$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: vMHvwgaXjb6Gh2WO5StwzeKo7ovUpaQuYT0TUAqw7L0= Subject key identifier: 73:C1:E6:CA:97:72:C1:2F:69:DB:5C:AF:CB:4F:43:33:E7:25:81:7D Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 01991D66446614BEB5B16371E3FCC5828628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 087C Signing time: Sat 06 Sep 2025 05:01:05 +0000 Manifest this update: Sat 06 Sep 2025 05:01:05 +0000 Manifest next update: Sun 07 Sep 2025 05:01:05 +0000 Files and hashes: 1: 5zKqr6UDqGwikI9jCkgboh0BQd4.roa (hash: L9SiZv7/wPoH1cUSkcCw00SZkLD8nXCQG8Qy1hpNlK0=) 2: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 3: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 4: GXq52zortkTMXamzVUBLy_xGpNw.roa (hash: cyICPHidNSQcy/ecKrJOg/A7bnSndME430MzJ2HxoSw=) 5: GuJTwzm1i-7D4adjm8mULrOYaq0.roa (hash: 3r4T03hLrzWk88lcCqTjdcMIjI0BRSFG1+Vy7MM2Txw=) 6: HmaBq20Ai-2jt3GKPD_-ROKj49Y.roa (hash: gSo5KfhPovPTAVY7PFwBWRlcgqGnF2FyomzYepsvdqA=) 7: HpOi7c_S_v8OgGfAcW8YhSlJRVk.roa (hash: CM7jTteVy3XFQV9Gw/Amlvv4uEMdN4ootFhXdwUocaA=) 8: L_uBncq6JPrhD07DEJ6xBAuvmUM.roa (hash: 7oHQZcP91VAepicxLsrLYdifXbG7hBNRiCty5f4IKcc=) 9: Rv56JbM9B0QRW871yiTV-6FdpRA.roa (hash: WXhKSn8R39elIT0wpsiUNOwPTK9oHy/wkiqB/Sxv7nI=) 10: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 11: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: T2ONBdXrdxCp/eT0hM0QgWDn5dyqKYulKaYCtMP48Ik=) 12: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 13: _Up4fhroZtsg1OwjiYrmFdMRj6U.roa (hash: etl7dmO4m2JhF4wBa/nmGf1/UIX18YQL5hPl0SJ5uS8=) 14: pJ41Ot1o_TJe-Ld5lhAGMTRexpU.roa (hash: QdVrmEsEXTUslsRRUHKRoORcqw7vIHESdNEilK3tJaU=) 15: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) 16: t4KmAsN3n5hvYH7SrJ3ol5Me5m4.roa (hash: MXA7Vri5dzrq8tShc6Jw5y5UGeZgcbY1ukge4h+UeLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:66:44:66:14:be:b5:b1:63:71:e3:fc:c5:82:86:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Sep 6 05:01:05 2025 GMT Not After : Sep 7 05:01:05 2025 GMT Subject: CN=73c1e6ca9772c12f69db5cafcb4f4333e725817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:b5:c7:21:04:a2:f5:8f:b1:d5:81:60:72: 0d:00:49:05:c5:87:f5:b9:87:ea:5f:77:50:c6:7b: 5c:c1:18:e7:40:bf:4c:2c:c1:e4:8c:fd:01:bb:fd: ea:14:2a:9a:2e:00:11:9e:f3:64:1f:ae:2f:15:91: ff:1a:a1:d2:99:c0:2e:fd:82:90:c8:c4:41:ac:d6: 19:04:2e:c4:86:e8:7d:bc:f3:fd:34:ba:be:8a:b1: 0c:4e:d5:13:c5:5d:1b:86:f0:51:01:a9:86:a7:92: d6:dd:a6:2f:56:7e:00:e1:58:bf:28:38:af:5f:fc: 23:57:ef:9e:80:87:1a:d3:91:69:5e:de:da:98:90: