$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: FSlGswUmPf1KJKo6jXpRcOFZNFMWHE3c21BREKzpNrc= Subject key identifier: C6:22:36:41:42:2A:28:4D:54:ED:A5:AA:A7:F8:1B:C6:82:02:EA:FB Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019A4F6224A5D24AAEA184414BAAF9731DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0E8F Signing time: Tue 04 Nov 2025 15:00:23 +0000 Manifest this update: Tue 04 Nov 2025 15:00:23 +0000 Manifest next update: Wed 05 Nov 2025 15:00:23 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: EBiTMjOD9/7LaKm8pwGlp10z80GaF6qtqpChFD/0RK0=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:24:a5:d2:4a:ae:a1:84:41:4b:aa:f9:73:1d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Nov 4 15:00:23 2025 GMT Not After : Nov 5 15:00:23 2025 GMT Subject: CN=c6223641422a284d54eda5aaa7f81bc68202eafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:a3:7d:b3:3b:e2:83:f7:7d:ad:60:8c:cb: b4:89:5e:c5:0f:ad:37:8b:52:aa:24:eb:62:8c:ac: 4a:06:30:8b:3a:20:e4:fd:eb:5d:40:b0:08:bf:74: d2:c9:92:2a:c4:00:63:49:88:2c:62:b0:51:48:d2: b6:ee:2e:5b:55:a1:84:9c:e1:ae:b7:fe:03:1b:3e: e3:da:41:bd:39:e5:41:b6:b9:ab:fa:5e:b1:8e:83: ed:f5:98:3e:9c:2b:67:a6:12:64:4d:4e:e0:47:c9: 39:79:a5:a4:d6:3a:ca:7f:3e:f1:44:91:a9:f7:98: 66:8b:fc:11:be:13:83:c2:1c:ce:8f:3d:7f:61:a5: 4e:6e:0c:c1:5a:b6:12:d2:26:5a:42:2f:d2:b4:42: de:51:a5:ec:78:8f:fc:ba:d8:04:22:93:af:e6:b5: dd:19:be:95:9e:00:7e:a8:13:17:da:ee:8d:a9:cb: 35:ea:81:75:ae:ed:f8:5a:0d:c6:de:a2:5b:f0:1f: 2a:df:da:5f:d2:bf:67:57:77:99:40:f5:13:ac:ca: 71:13:6e:0e:26:15:f6:96:74:78:25:d2:2e:cd:df: cb:b9:e7:82:c9:fa:51:6f:96:38:35:b2:1c:cc:70: bd:05:64:90:00:2d:29:59:32:c3:37:f1:46:80:54: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:22:36:41:42:2A:28:4D:54:ED:A5:AA:A7:F8:1B:C6:82:02:EA:FB X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:69:ca:6a:5c:dd:50:cf:74:64:f9:0c:a5:cf:c5:a2:54:18: 2d:fa:09:f0:25:7e:59:a6:64:89:0e:7a:80:07:93:2d:52:14: 4b:d5:c9:d4:93:3e:dc:4d:01:d0:ba:9f:f9:9c:e4:98:47:8b: f1:c3:4f:5a:b2:4b:45:34:0f:9d:ac:39:a4:81:f9:c0:82:66: fc:9c:74:da:91:34:d4:61:7e:80:f7:c7:55:1e:36:4c:6e:09: bf:0a:92:2b:36:8a:e0:25:ff:d1:2b:de:bd:02:81:6e:c9:9f: 12:f7:17:05:a4:ba:d4:5a:35:83:70:e4:21:89:d4:a0:b0:de: 55:f5:cb:1a:f0:86:ec:56:52:fc:f8:da:9c:82:2d:a8:4c:15: dc:cd:6a:76:76:7d:2e:0a:c7:2b:18:69:b6:d2:cd:f9:dd:e1: b6:b8:48:1b:cc:35:30:f8:cd:39:0f:6b:91:c6:1b:4c:e4:8c: c2:6c:8c:88:eb:c2:8c:66:6a:2e:ed:b3:3b:e9:15:7c:fa:27: cd:40:44:06:be:e3:b8:1f:c9:48:79:52:ce:f1:9b:24:4d:96: 56:e8:f7:2e:36:2b:cf:2a:66:85:fe:ca:3c:d1:fd:30:97:90: be:f8:cc:05:4d:ef:7d:d8:95:00:b1:e9:58:67:ea:10:05:8e: b0:98:45:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYiSl0kquoYRBS6r5cx2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUxMTA0MTUwMDIzWhcNMjUxMTA1MTUwMDIzWjAzMTEwLwYDVQQD EyhjNjIyMzY0MTQyMmEyODRkNTRlZGE1YWFhN2Y4MWJjNjgyMDJlYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYKjfbM74oP3fa1gjMu0iV7FD603 i1KqJOtijKxKBjCLOiDk/etdQLAIv3TSyZIqxABjSYgsYrBRSNK27i5bVaGEnOGu t/4DGz7j2kG9OeVBtrmr+l6xjoPt9Zg+nCtnphJkTU7gR8k5eaWk1jrKfz7xRJGp 95hmi/wRvhODwhzOjz1/YaVObgzBWrYS0iZaQi/StELeUaXseI/8utgEIpOv5rXd Gb6VngB+qBMX2u6Nqcs16oF1ru34Wg3G3qJb8B8q39pf0r9nV3eZQPUTrMpxE24O JhX2lnR4JdIuzd/LueeCyfpRb5Y4NbIczHC9BWSQAC0pWTLDN/FGgFQTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYiNkFCKihNVO2lqqf4G8aCAur7MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGnKalzd UM90ZPkMpc/FolQYLfoJ8CV+WaZkiQ56gAeTLVIUS9XJ1JM+3E0B0Lqf+ZzkmEeL 8cNPWrJLRTQPnaw5pIH5wIJm/Jx02pE01GF+gPfHVR42TG4JvwqSKzaK4CX/0Sve vQKBbsmfEvcXBaS61Fo1g3DkIYnUoLDeVfXLGvCG7FZS/PjanIItqEwV3M1qdnZ9 LgrHKxhpttLN+d3htrhIG8w1MPjNOQ9rkcYbTOSMwmyMiOvCjGZqLu2zO+kVfPon zUBEBr7juB/JSHlSzvGbJE2WVuj3LjYrzypmhf7KPNH9MJeQvvjMBU3vfdiVALHp WGfqEAWOsJhFLw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:41 2025 by rpki-client