$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: 2hvKSBsGAheaMKL/K/JCa/8oKoYXYMQvGT+cZMnCbcY= Subject key identifier: E0:F2:E6:C7:D0:4A:7F:8C:7E:1F:04:3A:87:76:10:8F:3D:38:D7:D8 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 0197B70E985DD14F2AC2D33EA2394B7C2D07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0D37 Signing time: Sat 28 Jun 2025 15:01:16 +0000 Manifest this update: Sat 28 Jun 2025 15:01:16 +0000 Manifest next update: Sun 29 Jun 2025 15:01:16 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: EVKiKepS+V8QltaF5Ny+p78eD1hPAkrGf8jpRcIWV4w=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:98:5d:d1:4f:2a:c2:d3:3e:a2:39:4b:7c:2d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jun 28 15:01:16 2025 GMT Not After : Jun 29 15:01:16 2025 GMT Subject: CN=e0f2e6c7d04a7f8c7e1f043a8776108f3d38d7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:e2:56:33:9f:3a:42:fc:67:c4:03:56:dd: db:a4:36:41:a5:4f:22:4d:d7:06:5e:be:77:a1:e6: 13:eb:ac:e2:86:cf:56:ef:50:92:af:8d:c3:9f:3e: d3:6f:95:a1:ae:c8:40:c3:ef:95:3c:7a:51:03:51: 33:52:b9:5c:82:db:2f:88:a6:32:3d:85:a8:56:d7: e5:f9:20:1b:ff:df:4f:e5:e3:0e:19:ce:89:9f:b6: 21:34:24:9b:45:b7:e8:c4:c4:ca:82:28:bb:2c:ae: a5:9d:08:10:51:59:45:7a:c3:b7:f7:86:24:d2:21: f6:3f:15:bf:6d:25:2b:39:70:38:cf:b1:6d:af:68: 76:3c:0a:a5:27:81:c7:e4:76:72:ae:c0:46:3c:dc: 25:62:04:68:8a:56:eb:31:ac:92:32:55:37:a1:a8: 8c:bf:47:c8:d5:c1:77:88:f7:2c:38:38:a2:f2:e8: d5:52:ac:45:c6:c7:96:90:87:93:ae:81:52:33:b9: cd:8e:4b:e8:25:40:d4:a2:21:82:d9:f5:18:26:8d: 34:ef:bb:ab:51:07:89:05:b1:dd:ff:eb:aa:7d:9e: 01:e8:1d:8b:09:6a:eb:d2:88:86:0c:0a:df:ce:f1: f3:69:ca:d0:71:ca:6b:cb:76:56:a3:4c:e8:84:f1: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:E6:C7:D0:4A:7F:8C:7E:1F:04:3A:87:76:10:8F:3D:38:D7:D8 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:d4:4d:fe:9b:58:89:75:70:98:b7:ea:80:c7:af:49:66: e6:14:e0:97:0e:5c:9a:7f:5c:96:dd:6a:a2:0c:64:21:b5:26: 82:d8:c7:a7:02:b3:16:13:f4:85:ee:da:7d:e8:f8:1b:ad:99: aa:84:bc:a2:aa:11:a7:24:01:63:34:1e:1f:11:1e:ab:9a:96: 6d:4f:03:a9:77:ad:e9:7e:46:33:20:46:92:c7:ad:0e:34:05: 54:59:c2:ac:7b:88:54:fa:d7:2e:d9:19:b3:af:9e:9f:a0:0d: 52:da:fb:9f:1e:90:b2:1e:b4:5d:5c:a2:13:03:df:57:2e:c3: 00:39:9b:0a:05:ef:6c:75:6c:54:57:ad:08:b3:64:79:f4:48: 9b:f3:5c:1b:75:51:75:7c:a2:2a:df:8f:7e:b9:f8:a5:b7:ea: db:dc:08:90:ea:54:b4:e5:e2:b0:2c:25:95:ba:e6:7b:73:18: 71:0f:48:57:df:16:11:a1:1b:0a:2d:29:25:08:d1:cc:71:18: 1a:e6:61:e7:d7:5f:c9:df:03:1c:be:39:02:63:99:3f:ce:93: 25:f6:0c:2b:2b:64:d0:84:2b:01:4f:a0:0c:e0:c3:8e:34:87: 77:71:32:69:a3:22:f9:aa:ea:29:59:d2:b9:38:d2:d1:f3:c8: 9d:51:55:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dphd0U8qwtM+ojlLfC0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwNjI4MTUwMTE2WhcNMjUwNjI5MTUwMTE2WjAzMTEwLwYDVQQD EyhlMGYyZTZjN2QwNGE3ZjhjN2UxZjA0M2E4Nzc2MTA4ZjNkMzhkN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLLiVjOfOkL8Z8QDVt3bpDZBpU8i TdcGXr53oeYT66zihs9W71CSr43Dnz7Tb5WhrshAw++VPHpRA1EzUrlcgtsviKYy PYWoVtfl+SAb/99P5eMOGc6Jn7YhNCSbRbfoxMTKgii7LK6lnQgQUVlFesO394Yk 0iH2PxW/bSUrOXA4z7Ftr2h2PAqlJ4HH5HZyrsBGPNwlYgRoilbrMaySMlU3oaiM v0fI1cF3iPcsODii8ujVUqxFxseWkIeTroFSM7nNjkvoJUDUoiGC2fUYJo0077ur UQeJBbHd/+uqfZ4B6B2LCWrr0oiGDArfzvHzacrQccpry3ZWo0zohPH6jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODy5sfQSn+Mfh8EOod2EI89ONfYMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFbUTf6b WIl1cJi36oDHr0lm5hTglw5cmn9clt1qogxkIbUmgtjHpwKzFhP0he7afej4G62Z qoS8oqoRpyQBYzQeHxEeq5qWbU8DqXet6X5GMyBGksetDjQFVFnCrHuIVPrXLtkZ s6+en6ANUtr7nx6Qsh60XVyiEwPfVy7DADmbCgXvbHVsVFetCLNkefRIm/NcG3VR dXyiKt+Pfrn4pbfq29wIkOpUtOXisCwllbrme3MYcQ9IV98WEaEbCi0pJQjRzHEY GuZh59dfyd8DHL45AmOZP86TJfYMKytk0IQrAU+gDODDjjSHd3EyaaMi+arqKVnS uTjS0fPInVFVXA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:03:03 2025 by rpki-client