$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: rpXEI0i3t/LJxc0UOBKBvtgAUcwYkigWTPUE+fPDD9o= Subject key identifier: B1:9F:E2:57:00:8D:19:C1:C4:E6:4A:32:1B:65:40:B5:25:D8:70:04 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019A5150822089EB7BB596B1995A98B1D536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 171C Signing time: Wed 05 Nov 2025 00:00:21 +0000 Manifest this update: Wed 05 Nov 2025 00:00:21 +0000 Manifest next update: Thu 06 Nov 2025 00:00:21 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: SYW7vJR8jh6OnS0xw0zxS3bgN60.roa (hash: RRdRxhUDlZPMyyr5BdAFCoJYcDMXRiJFFRNcVSSyJoQ=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: /846hq44XE2YKbkpYR5BvbiAw8d+TaifHE7kYGBlDsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:50:82:20:89:eb:7b:b5:96:b1:99:5a:98:b1:d5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Nov 5 00:00:21 2025 GMT Not After : Nov 6 00:00:21 2025 GMT Subject: CN=b19fe257008d19c1c4e64a321b6540b525d87004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:a7:c0:df:fe:71:ce:23:9e:57:5d:a9:1c: 96:5c:b3:a5:b4:57:68:9d:cd:7f:76:e2:5e:08:3e: 95:d4:66:1b:7b:98:69:07:18:50:aa:cf:df:58:5c: 7e:bb:8a:d8:44:58:07:8a:db:7d:bf:c8:6a:62:cd: 73:9e:4f:d6:6b:22:4a:ba:06:cf:36:a7:74:3b:1f: ec:57:47:25:3e:50:8c:0d:c6:77:5d:60:2c:f1:4d: 11:83:5b:2c:0b:96:0d:c4:3d:0c:a2:eb:33:9a:b8: 82:f4:86:78:8e:93:af:0a:8a:02:6e:6c:af:9b:8b: 3c:b5:42:2d:9e:45:72:f9:57:5a:3d:e0:23:17:7f: 92:d5:81:d7:d7:37:f1:f9:15:04:92:9b:05:78:09: f5:d1:9f:9e:f3:72:48:45:e2:41:97:4d:81:df:cf: b9:a9:cb:18:d7:a5:59:85:48:bb:5f:4a:3b:a7:62: ea:10:8a:77:e3:87:12:25:f3:8a:c7:e8:1f:ef:2e: 96:8b:c1:55:75:07:b8:b3:93:7c:19:93:43:cd:84: 00:6d:c8:d8:65:74:e4:5e:fc:ab:59:8a:bb:cf:28: 3e:ea:b8:bc:7b:15:67:be:f1:60:91:47:a1:9d:64: eb:61:97:fd:06:de:77:db:33:5e:65:c0:cb:01:ab: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9F:E2:57:00:8D:19:C1:C4:E6:4A:32:1B:65:40:B5:25:D8:70:04 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b0:4b:fc:29:c8:81:b0:ef:85:ea:5f:99:07:03:92:ff:a3: ba:2b:ad:57:e1:7b:d7:a0:61:81:72:aa:f0:53:5b:d0:3d:cd: 8f:7c:88:27:e9:b9:a7:ce:f8:f2:b4:20:44:93:85:25:5c:3a: 0e:df:c8:ee:11:93:1d:71:d3:64:cf:01:45:9d:a7:4f:52:96: b5:ab:9e:22:e8:38:2c:b1:31:39:60:c0:c1:cf:e7:27:87:7f: 56:c9:6a:c4:b1:6d:75:42:e8:4d:7a:e4:a1:df:44:11:0c:9a: 07:bf:ff:9c:e7:be:ed:72:94:c3:88:32:ea:38:74:e2:68:b4: 53:c9:a8:db:31:8d:b8:34:19:d5:f3:8c:8f:fc:86:d2:66:d1: 54:44:38:52:01:71:8f:a3:3e:d6:a2:94:97:d5:4e:45:05:08: 50:9c:92:dc:2c:d0:e3:44:89:1a:4a:de:ab:b7:53:bb:30:b8: da:ee:47:e1:de:64:49:7c:d5:8d:a8:ad:e6:64:b4:6f:6f:b4: 41:cb:57:b5:c7:de:53:f5:47:59:a6:b6:e8:c6:db:74:94:a7: 76:0c:de:dc:95:f5:4d:1b:c9:e3:24:2b:ff:cf:a1:f0:6c:fb: 0c:50:fb:b3:0c:84:fd:84:41:df:e5:41:37:cb:55:7a:8c:3b: 96:05:e5:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUIIgiet7tZaxmVqYsdU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUxMTA1MDAwMDIxWhcNMjUxMTA2MDAwMDIxWjAzMTEwLwYDVQQD EyhiMTlmZTI1NzAwOGQxOWMxYzRlNjRhMzIxYjY1NDBiNTI1ZDg3MDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJCnwN/+cc4jnlddqRyWXLOltFdo nc1/duJeCD6V1GYbe5hpBxhQqs/fWFx+u4rYRFgHitt9v8hqYs1znk/WayJKugbP Nqd0Ox/sV0clPlCMDcZ3XWAs8U0Rg1ssC5YNxD0MouszmriC9IZ4jpOvCooCbmyv m4s8tUItnkVy+VdaPeAjF3+S1YHX1zfx+RUEkpsFeAn10Z+e83JIReJBl02B38+5 qcsY16VZhUi7X0o7p2LqEIp344cSJfOKx+gf7y6Wi8FVdQe4s5N8GZNDzYQAbcjY ZXTkXvyrWYq7zyg+6ri8exVnvvFgkUehnWTrYZf9Bt532zNeZcDLAauF0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGf4lcAjRnBxOZKMhtlQLUl2HAEMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrBL/CnI gbDvhepfmQcDkv+juiutV+F716BhgXKq8FNb0D3Nj3yIJ+m5p8748rQgRJOFJVw6 Dt/I7hGTHXHTZM8BRZ2nT1KWtaueIug4LLExOWDAwc/nJ4d/VslqxLFtdULoTXrk od9EEQyaB7//nOe+7XKUw4gy6jh04mi0U8mo2zGNuDQZ1fOMj/yG0mbRVEQ4UgFx j6M+1qKUl9VORQUIUJyS3CzQ40SJGkreq7dTuzC42u5H4d5kSXzVjait5mS0b2+0 QctXtcfeU/VHWaa26MbbdJSndgze3JX1TRvJ4yQr/8+h8Gz7DFD7swyE/YRB3+VB N8tVeow7lgXlmA== -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:16 2025 by rpki-client