$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: U5SLFqG4CrDiwtJym2winVv+0arAuPMW4rTsCQgPmdw= Subject key identifier: 2B:83:BA:0D:21:ED:D1:03:D2:A0:0D:D5:F4:5D:50:CE:34:4A:67:0A Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019A4F9962709AC392A93FA4C8D97F68AD04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 0585 Signing time: Tue 04 Nov 2025 16:00:43 +0000 Manifest this update: Tue 04 Nov 2025 16:00:43 +0000 Manifest next update: Wed 05 Nov 2025 16:00:43 +0000 Files and hashes: 1: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 2: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (hash: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=) 3: ImvsPyGjqHzil2zJhiiakufkk1I.roa (hash: 29vZWJ1xOkBr4giAfRXD6EraUbozMao9ed7L/bRqJaU=) 4: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (hash: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=) 5: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 6: XtfitIKECL4Esn5wVQYquZKD0aY.roa (hash: Rusmu3puclElkF3Iw8mfUgThxObk4QDJvsuY23x3w40=) 7: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: Dr8+YIONdb14xex2yjJqeEfaZ4DYQDBdGlvj9+i+t/w=) 8: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 9: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (hash: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=) 10: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (hash: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:62:70:9a:c3:92:a9:3f:a4:c8:d9:7f:68:ad:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Nov 4 16:00:43 2025 GMT Not After : Nov 5 16:00:43 2025 GMT Subject: CN=2b83ba0d21edd103d2a00dd5f45d50ce344a670a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:85:95:cb:e0:59:8e:42:f5:82:3c:a6:df: ab:ee:f4:86:6a:02:27:fd:0b:9a:2c:23:18:42:f5: ab:8b:4c:86:88:19:e8:79:0a:72:b4:22:0b:e9:36: 75:fa:57:d6:9e:0e:cf:af:55:c1:4b:d9:30:0b:31: cf:d2:af:31:cc:1f:42:60:75:b9:5e:9d:f7:f0:4d: 8a:e2:2c:0d:d6:a4:d0:a6:41:50:e8:b7:6c:7d:5e: 0d:00:b9:a4:ee:5b:29:ab:d7:35:bb:05:19:18:89: ee:43:20:7f:70:ad:35:e6:af:6e:a5:0f:f5:c8:1f: b3:6d:47:2f:bc:12:ac:5b:7c:89:8f:9a:5b:a1:90: d9:41:26:c2:50:66:08:c3:68:84:b6:61:2c:d4:42: 2e:2a:62:42:0a:c4:4f:66:7a:8f:fe:57:8d:34:c5: 68:f1:37:79:6d:51:c8:06:29:1f:9e:32:3b:75:7c: eb:9f:7e:46:4a:64:91:9d:26:45:cf:ec:66:7f:d0: dc:0c:b6:20:62:98:bf:c0:4c:f7:ff:1c:d9:b4:dd: 0a:45:ec:17:b6:86:8d:d0:26:bc:78:e4:14:f7:a7: 0a:36:24:c4:a6:9e:3f:f3:4b:f1:88:92:a5:1f:34: 0a:1e:be:73:fb:1a:63:bf:01:d6:bf:6e:97:23:e1: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:BA:0D:21:ED:D1:03:D2:A0:0D:D5:F4:5D:50:CE:34:4A:67:0A X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:ac:d7:02:b8:cd:07:8b:8a:19:5f:b0:ca:55:aa:91:2e: b9:8d:2d:cb:de:f5:67:f0:2f:34:1d:df:30:80:2b:9d:54:01: 3a:7d:04:5d:e7:81:d0:3e:46:11:5d:a6:88:d5:9e:09:a1:93: 62:e4:c6:c8:e0:65:df:6d:85:36:7c:c0:e9:50:d4:a9:12:9d: 67:fe:55:ed:af:6e:63:80:09:77:9d:e0:8c:46:ea:dc:d2:ae: 3d:f8:cf:b2:bc:bf:09:84:f1:07:e2:de:b2:8e:d0:35:68:61: ec:0f:be:d6:2f:ef:65:00:93:12:57:22:21:8a:35:fa:d4:79: 88:f5:4b:08:cc:4b:ac:f9:07:d5:f2:fb:3f:3d:92:2f:3f:02: 29:05:5a:33:bc:04:f7:14:0b:45:af:10:88:00:fa:7f:5b:fd: 4c:64:a4:c8:a5:b2:fc:ae:90:fd:f1:12:e4:3b:bf:81:e9:40: 7a:be:b3:f1:af:1a:0c:e4:5f:53:ec:ce:3c:df:83:c8:e8:56: 36:b1:ad:af:80:00:2e:32:e0:87:bc:e0:a9:fa:50:b8:12:f0: 28:5d:9b:cc:0b:3f:3e:4b:74:a2:04:14:34:94:ed:94:1f:c3: 6e:4c:cf:48:ac:b9:dd:9e:dc:c7:22:a0:11:ea:8a:75:06:f5: 22:31:ef:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmWJwmsOSqT+kyNl/aK0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMTA0MTYwMDQzWhcNMjUxMTA1MTYwMDQzWjAzMTEwLwYDVQQD EygyYjgzYmEwZDIxZWRkMTAzZDJhMDBkZDVmNDVkNTBjZTM0NGE2NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NCFlcvgWY5C9YI8pt+r7vSGagIn /QuaLCMYQvWri0yGiBnoeQpytCIL6TZ1+lfWng7Pr1XBS9kwCzHP0q8xzB9CYHW5 Xp338E2K4iwN1qTQpkFQ6LdsfV4NALmk7lspq9c1uwUZGInuQyB/cK015q9upQ/1 yB+zbUcvvBKsW3yJj5pboZDZQSbCUGYIw2iEtmEs1EIuKmJCCsRPZnqP/leNNMVo 8Td5bVHIBikfnjI7dXzrn35GSmSRnSZFz+xmf9DcDLYgYpi/wEz3/xzZtN0KRewX toaN0Ca8eOQU96cKNiTEpp4/80vxiJKlHzQKHr5z+xpjvwHWv26XI+GeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuDug0h7dED0qAN1fRdUM40SmcKMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxys1wK4 zQeLihlfsMpVqpEuuY0ty971Z/AvNB3fMIArnVQBOn0EXeeB0D5GEV2miNWeCaGT YuTGyOBl322FNnzA6VDUqRKdZ/5V7a9uY4AJd53gjEbq3NKuPfjPsry/CYTxB+Le so7QNWhh7A++1i/vZQCTElciIYo1+tR5iPVLCMxLrPkH1fL7Pz2SLz8CKQVaM7wE 9xQLRa8QiAD6f1v9TGSkyKWy/K6Q/fES5Du/gelAer6z8a8aDORfU+zOPN+DyOhW NrGtr4AALjLgh7zgqfpQuBLwKF2bzAs/Pkt0ogQUNJTtlB/DbkzPSKy53Z7cxyKg EeqKdQb1IjHv3g== -----END CERTIFICATE-----Generated at Wed Nov 5 01:22:15 2025 by rpki-client