$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: 3MfA2Y4knCdV/pxmChRO9Oq7AjZ910ltnFL1ema5TKI= Subject key identifier: 69:DB:F1:FC:5F:85:68:88:16:1D:37:31:D8:79:4A:34:22:64:FF:83 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019892C8F9167B14DD1A0A1DFF71F5D4A6B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0A33 Signing time: Sun 10 Aug 2025 07:01:41 +0000 Manifest this update: Sun 10 Aug 2025 07:01:41 +0000 Manifest next update: Mon 11 Aug 2025 07:01:41 +0000 Files and hashes: 1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: BthhMDkFUBnBxllESVuZ6rISIhZ8YKcRAywC0UKerTQ=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:92:c8:f9:16:7b:14:dd:1a:0a:1d:ff:71:f5:d4:a6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Aug 10 07:01:41 2025 GMT Not After : Aug 11 07:01:41 2025 GMT Subject: CN=69dbf1fc5f856888161d3731d8794a342264ff83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:c6:0f:7f:a9:a3:3b:fa:05:1f:47:0e:b2: c0:e0:e9:74:c3:44:1d:7f:f0:25:9a:21:0a:ba:21: 0d:91:fa:07:8e:dd:53:9d:58:17:a1:f0:6a:2e:50: ff:d9:fe:b9:b3:4e:1f:40:57:cc:a4:51:10:c2:3c: 33:51:a4:25:d8:a5:02:d1:98:f1:72:81:46:77:93: ba:95:bd:47:37:cd:e0:9e:81:c3:72:19:33:67:fb: 02:c4:e4:94:78:9f:b8:d5:9a:69:ab:f1:b9:e4:2c: 38:42:a6:f4:20:ac:65:25:6f:64:25:03:2f:9f:5d: e0:6e:55:b7:f7:63:ea:75:96:3d:b4:3f:39:c0:3c: 17:92:1b:94:0f:23:74:c9:a8:09:fd:40:05:a4:87: 50:76:86:17:f5:5b:26:58:01:2d:4f:d7:d2:d2:92: e3:26:32:d1:df:1e:29:b7:97:18:06:4c:0f:71:3b: 09:3f:62:5b:03:59:23:19:e1:2a:87:ed:67:6e:e2: 19:dc:3a:53:58:bb:d9:ce:b1:64:d2:a4:4a:6a:47: 9b:12:59:33:72:73:6e:70:d9:1e:ee:06:fe:6d:c2: 18:94:ab:37:bb:04:bd:17:57:bc:ca:28:78:ca:68: da:ff:9a:06:7a:d3:88:54:2d:58:ae:b3:06:30:3b: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DB:F1:FC:5F:85:68:88:16:1D:37:31:D8:79:4A:34:22:64:FF:83 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a0:7a:95:fe:cb:7f:26:18:db:c4:66:17:99:5f:fb:5a:81: 3b:f6:e0:c2:12:34:1d:49:c1:53:c0:e7:92:22:c7:ad:e8:1e: 11:ce:9b:f0:72:c0:0d:f6:1a:52:ab:26:8a:57:7f:da:05:01: e3:d1:28:b8:07:1a:03:ba:7f:17:00:27:49:d0:e0:e6:a8:d6: 83:09:cb:5f:91:d0:67:51:0e:8a:dc:d8:46:2b:8a:ff:5f:a8: d6:05:a3:c2:33:f7:d6:9f:7c:0b:da:86:ee:a3:2f:89:ab:43: c2:6c:f2:5e:7c:c3:c9:9a:eb:c3:e9:7f:f7:c9:2a:f9:bb:b4: ca:c0:3f:81:bc:97:e9:c6:15:dd:0b:86:db:76:dd:9e:a4:32: 5b:47:c1:16:e2:71:9c:98:8b:fb:72:7e:6e:7b:49:ef:e6:f9: c6:a1:a2:51:74:7d:f8:6c:a3:fe:f0:02:ad:aa:11:d1:94:52: a8:72:2b:31:07:b1:60:7d:d3:0b:00:57:1a:07:60:5e:01:74: 57:2d:74:e5:ef:e7:2a:47:5c:09:c5:b9:0b:84:fb:26:f0:c3: c2:75:31:9a:d0:db:fc:39:46:00:3d:eb:1e:d0:9e:f1:52:97: a8:5b:67:68:b8:91:5c:ef:6b:b9:cd:fa:bc:83:fa:dd:93:42: 5a:82:fa:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiSyPkWexTdGgod/3H11KayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwODEwMDcwMTQxWhcNMjUwODExMDcwMTQxWjAzMTEwLwYDVQQD Eyg2OWRiZjFmYzVmODU2ODg4MTYxZDM3MzFkODc5NGEzNDIyNjRmZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMrGD3+pozv6BR9HDrLA4Ol0w0Qd f/AlmiEKuiENkfoHjt1TnVgXofBqLlD/2f65s04fQFfMpFEQwjwzUaQl2KUC0Zjx coFGd5O6lb1HN83gnoHDchkzZ/sCxOSUeJ+41Zppq/G55Cw4Qqb0IKxlJW9kJQMv n13gblW392PqdZY9tD85wDwXkhuUDyN0yagJ/UAFpIdQdoYX9VsmWAEtT9fS0pLj JjLR3x4pt5cYBkwPcTsJP2JbA1kjGeEqh+1nbuIZ3DpTWLvZzrFk0qRKakebElkz cnNucNke7gb+bcIYlKs3uwS9F1e8yih4ymja/5oGetOIVC1YrrMGMDsefwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnb8fxfhWiIFh03Mdh5SjQiZP+DMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKB6lf7L fyYY28RmF5lf+1qBO/bgwhI0HUnBU8DnkiLHregeEc6b8HLADfYaUqsmild/2gUB 49EouAcaA7p/FwAnSdDg5qjWgwnLX5HQZ1EOitzYRiuK/1+o1gWjwjP31p98C9qG 7qMviatDwmzyXnzDyZrrw+l/98kq+bu0ysA/gbyX6cYV3QuG23bdnqQyW0fBFuJx nJiL+3J+bntJ7+b5xqGiUXR9+Gyj/vACraoR0ZRSqHIrMQexYH3TCwBXGgdgXgF0 Vy105e/nKkdcCcW5C4T7JvDDwnUxmtDb/DlGAD3rHtCe8VKXqFtnaLiRXO9ruc36 vIP63ZNCWoL6nw== -----END CERTIFICATE-----Generated at Sun Aug 10 10:33:35 2025 by rpki-client