$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: BympJDybzqHYAU0zwapS3XhF9L0eMmyIImaenho3Ehw= Subject key identifier: 2C:F7:E9:3E:44:37:4F:39:FA:E7:B2:5D:9A:25:3D:77:7C:9F:C3:7F Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019A4F14044C839ED89FCBBF458F33C91AF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1756 Signing time: Tue 04 Nov 2025 13:35:03 +0000 Manifest this update: Tue 04 Nov 2025 13:35:03 +0000 Manifest next update: Wed 05 Nov 2025 13:35:03 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 568PBTNOog5zQd02Gzfw8j53pp0.roa (hash: 9zEg7rD8+zhtCTeBHh1OB7HwhHMIZEI66k67FO3erWc=) 3: 6YeOU-xwRHqJMQtyKmVzLjZmCAM.roa (hash: oPTqGQuFEIoUL5I0HzlZEpKxPvEK6ljihx+tltcKNDI=) 4: 7dayy-ue9GUJpzyclEIimtif3_w.roa (hash: 4JgYJRahEh68+u63kEGGgHtYOlGh91xC0Hb+kdcP4aU=) 5: 9RxTwcsio1S5_RkC0WTrzOMaZhc.roa (hash: 9h7l9iTJhi27U8gTTfYmIzbUUM7p2Wt+DSj4crg7JCc=) 6: EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa (hash: k4j2l8243gZl27loBQC1srNx3SmtQxfanDuXrBBIDpw=) 7: F_MAkVYxg9sMiP5DEGVHwbfzSfQ.roa (hash: iU2Rw86scVC9KCfvNVqgxn5Cd8K9bQngyGzzAmh4vQU=) 8: JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa (hash: JfTdIpHmF4T1dIihVESOhyJNGp+NKyB+FhmpQnwIZKg=) 9: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 10: KSrqd-K2qN25PnwAmClxYgD_VwI.roa (hash: R/U3yBT9e4imvw3Tjw/+/dIWqaaKNifNNdmI6TUsVik=) 11: LECXwwOJkYXSvoEkkhVQqcZQMCw.roa (hash: c2nAj2MsaYNhv7IXToz+zt87p0StOKZqVhSYKT3pEAI=) 12: PnKU_Q2HHtCU1pCr_1KaGPkN2ek.roa (hash: GbYc2B1qBjTyAVup6jSWAzMh9yA2HZhkMGLtK25rTiQ=) 13: TSChuoUoxhH4RDl93vItxLbWmjA.roa (hash: Yt5QjTI9IjJMsTBQGdHqIoHSZWBchoO0b+jSiGXzfpY=) 14: VP6jWluAtlodC9YqkGlyd1EFys4.roa (hash: n8LMv6vS42QVXihrFP9IobGdpbgknVa4JgBCHW2FRoA=) 15: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: iFb2t9IKEQvyhkp7rA96CCBiuVf/gHR+bUlhg6bHzHU=) 16: YQ9Y8mt0ihX-1hkt028wgnIveVM.roa (hash: 2Za3dQMpt5hHnoKCpKq9CmdrcwegpUJWhl7wmxiI9U0=) 17: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 18: dn1rb2wCUiJjbUP99kG112Kz0Pg.roa (hash: diw/B/vJL3e9UDmx8mv3lXrrXjVhjfIy0Zaa+4GOCSc=) 19: h-A858ZfddXvJk42E4zciUqkDGo.roa (hash: dyn6NbexTrThIgZ64mOYzwXCatyWxi4d3djRyVn/ZTk=) 20: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 21: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 22: kJU-KgD8cYtkfeivKCJEB0DdEd8.roa (hash: 5IehEg28rjh+Szw0jXY9Pro/E9tT/kZUcz/KhGmkIUc=) 23: qNG0NYBaxNnb4tvED5blrbZaQm4.roa (hash: kx0filtmJdFwdMqR9tMIqBohoW63H61VsrxnAdch0ZQ=) 24: qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa (hash: 4j7w+emJPvjo8IC4c65G1J9dI6AZT4RULSbnACF02rM=) 25: rjAOeGQCTQyMZoRG4Z022m8KN8o.roa (hash: 35P0Nm9Y4NVT17MO0LbHCMl2O9jDGjPVXc264sSYKEY=) 26: schVxcLi_65lH1A2TemMS4xoeKI.roa (hash: G26ZU92J67QU7tCHqdeTryKRkasRzJr5JoJepYvpSa0=) 27: uUi0KofDbqtYMEaXZKuzUf6j_g8.roa (hash: alyYmtkZg04IYls6laYaGC7Xxo8kIqLyOx7CWUJ5vD8=) 28: vI0U7fkAkt3cTATzOlCKhJuroAc.roa (hash: 5B6VWqHRTBuf463R5V8OHEKJoYOEzFD7hCy/PBP0gEw=) 29: vm8G1CJtR8NoqwuLLwSubFgOmS0.roa (hash: lZ9XUGMQa5iMmI7NjUpdLuwQ8xNfL1R8duvU6nNgaek=) 30: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=) 31: wVIN0cBImlfNWFOz4IT7aYaexqE.roa (hash: