$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: FlQSXEGzhVZVj0IowpWvDwt+sry4Gzz+OCYqg5hp+jI= Subject key identifier: DF:43:7C:00:13:4E:CE:35:2C:DE:70:1B:CB:70:E8:6E:0C:3D:B2:77 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 01977376BAF3D7582B9929F9A228C3EFC33A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0D14 Signing time: Sun 15 Jun 2025 12:00:50 +0000 Manifest this update: Sun 15 Jun 2025 12:00:50 +0000 Manifest next update: Mon 16 Jun 2025 12:00:50 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: 2TdrYJSAv8ZA6Iyzn4GNybZBcfQ8QMW98XOxfCsbcB8=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:73:76:ba:f3:d7:58:2b:99:29:f9:a2:28:c3:ef:c3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jun 15 12:00:50 2025 GMT Not After : Jun 16 12:00:50 2025 GMT Subject: CN=df437c00134ece352cde701bcb70e86e0c3db277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:79:0a:e7:9d:04:54:00:29:6f:dd:24:39: 5c:0b:22:52:ad:a6:b2:ba:b8:8d:97:30:dc:f8:ff: ff:5a:c8:5b:fc:5f:b5:27:9e:f9:eb:b0:3c:3e:2b: 86:7c:9d:28:26:b8:60:28:21:da:6c:b0:d3:bd:01: 9c:22:41:6d:5f:bc:d8:c7:8b:c8:2e:63:1c:65:aa: 9f:b2:b0:2f:14:fc:ed:a1:06:ec:a2:47:eb:51:a8: c9:0b:38:0f:94:6a:1f:a1:63:c4:19:ab:87:3a:17: aa:f9:fd:85:47:38:92:04:6b:eb:e6:86:60:b9:37: 0f:29:08:87:9e:26:9b:f9:8b:1e:35:ea:50:fa:cb: e3:7c:3c:55:5d:48:b5:cc:34:9e:8a:9a:d7:d7:a1: 6b:31:9b:3d:bd:1b:ba:ed:9b:73:d1:cd:0f:fb:89: fa:e9:17:37:8b:83:3c:33:c6:b0:89:ce:5a:c5:bd: 38:bd:9b:07:a9:9d:b7:3c:e2:d3:7c:f7:6c:7f:cf: f1:77:00:df:3f:03:da:cd:3e:ea:7b:51:56:e4:cc: 43:27:05:0a:89:8b:59:7b:9f:48:1e:f5:d9:28:80: e6:9a:6b:49:87:fc:2b:26:8c:9e:e9:82:bc:1b:2a: 90:f2:23:4d:d8:a5:08:74:41:16:66:c3:7e:32:b1: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:43:7C:00:13:4E:CE:35:2C:DE:70:1B:CB:70:E8:6E:0C:3D:B2:77 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:67:69:1f:e1:f9:a1:1b:e5:ad:2e:59:59:6a:e1:ed:dc:d9: 26:fb:58:7e:9d:0b:ed:d8:f9:43:84:e8:86:8c:96:c8:22:1f: 9c:53:ec:8b:d6:aa:0f:2d:ed:f6:14:65:6a:16:dc:bb:3f:74: bd:a3:63:64:98:3a:ff:dd:1b:fe:0f:62:9c:32:7a:60:87:e3: 1c:70:1d:32:fd:fd:62:d6:96:d3:42:15:84:01:27:8d:53:69: 8d:a3:d2:72:82:f2:f9:11:d2:ed:3d:54:90:14:bf:d5:e8:28: a1:5f:fc:3d:2f:ed:c4:02:ac:26:86:3d:bf:f4:c9:56:61:4b: 52:5d:79:d7:ea:1e:19:d7:79:7f:26:be:d4:51:92:14:8d:bd: 65:39:99:37:6c:b5:74:75:c1:a1:94:20:0a:19:51:19:38:87: 4f:6a:3e:4c:b9:20:bd:e0:6e:97:f2:29:fe:49:c8:e1:f2:df: 3a:9f:bc:8b:23:0c:f7:65:86:67:4d:f9:26:2b:3b:95:3b:e7: 8c:09:aa:a0:95:73:86:21:93:a9:90:59:84:42:7a:09:ac:b6: 6e:69:09:04:4e:d1:71:af:eb:72:a6:8a:07:d5:9f:43:b5:e9: 83:fc:f4:d3:03:1e:ab:cc:02:39:8f:96:a3:58:43:9f:f4:91: a0:4a:4a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdzdrrz11grmSn5oijD78M6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwNjE1MTIwMDUwWhcNMjUwNjE2MTIwMDUwWjAzMTEwLwYDVQQD EyhkZjQzN2MwMDEzNGVjZTM1MmNkZTcwMWJjYjcwZTg2ZTBjM2RiMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/p5CuedBFQAKW/dJDlcCyJSraay uriNlzDc+P//Wshb/F+1J57567A8PiuGfJ0oJrhgKCHabLDTvQGcIkFtX7zYx4vI LmMcZaqfsrAvFPztoQbsokfrUajJCzgPlGofoWPEGauHOheq+f2FRziSBGvr5oZg uTcPKQiHniab+YseNepQ+svjfDxVXUi1zDSeiprX16FrMZs9vRu67Ztz0c0P+4n6 6Rc3i4M8M8awic5axb04vZsHqZ23POLTfPdsf8/xdwDfPwPazT7qe1FW5MxDJwUK iYtZe59IHvXZKIDmmmtJh/wrJoye6YK8GyqQ8iNN2KUIdEEWZsN+MrEyUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9DfAATTs41LN5wG8tw6G4MPbJ3MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2dpH+H5 oRvlrS5ZWWrh7dzZJvtYfp0L7dj5Q4TohoyWyCIfnFPsi9aqDy3t9hRlahbcuz90 vaNjZJg6/90b/g9inDJ6YIfjHHAdMv39YtaW00IVhAEnjVNpjaPScoLy+RHS7T1U kBS/1egooV/8PS/txAKsJoY9v/TJVmFLUl151+oeGdd5fya+1FGSFI29ZTmZN2y1 dHXBoZQgChlRGTiHT2o+TLkgveBul/Ip/knI4fLfOp+8iyMM92WGZ035Jis7lTvn jAmqoJVzhiGTqZBZhEJ6Cay2bmkJBE7Rca/rcqaKB9WfQ7Xpg/z00wMeq8wCOY+W o1hDn/SRoEpKTA== -----END CERTIFICATE-----Generated at Sun Jun 15 15:19:49 2025 by rpki-client