$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: zQrJypG8YcjFLnUEimkWe8RhoRzUsS9qyf5TXCTtbCI= Subject key identifier: E7:64:FC:22:43:AD:79:35:2A:24:47:35:FE:46:8C:54:C6:91:41:42 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019A066D69D90441B862205A445DFA3892D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 182D Signing time: Tue 21 Oct 2025 11:00:24 +0000 Manifest this update: Tue 21 Oct 2025 11:00:24 +0000 Manifest next update: Wed 22 Oct 2025 11:00:24 +0000 Files and hashes: 1: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=) 2: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=) 3: 3yM6tM5G7MJmW-Keh3lQJpTDYmQ.roa (hash: o5RR2TRtRzcRa0YfGrHmPuJva8oqLvh6B+TCKQNcc+4=) 4: 4lyP_XtLW1h3NI-vGWGjLTNLSfs.roa (hash: wCaH//OrmPa6FcL1bsRu2GwqBfLRMK34kAaOY7fa6WI=) 5: 5frCTMLAAAivj5vAlLzU9tn9SZk.roa (hash: ydNqfms74WxpRDm6+VGy0or8AczawOAEsWbCcpbLY/k=) 6: 6d_4DsA-qL2qj0TDRCvwbOxR00Q.roa (hash: Brgopk4ClilzEVF+gNj8w0ZmRV8dCg1gMkmnChzGTmg=) 7: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=) 8: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (hash: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=) 9: BtUSMQYrMiXrz8PT4gbKkp8KMzo.roa (hash: MhygUK83+6wJufXl8GG1Zo7sHLD1N46TiaJVKQtyfzQ=) 10: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=) 11: DFF-bhqrnmujnLxRL9JYAVW6ikA.roa (hash: 21iR99fIbGqw3Or3piqGj+bIYtOK9kefBJ5EiWs9J8M=) 12: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=) 13: Fd7oRfblsSpgo1HB8_NxtF5G6vA.roa (hash: u0JHRcPKBTILwNWmyNhnBiovQlnOIak9XumG3rgutdE=) 14: H7riRd-N106KX0i1mDF2VRCYnEc.roa (hash: NA570He5c22fo1zyWpfXqctkYrqhzyDYex5XaIbuKFE=) 15: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=) 16: P-xdH5szgMQXhP27nYN82uBlj4k.roa (hash: wErvIL1WI1egSnklkuRsLUz42g0IG42ATwZat+dtmP4=) 17: R3enN_CEN9QZmwFHuvmlngJF5mA.roa (hash: 2raqyTXYc8p7c+qyBdj1OqG1VKTRjTXkrwPm0ExcfaY=) 18: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=) 19: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=) 20: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=) 21: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=) 22: b-kXBnz2enkupZbt8hmkaM9cRdY.roa (hash: 7JMUhGk/UNvBnPJ0huhw0y/oVgp7Khpe/Nkt2yoYqTo=) 23: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=) 24: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=) 25: dp_5byGPXCGbQvqYjPeo9uM021U.roa (hash: heIFyAGkqEk9pZ8/LM8InXoMTEqO9qdygCNFzMgCzHI=) 26: eA8UoDwbxwCMIcIoTT_iH0YvmjM.roa (hash: HxTrpLgbVmhVC/6Q+vCe8lPm961RPCDLoP9PL41CR7s=) 27: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=) 28: lLZ5Io9qq5qjICXx9jv1SSbflTg.roa (hash: gaHQzxeVOCa2xWjBUWdAbn70cMT5ACXZ2OoKrZdMdSM=) 29: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=) 30: s5g-qMY2DPQbPs-vJE-wBex3Yv4.roa (hash: VrwCJyMIT/Ba5OOALbfVM8cSGeibLJlkNY1h+iO6RIA=) 31: t8FNK2i0rMEbxc7JFCN8YTSfue4.roa (hash: TGDqC9aPRLO5Bs4rgvqauI1vjbtsLGhPLrnrECD+NJc=) 32: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: BxrnZbvcswR8JHhLnCqf8FJ8Goz0cKjIWjEq72CEibQ=) 33: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=) 34: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=) 