$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: 6njUFpTkOtfG9lpXQaIthEpahywiDL9UQywFWMOTJNM= Subject key identifier: 2E:70:D8:1B:46:4B:5A:08:0E:65:FB:6A:1B:8C:16:9D:5F:B5:9D:C2 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019A13BB15A6C7686EF9B3E28BA8032BF19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1736 Signing time: Fri 24 Oct 2025 01:00:19 +0000 Manifest this update: Fri 24 Oct 2025 01:00:19 +0000 Manifest next update: Sat 25 Oct 2025 01:00:19 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 52AprETIRbFDUqM46ur0ZcU_kJ8.roa (hash: r7B0mvb9UUSQmten8hxAPFepljFzhrKT4KBjDSQtBTw=) 3: 568PBTNOog5zQd02Gzfw8j53pp0.roa (hash: 9zEg7rD8+zhtCTeBHh1OB7HwhHMIZEI66k67FO3erWc=) 4: 6YeOU-xwRHqJMQtyKmVzLjZmCAM.roa (hash: oPTqGQuFEIoUL5I0HzlZEpKxPvEK6ljihx+tltcKNDI=) 5: 7dayy-ue9GUJpzyclEIimtif3_w.roa (hash: 4JgYJRahEh68+u63kEGGgHtYOlGh91xC0Hb+kdcP4aU=) 6: 9RxTwcsio1S5_RkC0WTrzOMaZhc.roa (hash: 9h7l9iTJhi27U8gTTfYmIzbUUM7p2Wt+DSj4crg7JCc=) 7: Ce0eRLxLAlI4cxE5occdRxJvx1k.roa (hash: tdH5GjSB/LW0PULc/zqg0vc5nhMDtGNzUfHe7tJZQ8w=) 8: EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa (hash: k4j2l8243gZl27loBQC1srNx3SmtQxfanDuXrBBIDpw=) 9: JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa (hash: JfTdIpHmF4T1dIihVESOhyJNGp+NKyB+FhmpQnwIZKg=) 10: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 11: KSrqd-K2qN25PnwAmClxYgD_VwI.roa (hash: R/U3yBT9e4imvw3Tjw/+/dIWqaaKNifNNdmI6TUsVik=) 12: LECXwwOJkYXSvoEkkhVQqcZQMCw.roa (hash: c2nAj2MsaYNhv7IXToz+zt87p0StOKZqVhSYKT3pEAI=) 13: PnKU_Q2HHtCU1pCr_1KaGPkN2ek.roa (hash: GbYc2B1qBjTyAVup6jSWAzMh9yA2HZhkMGLtK25rTiQ=) 14: TSChuoUoxhH4RDl93vItxLbWmjA.roa (hash: Yt5QjTI9IjJMsTBQGdHqIoHSZWBchoO0b+jSiGXzfpY=) 15: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: tjFVBAQov6D3vsI5DRF0oZ07GVtJIjEvn2bg9k8BXqU=) 16: YQ9Y8mt0ihX-1hkt028wgnIveVM.roa (hash: 2Za3dQMpt5hHnoKCpKq9CmdrcwegpUJWhl7wmxiI9U0=) 17: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 18: dn1rb2wCUiJjbUP99kG112Kz0Pg.roa (hash: diw/B/vJL3e9UDmx8mv3lXrrXjVhjfIy0Zaa+4GOCSc=) 19: h-A858ZfddXvJk42E4zciUqkDGo.roa (hash: dyn6NbexTrThIgZ64mOYzwXCatyWxi4d3djRyVn/ZTk=) 20: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 21: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 22: kJU-KgD8cYtkfeivKCJEB0DdEd8.roa (hash: 5IehEg28rjh+Szw0jXY9Pro/E9tT/kZUcz/KhGmkIUc=) 23: qNG0NYBaxNnb4tvED5blrbZaQm4.roa (hash: kx0filtmJdFwdMqR9tMIqBohoW63H61VsrxnAdch0ZQ=) 24: qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa (hash: 4j7w+emJPvjo8IC4c65G1J9dI6AZT4RULSbnACF02rM=) 25: rjAOeGQCTQyMZoRG4Z022m8KN8o.roa (hash: 35P0Nm9Y4NVT17MO0LbHCMl2O9jDGjPVXc264sSYKEY=) 26: schVxcLi_65lH1A2TemMS4xoeKI.roa (hash: G26ZU92J67QU7tCHqdeTryKRkasRzJr5JoJepYvpSa0=) 27: uUi0KofDbqtYMEaXZKuzUf6j_g8.roa (hash: alyYmtkZg04IYls6laYaGC7Xxo8kIqLyOx7CWUJ5vD8=) 28: vI0U7fkAkt3cTATzOlCKhJuroAc.roa (hash: 5B6VWqHRTBuf463R5V8OHEKJoYOEzFD7hCy/PBP0gEw=) 29: vm8G1CJtR8NoqwuLLwSubFgOmS0.roa (hash: lZ9XUGMQa5iMmI7NjUpdLuwQ8xNfL1R8duvU6nNgaek=) 30: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=) 31: wBatYwo8u1aByajgkyhRfdNJP_g.roa (hash: nfoN3wikvs52QiHqhmSnuZg2zLzQrUv+rPJKHtdHMZ0=) 32: wVIN0cBImlfNWFOz4IT7aYaexqE.roa (hash: