$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: H25clXNHktfw0Hn1g5YzRa26gD9/uA50WW4VwmmHaf4= Subject key identifier: CF:DC:AB:D1:5F:81:1A:07:08:51:3A:DC:8D:29:5F:5A:7F:F4:37:25 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 0197B7F20CF19DDE2DC4D01E9087040DBCD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 16E2 Signing time: Sat 28 Jun 2025 19:09:42 +0000 Manifest this update: Sat 28 Jun 2025 19:09:42 +0000 Manifest next update: Sun 29 Jun 2025 19:09:42 +0000 Files and hashes: 1: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=) 2: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=) 3: 3XpL4MnoqtsefggtGVNsp50hUos.roa (hash: UbmRySACBmiI8/lEJe3EY2ejMtFGtnNwZY/azKaol3I=) 4: A65uyV26SsED-QTWYQKp5Gv0rNo.roa (hash: ZTOzPOdVS5PATBBOqZEZpuRX8yTK/iXDN/Fy3kOQjeE=) 5: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=) 6: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (hash: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=) 7: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=) 8: ENp2NlgP3EZ_Ctg2IXFE1ltrNdM.roa (hash: TUXqsr3fA3RHj6bojPSkgzXHGiUkJIhVH2PBITpU6w4=) 9: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=) 10: H6uD3b5s6RNqvIc6qZVAzojQRkY.roa (hash: p/DJTJUWkWKVj1cadXkZn9BGGLEb2ftBgIA3ZTuC58g=) 11: IbhS6h3nTSvMTH1bZLFoGSouwG0.roa (hash: mE7Z7M3WJDW8Xxj5N/cTaa8dFMKyZgrGuttacm28HxI=) 12: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=) 13: JDK2Xc9w7u2JMkUk9v17HwdidfA.roa (hash: htKOEwPRpWGLmjukAyajlXiDt3mzH4rIBGaGAVilqsA=) 14: P45v7JulDqBD0X7j7DN79dM61fY.roa (hash: 43u+MiOU+YDvyXMpyEhMzSI9cYtb+FD95pl7xlV9LJM=) 15: SC9yZhU9PNS8QTNjN_qrNv_eW3Q.roa (hash: U3jGOjd33mOISo0lcKw17gPp1Hb2/jkFzcISZ7nMSSw=) 16: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=) 17: Srd8y1uDTsRNNh5zxuhGC_3_ynA.roa (hash: RJvVVf3BXtar1QBf5Qs0uslArz8hoyrD19vpCenWfYQ=) 18: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=) 19: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=) 20: _BrKG4qFUAeG8b8VjxlwGkP_cOo.roa (hash: 6iUyRKK4LL6pEeYz+9QKQh7MzqtDFv6/vdl575D8vKI=) 21: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=) 22: chN6_rbLs77CnXnGPq692nJkwPw.roa (hash: Dzho0yjqKe+wddNVPh67JL72Lz6u5n7teE5kk1vs+u0=) 23: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=) 24: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=) 25: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=) 26: nRiXx1Cy-0W2GAGPF1eHDoWTRmk.roa (hash: DNHjNYm1Xu/Gv6zjTAG7OGLWylmQFWZFReqXZHqEfyQ=) 27: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=) 28: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: GWpMTeliHP1F9JwRzOv5pNTT4CNr3nU7MzvJFM4xfAA=) 29: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=) 30: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=) 31: vSdatVQs0601qTINAZOSvBKTvqI.roa (hash: J4sc3fJ3ayPM9GpaLds0smNkt4N6lvQ+RxikjlgB/Sc=) 32: wNylru0Jam025IFBLKzenX7fz-w.roa (hash: NE7ySTru/IwX6C1GcDAPcg0wTe7SbeL7r0nAguOkM2M=) 33: yHnvcCyxL9DiNKgoynw0YsPtMEA.roa (hash: 3cqBDixt8W2IKnu70ZX2oXW2VcR8MoEC6zWNq0ijnrs=) 34: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:f2:0c:f1:9d:de:2d:c4:d0:1e:90:87:04:0d:bc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jun 