$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: /Dl6gF05E15ieIfknA/rNMW8YpaypJKUY4+yhQMxj1k= Subject key identifier: 3C:F8:83:84:DD:18:99:D3:EA:A4:2F:54:C8:A3:B2:08:8C:E6:56:C6 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 01991C1CC0877AF5F6F45C07B5715A7DC1D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0A7C Signing time: Fri 05 Sep 2025 23:01:10 +0000 Manifest this update: Fri 05 Sep 2025 23:01:10 +0000 Manifest next update: Sat 06 Sep 2025 23:01:10 +0000 Files and hashes: 1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: 1OvsLLMEQlEi5IHBtu6QrEA0kNEN6NXE4q/JzOYFja8=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) 17: wT6-Zw7AGd86-fxWbGmTOHpfarE.roa (hash: sOi75jBrZgAaSe/N5e1cUDcPkkUhhPirWKuRm8pL5uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:1c:c0:87:7a:f5:f6:f4:5c:07:b5:71:5a:7d:c1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Sep 5 23:01:10 2025 GMT Not After : Sep 6 23:01:10 2025 GMT Subject: CN=3cf88384dd1899d3eaa42f54c8a3b2088ce656c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:44:b9:52:3c:98:64:a0:f3:5d:42:8a:5a: 80:86:c1:be:24:a1:43:95:04:b5:bd:ab:97:f0:ec: b4:e9:4d:3a:3c:9d:c0:9e:06:a6:66:be:79:55:1a: f1:04:9a:94:2e:65:47:17:ac:5c:ac:a2:75:e3:b4: a5:41:72:57:8d:e3:07:94:5c:af:5b:01:8c:de:cc: a2:df:22:43:cc:f0:52:85:79:58:f0:48:ed:ad:22: 8a:96:c0:6e:93:8c:0b:3d:fc:83:2d:8c:b2:29:f2: 27:37:74:0c:e5:36:66:25:f1:42:b4:1b:25:72:a1: 6b:0f:88:8e:3a:5f:2d:0a:98:e0:fe:2d:e4:db:2b: d2:b4:1f:26:2e:24:31:ae:39:be:00:0b:4f:41:02: cb:f0:1e:37:7e:10:f8:d5:8c:60:cd:a1:d3:1a:a1: 3c:ee:12:f3:ae:d5:ed:37:39:3e:ce:d3:b2:cd:91: 10:d6:82:38:b9:a9:c1:4f:69:ac:f4:9d:5c:1c:58: 1a:f3:b9:06:52:de:12:56:4f:e5:94:3d:a8:f8:1f: f0:c5:34:e5:6a:9c:4e:86:93:83:71:3c:2f:19:26: 56:77:bd:1b:7a:33:4f:08:dd:2a:23:33:e0:38:69: d4:5f:76:d6:f9:5f:0e:aa:81:0b:c1:3a:32:50:18: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F8:83:84:DD:18:99:D3:EA:A4:2F:54:C8:A3:B2:08:8C:E6:56:C6 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fc:ce:13:0c:23:c6:ed:43:c9:7c:75:96:b6:de:0a:15:6c: 78:0d:dd:62:7c:48:a1:60:ff:04:28:3d:12:34:1e:57:17:19: a5:91:48:5a:18:70:0e:dc:61:79:cc:33:71:ad:a1:fd:ce:9b: 3d:ce:14:63:3c:34:65:c8:15:76:23:e6:6c:c8:38:84:7b:7f: 16:16:b3:b5:94:43:8e:0d:ad:30:ae:58:9f:ce:f8:cc:9e:fe: 0e:a8:89:b6:91:0e:18:42:31:24:2a:f0:e4:5d:16:3f:bb:4f: a1:a6:cd:67:eb:22:c2:49:ff:7e:d8:dd:21:ef:b6:7b:3f:2a: d9:f2:1b:96:cb:e2:61:5f:71:b1:67:39:1e:bf:8c:31:61:e7: db:c9:91:3a:73:ff:e3:e2:ee:1b:ad:7f:90:85:52:5c:70:99: 5d:c6:51:7f:a2:95:9e:b3:91:4e:bf:23:ae:65:63:27:bf:64: 27:95:fb:cd:51:48:ae:a4:15:f5:4f:ee:0a:1d:79:c0:de:03: a3:9c:38:dd:75:be:c1:37:40:a1:2d:29:7e:9b:a8:f8:8e:12: 71:aa:20:7b:41:56:fb:e5:e7:7c:6b:e8:c5:1f:99:a1:23:d2: f6:80:86:5c:8a:43:a1:54:df:e3:79:61:66:5e:a7:1e:87:4a: a0:e3:1e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcHMCHevX29FwHtXFafcHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwOTA1MjMwMTEwWhcNMjUwOTA2MjMwMTEwWjAzMTEwLwYDVQQD EygzY2Y4ODM4NGRkMTg5OWQzZWFhNDJmNTRjOGEzYjIwODhjZTY1NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FEuVI8mGSg811CilqAhsG+JKFD lQS1vauX8Oy06U06PJ3AngamZr55VRrxBJqULmVHF6xcrKJ147SlQXJXjeMHlFyv WwGM3syi3yJDzPBShXlY8EjtrSKKlsBuk4wLPfyDLYyyKfInN3QM5TZmJfFCtBsl cqFrD4iOOl8tCpjg/i3k2yvStB8mLiQxrjm+AAtPQQLL8B43fhD41YxgzaHTGqE8 7hLzrtXtNzk+ztOyzZEQ1oI4uanBT2ms9J1cHFga87kGUt4SVk/llD2o+B/wxTTl apxOhpODcTwvGSZWd70bejNPCN0qIzPgOGnUX3bW+V8OqoELwToyUBhh6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz4g4TdGJnT6qQvVMijsgiM5lbGMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvzOEwwj xu1DyXx1lrbeChVseA3dYnxIoWD/BCg9EjQeVxcZpZFIWhhwDtxhecwzca2h/c6b Pc4UYzw0ZcgVdiPmbMg4hHt/FhaztZRDjg2tMK5Yn874zJ7+DqiJtpEOGEIxJCrw 5F0WP7tPoabNZ+siwkn/ftjdIe+2ez8q2fIblsviYV9xsWc5Hr+MMWHn28mROnP/ 4+LuG61/kIVSXHCZXcZRf6KVnrORTr8jrmVjJ79kJ5X7zVFIrqQV9U/uCh15wN4D o5w43XW+wTdAoS0pfpuo+I4Scaoge0FW++XnfGvoxR+ZoSPS9oCGXIpDoVTf43lh Zl6nHodKoOMeTw== -----END CERTIFICATE-----Generated at Sat Sep 6 05:01:54 2025 by rpki-client