$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: QNooFNdHJ8B1HpXVR2Jz2WJJ2j7roZXka5Q/pT/izwE= Subject key identifier: B6:34:AD:04:08:3F:5F:86:AB:57:94:15:E9:66:D4:B8:44:EB:0C:BA Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 01988242E4F56B72F935EF555A8AD001E789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 0815 Signing time: Thu 07 Aug 2025 02:01:18 +0000 Manifest this update: Thu 07 Aug 2025 02:01:18 +0000 Manifest next update: Fri 08 Aug 2025 02:01:18 +0000 Files and hashes: 1: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 2: BA5KV0qch7eRwK8iNS7Ginv7mPo.roa (hash: g51hA9Af6Sjh5mXBBikwTAuq5cVrwKqU5G3PZcvqOEg=) 3: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 4: FafnGioXQ9wljFkhuJJdCKFjkww.roa (hash: eKLUYDySvMyLsJDItXiTd2pY6vCov8KOTfhRVaTgfs8=) 5: HpOi7c_S_v8OgGfAcW8YhSlJRVk.roa (hash: CM7jTteVy3XFQV9Gw/Amlvv4uEMdN4ootFhXdwUocaA=) 6: Rv56JbM9B0QRW871yiTV-6FdpRA.roa (hash: WXhKSn8R39elIT0wpsiUNOwPTK9oHy/wkiqB/Sxv7nI=) 7: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 8: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: qhOCumleIflUHKt6Ussn1R1vBe3GWGxmVWFANDUzrkI=) 9: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 10: nOpnpLk5NAJl0__AJ-3xslH07XY.roa (hash: We/d0dc/Anxfxl6Kd0nGwLns+hE9jp/nOrjRS2Waut0=) 11: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:82:42:e4:f5:6b:72:f9:35:ef:55:5a:8a:d0:01:e7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Aug 7 02:01:18 2025 GMT Not After : Aug 8 02:01:18 2025 GMT Subject: CN=b634ad04083f5f86ab579415e966d4b844eb0cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:ec:22:1f:5c:e9:26:62:4c:b3:be:36:94: 6d:8e:5b:7d:64:58:92:26:92:76:e4:a8:c1:71:d2: ad:c7:09:32:2d:ff:0d:3a:f7:30:1b:78:55:3e:81: 62:46:6d:5d:61:9e:fb:f5:f7:ee:72:26:ea:55:23: 0f:cf:14:d8:3a:11:4f:5b:cb:bb:7b:c7:be:96:61: 69:2f:d5:f1:06:94:0b:e5:f6:e0:60:d4:9d:15:2a: ac:96:d6:ec:fe:44:8c:e9:31:45:67:47:8f:53:52: 42:76:29:03:6b:c9:ed:7b:56:b5:65:3b:d0:90:1b: c1:e5:3a:96:79:b9:aa:2f:2d:41:d9:1e:1d:d9:50: 5f:ed:fe:78:ed:dd:43:ec:3d:02:38:64:02:af:36: 10:c7:43:f9:b9:6d:87:33:75:6f:65:20:3a:47:86: 85:b9:42:5f:2c:b4:fb:e0:41:69:b8:a6:30:1c:6a: f6:aa:e7:7b:75:99:c6:b2:62:91:44:fa:71:3b:f2: 5b:e7:0a:0d:ec:7a:ed:0a:8e:d1:dd:33:ec:ea:c4: d9:b1:cc:63:31:cd:14:13:28:16:9d:77:84:11:29: 4c:fd:7e:ca:06:f6:3b:32:7b:c7:1a:10:ec:2b:68: 9d:7f:fc:38:17:0c:74:e1:93:5d:64:09:32:73:f7: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:AD:04:08:3F:5F:86:AB:57:94:15:E9:66:D4:B8:44:EB:0C:BA X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:34:13:ba:a7:a3:e5:ed:a3:98:73:e1:54:5a:40:28:41:3c: 46:6e:89:e4:99:b6:d9:16:c2:fe:0b:de:0b:e0:58:99:7f:1c: a3:17:1a:29:59:1d:63:47:22:46:e3:6e:64:d3:5b:e1:b6:5b: d8:49:71:35:83:c5:e9:4a:74:3f:c6:4a:28:5d:7f:0a:08:90: fa:10:8a:ff:c7:38:1f:81:1c:c1:6d:04:c1:2e:e5:47:cb:9f: 09:cb:fe:40:72:e7:ae:9c:0d:17:74:a8:f2:bf:4d:41:2e:00: d0:6f:5b:b2:8d:b7:ae:5a:41:f1:6d:8a:9d:38:f1:12:6f:76: 94:85:5d:e6:de:30:46:ae:7c:e7:1a:b9:32:20:52:e3:8b:17: 0e:7b:1b:e7:a8:ea:c7:ae:e8:b6:c1:0d:a6:96:de:7c:fc:d1: 09:a1:df:cb:29:ae:ab:4c:1e:c8:bb:2b:29:5c:74:d7:d6:1e: 54:5a:60:f5:92:ac:d2:b1:42:77:6f:13:cf:d2:00:57:24:cc: 9b:1b:3b:65:a9:ce:b5:2d:e9:d9:b2:03:a6:d1:23:f8:a7:98: ae:79:2a:ff:12:89:1c:10:52:e0:f4:cd:b4:af:41:c3:20:e7: 2e:a9:f0:f5:22:54:21:01:d7:be:11:9c:c0:69:df:44:26:ef: 8e:1c:d9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiCQuT1a3L5Ne9VWorQAeeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUwODA3MDIwMTE4WhcNMjUwODA4MDIwMTE4WjAzMTEwLwYDVQQD EyhiNjM0YWQwNDA4M2Y1Zjg2YWI1Nzk0MTVlOTY2ZDRiODQ0ZWIwY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHXsIh9c6SZiTLO+NpRtjlt9ZFiS JpJ25KjBcdKtxwkyLf8NOvcwG3hVPoFiRm1dYZ779ffucibqVSMPzxTYOhFPW8u7 e8e+lmFpL9XxBpQL5fbgYNSdFSqsltbs/kSM6TFFZ0ePU1JCdikDa8nte1a1ZTvQ kBvB5TqWebmqLy1B2R4d2VBf7f547d1D7D0COGQCrzYQx0P5uW2HM3VvZSA6R4aF uUJfLLT74EFpuKYwHGr2qud7dZnGsmKRRPpxO/Jb5woN7HrtCo7R3TPs6sTZscxj Mc0UEygWnXeEESlM/X7KBvY7MnvHGhDsK2idf/w4Fwx04ZNdZAkyc/cDyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY0rQQIP1+Gq1eUFelm1LhE6wy6MB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTQTuqej 5e2jmHPhVFpAKEE8Rm6J5Jm22RbC/gveC+BYmX8coxcaKVkdY0ciRuNuZNNb4bZb 2ElxNYPF6Up0P8ZKKF1/CgiQ+hCK/8c4H4EcwW0EwS7lR8ufCcv+QHLnrpwNF3So 8r9NQS4A0G9bso23rlpB8W2KnTjxEm92lIVd5t4wRq585xq5MiBS44sXDnsb56jq x67otsENppbefPzRCaHfyymuq0weyLsrKVx019YeVFpg9ZKs0rFCd28Tz9IAVyTM mxs7ZanOtS3p2bIDptEj+KeYrnkq/xKJHBBS4PTNtK9BwyDnLqnw9SJUIQHXvhGc wGnfRCbvjhzZHw== -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:04 2025 by rpki-client