$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json) Hash identifier: 6NyzAUTvp8UOgzMNLQeuvR1UqhsYCC4U1x5xZlZKbLM= Subject key identifier: 87:19:E0:D9:E3:45:6E:5F:9F:71:A8:8D:2A:B8:E4:FB:3F:EE:32:E1 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019A4E1889CC3B57429FF111904686C938D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft Manifest number: 108B Signing time: Tue 04 Nov 2025 09:00:22 +0000 Manifest this update: Tue 04 Nov 2025 09:00:22 +0000 Manifest next update: Wed 05 Nov 2025 09:00:22 +0000 Files and hashes: 1: 1-Q0Fpm13AkA52n8l5k0ctr3-0Uw.roa (hash: ImmrJcgcy8CHYkqIH5BT8/9I+/F0fh7xK4lUIvl0rVw=) 2: 1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa (hash: 8GeHeU/ZbqCG3e/9dpSkHP1UnCP8xK4IoGXKHOFjl60=) 3: 6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa (hash: semgquQlEGADPqa3w63dRwF4Un/PAwUCdRww4JGKAZ8=) 4: 7G9BATflDTu21vt4c9hB8iiswlM.roa (hash: P9Za6RbhgxcCprlrob8HoCtWOEssiOOzNtrX617o2iA=) 5: Ht_HptBql6mw1xzUkgumDZRCGTs.roa (hash: fAFJkBZjVK/h9A5uSjcq4pIcQpbiAe3EL49qs0G3t0k=) 6: N1KahuaH4ywVDh5vnQRZfE-0JBo.roa (hash: Wu4yHucu0ZzzchZ+LFYsPLlBMoJ/1TTM1l51egvuWFs=) 7: RB-kmvtWIZxfX4s_GWqpUMWBav8.roa (hash: mz77dGj7KT4Y12imMMdj/cXmV+eNEz+qEQ+Q1rCDxAw=) 8: VT0K_B8TP9VNzMUCzAKb_pcrAJs.roa (hash: +Nq8vpSYKTk/bSDILQBzEhxSC3uLfEy4XvcRR6emT/s=) 9: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: 24O0A0ccM9wn4pWLDahHttrrciSYGIMactuwHwz5ddU=) 10: _kXaQ2FdCpwF3M9nzoyWI9BFlCQ.roa (hash: 97UVb+hen49ZRqbTWGdoa5CM13JgLH3wxGVphYzTsW0=) 11: dEwDgHNRwB2VoPRdx0_R_r9VvXs.roa (hash: ZmaavjquA+5GJ96FSUOD0qeY6WuxDd/G1b1qQ9SzWGc=) 12: e4LlGesTD6mTPv65_Xasp4NEd_8.roa (hash: CpYDArXMRbmqYH5++yHN1CPQrtF6bSosJ95ZT4bP1HU=) 13: l9XP7gaCaWGis4j2_HYtNslfm-c.roa (hash: onTtv8prZDY2J8tyTCAIkrUkYzKJXBwYs1TgFOfQ6IQ=) 14: rhdlIPf0kldmF9zarlD8waw_XUo.roa (hash: k5ckTcIRM+plzWJGrblXeTQwycMXQLLi0LTQTmpE/UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:89:cc:3b:57:42:9f:f1:11:90:46:86:c9:38:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Nov 4 09:00:22 2025 GMT Not After : Nov 5 09:00:22 2025 GMT Subject: CN=8719e0d9e3456e5f9f71a88d2ab8e4fb3fee32e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:4e:12:7b:de:bf:dc:78:a4:f2:a4:cf:6a: 69:ce:bd:15:39:e8:fa:5e:a3:bf:b7:c4:91:b7:20: cf:e5:79:8a:56:7b:20:2b:1e:53:f3:5c:ae:cb:05: da:cb:99:0d:04:9f:37:a3:57:ab:f9:dc:b4:38:3d: cb:7c:e6:a5:c3:dd:08:a5:7e:ea:88:bb:80:d1:fa: 1b:fa:75:55:ec:de:af:bf:8d:97:9f:3e:5c:29:61: 7e:9f:fd:74:c6:35:48:22:61:2c:2e:fe:08:6c:38: 37:9d:5a:be:89:51:d4:fb:6e:eb:30:c1:4c:8d:65: 