$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: D8DpQVwQzD2dP1J5Kt5EvLHKzzdzTLunrgQESFqAYmE= Subject key identifier: 42:4E:7A:0A:AB:45:E4:12:DB:04:E2:A9:1F:E4:0D:6C:9F:FB:0F:7D Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 01977DFA3910744C58C5C12F59134420A422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 077B Signing time: Tue 17 Jun 2025 13:00:39 +0000 Manifest this update: Tue 17 Jun 2025 13:00:39 +0000 Manifest next update: Wed 18 Jun 2025 13:00:39 +0000 Files and hashes: 1: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 2: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 3: OXzsoQWcfSLHj04LygHORaYth3Y.roa (hash: gP/eQqQ3pnpzbZZ+ZP/h1YGN6dV6ixwkRO3nX2q99p0=) 4: WzrfmwmTNVB6uRHrw-ne9ZdLki0.roa (hash: cTgbaAteX5wjuagd2qFvaX4ORfcHC52dMpApK36A7Lc=) 5: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: MwYcw+N2+LXQrc9pXzSzIPxMHDQAo9skyZHCl7olHUk=) 6: cpBh0w2t5SUeTveHMXo0e45wl_g.roa (hash: wnpUNv6ppC8UNUrj4/3VOaysZ1B8H6QoFf3xDmtiXxw=) 7: nP6Wp7rqjDbaj9VXPjopbJmmZLQ.roa (hash: EDsEYJXVC7X/AF/ZHxiwn2CZKU1Xg1iI8gyvla1QqdM=) 8: pGCa8ewPnGrDN42G2YmJiI8CNaM.roa (hash: VHyxjE8BSrobaXn9OLbg6V/jTMp++uPyOrdjWlu+LjI=) 9: prBGAJfo6jykezuLUpZ1BEDdn5A.roa (hash: STwdoXQqtV0U9DHkB0uJmQZyaRCvXoZ221e5pNUAHBY=) 10: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7d:fa:39:10:74:4c:58:c5:c1:2f:59:13:44:20:a4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Jun 17 13:00:39 2025 GMT Not After : Jun 18 13:00:39 2025 GMT Subject: CN=424e7a0aab45e412db04e2a91fe40d6c9ffb0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:dd:bc:7a:a2:bc:70:28:c6:2f:82:56:56: a3:79:63:a0:79:5e:bf:d9:91:7d:69:b9:25:c4:b2: 07:fa:8f:1d:0d:6e:6c:f1:4d:36:ff:79:9d:77:73: 07:3a:42:a3:5c:37:95:fc:0c:b8:70:d7:ef:e1:9d: fa:d6:7e:a9:88:16:08:a2:5b:78:bb:e7:e4:db:48: c9:c0:cb:17:a8:aa:c4:6a:29:12:a8:fe:c4:c6:06: e3:72:cd:69:df:9c:9b:1a:b8:cc:78:8d:20:ce:83: 9c:ff:26:16:5f:5b:79:14:03:52:17:e6:99:46:f8: 6d:4c:ca:0e:14:d8:63:ce:cb:da:d8:e4:57:11:13: fb:3a:43:cb:f7:4a:08:35:4b:b9:05:91:18:94:f8: eb:61:32:f6:bd:67:44:9d:3c:b8:ad:b3:12:d7:39: 81:11:1f:0d:40:9a:da:63:1d:1b:36:3e:fd:2d:d3: 99:5c:65:a5:d7:e3:85:24:66:08:72:c9:a5:2f:0b: 7b:9e:3b:bc:04:d4:b7:47:37:2d:da:e0:5e:8b:73: 41:27:f0:3c:8c:b0:9b:d8:b7:13:3a:54:7c:01:02: 