$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: es8XiIzKYyBaFOH1+/qVt9WiO4TDAUlqFfR5BPgX/UE= Subject key identifier: 58:81:B8:E9:EF:53:03:6C:85:D1:52:E9:BD:E0:E7:B6:EE:4C:26:86 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 0199FC582C98BF710A2FAC090D6A93B14ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0E64 Signing time: Sun 19 Oct 2025 12:01:00 +0000 Manifest this update: Sun 19 Oct 2025 12:01:00 +0000 Manifest next update: Mon 20 Oct 2025 12:01:00 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: eqsOQp/uMmb3kfN1ELTTLyG4hQAxFYr/Bzh/cGq0Mog=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:2c:98:bf:71:0a:2f:ac:09:0d:6a:93:b1:4e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Oct 19 12:01:00 2025 GMT Not After : Oct 20 12:01:00 2025 GMT Subject: CN=5881b8e9ef53036c85d152e9bde0e7b6ee4c2686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:89:dd:06:95:37:3b:dc:3c:5a:13:43:91: 81:75:00:f3:67:d5:98:ef:59:0c:94:40:12:dd:5c: 1b:3b:fc:26:c4:bf:63:75:9d:89:8d:46:67:f1:ee: 08:6e:24:d9:44:f5:d4:08:f1:6a:65:ae:7a:de:6b: c9:45:d3:5d:29:0a:a6:82:17:25:cd:ff:fc:39:bd: d1:ac:33:b3:e2:44:e3:7e:17:3f:0b:4b:ca:c4:fc: e6:0b:f9:bf:10:da:37:43:5a:69:75:94:ab:ef:3a: 61:91:75:aa:93:98:f9:10:85:05:f7:e8:49:5a:01: 6c:3d:e0:50:ac:b9:ec:19:e4:4a:9b:87:82:45:2e: 61:48:25:dc:31:16:d1:ea:47:af:6c:6d:e8:48:9c: 8f:02:8d:68:87:99:5e:7a:22:a8:c8:02:26:0f:64: 34:f1:73:09:55:3d:11:e4:79:d8:61:af:be:fb:bd: ca:fa:06:c2:94:68:1c:85:29:05:4a:71:45:72:e4: df:67:3c:a5:80:f0:08:87:bd:3c:bc:78:54:d1:17: 5e:ae:98:da:2b:ef:1a:00:84:f0:2b:d5:ff:bd:b7: b8:c4:36:08:e7:d2:11:e0:a0:e4:77:a7:90:09:d6: 35:33:45:dd:56:c3:a8:63:30:22:b2:4b:38:3b:bf: b1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:B8:E9:EF:53:03:6C:85:D1:52:E9:BD:E0:E7:B6:EE:4C:26:86 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f3:e6:db:8f:40:a5:63:5b:b9:5d:f8:32:48:51:34:09:0e: 0e:9e:ea:fd:52:44:6d:35:64:7f:55:fe:8e:ea:d4:c9:75:06: 8f:03:2a:d1:2c:0e:da:9d:07:3e:80:c9:2a:17:75:94:1d:42: ca:97:0e:af:bd:65:6d:7d:e4:d3:c1:3d:39:4b:5a:52:b3:be: 24:e1:83:fa:23:37:4b:59:54:8a:ef:ed:d7:ab:a1:9f:ae:45: ec:8f:2c:32:25:07:68:51:71:40:e0:b3:95:4c:28:7a:98:d8: c0:a0:77:94:f8:8a:ee:0e:19:5b:6e:c5:ea:e1:8a:8d:64:70: 3f:3f:9b:0d:ad:b4:17:20:b3:07:81:b2:d3:5f:29:5c:20:47: 1a:02:90:9b:8e:70:94:ae:1c:e7:bc:98:0b:c7:35:fc:3c:78: 8d:28:a4:0d:17:6b:1a:10:a6:59:2f:f9:ec:ef:55:0e:07:d5: 91:40:bb:87:6c:d3:4b:46:a5:8d:33:66:94:96:17:99:3f:59: 8f:6b:a1:9b:b9:16:08:cd:0f:5a:40:3b:ab:57:52:51:4e:48: 37:77:1c:e4:5a:53:14:6b:de:ea:21:5d:0d:6a:86:62:03:17: ca:8b:e2:85:85:78:72:c5:0a:91:c5:6d:19:75:04:51:01:f2: 29:82:25:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WCyYv3EKL6wJDWqTsU7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUxMDE5MTIwMTAwWhcNMjUxMDIwMTIwMTAwWjAzMTEwLwYDVQQD Eyg1ODgxYjhlOWVmNTMwMzZjODVkMTUyZTliZGUwZTdiNmVlNGMyNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaeJ3QaVNzvcPFoTQ5GBdQDzZ9WY 71kMlEAS3VwbO/wmxL9jdZ2JjUZn8e4IbiTZRPXUCPFqZa563mvJRdNdKQqmghcl zf/8Ob3RrDOz4kTjfhc/C0vKxPzmC/m/ENo3Q1ppdZSr7zphkXWqk5j5EIUF9+hJ WgFsPeBQrLnsGeRKm4eCRS5hSCXcMRbR6kevbG3oSJyPAo1oh5leeiKoyAImD2Q0 8XMJVT0R5HnYYa+++73K+gbClGgchSkFSnFFcuTfZzylgPAIh708vHhU0Rderpja K+8aAITwK9X/vbe4xDYI59IR4KDkd6eQCdY1M0XdVsOoYzAisks4O7+xBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiBuOnvUwNshdFS6b3g57buTCaGMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPPm249A pWNbuV34MkhRNAkODp7q/VJEbTVkf1X+jurUyXUGjwMq0SwO2p0HPoDJKhd1lB1C ypcOr71lbX3k08E9OUtaUrO+JOGD+iM3S1lUiu/t16uhn65F7I8sMiUHaFFxQOCz lUwoepjYwKB3lPiK7g4ZW27F6uGKjWRwPz+bDa20FyCzB4Gy018pXCBHGgKQm45w lK4c57yYC8c1/Dx4jSikDRdrGhCmWS/57O9VDgfVkUC7h2zTS0aljTNmlJYXmT9Z j2uhm7kWCM0PWkA7q1dSUU5IN3cc5FpTFGve6iFdDWqGYgMXyovihYV4csUKkcVt GXUEUQHyKYIlzA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:23:23 2025 by rpki-client