:f1:f8:19:9b:65:0d:c0:9e:1e:57:e9:c6:25: 8e:1f:85:e0:5b:51:d0:6e:6c:e2:ff:2b:f5:82:df:bb:61:6f: 35:81:a2:46:a0:cf:a0:90:3b:c3:be:3f:3b:a9:87:d1:ef:0a: b4:02:e7:9b:c8:c0:43:18:19:38:18:53:d3:15:db:05:1c:1b: 44:87:4c:c3:34:5e:46:29:4f:fa:a0:0f:21:8d:25:c3:d7:6a: 95:7c:4f:c0:f1:3a:ac:96:f5:2e:31:fd:e8:d4:66:73:62:0f: 01:a6:06:bb:db:2c:21:58:a8:0f:f3:ad:f0:a8:03:c7:28:77: eb:f0:90:2a:28:06:c9:1e:db:22:72:f4:7b:6e:6d:0b:b1:c3: f4:b2:d7:ca:cb:32:42:5b:d0:10:28:ed:60:78:a7:2b:61:77: c7:32:e0:b1:92:f9:15:ca:07:84:fe:d3:0c:01:28:4d:62:91: 96:5e:6c:f0:0f:30:5c:e6:79:58:86:fb:ec:cb:b8:76:22:30: 00:e7:3a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoF/963GBqrVFnHCTyt/Q1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUxMDIxMDkwMDQ1WhcNMjUxMDIyMDkwMDQ1WjAzMTEwLwYDVQQD Eyg1YjI4YjM1NWUzMjAxY2YyMWJiZmJmMWNlZWU1ODQzODM4Zjg5N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthbuB4rxkMC63TLFMRCZXTEZaXLJ 7Bha35hkwCrcAXB5mWL+X2AWamqd7LuKPDFyDz7X8sJMiMTqR209Hq1JiqDbQTjr PP5TQZ19K6R0gDELW4E4tVvLgP3pmZT4a8YAvTA9FtOKXXO5xic3USs0SN3JqvMn z4IKKrdrlLcTznNvCvFjn98xzYkeElOPnaPwGdcYiZhJiwP54u5Sw50NmcJ+ampt xN2Ztl68Be8DYxug+KGbeUN3jTNT5RPXh00JLSuRED8yfdRamA4GCCmhYauAsFGO p+Hc1FXSopvX82ePHKkaEn40nzneOV1Qv795j5ISZzi1L5wj2jJyqeAY8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsos1XjIBzyG7+/HO7lhDg4+Je+MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI3B+vc+ jqDE4M07MyHFLBtMI7R5lgy1gZwimUknltFOr1F5FIf6jb2X6hXg1qoZgq1LT0Qm rEcRjFLx+BmbZQ3Anh5X6cYljh+F4FtR0G5s4v8r9YLfu2FvNYGiRqDPoJA7w74/ O6mH0e8KtALnm8jAQxgZOBhT0xXbBRwbRIdMwzReRilP+qAPIY0lw9dqlXxPwPE6 rJb1LjH96NRmc2IPAaYGu9ssIVioD/Ot8KgDxyh36/CQKigGyR7bInL0e25tC7HD 9LLXyssyQlvQECjtYHinK2F3xzLgsZL5FcoHhP7TDAEoTWKRll5s8A8wXOZ5WIb7 7Mu4diIwAOc6KQ== -----END CERTIFICATE-----Generated at Tue Oct 21 12:12:31 2025 by rpki-client