$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft File: Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json) Hash identifier: 8Gv3zlv2WrQtdePt62qe0LOXUwwWiEN8lDwXegz5ZJs= Subject key identifier: DC:A0:93:19:60:90:16:8D:17:76:70:6D:E5:44:B6:5F:63:41:CF:C5 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019A4F61F5A61E504C413BF5AFB5BCD159DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft Manifest number: 12DB Signing time: Tue 04 Nov 2025 15:00:11 +0000 Manifest this update: Tue 04 Nov 2025 15:00:11 +0000 Manifest next update: Wed 05 Nov 2025 15:00:11 +0000 Files and hashes: 1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=) 2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=) 3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=) 4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=) 5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=) 6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=) 7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=) 8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=) 9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=) 10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=) 11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: 5o+oGi7cj8WtTeYGZ/r8Ah0MC4UWVfZg4iGmy5TwpkM=) 12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=) 13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=) 14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=) 15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=) 16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=) 17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=) 18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=) 19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=) 20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=) 21: lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa (hash: 8Hwz3wPzlSmaqtx7chxbj4/As7Gc40k4bLE+IGEIauQ=) 22: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=) 23: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=) 24: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=) 25: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=) 26: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:61:f5:a6:1e:50:4c:41:3b:f5:af:b5:bc:d1:59:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Nov 4 15:00:11 2025 GMT Not After : Nov 5 15:00:11 2025 GMT Subject: CN=dca093196090168d1776706de544b65f6341cfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:28:96:89:62:1c:9c:0a:da:0f:e6:98:35: 5c:91:db:51:18:c1:ae:e9:51:12:bf:fc:f1:a5:86: 0c:ee:d6:e1:d4:ea:38:8f:63:ab:af:9f:37:df:dc: 97:e7:3c:e6:32:a1:99:f2:7d:c9:f8:5c:42:92:d5: e8:57:ce:0d:6d:fe:fe:2e:5a:d5:52:f8:e2:7a:25: 0a:19:60:b7:c6:1e:9c:ed:60:d2:87:87:08:9e:bb: c0:1e:21:0c:19:c4:db:1d:4b:f1:c4:b5:e3:ad:4f: 0b:8c:cb:75:19:24:c2:71:06:ff:74:cf:77:4b:e4: 28:85:88:11:57:0f:36:cd:3f:a7:12:88:0c:66:6e: 8e:fd:61:5e:1b:14:2f:a6:47:ce:47:c5:19:c8:0e: 63:68:8e:c5:14:f8:31:18:21:43:7a:ac:cb:95:f3: f3:2e:17:49:f9:0f:41:c1:f7:9e:d7:65:c0:58:3b: fb:46:27:f7:bd:ab:94:f6:87:33:be:48:88:5b:ab: 34:4c:f7:34:c9:35:a4:56:75:73:d9:aa:70:98:17: 08:e4:2c:48:69:17:ba:c5:60:7d:1b:01:d4:d1:9e: 68:12:af:21:b8:99:4f:94:7b:df:4d:b4:f1:f2:87: d0:74:33:f2:1a:b2:5d:76:87:08:d1:df:f0:70:be: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A0:93:19:60:90:16:8D:17:76:70:6D:E5:44:B6:5F:63:41:CF:C5 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b1:d3:8f:8a:21:db:eb:b5:9a:12:1f:1d:78:8a:3c:45:d0: 07:7a:93:d4:54:7a:26:3f:d4:60:76:00:9c:d6:74:59:6f:41: a9:c4:ae:b6:81:16:c5:d2:67:2e:67:3c:80:d8:11:db:94:c1: 95:5b:70:c6:f0:14:9d:23:c4:5a:15:8b:76:18:ea:f1:f6:2d: f8:42:78:51:f4:50:a4:47:e5:0c:5b:a2:da:74:2d:7a:44:69: de:95:61:22:41:55:f8:6a:8f:6e:4f:a7:ce:5a:38:ed:f7:2c: ea:a7:34:42:0c:c3:3b:90:bc:d7:e5:05:3d:43:81:d3:ac:c1: dc:13:66:c2:49:e1:0b:30:ba:82:2a:eb:89:8a:01:cf:a0:6c: 52:f2:80:53:32:5d:04:c7:f9:33:05:3a:0a:19:dd:dd:e0:3d: 39:19:c4:21:e2:1d:b0:a9:a7:b6:5e:98:dd:15:d7:8e:f5:db: d0:3d:0f:a3:a3:1b:c7:23:82:cb:41:5a:c0:ce:83:02:ec:57: 1e:c8:22:04:8f:9b:b5:0f:8e:a0:52:4e:54:0b:d3:7f:09:e9: 44:3d:eb:36:ca:da:51:29:67:02:89:3b:8d:c1:8a:88:16:c9: af:aa:4a:90:00:dd:bd:49:58:f7:0b:32:8d:3d:d0:77:e3:7e: 59:9a:64:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYfWmHlBMQTv1r7W80VndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjUxMTA0MTUwMDExWhcNMjUxMTA1MTUwMDExWjAzMTEwLwYDVQQD EyhkY2EwOTMxOTYwOTAxNjhkMTc3NjcwNmRlNTQ0YjY1ZjYzNDFjZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7QololiHJwK2g/mmDVckdtRGMGu 6VESv/zxpYYM7tbh1Oo4j2Orr58339yX5zzmMqGZ8n3J+FxCktXoV84Nbf7+LlrV UvjieiUKGWC3xh6c7WDSh4cInrvAHiEMGcTbHUvxxLXjrU8LjMt1GSTCcQb/dM93 S+QohYgRVw82zT+nEogMZm6O/WFeGxQvpkfOR8UZyA5jaI7FFPgxGCFDeqzLlfPz LhdJ+Q9Bwfee12XAWDv7Rif3vauU9oczvkiIW6s0TPc0yTWkVnVz2apwmBcI5CxI aRe6xWB9GwHU0Z5oEq8huJlPlHvfTbTx8ofQdDPyGrJddocI0d/wcL7GZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNygkxlgkBaNF3ZwbeVEtl9jQc/FMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7HTj4oh 2+u1mhIfHXiKPEXQB3qT1FR6Jj/UYHYAnNZ0WW9BqcSutoEWxdJnLmc8gNgR25TB lVtwxvAUnSPEWhWLdhjq8fYt+EJ4UfRQpEflDFui2nQtekRp3pVhIkFV+GqPbk+n zlo47fcs6qc0QgzDO5C81+UFPUOB06zB3BNmwknhCzC6girriYoBz6BsUvKAUzJd BMf5MwU6Chnd3eA9ORnEIeIdsKmntl6Y3RXXjvXb0D0Po6MbxyOCy0FawM6DAuxX HsgiBI+btQ+OoFJOVAvTfwnpRD3rNsraUSlnAok7jcGKiBbJr6pKkADdvUlY9wsy jT3Qd+N+WZpkrQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:23:22 2025 by rpki-client