$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: p/6saH/32vS9uxBj2qEjJOCMvK6x0ue84dJPpHf0550= Subject key identifier: 66:30:05:C0:0E:46:F7:4C:76:08:23:25:C9:31:36:6A:F2:9D:6B:4B Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019773E456981CF4A0794740B36AAC0929D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 0405 Signing time: Sun 15 Jun 2025 14:00:33 +0000 Manifest this update: Sun 15 Jun 2025 14:00:33 +0000 Manifest next update: Mon 16 Jun 2025 14:00:33 +0000 Files and hashes: 1: 149n__WzdkzcvdiXj75CSwt4Ke0.roa (hash: oADfnpg1xyxZ/pO3JlbyLqogHqwwtBMcwMf9vhuxjOk=) 2: 1QgqhoL1f8rVrZsBTbv_ukiW3_U.roa (hash: FtHGg2smc+8B3MpNfm7Vb9xIWP4EyZ43pe81r6EdMLE=) 3: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (hash: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=) 4: ABDpUe6jePBPX3_7idJW6VskjUI.roa (hash: 2uJVw8Yy1UzBrXOxGkJR0fZMeZhMvBwUcqLsaXLYQjE=) 5: Bs4lhpAgPxLI2sivKmGtlx_Lp3k.roa (hash: qE6cO8k8x/RBn9klunLlEIx8ylpZgmFO4HaBZgdaXEY=) 6: J16kp0dolEOcPzZi0oKr2BD75BI.roa (hash: mBVv2zMp/NRzR+bYpY82u+arKMz/jM+I0mvUD0HUt84=) 7: MQ2EgPtIqGeY6J-TWaJXDqs9Nug.roa (hash: DTWQ1BaF1eB35acgiW005UdG4BqBQvAvS2KuGYP/fIY=) 8: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (hash: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=) 9: WNd31FKfDVJsTEByrggsuNBHueg.roa (hash: tedpCisNTHVOKJzXOyZVhC8FIa9J18s6krEoaMi/yH0=) 10: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: A4C8G1NQqYKQK5Okqg2Wj/iLKuyULCmFH2cAgblIKYU=) 11: ZtBVD_gU9JHOidmFecie_EQftRo.roa (hash: TATv9KEl0G9zS/KJs9wWiYzEnpI8uOZdyHODf/h2Zv8=) 12: _irPLRofiW2yAiqGHceh7pxbGfo.roa (hash: LcENOil0eGI9fBrHK+Rr0FvqGbc2XbDucHTRV9ZcpPY=) 13: j7OTX4J28Js-0w5isT2PIZS_18Q.roa (hash: frKELQxJcl50qW1No3dGQO6ukFhHZwkNa2ShR84gmOI=) 14: mJz6Vh5vX_Z8nl77wAqDRKiONe0.roa (hash: kZsXj53UOHVZH65D+DagMxEuLkLg5qPiHvCvjzQpYs0=) 15: uqLYyX7fpTti8-AF-6r_j-EcjDY.roa (hash: UbDlJKnkkpKS4MFq+3EvkRXJ4h5CCs/Q6DUr0IXogUA=) 16: wtC2uqCyAY1EaN9QwS8TP1Kn0VI.roa (hash: db0oe3co74b5HA+JQAKN4n6gQCMTGZCJAz+X0/LsIjQ=) 17: y0NhIWgTEJUn3OyUdcDPuX30xHU.roa (hash: RhHl7+/yQQJ2O2zcuVJ2Qb8j0j9FdT6wy4ZLGMABh6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:73:e4:56:98:1c:f4:a0:79:47:40:b3:6a:ac:09:29:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jun 15 14:00:33 2025 GMT Not After : Jun 16 14:00:33 2025 GMT Subject: CN=663005c00e46f74c76082325c931366af29d6b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:74:cc:fa:84:15:c6:39:d2:06:d2:52:11: 64:43:f3:79:31:7e:f9:f4:44:ec:58:6f:7c:49:7b: 21:ce:bc:98:b6:4d:ad:22:41:82:3f:a6:34:23:94: 18:16:e2:5a:8c:34:63:9f:0f:fb:83:dd:de:99:8e: 67:3c:04:80:38:ba:8b:b0:c6:43:af:77:66:20:4e: 94:12:ea:54:62:16:7b:b5:93:e7:e5:d7:54:c6:17: 