$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: N+cM278l7ZmeDj9b8jGJ4b16cwI9v0w+strs0VgLzWg= Subject key identifier: 65:72:AE:81:22:ED:FF:60:94:75:27:C0:0A:77:11:94:92:EB:6E:9E Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 01991CF886C093276E825E27747CAD2C5BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 17A9 Signing time: Sat 06 Sep 2025 03:01:13 +0000 Manifest this update: Sat 06 Sep 2025 03:01:13 +0000 Manifest next update: Sun 07 Sep 2025 03:01:13 +0000 Files and hashes: 1: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=) 2: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=) 3: 4lyP_XtLW1h3NI-vGWGjLTNLSfs.roa (hash: wCaH//OrmPa6FcL1bsRu2GwqBfLRMK34kAaOY7fa6WI=) 4: 5frCTMLAAAivj5vAlLzU9tn9SZk.roa (hash: ydNqfms74WxpRDm6+VGy0or8AczawOAEsWbCcpbLY/k=) 5: 8LnP7s60zUj8mpVBDepOWfTdk7E.roa (hash: py+LCdSJ89NBiipx+vqS8aHgY4j9qaVC8lI7EDR2iCk=) 6: 8VeZzKCSYwY0DCbXzIW1NSYlnco.roa (hash: I9e2BdnaNqb224QzcqVlasgDfHBu0PzpJuiVTcPLBkY=) 7: 9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa (hash: raB+O2AS/JTjr8iMHBGswQfqoUX8OI+aiElvdmvcZ50=) 8: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=) 9: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (hash: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=) 10: BtUSMQYrMiXrz8PT4gbKkp8KMzo.roa (hash: MhygUK83+6wJufXl8GG1Zo7sHLD1N46TiaJVKQtyfzQ=) 11: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=) 12: DFF-bhqrnmujnLxRL9JYAVW6ikA.roa (hash: 21iR99fIbGqw3Or3piqGj+bIYtOK9kefBJ5EiWs9J8M=) 13: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=) 14: FdIidW0iI8s3BDlLJ5hpekaUDyI.roa (hash: MUdmy80p3zlztbVODgC1EefbLUSe+QTqIqdUtl+oHlc=) 15: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=) 16: PjmdCi_SKObZ-ay6--Kx14dle_w.roa (hash: I3VJPj1bjyVE1JKxBBSHYg/pO1V9gSk31a25iRaOVaA=) 17: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=) 18: Srd8y1uDTsRNNh5zxuhGC_3_ynA.roa (hash: RJvVVf3BXtar1QBf5Qs0uslArz8hoyrD19vpCenWfYQ=) 19: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=) 20: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=) 21: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=) 22: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=) 23: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=) 24: dp_5byGPXCGbQvqYjPeo9uM021U.roa (hash: heIFyAGkqEk9pZ8/LM8InXoMTEqO9qdygCNFzMgCzHI=) 25: eA8UoDwbxwCMIcIoTT_iH0YvmjM.roa (hash: HxTrpLgbVmhVC/6Q+vCe8lPm961RPCDLoP9PL41CR7s=) 26: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=) 27: iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa (hash: l01+ksHSTRyaSzPORryEG5uT2aEVHezKBQmwrK+X8Zs=) 28: lX3rRAPz9F8BPxbsIulUth9zmtg.roa (hash: eoaguB0B1U4+OB+Tbnc82zIbw18sEzTCQ1o3nJux9nU=) 29: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=) 30: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: +28WN1EgGpCqzJ3wIGk5YUyruGSu/WjqKOApC24SEtU=) 31: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=) 32: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=) 33: vSdatVQs0601qTINAZOSvBKTvqI.roa (hash: J4sc3fJ3ayPM9GpaLds0smNkt4N6lvQ+RxikjlgB/Sc=) 34: w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa (hash: UGtK6mkQR0p+bkmWUcnTpaGOQfPntDOlSxu2DwZdk1o=) 