$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: fY4iVPVQyu+ROFyH9tvHr/98gnkuNPqKHaRj4reSp30= Subject key identifier: 91:FB:39:3C:CB:13:FF:CA:F0:3E:4E:B6:65:19:F0:92:B6:B2:92:86 Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 019A500730A851E8044E3698B089EBC45E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 0927 Signing time: Tue 04 Nov 2025 18:00:39 +0000 Manifest this update: Tue 04 Nov 2025 18:00:39 +0000 Manifest next update: Wed 05 Nov 2025 18:00:39 +0000 Files and hashes: 1: 2rSo3-q09N7iB7jaYOjneDrv5u0.roa (hash: SeBUuABk516SvykaHeAgwtcJvEimuVjuj4HjynLJdB4=) 2: 7LJP4TTrnOvYHrxDIcD68WvMpkk.roa (hash: lLcekHLAvj7EJiZGkNr9eVZ0bS3xvv53hGQkkk7vZH0=) 3: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 5: JP20HQEng-usG2Tg4OvQmMsT8lE.roa (hash: 3rAazc1ah93oj3YYeUuAqyDzX9FMmIEaFnXDdVjLfD0=) 6: RcvJDa-cbOmIaa4og35Ma3bmLs4.roa (hash: GGKEWRmYEZ5B7wJ/8LINfgpwU0+7mRGdZ5NWQrU75S4=) 7: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 8: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: /kSvc73mHEqbHQxW7lMEtMPnrA0B58I0+FQARxcFWmY=) 9: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 10: bfGAioHYnVCwURtmCUj955sCQiY.roa (hash: LAys+jZEOLTjTbxBgUViTiDI40ywquJv6pzZYNrFeD0=) 11: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) 12: sshGfE0PHQJIsMjWQ6xCwAfL9ss.roa (hash: NRl6+hvMuRUovTUsdUnT3sLoBJp473sUMroon6ol0SE=) 13: t4KmAsN3n5hvYH7SrJ3ol5Me5m4.roa (hash: MXA7Vri5dzrq8tShc6Jw5y5UGeZgcbY1ukge4h+UeLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:07:30:a8:51:e8:04:4e:36:98:b0:89:eb:c4:5e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Nov 4 18:00:39 2025 GMT Not After : Nov 5 18:00:39 2025 GMT Subject: CN=91fb393ccb13ffcaf03e4eb66519f092b6b29286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:b9:1f:de:88:b3:18:8f:36:30:c5:0b:8d: 3c:ff:3e:6f:90:16:f5:a8:94:06:0b:ae:5b:d5:33: 5b:80:bb:64:42:59:a2:10:37:82:5b:74:57:b9:31: 3a:9f:fe:be:a1:bb:99:c7:03:c3:2e:cb:ac:4c:34: af:24:77:50:65:da:a8:2e:e6:6b:41:90:ec:af:d9: 68:a1:a5:33:eb:0c:c9:0e:56:51:23:78:b6:a2:cf: 11:ae:ff:3d:37:71:ee:f5:ae:d8:52:f3:86:73:39: 44:f4:ae:d6:3d:7b:7d:7e:e4:5e:d7:e4:ff:22:cc: 34:76:32:48:9f:1f:3d:1c:05:78:6d:32:80:f8:5c: 6c:29:dd:b7:e5:88:c4:a9:38:8c:27:f7:c4:0c:ff: 1e:75:5c:d4:58:63:4e:01:1a:c1:31:3b:66:35:c9: 49:13:21:37:f0:94:00:ab:06:f9:53:47:52:e7:3e: 6c:90:b9:cb:93:8d:98:98:21:10:90:61:46:aa:e7: 