$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: iG0yIo5haJ9D8bpUEF0raNTzHfEqbn+wEUVTUuKYDcI= Subject key identifier: C4:25:71:67:0B:D4:BA:38:D1:13:B4:DB:BD:AC:DB:60:B6:EA:77:46 Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 019A0E5E08F56A4C7F7662278169B50E4B69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 0905 Signing time: Thu 23 Oct 2025 00:00:34 +0000 Manifest this update: Thu 23 Oct 2025 00:00:34 +0000 Manifest next update: Fri 24 Oct 2025 00:00:34 +0000 Files and hashes: 1: 2rSo3-q09N7iB7jaYOjneDrv5u0.roa (hash: SeBUuABk516SvykaHeAgwtcJvEimuVjuj4HjynLJdB4=) 2: 7LJP4TTrnOvYHrxDIcD68WvMpkk.roa (hash: lLcekHLAvj7EJiZGkNr9eVZ0bS3xvv53hGQkkk7vZH0=) 3: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 5: JP20HQEng-usG2Tg4OvQmMsT8lE.roa (hash: 3rAazc1ah93oj3YYeUuAqyDzX9FMmIEaFnXDdVjLfD0=) 6: RcvJDa-cbOmIaa4og35Ma3bmLs4.roa (hash: GGKEWRmYEZ5B7wJ/8LINfgpwU0+7mRGdZ5NWQrU75S4=) 7: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 8: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: WeH9mKVi8UK637QPbl5F3qV8LyizgtYZt1fbtExi7Z4=) 9: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 10: bfGAioHYnVCwURtmCUj955sCQiY.roa (hash: LAys+jZEOLTjTbxBgUViTiDI40ywquJv6pzZYNrFeD0=) 11: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) 12: sshGfE0PHQJIsMjWQ6xCwAfL9ss.roa (hash: NRl6+hvMuRUovTUsdUnT3sLoBJp473sUMroon6ol0SE=) 13: t4KmAsN3n5hvYH7SrJ3ol5Me5m4.roa (hash: MXA7Vri5dzrq8tShc6Jw5y5UGeZgcbY1ukge4h+UeLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0e:5e:08:f5:6a:4c:7f:76:62:27:81:69:b5:0e:4b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Oct 23 00:00:34 2025 GMT Not After : Oct 24 00:00:34 2025 GMT Subject: CN=c42571670bd4ba38d113b4dbbdacdb60b6ea7746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:9a:7f:6d:ea:62:c0:d3:db:8b:56:d3:86: 82:99:39:3b:ce:31:c0:c3:8c:fd:36:f7:02:99:67: 1c:c3:79:c1:ff:e1:22:52:66:25:ec:3e:fd:c9:ed: 52:e5:f4:8e:4e:83:3a:e5:a5:43:ff:f2:79:8e:a0: 80:8b:7d:37:bd:c2:f6:3a:9d:f4:ef:d7:87:1a:61: 8b:d6:8b:4f:f3:a6:ec:4d:0a:9c:bc:b5:8a:be:a8: dd:a0:53:1e:db:d3:70:a5:65:ae:f5:62:36:b8:d6: ef:62:6a:ee:33:33:10:60:a1:27:5e:67:0f:2a:77: 4f:56:fe:8d:10:26:dd:8a:08:0c:19:ed:53:fb:67: a3:12:c0:1f:9f:89:e5:f6:55:be:0c:31:de:dd:20: 68:04:e0:57:03:57:65:57:8f:53:d0:47:0e:e8:40: c2:fe:84:90:3c:85:8a:79:22:99:26:60:d4:2d:d2: 38:12:2e:3e:12:51:52:47:cd:2e:98:8c:df:a3:39: 