$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft File: Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json) Hash identifier: vN8jxfDQ7FRb0SWoO22r674RPVZ8Ept9PoYjOAmPWhs= Subject key identifier: CC:C0:4E:CB:F1:DA:C6:69:61:BD:BB:B3:9D:EB:98:50:D1:71:67:F4 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 01988A3319B894EA4A62BE4A03A964086B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft Manifest number: 11F0 Signing time: Fri 08 Aug 2025 15:01:01 +0000 Manifest this update: Fri 08 Aug 2025 15:01:01 +0000 Manifest next update: Sat 09 Aug 2025 15:01:01 +0000 Files and hashes: 1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=) 2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=) 3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=) 4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=) 5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=) 6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=) 7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=) 8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=) 9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=) 10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=) 11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: 8jOXixgwlHu6d59k1u8Xxfu6LMAoQcmTFRN5CAti0+A=) 12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=) 13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=) 14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=) 15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=) 16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=) 17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=) 18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=) 19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=) 20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=) 21: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=) 22: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=) 23: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=) 24: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=) 25: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8a:33:19:b8:94:ea:4a:62:be:4a:03:a9:64:08:6b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Aug 8 15:01:01 2025 GMT Not After : Aug 9 15:01:01 2025 GMT Subject: CN=ccc04ecbf1dac66961bdbbb39deb9850d17167f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f4:82:62:b8:45:97:5d:bb:db:49:30:05:29: fc:71:6d:74:b9:fc:cc:87:e6:14:39:f1:c6:01:ec: e6:95:ce:94:75:8a:8e:6b:15:a9:90:6f:3d:e0:fe: bd:34:aa:0f:4e:4a:bf:39:ad:9b:75:05:ac:9a:ca: 66:3a:08:87:90:82:0b:64:8d:e3:06:1d:d1:d9:f9: 57:24:da:e8:8b:c4:f7:18:3f:4b:e0:57:08:84:99: 93:45:82:ef:93:9c:45:7e:a3:66:e0:56:1b:a7:3a: ce:d5:cc:01:a2:a0:ab:40:c3:17:de:0d:a6:ad:ca: 90:ba:b4:70:38:9f:25:a3:fa:fb:ad:8e:07:69:37: 57:3d:90:16:2d:9a:58:d0:44:5c:de:95:e0:6f:1a: 35:34:11:ac:ea:5b:b4:5f:d7:29:33:75:a5:0c:a1: db:aa:3d:3f:d5:5c:41:b5:36:74:5f:27:71:82:17: ac:e7:b4:cb:d6:83:80:55:9f:b1:dd:b5:ad:dd:6b: eb:e3:8a:71:d9:a1:0d:97:83:93:52:a3:d0:24:ea: d4:97:13:ac:d6:b0:fe:c0:81:80:b2:1c:08:cf:ad: a7:dc:4f:7d:00:6a:dc:fb:e0:da:23:21:e5:37:34: 49:d0:bb:7b:c2:ac:f2:ad:ae:26:f7:ed:bc:e6:87: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C0:4E:CB:F1:DA:C6:69:61:BD:BB:B3:9D:EB:98:50:D1:71:67:F4 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:a3:2d:ca:c5:ea:0e:2b:58:37:38:4f:3d:24:49:e8:cd: 0a:ef:60:4b:6b:9f:f3:73:a6:65:de:f1:28:92:22:13:cb:df: 11:e0:04:60:34:66:82:d2:af:65:21:17:f3:db:b3:39:e7:fa: 8c:56:f8:7b:2e:50:9d:30:b8:d1:9f:eb:25:d3:ff:da:45:78: 20:3c:db:0c:c4:52:79:d6:f9:bb:8e:c0:55:1a:c9:e4:cd:78: 27:86:44:6d:06:74:d4:0e:ad:9f:c5:26:6c:ce:f5:3b:e2:30: 27:16:1b:c6:24:5b:4d:b3:6e:ea:1f:92:f5:cb:ac:98:e0:1f: bb:0a:63:19:8c:30:eb:b0:27:49:5a:9f:37:f7:5e:08:a6:e0: a7:dd:d5:be:10:a3:33:9d:bd:79:c8:dd:1a:98:f6:61:fe:a5: a9:36:94:5c:da:da:b0:99:83:a4:0f:19:1b:0c:a3:0a:dc:59: f7:3c:63:6a:03:90:4d:ca:80:53:06:e5:06:1e:b5:b8:98:60: 52:54:2c:09:22:01:a4:3b:52:3f:41:7d:01:2c:f5:e0:1e:e9: 79:33:f2:55:b9:ea:ca:bb:5e:51:3c:00:c2:8b:f1:64:33:1f: 20:f4:44:00:c1:fc:a4:52:d6:4c:66:78:c3:fd:e7:cd:17:8c: f3:cb:94:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiKMxm4lOpKYr5KA6lkCGs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjUwODA4MTUwMTAxWhcNMjUwODA5MTUwMTAxWjAzMTEwLwYDVQQD EyhjY2MwNGVjYmYxZGFjNjY5NjFiZGJiYjM5ZGViOTg1MGQxNzE2N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvSCYrhFl12720kwBSn8cW10ufzM h+YUOfHGAezmlc6UdYqOaxWpkG894P69NKoPTkq/Oa2bdQWsmspmOgiHkIILZI3j Bh3R2flXJNroi8T3GD9L4FcIhJmTRYLvk5xFfqNm4FYbpzrO1cwBoqCrQMMX3g2m rcqQurRwOJ8lo/r7rY4HaTdXPZAWLZpY0ERc3pXgbxo1NBGs6lu0X9cpM3WlDKHb qj0/1VxBtTZ0Xydxghes57TL1oOAVZ+x3bWt3Wvr44px2aENl4OTUqPQJOrUlxOs 1rD+wIGAshwIz62n3E99AGrc++DaIyHlNzRJ0Lt7wqzyra4m9+285odfyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzATsvx2sZpYb27s53rmFDRcWf0MB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLajLcrF 6g4rWDc4Tz0kSejNCu9gS2uf83OmZd7xKJIiE8vfEeAEYDRmgtKvZSEX89uzOef6 jFb4ey5QnTC40Z/rJdP/2kV4IDzbDMRSedb5u47AVRrJ5M14J4ZEbQZ01A6tn8Um bM71O+IwJxYbxiRbTbNu6h+S9cusmOAfuwpjGYww67AnSVqfN/deCKbgp93VvhCj M529ecjdGpj2Yf6lqTaUXNrasJmDpA8ZGwyjCtxZ9zxjagOQTcqAUwblBh61uJhg UlQsCSIBpDtSP0F9ASz14B7peTPyVbnqyrteUTwAwovxZDMfIPREAMH8pFLWTGZ4 w/3nzReM88uULw== -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:23 2025 by rpki-client