$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: UZbDmVXMdy/AUL82aeKqB16Np3pXsWhXOlPVjfbF3ac= Subject key identifier: 89:77:D8:F9:0E:A7:89:15:26:2F:61:EB:A2:DE:6D:ED:1B:00:94:E1 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019874195B06D930E989A2C2DDA01E4ED383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 174B Signing time: Mon 04 Aug 2025 08:01:15 +0000 Manifest this update: Mon 04 Aug 2025 08:01:15 +0000 Manifest next update: Tue 05 Aug 2025 08:01:15 +0000 Files and hashes: 1: 0thlGR6Fv-qUrpD4YBqsEljSQk0.roa (hash: t1HJ4JOe+BPdJypQBQLv5tG/+PXkQHDxYZLotiQGEkQ=) 2: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=) 3: 29FCaAYYGxF38GRIEOTlfCqPXmo.roa (hash: SVoMULes5WkO+U5mku9WD3sjpCzRNbNzXOWPbWS8GpA=) 4: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=) 5: 9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa (hash: raB+O2AS/JTjr8iMHBGswQfqoUX8OI+aiElvdmvcZ50=) 6: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=) 7: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (hash: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=) 8: BtUSMQYrMiXrz8PT4gbKkp8KMzo.roa (hash: MhygUK83+6wJufXl8GG1Zo7sHLD1N46TiaJVKQtyfzQ=) 9: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=) 10: DFF-bhqrnmujnLxRL9JYAVW6ikA.roa (hash: 21iR99fIbGqw3Or3piqGj+bIYtOK9kefBJ5EiWs9J8M=) 11: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=) 12: FdIidW0iI8s3BDlLJ5hpekaUDyI.roa (hash: MUdmy80p3zlztbVODgC1EefbLUSe+QTqIqdUtl+oHlc=) 13: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=) 14: QFcj5PeiIYau4Y2UOGJK44_wD54.roa (hash: Xby/lPLbSx+C98Igf2vSC16rJYYkPVduxnLSZ9aNOL8=) 15: SC9yZhU9PNS8QTNjN_qrNv_eW3Q.roa (hash: U3jGOjd33mOISo0lcKw17gPp1Hb2/jkFzcISZ7nMSSw=) 16: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=) 17: Srd8y1uDTsRNNh5zxuhGC_3_ynA.roa (hash: RJvVVf3BXtar1QBf5Qs0uslArz8hoyrD19vpCenWfYQ=) 18: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=) 19: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=) 20: _BrKG4qFUAeG8b8VjxlwGkP_cOo.roa (hash: 6iUyRKK4LL6pEeYz+9QKQh7MzqtDFv6/vdl575D8vKI=) 21: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=) 22: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=) 23: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=) 24: dp_5byGPXCGbQvqYjPeo9uM021U.roa (hash: heIFyAGkqEk9pZ8/LM8InXoMTEqO9qdygCNFzMgCzHI=) 25: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=) 26: iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa (hash: l01+ksHSTRyaSzPORryEG5uT2aEVHezKBQmwrK+X8Zs=) 27: lX3rRAPz9F8BPxbsIulUth9zmtg.roa (hash: eoaguB0B1U4+OB+Tbnc82zIbw18sEzTCQ1o3nJux9nU=) 28: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=) 29: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: 8p7iybUi2U6HoSb2aj+kBKAgA0ujZ39JsJZHSkXqyNk=) 30: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=) 31: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=) 32: vB2mYLl-xpJ0Cq2pgFmm7hPz5-I.roa (hash: HlHkoQbOa1Me9Kya+Z65Q2TAdCYsxm5jyaE8OV2FKvQ=) 33: vSdatVQs0601qTINAZOSvBKTvqI.roa (hash: J4sc3fJ3ayPM9GpaLds0smNkt4N6lvQ+RxikjlgB/Sc=) 34: w5ap-OFRAP5ztIPKRxiD6pDT1v8.roa (hash: UGtK6mkQR0p+bkmWUcnTpaGOQfPntDOlSxu2DwZdk1o=) 