BV94o+pd1hE2+f5obJYSJgfF2TueBCqdTmVe9yx/Lfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:bb:15:a6:c7:68:6e:f9:b3:e2:8b:a8:03:2b:f1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Oct 24 01:00:19 2025 GMT Not After : Oct 25 01:00:19 2025 GMT Subject: CN=2e70d81b464b5a080e65fb6a1b8c169d5fb59dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:aa:d5:22:2e:83:ea:46:a3:86:c5:29:c6: d0:46:c2:53:34:1f:47:21:57:76:99:13:fb:5c:92: 38:63:1b:1b:22:94:f5:57:66:bb:4c:c5:ec:fe:25: a1:59:d0:37:d9:5c:f8:c6:55:01:13:29:34:5b:96: ea:20:9e:06:24:f4:69:29:2c:e8:17:f0:50:f5:dc: b6:10:3d:10:1a:86:11:88:3b:95:51:86:51:ad:85: 5b:45:b2:39:d9:88:77:c4:92:64:fb:be:65:11:a5: 58:99:41:2f:73:47:da:12:5c:32:ea:22:56:59:a2: 03:37:ca:21:ff:d8:92:6a:ee:d5:1a:9b:4a:15:0f: f7:0b:df:77:c5:f7:57:bc:de:0d:ce:9e:91:fb:54: 8a:bf:cf:2a:a6:71:89:38:69:fb:df:d5:16:cd:c2: 0b:ea:0c:c8:9b:ff:a0:b1:54:88:7b:be:83:b4:b0: ce:6f:d7:23:2d:e3:e8:4d:b5:ef:64:1a:80:cf:bb: 9f:c1:bf:a6:4f:14:61:ff:49:aa:6e:7d:fa:87:28: 81:2f:6c:ef:92:84:a4:d4:9b:82:e7:d2:78:76:8b: 35:d9:20:05:f7:b3:1f:20:7b:e8:80:ec:1c:c6:96: 45:a2:1c:56:91:47:e9:28:29:1a:66:38:ba:1e:f2: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:70:D8:1B:46:4B:5A:08:0E:65:FB:6A:1B:8C:16:9D:5F:B5:9D:C2 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:20:02:6b:62:00:1a:55:53:65:ca:67:e9:e7:ad:2b:d0:42: 45:99:41:19:ee:77:5a:a5:68:08:f8:17:7d:61:f3:7d:80:52: f7:89:33:0e:49:4c:42:c0:12:af:45:a6:0f:2f:2e:69:33:1b: dc:13:e6:03:76:00:77:72:33:19:a2:2a:dd:80:13:a5:b4:b8: b5:0c:0d:40:d1:21:1f:57:d6:1b:fa:86:59:e0:44:aa:6b:f7: d5:4f:c3:93:db:fc:01:92:30:62:7d:a4:57:f3:1a:4a:d0:2f: e0:1b:60:12:bf:46:db:ea:a9:91:0d:5e:54:c0:5e:3e:c1:d6: 8b:dc:e5:24:e8:be:53:f2:91:e3:6a:1b:0f:43:b1:5b:75:98: 1d:e4:63:46:56:cc:2f:07:18:08:3f:6e:12:71:e2:6a:4c:43: fe:1c:5b:d0:85:26:1b:a4:97:6e:4c:89:bb:53:a6:28:70:e4: a7:6f:1d:f9:85:19:1d:d5:1a:bd:ff:cf:ce:33:c5:fb:22:18: 16:da:64:18:87:2f:96:f3:7c:c7:1e:96:6e:df:4b:11:19:5b: f8:dd:fb:24:55:96:c6:c3:2d:c8:2a:2f:59:e3:7e:f7:31:b8: 65:59:8d:48:74:2a:d2:1d:11:d9:57:3b:e4:36:5d:2e:05:dd: 7b:0e:a4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoTuxWmx2hu+bPii6gDK/GeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUxMDI0MDEwMDE5WhcNMjUxMDI1MDEwMDE5WjAzMTEwLwYDVQQD EygyZTcwZDgxYjQ2NGI1YTA4MGU2NWZiNmExYjhjMTY5ZDVmYjU5ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Sq1SIug+pGo4bFKcbQRsJTNB9H IVd2mRP7XJI4YxsbIpT1V2a7TMXs/iWhWdA32Vz4xlUBEyk0W5bqIJ4GJPRpKSzo F/BQ9dy2ED0QGoYRiDuVUYZRrYVbRbI52Yh3xJJk+75lEaVYmUEvc0faElwy6iJW WaIDN8oh/9iSau7VGptKFQ/3C993xfdXvN4Nzp6R+1SKv88qpnGJOGn739UWzcIL 6gzIm/+gsVSIe76DtLDOb9cjLePoTbXvZBqAz7ufwb+mTxRh/0mqbn36hyiBL2zv koSk1JuC59J4dos12SAF97MfIHvogOwcxpZFohxWkUfpKCkaZji6HvKOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5w2BtGS1oIDmX7ahuMFp1ftZ3CMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyACa2IA GlVTZcpn6eetK9BCRZlBGe53WqVoCPgXfWHzfYBS94kzDklMQsASr0WmDy8uaTMb 3BPmA3YAd3IzGaIq3YATpbS4tQwNQNEhH1fWG/qGWeBEqmv31U/Dk9v8AZIwYn2k V/MaStAv4BtgEr9G2+qpkQ1eVMBePsHWi9zlJOi+U/KR42obD0OxW3WYHeRjRlbM LwcYCD9uEnHiakxD/hxb0IUmG6SXbkyJu1OmKHDkp28d+YUZHdUavf/PzjPF+yIY FtpkGIcvlvN8xx6Wbt9LERlb+N37JFWWxsMtyCovWeN+9zG4ZVmNSHQq0h0R2Vc7 5DZdLgXdew6kbg== -----END CERTIFICATE-----Generated at Fri Oct 24 06:09:52 2025 by rpki-client