85:18:f3:07:d6:29:67:cf:58:94:ee:a0:48:6e:59: 21:b6:32:67:cd:9c:88:95:22:58:d7:ed:fe:f1:cd: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:7A:0A:AB:45:E4:12:DB:04:E2:A9:1F:E4:0D:6C:9F:FB:0F:7D X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6d:6c:89:c6:c2:a4:34:c9:ff:0c:c3:47:69:2f:e4:9c:37: f4:1e:ea:11:38:eb:52:99:6f:2b:2f:d6:4c:b2:ac:e6:5e:44: e5:d5:fa:a0:dd:7c:1f:d8:9e:6f:9b:91:45:9f:2d:a6:ed:b7: a5:84:34:d3:19:0f:c5:7d:90:d5:9b:48:0b:b7:b0:e4:19:1e: 65:59:5b:b6:54:50:d2:96:3b:9e:c3:8e:35:cf:a0:43:15:6e: 67:e7:b0:bc:93:0a:a7:c6:92:2f:bf:e9:1d:a7:c3:98:26:7f: 58:21:9a:b2:6c:01:4b:16:b0:1d:8b:04:3c:95:7a:eb:92:f2: 27:29:10:97:39:02:2e:ed:f4:58:96:29:a7:bb:25:0d:45:02: b3:1b:4c:72:87:ad:46:f8:9b:88:fd:2d:40:13:2e:ff:3a:8c: 5d:1c:40:ea:af:a5:9b:e7:65:dd:d5:9b:34:f8:57:c5:4b:f0: 3f:b0:1d:40:74:70:44:4c:a6:10:fc:56:5c:75:d5:30:fe:20: a3:c3:d4:92:8f:d1:ad:22:bb:ad:fc:7f:78:90:c6:67:6e:08: 79:59:19:21:85:33:34:db:ed:b6:f8:9c:2e:bd:4b:4a:5b:c3: a8:f0:68:03:c1:3a:f6:76:7a:16:4e:d3:cc:f9:90:38:2a:63: d5:b6:dd:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd9+jkQdExYxcEvWRNEIKQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUwNjE3MTMwMDM5WhcNMjUwNjE4MTMwMDM5WjAzMTEwLwYDVQQD Eyg0MjRlN2EwYWFiNDVlNDEyZGIwNGUyYTkxZmU0MGQ2YzlmZmIwZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kLdvHqivHAoxi+CVlajeWOgeV6/ 2ZF9abklxLIH+o8dDW5s8U02/3mdd3MHOkKjXDeV/Ay4cNfv4Z361n6piBYIolt4 u+fk20jJwMsXqKrEaikSqP7Exgbjcs1p35ybGrjMeI0gzoOc/yYWX1t5FANSF+aZ RvhtTMoOFNhjzsva2ORXERP7OkPL90oINUu5BZEYlPjrYTL2vWdEnTy4rbMS1zmB ER8NQJraYx0bNj79LdOZXGWl1+OFJGYIcsmlLwt7nju8BNS3Rzct2uBei3NBJ/A8 jLCb2LcTOlR8AQKFGPMH1ilnz1iU7qBIblkhtjJnzZyIlSJY1+3+8c3uIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJOegqrReQS2wTiqR/kDWyf+w99MB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW1sicbC pDTJ/wzDR2kv5Jw39B7qETjrUplvKy/WTLKs5l5E5dX6oN18H9ieb5uRRZ8tpu23 pYQ00xkPxX2Q1ZtIC7ew5BkeZVlbtlRQ0pY7nsOONc+gQxVuZ+ewvJMKp8aSL7/p HafDmCZ/WCGasmwBSxawHYsEPJV665LyJykQlzkCLu30WJYpp7slDUUCsxtMcoet RvibiP0tQBMu/zqMXRxA6q+lm+dl3dWbNPhXxUvwP7AdQHRwREymEPxWXHXVMP4g o8PUko/RrSK7rfx/eJDGZ24IeVkZIYUzNNvttvicLr1LSlvDqPBoA8E69nZ6Fk7T zPmQOCpj1bbdYg== -----END CERTIFICATE-----Generated at Tue Jun 17 16:17:51 2025 by rpki-client