f6:76:58:e1:07:48:24:c8:f2:24:05:be:38:38:58: c9:70:fd:4d:07:d2:41:13:bf:9a:d1:7d:f5:ff:77: 55:a0:17:a3:d8:b5:19:f1:5e:ba:cb:03:7e:71:8c: 10:10:13:44:72:95:e0:1e:1b:e8:0a:44:c7:f9:bd: 1b:bb:19:8a:7d:16:02:61:27:ba:19:60:7d:4b:7c: 6a:b9:6c:35:4d:2e:b9:23:cb:12:34:56:3f:d4:20: cd:9a:02:02:33:18:a7:d2:24:c6:74:42:97:f5:ba: 21:3a:64:b7:2b:d7:b5:d7:ca:51:8f:f4:13:07:8c: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C1:E6:CA:97:72:C1:2F:69:DB:5C:AF:CB:4F:43:33:E7:25:81:7D X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b4:57:5b:e8:7c:04:af:08:35:dc:95:cc:4d:ac:9a:c1:56: 6b:f3:29:0f:53:51:1d:21:9e:b9:79:ee:e7:7f:9b:45:ad:c4: f0:05:c0:5c:19:ab:46:1c:6a:7a:40:9e:1f:63:c4:39:85:13: c2:bc:aa:2d:9e:d6:f6:40:d4:78:61:71:d4:b3:a4:63:cc:3e: 6e:45:ba:55:56:7a:bb:d6:cf:11:8c:76:72:3a:12:6d:68:3f: de:10:28:3f:ea:1e:61:fd:91:94:0c:ed:db:d0:fe:aa:e1:f1: e0:84:db:34:17:8e:54:30:9e:a1:81:2a:ef:ee:22:cf:03:c9: 7b:dc:35:e1:45:1a:12:d1:fd:0e:6c:26:ed:a6:a3:0c:5f:7e: 68:9f:fe:0e:43:e8:14:ed:d4:31:fb:39:d3:75:72:0b:fa:75: a1:a9:94:0d:6f:23:2b:ed:42:42:1d:0c:e2:27:2e:70:df:4c: ad:d0:69:81:a5:eb:2f:f5:f0:e6:75:25:e8:88:d3:82:fb:52: 43:bf:2d:64:27:c5:6e:37:4d:ae:90:0b:97:ae:39:d4:50:f6: 89:c8:5b:cf:c5:f0:1e:1a:74:df:77:41:69:4d:b4:fc:1f:48: e2:df:c0:2d:80:e7:cb:b9:28:07:e2:45:e0:db:25:97:3a:9d: d4:23:83:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkdZkRmFL61sWNx4/zFgoYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUwOTA2MDUwMTA1WhcNMjUwOTA3MDUwMTA1WjAzMTEwLwYDVQQD Eyg3M2MxZTZjYTk3NzJjMTJmNjlkYjVjYWZjYjRmNDMzM2U3MjU4MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV21xyEEovWPsdWBYHINAEkFxYf1 uYfqX3dQxntcwRjnQL9MLMHkjP0Bu/3qFCqaLgARnvNkH64vFZH/GqHSmcAu/YKQ yMRBrNYZBC7Ehuh9vPP9NLq+irEMTtUTxV0bhvBRAamGp5LW3aYvVn4A4Vi/KDiv X/wjV++egIca05FpXt7amJD2dljhB0gkyPIkBb44OFjJcP1NB9JBE7+a0X31/3dV oBej2LUZ8V66ywN+cYwQEBNEcpXgHhvoCkTH+b0buxmKfRYCYSe6GWB9S3xquWw1 TS65I8sSNFY/1CDNmgICMxin0iTGdEKX9bohOmS3K9e118pRj/QTB4y5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPB5sqXcsEvadtcr8tPQzPnJYF9MB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrRXW+h8 BK8INdyVzE2smsFWa/MpD1NRHSGeuXnu53+bRa3E8AXAXBmrRhxqekCeH2PEOYUT wryqLZ7W9kDUeGFx1LOkY8w+bkW6VVZ6u9bPEYx2cjoSbWg/3hAoP+oeYf2RlAzt 29D+quHx4ITbNBeOVDCeoYEq7+4izwPJe9w14UUaEtH9Dmwm7aajDF9+aJ/+DkPo FO3UMfs503VyC/p1oamUDW8jK+1CQh0M4icucN9MrdBpgaXrL/Xw5nUl6IjTgvtS Q78tZCfFbjdNrpALl6451FD2ichbz8XwHhp033dBaU20/B9I4t/ALYDny7koB+JF 4Nsllzqd1CODQg== -----END CERTIFICATE-----Generated at Sat Sep 6 12:50:55 2025 by rpki-client