73:29:db:3d:fd:60:a4:08:65:5b:82:9c:29:99:1a: 7b:4b:0d:78:7b:71:aa:a3:91:a9:9b:d8:e0:97:15: bd:9a:f1:6c:bb:e1:0b:50:d1:22:2c:b7:f6:ce:fa: 0e:42:18:5b:a2:44:66:aa:bb:97:9a:25:4c:52:b4: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FB:39:3C:CB:13:FF:CA:F0:3E:4E:B6:65:19:F0:92:B6:B2:92:86 X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5e:54:b0:a1:8a:8f:75:b2:a9:3b:27:69:31:36:fe:76:34: 79:fa:65:8b:30:31:d1:bd:0c:b5:4d:da:15:3d:2a:50:1a:40: 79:95:17:2c:81:9a:ec:9b:87:e5:25:a5:dd:02:7d:93:e2:11: 44:9e:8b:3f:c7:24:df:ae:94:20:34:45:67:f7:5d:68:c3:d2: 7b:c0:0f:68:b2:67:7a:a4:cd:9b:ca:8e:41:23:51:73:bf:82: 29:d5:7d:bc:84:57:c1:61:4f:2c:23:a5:56:57:8c:be:9e:c6: c5:59:1b:d7:a2:fb:72:23:a2:71:53:46:36:06:25:f6:74:86: ff:04:6f:ca:5e:84:4c:83:55:b8:2c:61:98:df:24:c7:45:c4: 7d:9b:16:ca:56:6a:ae:e7:fa:1d:20:9e:97:49:17:d2:e9:11: 6f:88:7a:d7:89:d3:7a:a3:d7:fd:e8:b9:7f:a4:27:db:a5:83: 1b:22:88:3d:6e:28:c5:94:32:c2:23:ed:73:76:f2:9c:0e:dc: 3e:74:a9:70:30:07:15:5f:9b:be:df:aa:a3:81:d6:a1:a3:ee: 2d:9c:a7:4a:20:d5:cc:8d:4a:a8:98:9f:9a:62:bf:6d:8b:ff: 4b:86:86:cf:2b:e7:99:a0:c7:a2:97:37:e2:02:ae:99:75:83: 8c:0d:a0:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQBzCoUegETjaYsInrxF4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUxMTA0MTgwMDM5WhcNMjUxMTA1MTgwMDM5WjAzMTEwLwYDVQQD Eyg5MWZiMzkzY2NiMTNmZmNhZjAzZTRlYjY2NTE5ZjA5MmI2YjI5Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpK5H96IsxiPNjDFC408/z5vkBb1 qJQGC65b1TNbgLtkQlmiEDeCW3RXuTE6n/6+obuZxwPDLsusTDSvJHdQZdqoLuZr QZDsr9looaUz6wzJDlZRI3i2os8Rrv89N3Hu9a7YUvOGczlE9K7WPXt9fuRe1+T/ Isw0djJInx89HAV4bTKA+FxsKd235YjEqTiMJ/fEDP8edVzUWGNOARrBMTtmNclJ EyE38JQAqwb5U0dS5z5skLnLk42YmCEQkGFGqudzKds9/WCkCGVbgpwpmRp7Sw14 e3Gqo5Gpm9jglxW9mvFsu+ELUNEiLLf2zvoOQhhbokRmqruXmiVMUrTxDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJH7OTzLE//K8D5OtmUZ8JK2spKGMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAml5UsKGK j3WyqTsnaTE2/nY0efplizAx0b0MtU3aFT0qUBpAeZUXLIGa7JuH5SWl3QJ9k+IR RJ6LP8ck366UIDRFZ/ddaMPSe8APaLJneqTNm8qOQSNRc7+CKdV9vIRXwWFPLCOl VleMvp7GxVkb16L7ciOicVNGNgYl9nSG/wRvyl6ETINVuCxhmN8kx0XEfZsWylZq ruf6HSCel0kX0ukRb4h614nTeqPX/ei5f6Qn26WDGyKIPW4oxZQywiPtc3bynA7c PnSpcDAHFV+bvt+qo4HWoaPuLZynSiDVzI1KqJifmmK/bYv/S4aGzyvnmaDHopc3 4gKumXWDjA2ggg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:05 2025 by rpki-client