$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: YGacLVPtu7yekBeCSqo4EQJFtxYITfifomEllodMHVE= Subject key identifier: 73:3C:88:D6:01:D1:C8:9B:C6:88:35:0F:5E:C7:78:FA:2A:4A:77:74 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 01987C095FE7B04A257DD6F18A7BE410D3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1629 Signing time: Tue 05 Aug 2025 21:00:45 +0000 Manifest this update: Tue 05 Aug 2025 21:00:45 +0000 Manifest next update: Wed 06 Aug 2025 21:00:45 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: SYW7vJR8jh6OnS0xw0zxS3bgN60.roa (hash: RRdRxhUDlZPMyyr5BdAFCoJYcDMXRiJFFRNcVSSyJoQ=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: ZRAUyLEMiN/e6UFuleYgbei0iHuZizAZLGXKaQjxtJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 17:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:09:5f:e7:b0:4a:25:7d:d6:f1:8a:7b:e4:10:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Aug 5 21:00:45 2025 GMT Not After : Aug 6 21:00:45 2025 GMT Subject: CN=733c88d601d1c89bc688350f5ec778fa2a4a7774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:80:82:a0:5a:a7:f4:0c:f8:79:17:3f:e7: c9:94:d7:eb:86:24:5b:0f:6d:52:70:96:e8:c6:8b: 9f:06:10:96:9b:9c:64:6e:49:72:6f:f3:15:b7:46: ea:93:62:b0:9e:42:8a:af:a2:35:06:e6:6d:4d:89: 60:0e:1d:58:fb:18:86:03:5b:6f:58:b1:a9:f5:18: 9f:a7:58:7b:d2:bc:03:ad:5d:27:b6:ca:d6:c0:d3: c4:c7:b2:4c:0f:ee:8f:a4:c6:a9:49:98:90:10:e1: cf:c4:27:81:d6:1f:60:6c:59:3b:84:91:9b:72:e2: 0a:30:f4:02:f4:20:61:ac:2d:49:28:25:4a:79:d3: 46:69:21:e7:f0:87:6c:d3:f3:a5:6d:f6:56:fa:98: 29:d2:ff:4e:92:ed:77:eb:01:70:52:8e:e6:00:af: bc:aa:8d:c4:ea:19:b5:49:ec:97:c9:cc:95:ca:34: 70:9a:dd:4e:f3:92:2e:53:6a:8e:d7:8f:c9:f1:62: 0e:f8:4d:9b:66:d0:80:71:01:40:61:81:1f:ac:dd: e9:25:4e:38:17:b3:42:84:ac:87:7c:de:54:82:21: 1f:bd:ff:88:ef:96:47:f2:42:8b:31:ae:16:e1:79: f0:55:e9:5b:19:80:91:0d:44:31:55:1f:af:09:9c: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3C:88:D6:01:D1:C8:9B:C6:88:35:0F:5E:C7:78:FA:2A:4A:77:74 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9f:7c:6d:8f:1f:85:28:5b:10:b0:5c:0a:f1:13:b7:e0:2e: 99:43:4f:72:39:99:2d:1a:82:86:75:8d:c5:17:fe:2e:19:0a: 1c:41:c5:8b:6c:9b:09:cb:71:05:84:6c:a1:23:3a:2e:83:79: dd:ae:38:f2:da:e7:9a:2f:66:eb:27:7c:ac:5b:cc:44:34:bf: 6a:31:7b:77:e8:4f:6a:bc:4e:b9:00:33:92:79:e9:48:62:91: 6f:79:e4:c7:8d:7c:a2:9b:1c:4a:a5:2b:38:6b:75:4c:f8:c3: a9:42:88:f8:ec:93:86:c7:b7:bf:41:21:21:eb:3b:a1:4f:4a: d8:3f:4f:32:f3:c3:36:33:15:f8:38:9a:9c:7a:47:f3:2d:16: 3c:7f:f3:b3:62:a4:e4:47:04:c0:b7:74:ea:07:f5:12:b5:c6: 9e:b4:36:e1:4a:3c:00:ac:3b:f7:ea:fe:d1:11:34:d8:93:e5: c3:55:1c:1c:a5:d1:29:a7:10:47:6e:f9:01:5d:b5:ec:13:e7: 16:30:85:85:18:a6:9d:b7:ac:0d:52:18:02:9f:ca:e8:fd:ad: 0e:83:e4:d9:0b:85:2a:7a:b7:46:7a:2d:dc:f9:7e:f8:d8:c8: ad:90:34:a1:ab:0a:60:2c:86:f2:cc:c7:e6:93:26:f1:8b:6a: df:a7:f4:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8CV/nsEolfdbxinvkENO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUwODA1MjEwMDQ1WhcNMjUwODA2MjEwMDQ1WjAzMTEwLwYDVQQD Eyg3MzNjODhkNjAxZDFjODliYzY4ODM1MGY1ZWM3NzhmYTJhNGE3Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5iAgqBap/QM+HkXP+fJlNfrhiRb D21ScJboxoufBhCWm5xkbklyb/MVt0bqk2KwnkKKr6I1BuZtTYlgDh1Y+xiGA1tv WLGp9Rifp1h70rwDrV0ntsrWwNPEx7JMD+6PpMapSZiQEOHPxCeB1h9gbFk7hJGb cuIKMPQC9CBhrC1JKCVKedNGaSHn8Ids0/OlbfZW+pgp0v9Oku136wFwUo7mAK+8 qo3E6hm1SeyXycyVyjRwmt1O85IuU2qO14/J8WIO+E2bZtCAcQFAYYEfrN3pJU44 F7NChKyHfN5UgiEfvf+I75ZH8kKLMa4W4XnwVelbGYCRDUQxVR+vCZytKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM8iNYB0cibxog1D17HePoqSnd0MB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ98bY8f hShbELBcCvETt+AumUNPcjmZLRqChnWNxRf+LhkKHEHFi2ybCctxBYRsoSM6LoN5 3a448trnmi9m6yd8rFvMRDS/ajF7d+hParxOuQAzknnpSGKRb3nkx418opscSqUr OGt1TPjDqUKI+OyThse3v0EhIes7oU9K2D9PMvPDNjMV+DianHpH8y0WPH/zs2Kk 5EcEwLd06gf1ErXGnrQ24Uo8AKw79+r+0RE02JPlw1UcHKXRKacQR275AV217BPn FjCFhRimnbesDVIYAp/K6P2tDoPk2QuFKnq3Rnot3Pl++NjIrZA0oasKYCyG8szH 5pMm8Ytq36f05Q== -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:23 2025 by rpki-client