$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft File: Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json) Hash identifier: Jna73iYIrNDM0G4Yeb2f0geExvj08ESyyQStttr1SoA= Subject key identifier: 7B:75:5F:04:FD:34:EA:0C:AA:BA:67:C2:68:DA:55:F8:70:22:30:77 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 0198D583AC55E2630266D9F8A9BE86CAA653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft Manifest number: 1217 Signing time: Sat 23 Aug 2025 06:00:32 +0000 Manifest this update: Sat 23 Aug 2025 06:00:32 +0000 Manifest next update: Sun 24 Aug 2025 06:00:32 +0000 Files and hashes: 1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=) 2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=) 3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=) 4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=) 5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=) 6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=) 7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=) 8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=) 9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=) 10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=) 11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: Et621Cb/deKsdNtJ3DrXc53Cbusu16WcR8PuvVzysjM=) 12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=) 13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=) 14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=) 15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=) 16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=) 17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=) 18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=) 19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=) 20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=) 21: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=) 22: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=) 23: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=) 24: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=) 25: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:ac:55:e2:63:02:66:d9:f8:a9:be:86:ca:a6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Aug 23 06:00:32 2025 GMT Not After : Aug 24 06:00:32 2025 GMT Subject: CN=7b755f04fd34ea0caaba67c268da55f870223077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:c5:c3:ac:31:13:6a:a9:4d:50:a6:54:e0: 17:cb:44:72:22:49:eb:aa:f2:5e:21:9d:5d:30:d6: 8d:e9:fd:2f:e9:ef:47:1f:1c:2c:6d:0b:50:89:c0: ef:24:4d:32:3c:2c:88:82:65:24:a0:c0:91:85:dd: 05:75:0c:57:e1:e7:43:09:ed:e4:f4:7d:26:c8:75: 60:2d:a4:54:af:9e:96:9f:f5:23:cd:b6:a9:4b:e7: 32:2d:1c:5d:97:82:23:cf:0e:b8:d6:f4:f3:0f:70: 82:9c:73:16:2d:2c:4f:b4:e9:11:63:2a:43:d5:d8: 30:9d:32:6c:c5:2d:9d:db:0e:32:5d:cd:f3:95:7f: 82:88:f4:b2:3b:ef:fa:0c:97:b1:77:b8:76:dd:a4: 2e:65:79:07:f1:bc:82:cf:db:c0:69:9a:a4:a6:a9: 9e:0d:13:3a:2e:7e:d3:8c:c6:2a:47:85:c6:2f:77: c5:a3:46:1a:3f:7f:0a:e0:94:0e:7b:b1:78:53:4c: 85:31:84:70:49:90:cb:5c:a2:fe:62:3c:27:a9:61: 16:48:67:9c:c6:e6:46:4a:b9:54:66:8e:0f:88:d8: 55:d3:0e:74:0b:19:80:32:f6:54:ae:0c:f6:66:33: 7c:25:d5:67:68:ef:fc:62:9b:6f:d6:b4:a8:6a:b6: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:75:5F:04:FD:34:EA:0C:AA:BA:67:C2:68:DA:55:F8:70:22:30:77 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c8:bb:19:c1:9e:df:37:9e:bc:3f:0d:b3:78:3c:f7:1d:b2: 83:dd:8c:60:82:d5:9a:3d:00:de:af:32:94:4f:b8:10:0a:df: 7d:06:75:7f:84:70:45:92:d1:fc:6e:73:71:9b:54:2d:30:3b: d9:eb:8f:a7:54:ad:07:28:b6:9e:96:4d:6a:b4:e2:18:b1:63: 50:63:01:44:6e:a3:97:18:15:f6:67:9d:9f:da:81:3b:31:f9: 55:fb:b1:6c:35:90:ff:16:7c:7d:af:72:28:ee:98:63:ed:56: 38:7a:45:73:84:54:42:42:bf:ef:48:e5:b0:b5:c6:79:c4:dc: 34:41:08:76:65:57:0c:68:e1:b8:97:31:07:ed:e7:3e:67:31: f6:a4:ec:43:b7:95:d6:bd:a7:ee:88:98:99:d3:72:e3:c1:ff: 94:4a:a7:6b:74:fe:9c:13:51:53:98:ca:ba:88:7a:2f:92:2c: d7:ef:89:3b:dc:47:16:bb:79:e4:14:1c:3c:4e:0a:5d:cd:78: 1b:db:4a:5f:b4:3e:0a:a0:c1:0d:bc:05:12:c8:a2:60:dc:9b: f8:fe:e3:11:be:81:eb:99:c5:68:1f:a7:28:a1:b4:0a:82:c0: 16:cb:b1:55:71:c0:6c:f8:ab:af:04:88:a0:ad:4b:5f:8e:25: c2:f9:37:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg6xV4mMCZtn4qb6GyqZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD Eyg3Yjc1NWYwNGZkMzRlYTBjYWFiYTY3YzI2OGRhNTVmODcwMjIzMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/TFw6wxE2qpTVCmVOAXy0RyIknr qvJeIZ1dMNaN6f0v6e9HHxwsbQtQicDvJE0yPCyIgmUkoMCRhd0FdQxX4edDCe3k 9H0myHVgLaRUr56Wn/UjzbapS+cyLRxdl4Ijzw641vTzD3CCnHMWLSxPtOkRYypD 1dgwnTJsxS2d2w4yXc3zlX+CiPSyO+/6DJexd7h23aQuZXkH8byCz9vAaZqkpqme DRM6Ln7TjMYqR4XGL3fFo0YaP38K4JQOe7F4U0yFMYRwSZDLXKL+YjwnqWEWSGec xuZGSrlUZo4PiNhV0w50CxmAMvZUrgz2ZjN8JdVnaO/8Yptv1rSoaraLywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt1XwT9NOoMqrpnwmjaVfhwIjB3MB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMi7GcGe 3zeevD8Ns3g89x2yg92MYILVmj0A3q8ylE+4EArffQZ1f4RwRZLR/G5zcZtULTA7 2euPp1StByi2npZNarTiGLFjUGMBRG6jlxgV9medn9qBOzH5VfuxbDWQ/xZ8fa9y KO6YY+1WOHpFc4RUQkK/70jlsLXGecTcNEEIdmVXDGjhuJcxB+3nPmcx9qTsQ7eV 1r2n7oiYmdNy48H/lEqna3T+nBNRU5jKuoh6L5Is1++JO9xHFrt55BQcPE4KXc14 G9tKX7Q+CqDBDbwFEsiiYNyb+P7jEb6B65nFaB+nKKG0CoLAFsuxVXHAbPirrwSI oK1LX44lwvk3cg== -----END CERTIFICATE-----Generated at Sat Aug 23 11:41:37 2025 by rpki-client