$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: TsxquaDFB6acLywGdeHwJuas+YQg+RitNBB0wZF8nZU= Subject key identifier: 32:88:D8:87:41:A2:EA:03:99:34:5C:4F:70:FD:13:C9:C0:8F:79:5D Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 0198745020019531C5B5FB15FFEC303A3571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0D99 Signing time: Mon 04 Aug 2025 09:01:04 +0000 Manifest this update: Mon 04 Aug 2025 09:01:04 +0000 Manifest next update: Tue 05 Aug 2025 09:01:04 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: ERcu7IVIp5H+LIE/3HErYPW0ttqToGyJ6lKyt1EMa2o=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:50:20:01:95:31:c5:b5:fb:15:ff:ec:30:3a:35:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Aug 4 09:01:04 2025 GMT Not After : Aug 5 09:01:04 2025 GMT Subject: CN=3288d88741a2ea0399345c4f70fd13c9c08f795d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:93:85:0d:bb:5e:9b:c1:d9:be:09:40:c5: 68:f5:13:65:6c:d3:e7:46:61:88:dc:d4:2f:88:6d: 56:72:be:0a:14:fe:02:8f:77:e9:dc:8f:e9:07:a1: fe:c3:ca:f5:dc:f5:28:7d:48:0c:4c:bf:2a:5a:95: da:15:dd:e4:4b:e8:fc:75:56:3e:bf:99:f2:85:7f: e0:0b:ac:3e:ac:3f:e0:4d:f4:8d:fa:0a:c0:8a:53: 15:8b:b5:ed:00:69:8f:99:27:16:07:30:ae:ab:7a: e2:54:5b:1f:4b:2e:68:21:0b:ae:c9:f0:ba:22:36: 6f:9c:87:36:c8:7c:24:f2:b1:cd:93:f6:ca:1b:70: f4:eb:45:22:f4:d5:24:0d:3b:de:cb:20:cd:a2:e6: a0:41:ca:6d:86:1b:a6:50:31:44:b7:53:d1:01:95: fd:e8:d6:21:62:57:05:97:77:8f:7c:4d:48:ce:e7: 55:3d:f9:09:bd:2f:4e:43:f5:12:bc:71:84:ea:e3: 84:c1:07:c4:92:40:72:4f:62:f0:c9:14:91:e1:26: 4c:b3:dd:9f:05:5c:7f:03:12:98:83:ec:04:fb:37: 21:9a:15:51:68:2d:6c:24:8e:7f:1c:cd:b6:27:4b: 46:45:10:36:66:d7:cb:19:5e:0e:f1:bd:7a:db:fb: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:88:D8:87:41:A2:EA:03:99:34:5C:4F:70:FD:13:C9:C0:8F:79:5D X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:10:e6:f1:d4:04:a5:b8:07:f7:a5:ec:e2:c3:ea:8c:4c: ff:e0:55:77:c9:97:0d:6a:20:78:d9:d3:57:15:de:db:23:d3: 22:8d:1b:4a:1a:0c:bb:6b:4f:c2:0d:b3:4d:d3:c2:5a:82:51: 1d:ab:da:4c:35:5f:49:c1:8d:50:61:5a:b7:9b:e7:ff:5c:78: 83:1f:24:c8:d5:4e:a8:d2:99:62:ef:2e:0e:07:1d:b6:d4:50: c8:3e:1a:a7:83:49:2e:00:7c:30:0f:a4:84:ad:1a:37:27:88: e0:10:ab:17:97:a3:f3:97:56:24:b3:1e:ed:97:b2:2b:84:00: a0:29:f5:d8:a8:7a:27:e5:7a:5c:e7:58:f9:1e:6e:54:01:a6: 4a:04:b9:24:f8:e1:71:7d:35:4b:68:ae:74:5b:61:89:76:71: 67:47:9b:8e:e1:7f:52:7d:ba:f9:ab:f6:8a:cd:f3:a8:05:3d: 81:62:94:b5:62:24:15:08:88:b1:cd:5a:ba:de:3f:70:8a:f4: 74:f7:71:65:b5:0e:ad:bc:bc:26:04:10:45:af:e8:f2:d4:34: 4d:e3:c0:0d:aa:49:ec:dc:9a:e4:10:d1:97:49:3d:44:c0:20: 79:c5:c3:08:fd:2f:c9:02:5a:07:0a:35:3b:87:5a:84:37:17: 3f:80:2f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0UCABlTHFtfsV/+wwOjVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwODA0MDkwMTA0WhcNMjUwODA1MDkwMTA0WjAzMTEwLwYDVQQD EygzMjg4ZDg4NzQxYTJlYTAzOTkzNDVjNGY3MGZkMTNjOWMwOGY3OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjaThQ27XpvB2b4JQMVo9RNlbNPn RmGI3NQviG1Wcr4KFP4Cj3fp3I/pB6H+w8r13PUofUgMTL8qWpXaFd3kS+j8dVY+ v5nyhX/gC6w+rD/gTfSN+grAilMVi7XtAGmPmScWBzCuq3riVFsfSy5oIQuuyfC6 IjZvnIc2yHwk8rHNk/bKG3D060Ui9NUkDTveyyDNouagQcpthhumUDFEt1PRAZX9 6NYhYlcFl3ePfE1IzudVPfkJvS9OQ/USvHGE6uOEwQfEkkByT2LwyRSR4SZMs92f BVx/AxKYg+wE+zchmhVRaC1sJI5/HM22J0tGRRA2ZtfLGV4O8b162/v/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKI2IdBouoDmTRcT3D9E8nAj3ldMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJwQ5vHU BKW4B/el7OLD6oxM/+BVd8mXDWogeNnTVxXe2yPTIo0bShoMu2tPwg2zTdPCWoJR HavaTDVfScGNUGFat5vn/1x4gx8kyNVOqNKZYu8uDgcdttRQyD4ap4NJLgB8MA+k hK0aNyeI4BCrF5ej85dWJLMe7ZeyK4QAoCn12Kh6J+V6XOdY+R5uVAGmSgS5JPjh cX01S2iudFthiXZxZ0ebjuF/Un26+av2is3zqAU9gWKUtWIkFQiIsc1aut4/cIr0 dPdxZbUOrby8JgQQRa/o8tQ0TePADapJ7Nya5BDRl0k9RMAgecXDCP0vyQJaBwo1 O4dahDcXP4AvxA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:02:00 2025 by rpki-client