$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: /9qieGc0DjFvDpSpo4cZcWqxGuNQwf+33SKtjDuL4fs= Subject key identifier: 1A:00:36:EC:17:94:A8:5C:94:22:D1:D5:7D:D5:18:03:D5:D6:2F:00 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019A28F9D80A44F72F1CAA4567F95BFEFCCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 0571 Signing time: Tue 28 Oct 2025 04:00:53 +0000 Manifest this update: Tue 28 Oct 2025 04:00:53 +0000 Manifest next update: Wed 29 Oct 2025 04:00:53 +0000 Files and hashes: 1: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 2: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (hash: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=) 3: ImvsPyGjqHzil2zJhiiakufkk1I.roa (hash: 29vZWJ1xOkBr4giAfRXD6EraUbozMao9ed7L/bRqJaU=) 4: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (hash: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=) 5: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 6: XtfitIKECL4Esn5wVQYquZKD0aY.roa (hash: Rusmu3puclElkF3Iw8mfUgThxObk4QDJvsuY23x3w40=) 7: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: NS5w0h/FCETc5/orf8C6jx+337UPVa/Awynuyrt2A9M=) 8: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 9: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (hash: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=) 10: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (hash: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:f9:d8:0a:44:f7:2f:1c:aa:45:67:f9:5b:fe:fc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Oct 28 04:00:53 2025 GMT Not After : Oct 29 04:00:53 2025 GMT Subject: CN=1a0036ec1794a85c9422d1d57dd51803d5d62f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:fa:81:79:9b:b1:ab:66:c6:de:cd:d1:2b: 1a:91:d4:56:4a:da:83:7c:b7:df:e0:c6:ba:35:b6: 6a:c8:5f:0f:88:4a:c1:90:d0:ab:f0:11:08:93:3c: c8:e4:2c:f7:68:3a:71:14:7b:46:b6:5f:b4:e6:69: dd:f4:8c:67:70:18:a2:12:63:b9:53:1e:67:81:80: 2c:88:95:c6:b3:a6:c5:19:ae:ab:2e:66:e8:59:b6: ad:41:47:d1:da:cd:16:a0:71:b8:5c:f5:ae:bb:45: 4b:b9:d3:d2:27:0d:94:92:4a:d0:84:38:3e:91:6e: 36:b8:42:2c:a7:22:54:fd:73:9a:c4:c2:09:6a:da: c7:16:05:4d:9e:c6:00:2d:a8:49:a9:86:95:b9:e2: 44:0c:54:ce:31:67:1c:d8:a2:14:de:6f:e7:fe:d7: 1d:c6:00:9c:56:08:f5:d8:14:e1:c8:ff:c9:55:5e: ea:a3:68:bd:5f:51:03:54:92:a9:9d:1b:8f:c8:9b: 9c:60:78:ed:16:97:17:cf:26:be:1f:46:a9:9b:78: b7:83:16:e4:38:99:32:1b:18:7d:66:2b:87:24:ee: f2:b2:f7:50:08:b0:71:03:3b:ca:9d:1c:d6:bf:74: 8b:25:4e:07:57:0d:4f:fd:cb:48:5c:30:5c:49:68: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:36:EC:17:94:A8:5C:94:22:D1:D5:7D:D5:18:03:D5:D6:2F:00 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ec:d6:c4:1f:86:1e:45:7f:a3:ac:00:e8:49:7b:67:67:9a: ab:6f:2b:cd:e3:2d:8f:c9:66:2c:f2:2c:29:dd:86:a4:dc:7d: 42:45:13:5a:65:d8:c0:f5:e4:7c:24:f6:a2:1d:c7:31:da:ff: 74:72:6d:a5:63:06:87:94:3b:90:f1:d7:02:df:a7:f7:cf:78: a0:a9:ed:d0:cd:8f:cc:5c:c4:85:5f:00:84:3d:f2:31:77:bf: a3:8e:92:e0:64:4c:f4:b1:11:38:09:ed:68:ee:3c:3a:61:fe: 07:12:59:c8:39:3e:1f:b0:c6:db:bd:1a:c0:0d:b6:3d:6b:a5: 25:42:5c:fb:b7:0b:2a:d6:4e:28:eb:1f:02:97:af:c2:18:c8: 84:1f:e3:d8:91:28:12:97:04:5c:94:82:e4:02:a0:3a:ba:7e: 22:6b:34:a5:86:58:e1:ad:5d:b6:a1:4f:cb:66:17:14:0e:ec: 50:0b:12:a3:4d:12:07:e9:e4:1f:64:74:93:6b:02:0f:1f:16: 2d:87:e6:12:38:f6:9c:29:b2:0c:7b:84:d3:17:b1:43:7c:c6: 77:d8:84:a5:20:e0:91:29:a9:23:8d:df:0b:73:a0:80:82:d2: 97:cd:0e:84:68:4a:90:b7:49:de:53:e0:d6:ef:e1:76:18:a5: 5f:6a:0b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoo+dgKRPcvHKpFZ/lb/vzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMDI4MDQwMDUzWhcNMjUxMDI5MDQwMDUzWjAzMTEwLwYDVQQD EygxYTAwMzZlYzE3OTRhODVjOTQyMmQxZDU3ZGQ1MTgwM2Q1ZDYyZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXz6gXmbsatmxt7N0SsakdRWStqD fLff4Ma6NbZqyF8PiErBkNCr8BEIkzzI5Cz3aDpxFHtGtl+05mnd9IxncBiiEmO5 Ux5ngYAsiJXGs6bFGa6rLmboWbatQUfR2s0WoHG4XPWuu0VLudPSJw2UkkrQhDg+ kW42uEIspyJU/XOaxMIJatrHFgVNnsYALahJqYaVueJEDFTOMWcc2KIU3m/n/tcd xgCcVgj12BThyP/JVV7qo2i9X1EDVJKpnRuPyJucYHjtFpcXzya+H0apm3i3gxbk OJkyGxh9ZiuHJO7ysvdQCLBxAzvKnRzWv3SLJU4HVw1P/ctIXDBcSWiI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoANuwXlKhclCLR1X3VGAPV1i8AMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuzWxB+G HkV/o6wA6El7Z2eaq28rzeMtj8lmLPIsKd2GpNx9QkUTWmXYwPXkfCT2oh3HMdr/ dHJtpWMGh5Q7kPHXAt+n9894oKnt0M2PzFzEhV8AhD3yMXe/o46S4GRM9LEROAnt aO48OmH+BxJZyDk+H7DG270awA22PWulJUJc+7cLKtZOKOsfApevwhjIhB/j2JEo EpcEXJSC5AKgOrp+Ims0pYZY4a1dtqFPy2YXFA7sUAsSo00SB+nkH2R0k2sCDx8W LYfmEjj2nCmyDHuE0xexQ3zGd9iEpSDgkSmpI43fC3OggILSl80OhGhKkLdJ3lPg 1u/hdhilX2oL+w== -----END CERTIFICATE-----Generated at Tue Oct 28 11:09:12 2025 by rpki-client