$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: g0w9j5CjXzKsaa7WvNm0b7DJ11Fdb1bjpftHqst6VEc= Subject key identifier: 55:EA:C6:F9:53:2D:7E:3B:6E:6D:78:89:70:6F:6B:1A:23:F1:B9:C5 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 0197462FD0E69CEF952E258B925665A85B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 15AF Signing time: Fri 06 Jun 2025 17:00:27 +0000 Manifest this update: Fri 06 Jun 2025 17:00:27 +0000 Manifest next update: Sat 07 Jun 2025 17:00:27 +0000 Files and hashes: 1: 0I7cwOW3xH34MnyarOAbNOSm9yU.roa (hash: jtEuvpe2xUUjrNu9ihVIBPIqR8sLMTsMYiU0wFM9u4w=) 2: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 3: 7Ms2re6yrcU_4KWkqgeF0A-37o0.roa (hash: 2PS3jmQMAVO4d5GHcps6+eKUgMjnqVMn7yyAAVL6E+c=) 4: AGurEqahuQXSYhB8cXum_Yv4Rd4.roa (hash: 9mstL9tbyGVVJbVNg56M6jiduKmLjfDZJdQ9Gx6+gkY=) 5: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=) 6: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=) 7: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 8: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (hash: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=) 9: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: AQ/z+ladWCOMCmIAHHx3/cZLpnNb/fc0yoimtoKmvqE=) 10: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 11: aUwME-OEW2tfuy8IUz8xO9RJ9VA.roa (hash: TJpr115B55iHu7xXQQMd6VR9p+/zOYhE8FX2JwI2PiU=) 12: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=) 13: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 14: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 15: ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa (hash: Ba9QsIqkvrtmVCQkpDkO0vZ9nFVhfN+UrHpeojqVkNI=) 16: qQ7qZcsRXtjJvwERncTyOZfQz3Q.roa (hash: mqEcMXW4dbXayMYmxFVMUymF7f19p03bN3IauxDIgdw=) 17: vn3_sUEKIuyfwPbmP6Ghdkym3x8.roa (hash: 2yCzjx3NZvv5+ZPTaYqAIW7pi/CmVDJQBAJTexRz+V8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:2f:d0:e6:9c:ef:95:2e:25:8b:92:56:65:a8:5b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jun 6 17:00:27 2025 GMT Not After : Jun 7 17:00:27 2025 GMT Subject: CN=55eac6f9532d7e3b6e6d7889706f6b1a23f1b9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:a1:90:b4:2f:db:c0:9b:2f:7a:70:54:7c: 5f:b3:83:d0:b2:2b:99:00:48:70:62:07:fb:8c:cf: b6:8e:8c:c0:f5:5c:98:bf:64:41:11:6d:e9:2d:f0: 5f:fe:80:cf:cd:c0:a1:bd:7e:4a:c7:ef:cc:a8:20: 47:88:28:1a:1f:99:c4:10:e5:d9:c7:47:b4:28:79: 16:3e:90:4c:5c:ba:a8:c5:99:00:1a:4a:a2:b9:45: ce:d3:90:22:ea:02:d8:8d:50:69:45:47:ed:45:a9: fa:8e:01:d7:5c:c1:e2:d9:45:8e:7b:64:e7:de:5b: 25:cb:0e:09:6f:0b:44:69:d7:5d:82:5d:06:f1:57: ac:c2:51:aa:cb:d9:c6:67:c1:ac:1a:4b:97:1d:72: d5:42:8e:24:60:9c:18:55:75:42:d2:00:4d:7f:04: c3:70:92:a2:00:c3:87:b4:bd:20:13:6f:2f:3e:63: db:6b:de:36:34:5a:3f:ed:7b:93:8c:d6:27:a7:b5: 40:79:f0:c3:a1:b4:46:41:26:6c:3d:91:3b:aa:8b: 7b:a8:8d:4d:f2:8b:e1:69:6d:b2:11:01:6b:e5:f9: 4e:f4:dd:fc:89:0d:87:2d:be:0f:72:84:16:a8:62: 85:a5:68:b1:23:57:84:bc:0c:8b:9b:bb:80:a2:45: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EA:C6:F9:53:2D:7E:3B:6E:6D:78:89:70:6F:6B:1A:23:F1:B9:C5 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bf:5a:eb:02:2f:35:8e:6c:8c:13:dc:01:86:22:f8:00:ac: 5a:2d:86:ce:b5:a9:f6:12:63:e6:42:76:c3:86:c2:ef:9d:0d: b9:5b:c6:73:53:2f:30:dc:b2:ef:ae:e8:43:4f:80:e3:26:c5: 27:20:4e:8b:9d:3e:55:60:9b:db:f1:34:58:88:6d:93:11:fb: 11:42:aa:46:f1:c2:1a:a6:14:2b:d1:62:53:66:e8:31:33:d9: cf:5f:55:76:23:54:0f:d7:95:be:01:42:90:a8:88:b7:8c:3a: 21:d2:9f:bf:52:49:d3:e9:b6:0d:51:6e:ab:1f:ab:1a:e8:3a: d4:13:67:e0:0e:d8:4f:b4:a6:64:d2:05:76:82:a5:bb:76:df: 6a:1d:ef:39:cc:ab:45:a3:3a:46:bd:14:6e:55:e0:a3:8f:55: 4b:ba:70:2f:ee:45:7b:73:70:07:f9:29:b6:02:69:16:79:0e: 66:9a:e2:4e:9b:5c:c2:94:e0:9a:91:a8:6a:4a:f5:d5:7e:a4: 3e:d0:c3:3e:0b:d0:22:f7:c1:92:3b:d0:3a:14:eb:fa:8d:9a: 8e:5d:fe:86:96:b0:8f:d6:56:e4:b8:8c:6d:a8:e8:5f:6e:80: 67:85:b1:5f:b8:ec:fa:88:18:34:29:80:e9:8f:e7:62:98:79: 8a:5f:5b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGL9DmnO+VLiWLklZlqFtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwNjA2MTcwMDI3WhcNMjUwNjA3MTcwMDI3WjAzMTEwLwYDVQQD Eyg1NWVhYzZmOTUzMmQ3ZTNiNmU2ZDc4ODk3MDZmNmIxYTIzZjFiOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf+hkLQv28CbL3pwVHxfs4PQsiuZ AEhwYgf7jM+2jozA9VyYv2RBEW3pLfBf/oDPzcChvX5Kx+/MqCBHiCgaH5nEEOXZ x0e0KHkWPpBMXLqoxZkAGkqiuUXO05Ai6gLYjVBpRUftRan6jgHXXMHi2UWOe2Tn 3lslyw4JbwtEadddgl0G8VeswlGqy9nGZ8GsGkuXHXLVQo4kYJwYVXVC0gBNfwTD cJKiAMOHtL0gE28vPmPba942NFo/7XuTjNYnp7VAefDDobRGQSZsPZE7qot7qI1N 8ovhaW2yEQFr5flO9N38iQ2HLb4PcoQWqGKFpWixI1eEvAyLm7uAokVagwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXqxvlTLX47bm14iXBvaxoj8bnFMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE79a6wIv NY5sjBPcAYYi+ACsWi2GzrWp9hJj5kJ2w4bC750NuVvGc1MvMNyy767oQ0+A4ybF JyBOi50+VWCb2/E0WIhtkxH7EUKqRvHCGqYUK9FiU2boMTPZz19VdiNUD9eVvgFC kKiIt4w6IdKfv1JJ0+m2DVFuqx+rGug61BNn4A7YT7SmZNIFdoKlu3bfah3vOcyr RaM6Rr0UblXgo49VS7pwL+5Fe3NwB/kptgJpFnkOZpriTptcwpTgmpGoakr11X6k PtDDPgvQIvfBkjvQOhTr+o2ajl3+hpawj9ZW5LiMbajoX26AZ4WxX7js+ogYNCmA 6Y/nYph5il9bXA== -----END CERTIFICATE-----Generated at Sat Jun 7 02:50:27 2025 by rpki-client