87:d4:5c:d0:61:41:a9:35:90:a3:b7:70:4b:73:cd: f7:46:50:7a:dc:81:29:a0:35:6f:3b:9c:66:f9:1e: 13:9b:54:d2:5b:a4:ef:7c:75:77:00:89:d0:f3:fd: 30:59:96:1d:1d:56:b9:94:96:bd:5c:30:6c:c2:94: be:49:09:57:18:ad:92:35:29:f4:41:64:01:b1:14: c5:e5:5e:4e:a6:5c:eb:3a:fd:27:21:77:17:f8:75: b0:65:56:34:c9:bc:e9:57:73:e0:f0:e7:c2:30:98: 43:5f:06:0a:35:47:cb:e8:4a:20:d8:28:7b:65:10: 38:7d:54:3e:16:a4:c3:d1:51:f6:f9:6d:7a:fa:5e: b9:4a:51:aa:66:60:7a:aa:21:c6:b8:47:97:b8:e9: 0a:12:85:6e:90:67:ca:4c:53:11:89:e4:01:f9:48: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:30:05:C0:0E:46:F7:4C:76:08:23:25:C9:31:36:6A:F2:9D:6B:4B X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:94:f3:4d:7b:6f:fd:8d:6b:50:12:16:7f:31:53:16:ee:03: 83:2c:3f:06:63:a6:b9:93:f1:b5:e8:f2:e9:5e:38:ba:39:6e: 6a:1d:3e:8f:86:01:17:a4:72:b9:87:4d:35:56:fb:02:eb:5e: 69:04:4b:37:a0:46:4e:e3:d6:c7:cf:39:fe:42:a6:78:84:99: be:07:be:0a:bc:bc:d1:72:24:64:8a:93:f0:7f:07:f5:59:3f: 66:95:5a:85:42:ba:6d:03:76:1b:5f:b7:19:9a:81:c4:72:73: e8:a7:84:2c:05:d6:86:db:20:ff:7f:36:3a:0a:59:2d:fe:4c: 94:77:89:5b:22:f7:79:e3:74:5c:ec:4e:ca:fc:9b:9b:49:4c: b1:e4:13:4b:77:69:f8:58:49:7b:8b:82:7b:55:30:d1:07:d7: 32:11:ef:5d:0c:77:1a:e3:8c:00:0b:9d:b4:79:3f:31:32:40: 6f:7c:a3:20:be:6c:9e:22:ac:65:08:76:e2:5e:9b:7b:f0:78: b7:b6:17:85:bf:6e:56:c8:fb:11:5f:ab:8a:fb:d2:74:ae:de: 29:63:f0:ad:9f:57:41:5b:eb:0c:e6:aa:05:bc:e0:3e:c8:91: 77:a1:a4:85:0d:5b:93:ac:42:25:7a:7d:03:49:10:0a:4e:0c: 25:59:1b:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdz5FaYHPSgeUdAs2qsCSnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUwNjE1MTQwMDMzWhcNMjUwNjE2MTQwMDMzWjAzMTEwLwYDVQQD Eyg2NjMwMDVjMDBlNDZmNzRjNzYwODIzMjVjOTMxMzY2YWYyOWQ2YjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS10zPqEFcY50gbSUhFkQ/N5MX75 9ETsWG98SXshzryYtk2tIkGCP6Y0I5QYFuJajDRjnw/7g93emY5nPASAOLqLsMZD r3dmIE6UEupUYhZ7tZPn5ddUxheH1FzQYUGpNZCjt3BLc833RlB63IEpoDVvO5xm +R4Tm1TSW6TvfHV3AInQ8/0wWZYdHVa5lJa9XDBswpS+SQlXGK2SNSn0QWQBsRTF 5V5OplzrOv0nIXcX+HWwZVY0ybzpV3Pg8OfCMJhDXwYKNUfL6Eog2Ch7ZRA4fVQ+ FqTD0VH2+W16+l65SlGqZmB6qiHGuEeXuOkKEoVukGfKTFMRieQB+UgW6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYwBcAORvdMdggjJckxNmrynWtLMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5TzTXtv /Y1rUBIWfzFTFu4Dgyw/BmOmuZPxtejy6V44ujluah0+j4YBF6RyuYdNNVb7Aute aQRLN6BGTuPWx885/kKmeISZvge+Cry80XIkZIqT8H8H9Vk/ZpVahUK6bQN2G1+3 GZqBxHJz6KeELAXWhtsg/382OgpZLf5MlHeJWyL3eeN0XOxOyvybm0lMseQTS3dp +FhJe4uCe1Uw0QfXMhHvXQx3GuOMAAudtHk/MTJAb3yjIL5sniKsZQh24l6be/B4 t7YXhb9uVsj7EV+rivvSdK7eKWPwrZ9XQVvrDOaqBbzgPsiRd6GkhQ1bk6xCJXp9 A0kQCk4MJVkb3g== -----END CERTIFICATE-----Generated at Sun Jun 15 20:39:11 2025 by rpki-client