04:cb:0c:c0:4c:56:1c:dd:af:23:2e:91:10:fd:a8: 25:67:3f:47:ee:5c:15:f8:a8:65:4c:81:68:ca:3e: 32:e2:4e:e5:f9:7b:a5:34:71:42:20:fc:08:58:f8: 47:bd:a5:a2:51:b0:f5:85:fe:01:da:36:2f:ba:04: b6:bd:9a:a2:b5:d8:ad:d7:25:45:1e:22:10:a7:4b: f5:24:3f:d5:c9:bd:b9:13:46:98:9a:7e:25:bd:e3: 66:54:1f:5f:eb:3d:39:69:55:25:c6:51:82:26:4c: 6e:b0:09:00:d3:51:ab:ee:e3:37:62:21:2d:30:93: 0b:50:08:cc:0d:a1:31:44:34:a3:ba:28:d4:5a:b5: 89:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:19:E0:D9:E3:45:6E:5F:9F:71:A8:8D:2A:B8:E4:FB:3F:EE:32:E1 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5d:a4:21:15:34:94:d7:3a:8e:7d:84:b1:8c:de:c6:c7:f9: 67:44:1c:f8:9a:a2:f8:c3:04:39:a1:79:1a:77:df:0f:b0:5f: f4:85:9f:e5:f0:7b:07:bc:10:0e:f9:ce:8d:22:c3:e2:4e:c2: 00:3e:9c:48:d6:a9:5e:b7:42:4c:58:73:be:9c:ff:7c:78:53: cb:bf:6c:a9:1f:d8:25:ff:22:55:de:53:eb:67:1f:49:b1:a0: 6f:07:ef:4f:5b:66:87:5b:ee:64:c8:b9:b5:97:00:2a:37:d4: 15:ce:1d:e2:d1:31:c9:f8:70:59:a0:cd:50:0a:25:f0:1d:47: 73:38:85:d6:82:dc:20:cb:97:96:49:b3:96:5f:e0:54:e4:8a: f3:65:39:7c:ca:b3:da:eb:2a:07:62:2c:b9:3f:86:98:96:30: f4:aa:38:b3:3e:21:b0:e7:d4:10:05:18:b6:b2:45:df:b0:ac: 4f:f9:45:d9:31:a3:6d:eb:f5:43:de:47:f5:08:30:81:cf:7e: 92:90:a9:39:d8:27:09:8c:b3:5c:7f:e0:e7:3a:8f:3d:a7:8e: 94:b5:13:a3:63:a2:30:1c:3d:42:33:ad:1c:ac:01:e9:5a:96: 65:76:83:f1:0d:92:1b:c4:e9:1a:cc:c1:43:b6:b5:d9:3f:86: b9:44:4e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGInMO1dCn/ERkEaGyTjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjUxMTA0MDkwMDIyWhcNMjUxMTA1MDkwMDIyWjAzMTEwLwYDVQQD Eyg4NzE5ZTBkOWUzNDU2ZTVmOWY3MWE4OGQyYWI4ZTRmYjNmZWUzMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZOEnvev9x4pPKkz2ppzr0VOej6 XqO/t8SRtyDP5XmKVnsgKx5T81yuywXay5kNBJ83o1er+dy0OD3LfOalw90IpX7q iLuA0fob+nVV7N6vv42Xnz5cKWF+n/10xjVIImEsLv4IbDg3nVq+iVHU+27rMMFM jWUEywzATFYc3a8jLpEQ/aglZz9H7lwV+KhlTIFoyj4y4k7l+XulNHFCIPwIWPhH vaWiUbD1hf4B2jYvugS2vZqitdit1yVFHiIQp0v1JD/Vyb25E0aYmn4lveNmVB9f 6z05aVUlxlGCJkxusAkA01Gr7uM3YiEtMJMLUAjMDaExRDSjuijUWrWJdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcZ4NnjRW5fn3GojSq45Ps/7jLhMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal2kIRU0 lNc6jn2EsYzexsf5Z0Qc+Jqi+MMEOaF5GnffD7Bf9IWf5fB7B7wQDvnOjSLD4k7C AD6cSNapXrdCTFhzvpz/fHhTy79sqR/YJf8iVd5T62cfSbGgbwfvT1tmh1vuZMi5 tZcAKjfUFc4d4tExyfhwWaDNUAol8B1HcziF1oLcIMuXlkmzll/gVOSK82U5fMqz 2usqB2IsuT+GmJYw9Ko4sz4hsOfUEAUYtrJF37CsT/lF2TGjbev1Q95H9Qgwgc9+ kpCpOdgnCYyzXH/g5zqPPaeOlLUTo2OiMBw9QjOtHKwB6VqWZXaD8Q2SG8TpGszB Q7a12T+GuUROmA== -----END CERTIFICATE-----Generated at Tue Nov 4 18:16:52 2025 by rpki-client