$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: xIm52GB8IGCfJ8b8C6JRC3YbcQdZ6wE9ne9JZEnj340= Subject key identifier: CB:EB:0B:73:A6:4D:91:29:C2:C5:2D:02:B5:6E:78:37:5D:E5:8E:63 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 0199269FBB29EF22CFA1A16E9F196756DD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 16B3 Signing time: Mon 08 Sep 2025 00:00:26 +0000 Manifest this update: Mon 08 Sep 2025 00:00:26 +0000 Manifest next update: Tue 09 Sep 2025 00:00:26 +0000 Files and hashes: 1: 1-qxQnifpZ2BQG9E1ggTAnXdpfsY.roa (hash: JDbeH00nz1nO40aM8BsSQlmDqUifmFz9Ks0DcZEayBo=) 2: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 3: 568PBTNOog5zQd02Gzfw8j53pp0.roa (hash: 9zEg7rD8+zhtCTeBHh1OB7HwhHMIZEI66k67FO3erWc=) 4: 7dayy-ue9GUJpzyclEIimtif3_w.roa (hash: 4JgYJRahEh68+u63kEGGgHtYOlGh91xC0Hb+kdcP4aU=) 5: 9RxTwcsio1S5_RkC0WTrzOMaZhc.roa (hash: 9h7l9iTJhi27U8gTTfYmIzbUUM7p2Wt+DSj4crg7JCc=) 6: EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa (hash: k4j2l8243gZl27loBQC1srNx3SmtQxfanDuXrBBIDpw=) 7: JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa (hash: JfTdIpHmF4T1dIihVESOhyJNGp+NKyB+FhmpQnwIZKg=) 8: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 9: LECXwwOJkYXSvoEkkhVQqcZQMCw.roa (hash: c2nAj2MsaYNhv7IXToz+zt87p0StOKZqVhSYKT3pEAI=) 10: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: 4zyQ0v3iCHb3qhlUETccu/MHWRkvPb7XsrMu9s6Az6g=) 11: YQ9Y8mt0ihX-1hkt028wgnIveVM.roa (hash: 2Za3dQMpt5hHnoKCpKq9CmdrcwegpUJWhl7wmxiI9U0=) 12: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 13: dtf5jn1XL0F_8aCWrc_4uRDv9gs.roa (hash: BV4prXF6TTzr5R+mC+5My3rta6nIxaii7n4xVFbWwkA=) 14: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 15: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 16: mXtTQ8-mkRh-QrXwglM1XPCYI14.roa (hash: RqF8DGEq8PfJ2vEZrnC5IQtavTWYGlIO1RYwKae4OS8=) 17: qNG0NYBaxNnb4tvED5blrbZaQm4.roa (hash: kx0filtmJdFwdMqR9tMIqBohoW63H61VsrxnAdch0ZQ=) 18: qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa (hash: 4j7w+emJPvjo8IC4c65G1J9dI6AZT4RULSbnACF02rM=) 19: uUi0KofDbqtYMEaXZKuzUf6j_g8.roa (hash: alyYmtkZg04IYls6laYaGC7Xxo8kIqLyOx7CWUJ5vD8=) 20: vm8G1CJtR8NoqwuLLwSubFgOmS0.roa (hash: lZ9XUGMQa5iMmI7NjUpdLuwQ8xNfL1R8duvU6nNgaek=) 21: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=) 22: wBatYwo8u1aByajgkyhRfdNJP_g.roa (hash: nfoN3wikvs52QiHqhmSnuZg2zLzQrUv+rPJKHtdHMZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:9f:bb:29:ef:22:cf:a1:a1:6e:9f:19:67:56:dd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Sep 8 00:00:26 2025 GMT Not After : Sep 9 00:00:26 2025 GMT Subject: CN=cbeb0b73a64d9129c2c52d02b56e78375de58e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:52:66:10:95:32:c5:2b:de:26:aa:67:1f: 5c:98:c2:48:6d:0b:f1:96:c0:d5:91:c0:b0:37:98: fe:c7:c9:28:34:4e:2a:bc:c4:7e:50:d9:dd:40:67: 