35: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:6d:69:d9:04:41:b8:62:20:5a:44:5d:fa:38:92:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Oct 21 11:00:24 2025 GMT Not After : Oct 22 11:00:24 2025 GMT Subject: CN=e764fc2243ad79352a244735fe468c54c6914142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:09:f0:fb:87:d5:da:95:48:08:b1:65:11: 31:11:ae:7c:c2:fe:cd:d9:05:b3:2e:c9:b9:2d:8f: d2:9e:7b:20:5d:bb:b8:ca:e8:18:60:65:58:3e:d0: 47:67:c5:4f:f8:99:4d:10:b3:51:65:60:44:f5:c1: 00:e4:f5:b1:33:dc:22:42:e6:99:ce:5f:e6:66:6c: e3:6e:8b:b1:b1:77:22:d4:f9:fb:8f:d9:5c:70:2e: 2c:1d:5f:a5:a6:84:4b:b1:e7:b7:e1:fe:b0:fa:c3: f6:8e:f9:99:5c:21:9e:2b:8a:b1:74:79:49:48:68: 4a:4b:67:16:98:cf:76:68:0b:9d:66:dc:12:0e:1d: de:d0:8e:64:c7:b3:9b:c6:f2:1e:1b:77:d0:c3:a0: 17:a4:66:de:5f:39:28:b0:3b:39:a2:70:67:f5:d9: b4:a9:4d:a2:9d:5a:f5:24:70:f9:ae:df:32:d7:b6: c9:4f:2b:fa:11:17:32:2c:a4:89:1c:c0:4a:a3:36: 38:da:d7:19:df:0e:ac:a0:2c:1f:03:19:92:63:7a: 52:bd:60:41:1f:8b:d8:49:00:61:de:bc:a6:69:2d: e3:d8:5d:03:43:fa:59:5a:fc:98:b1:36:8c:d3:9a: 42:c5:1d:09:ac:c7:92:64:cc:f4:0a:ae:60:29:b9: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:64:FC:22:43:AD:79:35:2A:24:47:35:FE:46:8C:54:C6:91:41:42 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:aa:8b:c8:7a:e4:41:51:dc:b1:e2:f0:40:0d:4c:b3:0d:d9: ac:17:45:ec:c2:df:63:aa:97:f8:7e:09:3f:b2:23:3a:f7:c3: 81:1b:80:d4:7d:3e:b9:f5:aa:9a:19:2e:cf:68:ac:15:a5:e7: 59:72:15:ab:05:76:81:cc:bf:9d:73:98:4c:25:ff:71:32:ba: 01:2a:69:1d:f7:1d:01:d7:a7:9e:77:51:64:65:b7:6c:f9:aa: f9:8f:e4:f3:80:6a:ff:aa:ce:34:52:65:5b:17:0a:d5:78:06: 67:6a:5a:27:e8:c7:d2:be:14:46:dd:6f:e2:5f:d1:6d:bb:ca: e5:19:f0:07:bf:13:0f:a1:f4:92:1f:cb:ab:b9:22:34:d2:5a: 5e:ab:e0:12:0c:6d:c2:13:ea:2c:e0:02:50:bd:31:47:b8:c5: 34:3a:fe:1b:63:25:26:6f:f0:05:84:fa:9c:8c:e8:23:b9:58: c6:5a:f6:bb:28:f7:b3:d4:e0:93:07:e3:8b:0a:a6:4a:02:93: d1:bf:f0:5c:b5:31:03:da:34:dd:cf:44:31:3a:0f:4a:4f:ba: 4a:5c:e7:69:17:55:5a:97:e4:ca:76:3a:b4:aa:32:38:72:38: 7e:ca:b6:92:ce:7f:50:a7:29:5e:02:d2:af:43:81:f3:92:06: 00:76:70:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGbWnZBEG4YiBaRF36OJLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMDIxMTEwMDI0WhcNMjUxMDIyMTEwMDI0WjAzMTEwLwYDVQQD EyhlNzY0ZmMyMjQzYWQ3OTM1MmEyNDQ3MzVmZTQ2OGM1NGM2OTE0MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshsJ8PuH1dqVSAixZRExEa58wv7N 2QWzLsm5LY/SnnsgXbu4yugYYGVYPtBHZ8VP+JlNELNRZWBE9cEA5PWxM9wiQuaZ zl/mZmzjbouxsXci1Pn7j9lccC4sHV+lpoRLsee34f6w+sP2jvmZXCGeK4qxdHlJ SGhKS2cWmM92aAudZtwSDh3e0I5kx7ObxvIeG3fQw6AXpGbeXzkosDs5onBn9dm0 qU2inVr1JHD5rt8y17bJTyv6ERcyLKSJHMBKozY42tcZ3w6soCwfAxmSY3pSvWBB H4vYSQBh3rymaS3j2F0DQ/pZWvyYsTaM05pCxR0JrMeSZMz0Cq5gKblugQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdk/CJDrXk1KiRHNf5GjFTGkUFCMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKqLyHrk QVHcseLwQA1Msw3ZrBdF7MLfY6qX+H4JP7IjOvfDgRuA1H0+ufWqmhkuz2isFaXn WXIVqwV2gcy/nXOYTCX/cTK6ASppHfcdAdennndRZGW3bPmq+Y/k84Bq/6rONFJl WxcK1XgGZ2paJ+jH0r4URt1v4l/RbbvK5RnwB78TD6H0kh/Lq7kiNNJaXqvgEgxt whPqLOACUL0xR7jFNDr+G2MlJm/wBYT6nIzoI7lYxlr2uyj3s9TgkwfjiwqmSgKT 0b/wXLUxA9o03c9EMToPSk+6SlznaRdVWpfkynY6tKoyOHI4fsq2ks5/UKcpXgLS r0OB85IGAHZwAw== -----END CERTIFICATE-----Generated at Tue Oct 21 16:50:35 2025 by rpki-client