$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: fFHFIVlNBqJqlGSDXvKnRtm0XnQJcZx1Y2RDM7Kysy0= Subject key identifier: FC:E1:03:15:CB:A0:F4:DA:B4:F5:85:97:F5:35:7C:51:71:BA:8F:8E Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 019A51F5BDEBA6AF3867036CB9560D779FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 0928 Signing time: Wed 05 Nov 2025 03:00:50 +0000 Manifest this update: Wed 05 Nov 2025 03:00:50 +0000 Manifest next update: Thu 06 Nov 2025 03:00:50 +0000 Files and hashes: 1: 2rSo3-q09N7iB7jaYOjneDrv5u0.roa (hash: SeBUuABk516SvykaHeAgwtcJvEimuVjuj4HjynLJdB4=) 2: 7LJP4TTrnOvYHrxDIcD68WvMpkk.roa (hash: lLcekHLAvj7EJiZGkNr9eVZ0bS3xvv53hGQkkk7vZH0=) 3: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 5: JP20HQEng-usG2Tg4OvQmMsT8lE.roa (hash: 3rAazc1ah93oj3YYeUuAqyDzX9FMmIEaFnXDdVjLfD0=) 6: RcvJDa-cbOmIaa4og35Ma3bmLs4.roa (hash: GGKEWRmYEZ5B7wJ/8LINfgpwU0+7mRGdZ5NWQrU75S4=) 7: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 8: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: NYZUZRocTel6i1TVuNZAm028LjIn9ZRppKarxfjvI1A=) 9: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 10: bfGAioHYnVCwURtmCUj955sCQiY.roa (hash: LAys+jZEOLTjTbxBgUViTiDI40ywquJv6pzZYNrFeD0=) 11: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) 12: sshGfE0PHQJIsMjWQ6xCwAfL9ss.roa (hash: NRl6+hvMuRUovTUsdUnT3sLoBJp473sUMroon6ol0SE=) 13: t4KmAsN3n5hvYH7SrJ3ol5Me5m4.roa (hash: MXA7Vri5dzrq8tShc6Jw5y5UGeZgcbY1ukge4h+UeLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:f5:bd:eb:a6:af:38:67:03:6c:b9:56:0d:77:9f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Nov 5 03:00:50 2025 GMT Not After : Nov 6 03:00:50 2025 GMT Subject: CN=fce10315cba0f4dab4f58597f5357c5171ba8f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:f1:45:c0:2c:ef:8f:37:9a:14:fc:65:ae: 64:07:53:4f:9c:00:aa:59:3f:a3:7b:b4:94:d6:82: 6c:aa:7f:29:fc:d4:2d:65:bc:89:7b:18:fd:f6:58: 86:ff:a8:ef:51:fc:9a:be:77:70:34:70:17:b3:2d: 80:b9:7a:4a:b5:64:59:ef:0a:2d:c8:0c:3f:96:88: 06:e5:b0:9d:2d:a0:94:e5:b2:df:a9:ed:44:f5:44: 42:5a:73:41:db:92:31:17:27:85:25:cc:f6:da:a4: 3d:6b:be:76:76:9c:14:6a:c5:44:41:20:cb:ab:4a: e5:b2:23:68:6a:d1:b0:03:4d:8e:31:0d:36:72:08: 7f:46:55:95:c9:be:14:5e:ff:a6:66:9c:b5:4b:f9: 73:c9:e3:2f:7c:da:e7:d1:1e:cf:12:f6:b1:62:17: c1:a8:a6:84:c4:fb:09:ce:39:00:6b:90:c7:c5:ef: 80:9b:fd:14:94:63:52:b3:36:f6:06:90:d2:29:c3: 