1e:81:2e:c8:4a:9b:3e:d6:ff:89:1c:e0:9f:b6:fe: b6:b8:58:67:b4:81:92:77:08:8c:7a:59:ee:0b:8b: e9:3c:eb:71:a8:37:26:f0:51:de:58:74:62:91:5d: fc:d2:6d:b2:3f:01:80:6c:3b:1a:a1:a6:c4:7c:c9: 91:6a:b3:c7:c8:96:2b:cf:de:7e:5c:2e:13:36:5c: 1d:ab:13:1d:1e:32:2f:37:45:b5:25:61:fd:de:93: 49:ff:9d:6f:45:69:fe:91:db:bf:a6:be:37:07:b4: 24:f5:f8:02:31:75:9d:fa:be:93:af:ae:13:83:17: a6:10:64:c8:09:59:f4:95:d0:c4:bf:b5:99:a9:07: c8:fe:b2:3e:69:8a:3a:b9:09:bc:cb:6e:84:f7:a0: d2:6b:ec:bc:07:a3:e9:9b:43:00:4a:1e:2f:37:4c: b1:80:4d:cc:0b:7e:dd:1d:e2:ef:09:72:d9:2d:b0: cf:77:77:6e:ed:b5:1a:f9:d7:c6:dc:a4:05:6f:87: a0:82:b4:f1:cc:64:31:5a:0d:93:98:85:ae:cd:49: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EB:0B:73:A6:4D:91:29:C2:C5:2D:02:B5:6E:78:37:5D:E5:8E:63 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:03:a6:c3:94:da:19:9b:0b:b9:c3:a5:f2:c9:b7:f1:5f:de: db:59:54:e2:16:bd:ff:ea:75:cb:ba:00:3b:97:22:eb:a2:c8: eb:0e:a0:09:09:58:d9:81:24:32:3c:05:52:5f:87:65:66:02: 02:90:71:ca:ce:6b:f0:f0:11:c4:39:8d:26:f8:ec:00:e3:40: 18:54:dd:e9:44:ce:d3:15:cb:52:5a:7d:bd:e3:85:1c:03:e9: e9:95:c3:16:7e:16:2d:c2:06:84:d7:b0:2a:8b:c5:c4:e8:63: 6f:2e:9c:66:2d:c9:40:37:46:25:3f:c4:14:5b:a1:ea:01:2f: 4a:50:34:89:b4:6d:07:53:79:a5:46:d0:51:1b:a5:14:f5:9d: e8:35:6b:28:c9:94:fc:fd:6c:6a:98:b5:aa:fd:10:02:58:79: 41:d6:3c:b9:7e:a7:cd:45:2e:1e:af:42:62:d5:72:54:d8:15: 11:37:22:6e:a8:c8:fa:8f:b0:cc:75:79:47:be:95:b8:92:fd: 41:4b:4f:5c:d7:60:84:3d:d5:7e:39:4c:39:d4:58:97:6a:3c: b8:8b:8b:76:78:5e:84:a3:92:e7:eb:7f:22:f7:06:be:e9:e9: dc:f0:ef:0e:96:9c:2b:57:6b:5d:ed:c5:97:73:51:d0:d6:89: ce:a7:c0:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmn7sp7yLPoaFunxlnVt1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwOTA4MDAwMDI2WhcNMjUwOTA5MDAwMDI2WjAzMTEwLwYDVQQD EyhjYmViMGI3M2E2NGQ5MTI5YzJjNTJkMDJiNTZlNzgzNzVkZTU4ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLxSZhCVMsUr3iaqZx9cmMJIbQvx lsDVkcCwN5j+x8koNE4qvMR+UNndQGcegS7ISps+1v+JHOCftv62uFhntIGSdwiM elnuC4vpPOtxqDcm8FHeWHRikV380m2yPwGAbDsaoabEfMmRarPHyJYrz95+XC4T NlwdqxMdHjIvN0W1JWH93pNJ/51vRWn+kdu/pr43B7Qk9fgCMXWd+r6Tr64Tgxem EGTICVn0ldDEv7WZqQfI/rI+aYo6uQm8y26E96DSa+y8B6Ppm0MASh4vN0yxgE3M C37dHeLvCXLZLbDPd3du7bUa+dfG3KQFb4eggrTxzGQxWg2TmIWuzUltqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvrC3OmTZEpwsUtArVueDdd5Y5jMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwOmw5Ta GZsLucOl8sm38V/e21lU4ha9/+p1y7oAO5ci66LI6w6gCQlY2YEkMjwFUl+HZWYC ApBxys5r8PARxDmNJvjsAONAGFTd6UTO0xXLUlp9veOFHAPp6ZXDFn4WLcIGhNew KovFxOhjby6cZi3JQDdGJT/EFFuh6gEvSlA0ibRtB1N5pUbQURulFPWd6DVrKMmU /P1sapi1qv0QAlh5QdY8uX6nzUUuHq9CYtVyVNgVETcibqjI+o+wzHV5R76VuJL9 QUtPXNdghD3VfjlMOdRYl2o8uIuLdnhehKOS5+t/IvcGvunp3PDvDpacK1drXe3F l3NR0NaJzqfAVw== -----END CERTIFICATE-----Generated at Mon Sep 8 08:41:20 2025 by rpki-client