28 19:09:42 2025 GMT Not After : Jun 29 19:09:42 2025 GMT Subject: CN=cfdcabd15f811a0708513adc8d295f5a7ff43725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:c9:ea:d9:bd:e7:23:50:b7:92:22:e3:5c: 55:79:d0:af:e9:76:0b:04:b0:3e:68:ac:7c:d4:99: 8f:39:00:1e:9b:6c:ff:cf:28:93:db:02:31:7c:5f: 95:5b:a2:f4:cc:49:68:95:0f:8e:af:47:50:e9:6f: d9:14:d8:3e:c4:90:21:2c:87:f4:b3:4d:f1:c9:91: 75:ff:86:cf:90:c8:87:79:a4:c7:ac:65:4b:3b:e1: e2:30:97:c7:7e:b2:2f:d8:ad:85:24:dc:80:64:f0: 9c:44:79:07:87:22:ef:d5:02:77:14:e4:92:a6:7b: ca:e1:74:e1:73:e3:80:ec:2e:c4:97:a6:dc:8e:68: 6c:de:2c:8b:e7:eb:ee:61:e9:ed:dd:28:c1:78:76: 7c:07:f1:2b:cf:c4:e2:33:9b:db:48:59:68:17:bc: 73:94:a5:60:b8:ff:81:05:35:80:7c:eb:99:97:11: cf:5a:4f:de:24:7a:8c:a3:f5:0c:93:a9:8d:c3:81: 85:0f:5e:54:f7:4b:f8:3f:09:a6:08:1f:e7:66:dc: 09:92:3a:3e:d8:ea:d4:03:cd:74:82:54:05:de:f2: 03:86:d5:30:f7:c3:bc:bf:53:36:5f:5d:57:19:1d: 6f:6b:ea:64:19:a9:74:3b:41:46:c8:c8:39:ac:b8: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DC:AB:D1:5F:81:1A:07:08:51:3A:DC:8D:29:5F:5A:7F:F4:37:25 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:38:b3:c2:fa:d5:4a:3f:bc:ed:fb:b7:4a:69:28:8d:df:78: 49:4b:c7:46:c1:a2:a6:54:f7:4e:28:14:02:9e:a3:99:35:1b: 0f:ff:f5:4d:33:bd:43:80:98:c3:fc:bf:c0:d0:c5:b2:18:64: 89:34:cc:46:bb:68:fc:ae:f3:e9:2f:cc:e7:1f:e0:03:91:0b: e2:92:35:c6:e7:22:d3:6e:2a:60:d9:49:10:82:35:cd:0f:aa: 62:d3:2b:1a:be:f7:68:17:2d:02:77:bf:3b:98:49:db:80:da: 8a:74:8c:44:80:ad:26:66:49:06:27:b0:08:7d:17:c8:59:c4: ca:94:a8:1e:37:eb:be:4c:e5:3c:98:17:34:1b:d1:f8:68:7f: a2:1c:1f:64:91:2d:bd:1b:4a:fc:8f:e7:cd:37:97:cf:10:f2: 61:a1:c7:50:08:12:85:53:09:91:36:96:e5:b4:07:99:5f:0d: 98:bf:4d:31:51:0d:9a:16:fb:bd:78:6e:d3:21:fa:8e:a4:ac: a7:4e:01:99:e4:5c:cf:4d:81:4c:cf:3d:13:80:1c:8f:40:bd: d8:d0:80:42:0f:c7:dc:e2:0a:b8:92:b4:26:03:78:50:a0:92: dd:b2:c8:56:ad:14:b3:f5:b4:e3:22:39:93:a0:e0:b7:1f:3d: 97:89:9e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe38gzxnd4txNAekIcEDbzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUwNjI4MTkwOTQyWhcNMjUwNjI5MTkwOTQyWjAzMTEwLwYDVQQD EyhjZmRjYWJkMTVmODExYTA3MDg1MTNhZGM4ZDI5NWY1YTdmZjQzNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1/J6tm95yNQt5Ii41xVedCv6XYL BLA+aKx81JmPOQAem2z/zyiT2wIxfF+VW6L0zElolQ+Or0dQ6W/ZFNg+xJAhLIf0 s03xyZF1/4bPkMiHeaTHrGVLO+HiMJfHfrIv2K2FJNyAZPCcRHkHhyLv1QJ3FOSS pnvK4XThc+OA7C7El6bcjmhs3iyL5+vuYent3SjBeHZ8B/Erz8TiM5vbSFloF7xz lKVguP+BBTWAfOuZlxHPWk/eJHqMo/UMk6mNw4GFD15U90v4PwmmCB/nZtwJkjo+ 2OrUA810glQF3vIDhtUw98O8v1M2X11XGR1va+pkGal0O0FGyMg5rLiinQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/cq9FfgRoHCFE63I0pX1p/9DclMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzizwvrV Sj+87fu3Smkojd94SUvHRsGiplT3TigUAp6jmTUbD//1TTO9Q4CYw/y/wNDFshhk iTTMRrto/K7z6S/M5x/gA5EL4pI1xuci024qYNlJEII1zQ+qYtMrGr73aBctAne/ O5hJ24DainSMRICtJmZJBiewCH0XyFnEypSoHjfrvkzlPJgXNBvR+Gh/ohwfZJEt vRtK/I/nzTeXzxDyYaHHUAgShVMJkTaW5bQHmV8NmL9NMVENmhb7vXhu0yH6jqSs p04BmeRcz02BTM89E4Acj0C92NCAQg/H3OIKuJK0JgN4UKCS3bLIVq0Us/W04yI5 k6Dgtx89l4megw== -----END CERTIFICATE-----Generated at Sat Jun 28 22:06:57 2025 by rpki-client