$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft File: Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json) Hash identifier: pHj0Gd0VFWDajFhZcBzn+GE9BmsAEgxAXu0Czx4+89U= Subject key identifier: 85:F6:98:23:56:2F:03:B6:88:5C:EE:CB:54:D4:18:69:C1:3B:64:00 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 0199FE46E14EF9C58F77D95DC9A1BC3DE4A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft Manifest number: 12B1 Signing time: Sun 19 Oct 2025 21:01:21 +0000 Manifest this update: Sun 19 Oct 2025 21:01:21 +0000 Manifest next update: Mon 20 Oct 2025 21:01:21 +0000 Files and hashes: 1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=) 2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=) 3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=) 4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=) 5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=) 6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=) 7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=) 8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=) 9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=) 10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=) 11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: ApIYdD/rRWQewSZtvOSn3xTQlQnMEe9cN0aXp+K1A/Q=) 12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=) 13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=) 14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=) 15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=) 16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=) 17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=) 18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=) 19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=) 20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=) 21: lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa (hash: 8Hwz3wPzlSmaqtx7chxbj4/As7Gc40k4bLE+IGEIauQ=) 22: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=) 23: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=) 24: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=) 25: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=) 26: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:46:e1:4e:f9:c5:8f:77:d9:5d:c9:a1:bc:3d:e4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Oct 19 21:01:21 2025 GMT Not After : Oct 20 21:01:21 2025 GMT Subject: CN=85f69823562f03b6885ceecb54d41869c13b6400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:1b:2d:d8:6c:b3:9e:7f:d2:83:e9:78:28: e4:0e:9d:52:1b:4e:75:a1:2e:15:95:fe:71:5a:34: b1:5f:48:38:73:5f:62:2d:e2:ae:c4:1c:8c:41:16: 99:c6:f9:1a:56:6f:e9:35:4e:0f:c1:e6:b6:4d:a7: fc:54:17:ff:73:33:72:19:ef:2d:48:44:21:8a:0b: 91:3b:72:7a:0b:d1:df:32:e7:e6:7c:ac:b2:48:ba: 6b:28:9f:bb:16:05:b0:10:b6:88:35:2b:ce:53:47: 42:55:3e:21:d5:38:69:f5:fc:3e:03:e6:8c:c0:0f: 28:f2:4b:9b:0c:0e:54:1d:93:72:fd:ca:1c:14:01: fd:0d:7d:5a:a0:b6:50:80:13:cc:52:df:c6:7c:33: 2f:e4:af:c7:ac:46:f7:d0:25:5e:a1:77:8b:45:65: 2c:13:45:15:64:ba:8a:ec:a7:c3:3e:31:00:9a:2d: f1:5b:c9:d6:d5:67:99:0e:64:3a:c6:cb:3f:7d:c2: 5c:3f:f4:3c:8d:64:63:9a:87:93:f5:af:b8:57:4e: fc:b2:3f:36:62:3f:f6:d1:ba:a1:e6:70:0d:7d:6c: ed:bd:db:d3:2b:90:eb:b2:89:b2:fa:f3:0c:5e:4a: 71:84:60:ce:83:af:1c:b8:46:5d:c3:7e:80:07:d3: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F6:98:23:56:2F:03:B6:88:5C:EE:CB:54:D4:18:69:C1:3B:64:00 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c3:4a:b0:68:49:95:e5:e4:86:19:89:d6:9f:b9:50:cf:b5: 2f:18:5a:27:fe:67:85:5b:65:93:b1:76:1e:fb:95:1f:c1:93: f4:c6:20:c3:ea:a1:7f:23:86:53:22:6f:7f:c0:db:0e:42:54: 13:73:f3:fc:a1:0a:5d:2b:e9:ef:66:1f:de:6a:0e:f6:29:8a: 2a:f9:23:9d:a0:09:f9:2f:23:5e:67:06:24:39:a0:9f:b9:de: 28:15:b1:55:c6:16:6b:f7:da:38:65:0f:50:b8:21:a7:ac:71: e0:61:1e:6d:07:ad:24:61:d5:b3:bd:2f:fc:2e:78:56:32:90: de:1e:11:a4:ef:76:e9:83:3e:f5:ea:4f:81:6e:af:ae:d0:df: d4:7c:d3:c8:ae:67:eb:89:ee:ae:e1:b4:27:c5:f9:33:02:a2: 25:b3:57:39:0f:9c:7c:01:66:5e:de:2c:75:50:df:d7:f9:2e: 63:7e:75:bb:30:00:13:18:18:c9:46:64:1b:f3:7e:81:4f:85: 5f:f0:9c:2e:32:d7:57:82:5f:bf:d9:e3:00:4e:a2:eb:86:2a: ea:fd:4c:70:d2:2a:72:b2:49:60:38:a1:f8:28:91:e6:ca:c3: bf:03:f4:77:36:90:85:24:d3:cc:e4:88:4f:67:66:3e:17:73: 43:04:a3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+RuFO+cWPd9ldyaG8PeSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjUxMDE5MjEwMTIxWhcNMjUxMDIwMjEwMTIxWjAzMTEwLwYDVQQD Eyg4NWY2OTgyMzU2MmYwM2I2ODg1Y2VlY2I1NGQ0MTg2OWMxM2I2NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroEbLdhss55/0oPpeCjkDp1SG051 oS4Vlf5xWjSxX0g4c19iLeKuxByMQRaZxvkaVm/pNU4Pwea2Taf8VBf/czNyGe8t SEQhiguRO3J6C9HfMufmfKyySLprKJ+7FgWwELaINSvOU0dCVT4h1Thp9fw+A+aM wA8o8kubDA5UHZNy/cocFAH9DX1aoLZQgBPMUt/GfDMv5K/HrEb30CVeoXeLRWUs E0UVZLqK7KfDPjEAmi3xW8nW1WeZDmQ6xss/fcJcP/Q8jWRjmoeT9a+4V078sj82 Yj/20bqh5nANfWztvdvTK5Drsomy+vMMXkpxhGDOg68cuEZdw36AB9O/IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIX2mCNWLwO2iFzuy1TUGGnBO2QAMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsNKsGhJ leXkhhmJ1p+5UM+1LxhaJ/5nhVtlk7F2HvuVH8GT9MYgw+qhfyOGUyJvf8DbDkJU E3Pz/KEKXSvp72Yf3moO9imKKvkjnaAJ+S8jXmcGJDmgn7neKBWxVcYWa/faOGUP ULghp6xx4GEebQetJGHVs70v/C54VjKQ3h4RpO926YM+9epPgW6vrtDf1HzTyK5n 64nuruG0J8X5MwKiJbNXOQ+cfAFmXt4sdVDf1/kuY351uzAAExgYyUZkG/N+gU+F X/CcLjLXV4Jfv9njAE6i64Yq6v1McNIqcrJJYDih+CiR5srDvwP0dzaQhSTTzOSI T2dmPhdzQwSjLg== -----END CERTIFICATE-----Generated at Mon Oct 20 00:02:33 2025 by rpki-client