$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: gnoLAp2aXRSLfI9kIqwPr4soGcsPlai4Zfortbnp8mc= Subject key identifier: 8A:26:E0:58:D8:D7:BF:50:E4:0C:5E:22:09:F9:58:26:1E:8D:42:F7 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019748551162923553F440488AC9AD6F8CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0988 Signing time: Sat 07 Jun 2025 03:00:23 +0000 Manifest this update: Sat 07 Jun 2025 03:00:23 +0000 Manifest next update: Sun 08 Jun 2025 03:00:23 +0000 Files and hashes: 1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: 5oN7a2h5zgR+8N/etjr4n1aAaD7cl06c/+wCbBcP+0M=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:55:11:62:92:35:53:f4:40:48:8a:c9:ad:6f:8c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jun 7 03:00:23 2025 GMT Not After : Jun 8 03:00:23 2025 GMT Subject: CN=8a26e058d8d7bf50e40c5e2209f958261e8d42f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:38:07:21:ee:1e:17:75:1e:0a:df:e1:b1: 49:ab:1a:28:56:03:23:61:f6:d4:50:63:9c:1c:8b: d2:77:36:fc:fa:3b:7f:cd:29:9b:75:86:ba:88:5d: f1:af:aa:76:63:3e:b2:62:81:f7:d0:91:b4:56:e0: 3b:c3:e6:6f:81:2d:7b:43:96:90:93:0e:46:90:86: a1:06:a1:9f:02:fc:ce:00:9e:a6:e0:19:81:70:5e: db:b7:96:f3:37:ab:68:9e:9f:ec:06:38:09:11:90: eb:bb:5b:d9:4b:69:54:12:a5:ae:56:36:21:86:b9: c0:f9:a9:dc:a9:8a:51:93:df:3c:b2:3b:e9:b0:9f: e3:b5:c8:40:07:50:34:7a:6a:08:52:ef:1e:40:eb: a4:95:a5:25:46:6b:9d:c5:d0:95:e9:15:3e:55:ad: 79:a9:d3:f6:e0:c4:db:eb:c3:ae:e9:64:30:65:7c: c7:f4:5a:ea:b2:fc:9e:94:68:fd:0a:14:e8:dc:b2: 56:2f:dc:35:eb:d8:e4:5a:58:43:a4:8c:ab:ea:22: 1f:5c:bf:7f:75:a2:3a:81:a0:6b:02:ea:52:c7:37: 56:2f:17:b0:1a:bb:73:3b:50:33:73:db:91:bc:e5: 1e:fd:83:67:0a:eb:0c:7d:3b:d4:69:e6:fe:6c:a5: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:26:E0:58:D8:D7:BF:50:E4:0C:5E:22:09:F9:58:26:1E:8D:42:F7 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:42:c2:37:8a:fb:48:1d:ef:2a:05:04:fc:79:69:ef:6b:17: 58:b9:0c:ab:19:43:22:da:f7:ae:63:3f:f3:bd:4d:b7:00:a1: b8:a7:06:25:30:fa:60:f5:7b:11:9f:02:cc:28:95:d9:61:22: 29:91:e5:c1:bb:d6:d7:5c:d5:70:67:57:0f:7e:1c:1c:0c:7f: c4:21:89:6f:90:01:79:ab:2b:1a:1d:66:39:c1:21:db:d1:ee: 1b:bd:58:ba:10:1f:f3:19:9b:5c:d1:73:cc:cb:35:74:4b:b7: cc:35:dc:5c:57:ec:8d:ea:56:af:b6:54:e7:25:0e:34:bf:5b: 7b:8a:98:ae:ea:cb:d3:b6:ce:ae:aa:50:18:0a:07:5a:b1:3a: ee:34:87:b3:b2:6b:21:77:4f:eb:af:38:92:6a:e2:07:8d:4e: 42:33:14:bc:5f:7d:3b:89:db:b4:e2:5b:83:e1:1b:1c:9f:10: 71:45:1d:89:6e:47:d3:9d:49:c3:ec:9c:7f:84:f2:4f:54:ea: 77:c5:d1:1f:c9:c5:5f:02:aa:40:cc:e7:82:71:b4:b3:d5:3a: 03:56:18:2c:f9:e0:92:de:da:62:a3:f5:69:1f:7d:98:f3:4d: b9:8c:85:2a:5c:f6:6f:2a:60:a2:5f:7d:5f:b8:51:78:16:ee: 1f:22:ad:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIVRFikjVT9EBIismtb4zcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwNjA3MDMwMDIzWhcNMjUwNjA4MDMwMDIzWjAzMTEwLwYDVQQD Eyg4YTI2ZTA1OGQ4ZDdiZjUwZTQwYzVlMjIwOWY5NTgyNjFlOGQ0MmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXU4ByHuHhd1Hgrf4bFJqxooVgMj YfbUUGOcHIvSdzb8+jt/zSmbdYa6iF3xr6p2Yz6yYoH30JG0VuA7w+ZvgS17Q5aQ kw5GkIahBqGfAvzOAJ6m4BmBcF7bt5bzN6tonp/sBjgJEZDru1vZS2lUEqWuVjYh hrnA+ancqYpRk988sjvpsJ/jtchAB1A0emoIUu8eQOuklaUlRmudxdCV6RU+Va15 qdP24MTb68Ou6WQwZXzH9FrqsvyelGj9ChTo3LJWL9w169jkWlhDpIyr6iIfXL9/ daI6gaBrAupSxzdWLxewGrtzO1Azc9uRvOUe/YNnCusMfTvUaeb+bKUJYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIom4FjY179Q5AxeIgn5WCYejUL3MB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWULCN4r7 SB3vKgUE/Hlp72sXWLkMqxlDItr3rmM/871NtwChuKcGJTD6YPV7EZ8CzCiV2WEi KZHlwbvW11zVcGdXD34cHAx/xCGJb5ABeasrGh1mOcEh29HuG71YuhAf8xmbXNFz zMs1dEu3zDXcXFfsjepWr7ZU5yUONL9be4qYrurL07bOrqpQGAoHWrE67jSHs7Jr IXdP6684kmriB41OQjMUvF99O4nbtOJbg+EbHJ8QcUUdiW5H051Jw+ycf4TyT1Tq d8XRH8nFXwKqQMzngnG0s9U6A1YYLPngkt7aYqP1aR99mPNNuYyFKlz2bypgol99 X7hReBbuHyKtSA== -----END CERTIFICATE-----Generated at Sat Jun 7 06:39:38 2025 by rpki-client