66:dd:03:12:14:a7:5a:01:09:39:9a:97:22:3b:b4: 05:a7:1f:10:0a:bd:a2:2a:d8:d7:81:4c:04:b3:23: cf:01:94:54:e6:e6:8a:aa:13:22:f8:83:99:f3:3c: 8a:ef:0d:74:61:5d:56:ad:26:2b:66:94:0d:38:2f: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E1:03:15:CB:A0:F4:DA:B4:F5:85:97:F5:35:7C:51:71:BA:8F:8E X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1d:85:e9:3e:08:4e:b1:f4:10:4a:05:42:8f:e5:d0:5c:b6: 87:51:08:e8:6a:07:66:c7:25:3e:7b:22:df:a4:fc:1c:ae:f0: 50:0a:40:72:71:d5:c5:02:4a:ca:88:9d:5b:89:a8:1c:c7:7c: 31:8f:a4:26:7a:a9:5c:e6:8d:50:fa:4f:c0:92:11:f4:e4:18: b1:f5:18:ec:35:d8:20:1b:49:27:4d:e7:d9:6e:81:9f:b4:a9: d1:d9:23:c9:8f:e4:99:59:fe:6a:ec:c5:b6:7e:69:b6:7d:25: a3:82:12:72:83:f0:83:1e:f5:51:a7:b9:00:a7:6c:fc:4a:bb: 0f:fc:76:9e:68:c9:1e:5b:69:7f:fb:e3:0f:27:0d:2f:16:2a: 3f:22:07:55:64:a0:82:17:4a:1e:c4:4c:1c:03:fd:54:4a:aa: ed:66:c1:68:19:5b:48:54:a2:bf:0c:5f:6a:b1:eb:2e:e6:39: e2:b3:d0:7d:3e:d0:87:96:e0:e5:96:04:4c:6a:08:ee:de:85: 20:6e:8b:4c:c6:9f:97:97:a0:55:a9:98:b9:22:db:a9:41:ec: ef:18:f4:c7:20:c0:16:5b:58:c9:9b:93:d0:0e:fb:85:35:a7: 93:cf:c4:cd:ab:2b:1d:be:3b:74:ca:6b:a9:52:8d:8a:1b:39: 4c:00:34:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpR9b3rpq84ZwNsuVYNd5/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUxMTA1MDMwMDUwWhcNMjUxMTA2MDMwMDUwWjAzMTEwLwYDVQQD EyhmY2UxMDMxNWNiYTBmNGRhYjRmNTg1OTdmNTM1N2M1MTcxYmE4ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/xRcAs7483mhT8Za5kB1NPnACq WT+je7SU1oJsqn8p/NQtZbyJexj99liG/6jvUfyavndwNHAXsy2AuXpKtWRZ7wot yAw/logG5bCdLaCU5bLfqe1E9URCWnNB25IxFyeFJcz22qQ9a752dpwUasVEQSDL q0rlsiNoatGwA02OMQ02cgh/RlWVyb4UXv+mZpy1S/lzyeMvfNrn0R7PEvaxYhfB qKaExPsJzjkAa5DHxe+Am/0UlGNSszb2BpDSKcNm3QMSFKdaAQk5mpciO7QFpx8Q Cr2iKtjXgUwEsyPPAZRU5uaKqhMi+IOZ8zyK7w10YV1WrSYrZpQNOC++twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzhAxXLoPTatPWFl/U1fFFxuo+OMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR2F6T4I TrH0EEoFQo/l0Fy2h1EI6GoHZsclPnsi36T8HK7wUApAcnHVxQJKyoidW4moHMd8 MY+kJnqpXOaNUPpPwJIR9OQYsfUY7DXYIBtJJ03n2W6Bn7Sp0dkjyY/kmVn+auzF tn5ptn0lo4IScoPwgx71Uae5AKds/Eq7D/x2nmjJHltpf/vjDycNLxYqPyIHVWSg ghdKHsRMHAP9VEqq7WbBaBlbSFSivwxfarHrLuY54rPQfT7Qh5bg5ZYETGoI7t6F IG6LTMafl5egVamYuSLbqUHs7xj0xyDAFltYyZuT0A77hTWnk8/EzasrHb47dMpr qVKNihs5TAA0EA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:36:08 2025 by rpki-client