$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: Jq7KSsWJ6bzBdLxa4qoZ8h1IeqnftZdstRGQvFwqrfg= Subject key identifier: 17:E6:8D:F1:90:4C:7A:01:F9:2F:C5:D7:83:CC:3C:5E:23:F2:5F:C8 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 0198D6CCEB28B842FEBBB5B6A0BD817A59B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0DCC Signing time: Sat 23 Aug 2025 12:00:10 +0000 Manifest this update: Sat 23 Aug 2025 12:00:10 +0000 Manifest next update: Sun 24 Aug 2025 12:00:10 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: kU2/lA8aE08Vqme790pO7qliKcIwruCAqgAZPuVZTBQ=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:cc:eb:28:b8:42:fe:bb:b5:b6:a0:bd:81:7a:59:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Aug 23 12:00:10 2025 GMT Not After : Aug 24 12:00:10 2025 GMT Subject: CN=17e68df1904c7a01f92fc5d783cc3c5e23f25fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:a7:41:cb:1f:18:a3:f0:a0:34:e1:73:b3: bc:3c:22:6d:4b:00:71:cd:a1:cb:e6:dd:2c:04:a9: 64:3f:c6:dd:e5:c1:92:14:0b:da:1c:24:0b:0a:d3: 83:cc:94:6f:db:db:f3:f3:09:16:86:36:75:43:e5: 25:eb:e6:0d:bf:72:c6:6b:f7:d3:a8:5f:8c:34:1e: b7:8d:25:20:6d:e3:1f:d2:94:b9:5f:3d:0f:b7:22: e4:74:fa:ce:54:cd:64:92:a2:ff:f5:40:12:1d:04: 41:29:42:38:ae:d0:1f:42:83:fe:fd:ff:55:67:9b: 0c:89:21:d3:86:fa:28:01:5d:5f:e0:62:7a:2d:25: f2:a4:9a:72:e2:63:fa:66:14:9b:15:75:8d:c0:89: 06:3b:06:6e:c4:dd:d8:1f:5d:de:f4:69:cc:ed:ac: 80:62:80:7f:21:98:58:e2:1b:18:e6:8c:93:9f:56: b3:b2:8d:d0:d0:3b:78:0e:95:4a:4b:c1:73:1b:e0: a0:58:36:7f:60:9e:94:78:fa:ca:d0:a9:96:c4:f3: f5:46:b2:5c:7a:54:f8:53:1a:04:20:08:89:ff:31: bb:7a:f6:d0:77:0c:8c:f0:b3:4d:4d:c7:14:d7:5d: a7:31:e3:f8:16:58:65:ae:ad:a3:19:89:a0:2a:04: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E6:8D:F1:90:4C:7A:01:F9:2F:C5:D7:83:CC:3C:5E:23:F2:5F:C8 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e3:ba:e4:4a:70:48:25:6d:55:46:0b:0e:63:22:85:4a:85: e7:47:65:6c:20:55:8f:ef:ec:c5:1a:d9:7b:0f:eb:90:70:3c: 76:f4:aa:42:2e:bd:8e:9d:27:be:90:43:55:5a:f3:c6:68:48: 9b:7f:e0:32:c2:62:ca:81:38:c0:e1:28:e4:82:6e:26:5b:da: 5d:c5:c9:89:7e:4b:d2:ed:09:6e:9d:7c:5c:57:33:82:2e:21: 25:71:10:d2:70:75:22:06:20:70:58:60:52:21:79:7c:79:8d: 75:1d:3c:79:79:f4:b8:c9:9b:dc:32:61:f3:76:26:8a:e2:48: 39:f7:90:fd:9d:6f:46:f7:99:9d:8a:ce:e5:1f:e4:5e:33:e8: 0e:f9:5f:a1:2d:39:49:33:e7:39:b2:8e:31:d9:a7:54:cb:fd: 36:ba:17:c0:df:64:6e:3d:b8:6b:41:c2:d0:f4:42:e0:cb:61: 89:3a:1a:48:c4:34:a1:0c:ef:b2:c6:de:56:3c:e2:c3:37:45: 81:51:37:35:d2:48:38:10:b3:93:fe:57:e9:54:fc:41:db:61: 5b:64:57:37:6c:6b:0d:ad:eb:d4:58:4e:80:ea:b9:b0:84:80: 59:9b:e7:75:a7:a4:fc:b9:b4:68:3c:87:2f:31:98:34:00:dc: 2d:8e:ac:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzOsouEL+u7W2oL2Belm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUwODIzMTIwMDEwWhcNMjUwODI0MTIwMDEwWjAzMTEwLwYDVQQD EygxN2U2OGRmMTkwNGM3YTAxZjkyZmM1ZDc4M2NjM2M1ZTIzZjI1ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVanQcsfGKPwoDThc7O8PCJtSwBx zaHL5t0sBKlkP8bd5cGSFAvaHCQLCtODzJRv29vz8wkWhjZ1Q+Ul6+YNv3LGa/fT qF+MNB63jSUgbeMf0pS5Xz0PtyLkdPrOVM1kkqL/9UASHQRBKUI4rtAfQoP+/f9V Z5sMiSHThvooAV1f4GJ6LSXypJpy4mP6ZhSbFXWNwIkGOwZuxN3YH13e9GnM7ayA YoB/IZhY4hsY5oyTn1azso3Q0Dt4DpVKS8FzG+CgWDZ/YJ6UePrK0KmWxPP1RrJc elT4UxoEIAiJ/zG7evbQdwyM8LNNTccU112nMeP4Flhlrq2jGYmgKgR+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfmjfGQTHoB+S/F14PMPF4j8l/IMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheO65Epw SCVtVUYLDmMihUqF50dlbCBVj+/sxRrZew/rkHA8dvSqQi69jp0nvpBDVVrzxmhI m3/gMsJiyoE4wOEo5IJuJlvaXcXJiX5L0u0Jbp18XFczgi4hJXEQ0nB1IgYgcFhg UiF5fHmNdR08eXn0uMmb3DJh83YmiuJIOfeQ/Z1vRveZnYrO5R/kXjPoDvlfoS05 STPnObKOMdmnVMv9NroXwN9kbj24a0HC0PRC4MthiToaSMQ0oQzvssbeVjziwzdF gVE3NdJIOBCzk/5X6VT8QdthW2RXN2xrDa3r1FhOgOq5sISAWZvndaek/Lm0aDyH LzGYNADcLY6s4g== -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:14 2025 by rpki-client