BV94o+pd1hE2+f5obJYSJgfF2TueBCqdTmVe9yx/Lfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:14:04:4c:83:9e:d8:9f:cb:bf:45:8f:33:c9:1a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Nov 4 13:35:03 2025 GMT Not After : Nov 5 13:35:03 2025 GMT Subject: CN=2cf7e93e44374f39fae7b25d9a253d777c9fc37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:c6:09:36:d6:3e:b3:c1:53:47:32:33:cc: 1a:90:9d:65:26:d9:44:cb:e1:3e:0f:56:55:10:ef: ef:f4:78:4e:83:ea:d3:e9:74:f9:04:6d:bd:00:e0: 71:e8:dc:c5:6d:70:d7:00:90:2e:c5:42:65:c1:e1: cf:97:6c:5f:af:f5:67:c0:2f:6e:52:a7:1e:2e:ca: 49:d7:b0:34:e1:74:ba:fc:94:81:1d:f6:61:5a:3e: 0b:7e:1b:86:7b:8b:1b:c4:b6:cb:46:47:2f:9e:fd: 7a:15:e8:91:06:bf:ac:be:08:35:5b:bf:fc:ee:6f: 9e:15:38:01:cb:4b:f6:38:4b:42:ae:f7:39:bc:b4: 22:17:a8:8f:55:6f:5c:1b:01:92:39:ae:f1:ee:ed: 22:79:73:a6:f0:0b:06:3d:f4:fd:ce:70:8f:65:d5: a0:9b:38:fd:1f:c8:96:06:76:95:7b:e5:ca:9d:25: 37:cb:42:02:cd:d7:ab:40:d4:32:02:7f:88:83:8c: f8:2b:55:c5:11:d4:84:ff:2e:82:33:51:9c:0f:85: d0:a1:d9:99:53:29:d7:10:85:4a:98:40:29:b4:c5: 02:8a:07:4f:f3:1f:bc:8d:0a:56:bf:b1:42:e7:3b: 52:b1:15:18:84:0f:16:92:99:4e:38:1b:53:6b:6c: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:E9:3E:44:37:4F:39:FA:E7:B2:5D:9A:25:3D:77:7C:9F:C3:7F X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:50:db:ee:af:c4:ab:95:ee:67:86:8b:a8:97:1e:23:89:4b: 48:47:4e:01:db:0d:ab:c0:99:15:f3:fc:48:f7:0a:42:31:78: dd:f1:15:83:57:db:e2:e4:84:55:31:d9:b5:06:57:1b:04:64: b5:c5:30:ec:db:e3:96:a9:a1:b0:f3:cf:0c:c1:50:5d:72:fb: ee:19:d8:6a:05:68:c8:85:f4:b5:f6:1b:23:e0:52:0a:c7:1f: bf:9d:e0:35:2b:da:57:01:48:62:ef:a8:79:84:4a:ca:81:9e: 0b:ea:ea:8a:6b:4d:49:85:53:52:a3:4c:28:c8:e8:6d:8b:3e: c7:56:06:f4:dd:47:d1:21:32:5c:9f:ce:93:58:cc:53:4e:b6: d6:87:9e:11:c0:99:65:fd:3d:54:77:e8:5a:d3:4c:0c:d2:85: a4:2b:e2:02:a6:fa:0a:96:3e:59:b2:af:ff:b0:66:46:68:ad: a0:90:89:6b:98:94:9a:05:8b:9a:fc:71:e3:e1:74:33:9a:1f: 23:00:8d:c3:e2:df:c4:38:6d:66:a6:ff:56:46:9d:33:4c:26: 47:ea:eb:f1:ea:bd:e0:36:da:f2:2c:a0:6c:75:7c:b1:35:8f: 27:1e:70:81:d3:8f:1b:d3:48:5a:be:27:63:e3:5f:0c:3d:90: f9:6c:27:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPFARMg57Yn8u/RY8zyRr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUxMTA0MTMzNTAzWhcNMjUxMTA1MTMzNTAzWjAzMTEwLwYDVQQD EygyY2Y3ZTkzZTQ0Mzc0ZjM5ZmFlN2IyNWQ5YTI1M2Q3NzdjOWZjMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xXGCTbWPrPBU0cyM8wakJ1lJtlE y+E+D1ZVEO/v9HhOg+rT6XT5BG29AOBx6NzFbXDXAJAuxUJlweHPl2xfr/VnwC9u UqceLspJ17A04XS6/JSBHfZhWj4LfhuGe4sbxLbLRkcvnv16FeiRBr+svgg1W7/8 7m+eFTgBy0v2OEtCrvc5vLQiF6iPVW9cGwGSOa7x7u0ieXOm8AsGPfT9znCPZdWg mzj9H8iWBnaVe+XKnSU3y0ICzderQNQyAn+Ig4z4K1XFEdSE/y6CM1GcD4XQodmZ UynXEIVKmEAptMUCigdP8x+8jQpWv7FC5ztSsRUYhA8WkplOOBtTa2wK1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz36T5EN085+ueyXZolPXd8n8N/MB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVDb7q/E q5XuZ4aLqJceI4lLSEdOAdsNq8CZFfP8SPcKQjF43fEVg1fb4uSEVTHZtQZXGwRk tcUw7NvjlqmhsPPPDMFQXXL77hnYagVoyIX0tfYbI+BSCscfv53gNSvaVwFIYu+o eYRKyoGeC+rqimtNSYVTUqNMKMjobYs+x1YG9N1H0SEyXJ/Ok1jMU0621oeeEcCZ Zf09VHfoWtNMDNKFpCviAqb6CpY+WbKv/7BmRmitoJCJa5iUmgWLmvxx4+F0M5of IwCNw+LfxDhtZqb/VkadM0wmR+rr8eq94Dba8iygbHV8sTWPJx5wgdOPG9NIWr4n Y+NfDD2Q+Wwnxg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:59:49 2025 by rpki-client