35: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:19:5b:06:d9:30:e9:89:a2:c2:dd:a0:1e:4e:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Aug 4 08:01:15 2025 GMT Not After : Aug 5 08:01:15 2025 GMT Subject: CN=8977d8f90ea78915262f61eba2de6ded1b0094e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:b7:7b:26:bd:ae:ba:26:71:9e:8e:d1:7e: b1:be:a1:a8:9d:1a:cb:9a:ea:e7:c0:58:0f:ea:d2: fe:63:ae:ca:d7:4b:e8:bb:68:6d:d2:37:fc:0f:49: 60:c2:17:59:70:2f:fa:52:ee:b0:a6:e1:16:1a:e6: 9a:29:00:d3:10:80:5c:ed:3d:1f:bb:f2:3c:90:7c: 06:b3:07:87:24:5d:45:e4:7d:96:18:be:d0:19:9e: 78:80:d9:1e:a1:a2:90:02:b3:29:5a:27:f7:a8:28: 57:c3:41:8d:50:5c:fc:97:1d:bf:59:21:14:ea:ce: ed:91:1c:f7:96:04:ba:0b:5d:50:29:fa:2d:82:83: 82:32:b1:23:ac:c9:1f:7c:0f:e1:b6:a8:a9:7c:60: d3:11:9f:68:37:c4:a3:9e:a1:40:67:ed:fe:df:55: fe:82:6f:5b:63:c6:07:ea:62:36:73:0f:bd:e9:5d: a5:64:73:dd:6b:7c:12:67:fa:86:fe:02:ce:4e:2d: 4b:46:51:9c:07:f3:e8:87:60:16:d9:f7:dd:82:80: 1d:97:cb:5c:79:1f:97:56:52:ba:9e:be:62:0d:f7: b0:dd:99:fa:a9:f0:5e:33:01:a3:95:78:58:61:98: 1b:1e:b2:cb:ce:1a:5c:de:92:73:03:4c:19:c8:6f: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:D8:F9:0E:A7:89:15:26:2F:61:EB:A2:DE:6D:ED:1B:00:94:E1 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:1e:67:71:e6:9e:98:82:d9:fa:28:b3:a3:ff:f1:7a:fe: ca:33:86:82:e5:ad:fc:dc:b6:70:77:8a:e7:83:83:95:8b:56: 5b:fc:71:54:27:28:78:8a:f8:39:39:82:7a:2c:26:18:0b:97: fb:6a:16:87:8d:2d:45:af:38:46:f3:24:41:54:fb:2d:fe:f7: ae:b1:f9:b2:34:62:d9:d3:a4:ce:9e:8e:90:8a:94:d5:44:57: fe:e8:d2:04:16:75:29:88:09:2c:fe:5a:c1:40:b7:af:43:bc: fb:9f:fb:85:6a:ea:93:f4:9e:e8:0b:a1:45:66:e9:c1:bf:ba: 73:c1:ba:d9:7c:c7:ba:2f:2e:be:09:a3:a4:24:59:fa:df:07: e9:b5:52:22:7f:81:54:9f:b8:b7:d5:6f:7f:10:63:a5:d0:f9: c7:df:56:4e:30:d0:99:f9:f9:a9:d8:6b:5b:71:87:2e:7a:45: 65:10:8b:70:0b:a3:25:f1:0d:aa:cf:02:cc:1e:81:b8:21:fd: 2e:6c:07:31:b7:cd:e6:b0:0f:e7:3d:9d:b7:71:cf:3b:9b:07: 05:3f:94:b3:48:0c:c0:fa:c4:bc:62:b4:0b:f9:ff:e9:a4:9a: 42:07:f4:42:a4:60:f6:1c:63:c8:82:d9:d5:29:1c:81:b5:0e: 07:20:d8:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GVsG2TDpiaLC3aAeTtODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUwODA0MDgwMTE1WhcNMjUwODA1MDgwMTE1WjAzMTEwLwYDVQQD Eyg4OTc3ZDhmOTBlYTc4OTE1MjYyZjYxZWJhMmRlNmRlZDFiMDA5NGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIy3eya9rromcZ6O0X6xvqGonRrL murnwFgP6tL+Y67K10vou2ht0jf8D0lgwhdZcC/6Uu6wpuEWGuaaKQDTEIBc7T0f u/I8kHwGsweHJF1F5H2WGL7QGZ54gNkeoaKQArMpWif3qChXw0GNUFz8lx2/WSEU 6s7tkRz3lgS6C11QKfotgoOCMrEjrMkffA/htqipfGDTEZ9oN8SjnqFAZ+3+31X+ gm9bY8YH6mI2cw+96V2lZHPda3wSZ/qG/gLOTi1LRlGcB/Poh2AW2ffdgoAdl8tc eR+XVlK6nr5iDfew3Zn6qfBeMwGjlXhYYZgbHrLLzhpc3pJzA0wZyG+Y+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl32PkOp4kVJi9h66Lebe0bAJThMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvseZ3Hm npiC2foos6P/8Xr+yjOGguWt/Ny2cHeK54ODlYtWW/xxVCcoeIr4OTmCeiwmGAuX +2oWh40tRa84RvMkQVT7Lf73rrH5sjRi2dOkzp6OkIqU1URX/ujSBBZ1KYgJLP5a wUC3r0O8+5/7hWrqk/Se6AuhRWbpwb+6c8G62XzHui8uvgmjpCRZ+t8H6bVSIn+B VJ+4t9VvfxBjpdD5x99WTjDQmfn5qdhrW3GHLnpFZRCLcAujJfENqs8CzB6BuCH9 LmwHMbfN5rAP5z2dt3HPO5sHBT+Us0gMwPrEvGK0C/n/6aSaQgf0QqRg9hxjyILZ 1SkcgbUOByDYfA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:42 2025 by rpki-client