35: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:f8:86:c0:93:27:6e:82:5e:27:74:7c:ad:2c:5b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Sep 6 03:01:13 2025 GMT Not After : Sep 7 03:01:13 2025 GMT Subject: CN=6572ae8122edff60947527c00a77119492eb6e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:09:05:4b:ce:bd:ad:28:b9:5a:c6:4d:8f: b2:be:dc:2c:20:9d:45:14:87:54:3d:42:30:84:db: a8:7c:a8:1a:7b:6c:40:27:c2:33:cd:8b:23:c2:97: 4d:2e:f9:96:69:2f:72:7c:4b:15:2c:a0:e4:99:3f: b6:79:37:2c:84:50:83:41:d7:a7:6e:29:64:09:5b: a6:a3:30:dd:27:51:d3:58:ea:c8:e8:8b:b1:e9:aa: d8:63:15:e3:8c:22:5c:84:0d:47:40:62:69:37:0c: 82:16:79:df:3b:bd:5f:42:bd:21:44:07:d5:8f:4e: 46:72:ac:9f:d7:df:40:39:00:02:55:8d:06:2a:86: 0a:2f:e8:bc:04:27:90:05:6b:83:6c:bc:20:2b:c8: fe:0a:e3:0b:6c:ff:a7:bd:2e:16:3d:04:2b:9a:5a: e8:52:37:6b:13:fa:f4:e9:8b:67:08:67:72:0e:e1: e4:c4:17:ab:bb:08:55:76:63:08:91:bf:63:62:eb: 54:2e:4d:d2:d0:5c:25:ba:d5:29:93:b0:9e:51:19: 05:67:c4:4f:ab:50:e0:96:7c:5f:99:32:02:fa:53: 4e:fd:5f:63:e9:c4:dd:d9:29:6b:a6:64:44:57:b4: da:62:dc:99:31:a8:76:b3:d7:3e:82:61:a2:62:52: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:72:AE:81:22:ED:FF:60:94:75:27:C0:0A:77:11:94:92:EB:6E:9E X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:57:ba:72:f6:55:78:52:25:6b:5b:bf:23:f3:6e:75:8a:4a: bd:32:1f:87:d6:71:cf:05:b7:d3:46:80:75:56:79:06:23:18: 9e:24:36:04:10:a2:63:08:24:54:00:99:e8:c9:08:f3:8d:c5: 74:26:17:be:b0:ac:42:90:00:2f:fe:14:e1:76:87:b2:38:b2: 45:8a:f4:75:1d:51:2f:96:da:39:d5:8f:54:50:ed:7b:cc:22: 3a:80:91:ec:8e:bb:99:c0:34:2c:0b:76:f0:70:22:60:c4:3b: ca:7c:b2:aa:5a:d1:30:68:cb:f0:cd:c0:a3:0c:e7:a6:84:25: 1b:19:6a:7f:71:0d:d9:33:1f:79:9a:72:c9:8c:6b:ac:ba:17: e4:70:61:b4:86:8f:4e:a8:ce:64:4b:68:27:59:ed:ab:79:18: 00:83:14:fd:2a:5d:45:62:6c:59:c1:85:70:a8:ef:6d:ae:ef: 76:e3:17:fc:62:4d:9d:fb:a3:8c:1f:10:b1:0e:f1:c7:98:ec: 54:de:0e:b8:df:ec:a1:a4:eb:95:16:43:eb:7c:b2:68:5d:f6: 81:01:c3:da:7d:3e:1f:73:5e:5a:b6:0f:ef:6e:df:c8:7d:24: 51:65:47:75:e8:09:d3:fe:80:9b:09:8f:4b:ac:ca:c1:8a:29: 2f:62:59:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkc+IbAkydugl4ndHytLFu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUwOTA2MDMwMTEzWhcNMjUwOTA3MDMwMTEzWjAzMTEwLwYDVQQD Eyg2NTcyYWU4MTIyZWRmZjYwOTQ3NTI3YzAwYTc3MTE5NDkyZWI2ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF8JBUvOva0ouVrGTY+yvtwsIJ1F FIdUPUIwhNuofKgae2xAJ8IzzYsjwpdNLvmWaS9yfEsVLKDkmT+2eTcshFCDQden bilkCVumozDdJ1HTWOrI6Iux6arYYxXjjCJchA1HQGJpNwyCFnnfO71fQr0hRAfV j05Gcqyf199AOQACVY0GKoYKL+i8BCeQBWuDbLwgK8j+CuMLbP+nvS4WPQQrmlro UjdrE/r06YtnCGdyDuHkxBeruwhVdmMIkb9jYutULk3S0FwlutUpk7CeURkFZ8RP q1DglnxfmTIC+lNO/V9j6cTd2SlrpmREV7TaYtyZMah2s9c+gmGiYlL0BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVyroEi7f9glHUnwAp3EZSS626eMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1e6cvZV eFIla1u/I/NudYpKvTIfh9ZxzwW300aAdVZ5BiMYniQ2BBCiYwgkVACZ6MkI843F dCYXvrCsQpAAL/4U4XaHsjiyRYr0dR1RL5baOdWPVFDte8wiOoCR7I67mcA0LAt2 8HAiYMQ7ynyyqlrRMGjL8M3AowznpoQlGxlqf3EN2TMfeZpyyYxrrLoX5HBhtIaP TqjOZEtoJ1ntq3kYAIMU/SpdRWJsWcGFcKjvba7vduMX/GJNnfujjB8QsQ7xx5js VN4OuN/soaTrlRZD63yyaF32gQHD2n0+H3NeWrYP727fyH0kUWVHdegJ0/6AmwmP S6zKwYopL2JZfg== -----END CERTIFICATE-----Generated at Sat Sep 6 11:45:34 2025 by rpki-client