20:95:01:86:90:b2:01:f6:da:d3:d4:4e:b4:76:a8: ea:65:fa:0d:b1:5f:c7:ce:27:9c:4b:d1:ef:56:28: be:c3:f6:f5:4a:8b:e6:b2:6e:5f:52:7f:95:8c:26: dd:b3:4f:71:6f:b0:05:b0:d4:58:af:d6:c8:13:fd: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:25:71:67:0B:D4:BA:38:D1:13:B4:DB:BD:AC:DB:60:B6:EA:77:46 X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:51:e0:01:2c:ca:62:aa:ec:57:60:88:ec:4d:8d:0c:a4:11: af:ce:4a:da:0e:5d:57:5b:08:51:a1:d8:49:53:7b:b2:68:6d: 02:92:30:48:17:08:18:74:0e:a5:f7:17:16:b4:3c:8c:46:72: 24:d3:e4:8f:9f:97:1a:34:56:35:29:03:c2:03:a4:5d:a9:59: a0:a7:ad:23:91:67:17:26:84:5d:6c:76:b8:ad:94:0d:b1:ab: ec:3d:b8:d2:34:38:25:aa:0a:60:8b:84:e8:53:8f:9c:1a:a4: bd:c1:8d:b7:be:85:3f:be:5d:61:fa:07:bb:45:ad:49:a6:43: 60:eb:cf:01:50:95:89:ee:a5:48:78:5a:6c:f2:a2:61:32:36: 63:89:de:48:44:9e:d9:cd:1a:02:5b:a8:3a:be:61:76:99:d1: ad:7d:73:61:6b:1b:4f:61:45:dd:b1:ac:df:cd:5b:5d:5b:e0: bd:c4:a2:5f:3c:e3:7a:33:ff:56:b6:0a:2e:46:5c:65:93:37: 96:4c:4b:66:6f:ef:db:c3:4c:4a:09:11:ef:3a:e4:b6:ce:c7: 06:c3:f9:a3:f9:7c:95:49:50:84:0c:05:98:ca:4c:72:17:8e: f0:e4:7a:f0:4a:f9:7a:50:fe:ad:71:3b:bf:ca:1f:06:33:c0: b6:d8:1b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoOXgj1akx/dmIngWm1DktpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUxMDIzMDAwMDM0WhcNMjUxMDI0MDAwMDM0WjAzMTEwLwYDVQQD EyhjNDI1NzE2NzBiZDRiYTM4ZDExM2I0ZGJiZGFjZGI2MGI2ZWE3NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt42af23qYsDT24tW04aCmTk7zjHA w4z9NvcCmWccw3nB/+EiUmYl7D79ye1S5fSOToM65aVD//J5jqCAi303vcL2Op30 79eHGmGL1otP86bsTQqcvLWKvqjdoFMe29NwpWWu9WI2uNbvYmruMzMQYKEnXmcP KndPVv6NECbdiggMGe1T+2ejEsAfn4nl9lW+DDHe3SBoBOBXA1dlV49T0EcO6EDC /oSQPIWKeSKZJmDULdI4Ei4+ElFSR80umIzfozkglQGGkLIB9trT1E60dqjqZfoN sV/HziecS9HvVii+w/b1Sovmsm5fUn+VjCbds09xb7AFsNRYr9bIE/2q2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQlcWcL1Lo40RO0272s22C26ndGMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilHgASzK YqrsV2CI7E2NDKQRr85K2g5dV1sIUaHYSVN7smhtApIwSBcIGHQOpfcXFrQ8jEZy JNPkj5+XGjRWNSkDwgOkXalZoKetI5FnFyaEXWx2uK2UDbGr7D240jQ4JaoKYIuE 6FOPnBqkvcGNt76FP75dYfoHu0WtSaZDYOvPAVCVie6lSHhabPKiYTI2Y4neSESe 2c0aAluoOr5hdpnRrX1zYWsbT2FF3bGs381bXVvgvcSiXzzjejP/VrYKLkZcZZM3 lkxLZm/v28NMSgkR7zrkts7HBsP5o/l8lUlQhAwFmMpMcheO8OR68Er5elD+rXE7 v8ofBjPAttgb9A== -----END CERTIFICATE-----Generated at Thu Oct 23 07:57:14 2025 by rpki-client