$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json) Hash identifier: m5OMcnbBOUm86xoWwmWvmi1k2o8Tp0CI9+fQ/RJWpbQ= Subject key identifier: 74:05:BD:FA:26:BE:2E:B7:9C:84:81:1C:F6:60:12:86:61:3C:D1:28 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 0199FAD7DBEEBE409767C0E7C0C1B96CB08C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft Manifest number: 1827 Signing time: Sun 19 Oct 2025 05:01:14 +0000 Manifest this update: Sun 19 Oct 2025 05:01:14 +0000 Manifest next update: Mon 20 Oct 2025 05:01:14 +0000 Files and hashes: 1: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=) 2: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=) 3: 3yM6tM5G7MJmW-Keh3lQJpTDYmQ.roa (hash: o5RR2TRtRzcRa0YfGrHmPuJva8oqLvh6B+TCKQNcc+4=) 4: 4lyP_XtLW1h3NI-vGWGjLTNLSfs.roa (hash: wCaH//OrmPa6FcL1bsRu2GwqBfLRMK34kAaOY7fa6WI=) 5: 5frCTMLAAAivj5vAlLzU9tn9SZk.roa (hash: ydNqfms74WxpRDm6+VGy0or8AczawOAEsWbCcpbLY/k=) 6: 6d_4DsA-qL2qj0TDRCvwbOxR00Q.roa (hash: Brgopk4ClilzEVF+gNj8w0ZmRV8dCg1gMkmnChzGTmg=) 7: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=) 8: BEviNglNAg1qa4W_3gzgvvlPEhQ.roa (hash: sPwPapBCHY5ugqh58Jwms/bfu+8xPOQFfmH+Z0GIlLY=) 9: BtUSMQYrMiXrz8PT4gbKkp8KMzo.roa (hash: MhygUK83+6wJufXl8GG1Zo7sHLD1N46TiaJVKQtyfzQ=) 10: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=) 11: DFF-bhqrnmujnLxRL9JYAVW6ikA.roa (hash: 21iR99fIbGqw3Or3piqGj+bIYtOK9kefBJ5EiWs9J8M=) 12: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=) 13: Fd7oRfblsSpgo1HB8_NxtF5G6vA.roa (hash: u0JHRcPKBTILwNWmyNhnBiovQlnOIak9XumG3rgutdE=) 14: H7riRd-N106KX0i1mDF2VRCYnEc.roa (hash: NA570He5c22fo1zyWpfXqctkYrqhzyDYex5XaIbuKFE=) 15: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=) 16: P-xdH5szgMQXhP27nYN82uBlj4k.roa (hash: wErvIL1WI1egSnklkuRsLUz42g0IG42ATwZat+dtmP4=) 17: R3enN_CEN9QZmwFHuvmlngJF5mA.roa (hash: 2raqyTXYc8p7c+qyBdj1OqG1VKTRjTXkrwPm0ExcfaY=) 18: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=) 19: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=) 20: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=) 21: _Ml7engb2jNusfxP1g3QxlghsTI.roa (hash: z7v5eA1P6HWxQQD76qXFLt3kNtZpM4Pud12PAzlZxzU=) 22: b-kXBnz2enkupZbt8hmkaM9cRdY.roa (hash: 7JMUhGk/UNvBnPJ0huhw0y/oVgp7Khpe/Nkt2yoYqTo=) 23: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=) 24: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=) 25: dp_5byGPXCGbQvqYjPeo9uM021U.roa (hash: heIFyAGkqEk9pZ8/LM8InXoMTEqO9qdygCNFzMgCzHI=) 26: eA8UoDwbxwCMIcIoTT_iH0YvmjM.roa (hash: HxTrpLgbVmhVC/6Q+vCe8lPm961RPCDLoP9PL41CR7s=) 27: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=) 28: lLZ5Io9qq5qjICXx9jv1SSbflTg.roa (hash: gaHQzxeVOCa2xWjBUWdAbn70cMT5ACXZ2OoKrZdMdSM=) 29: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=) 30: s5g-qMY2DPQbPs-vJE-wBex3Yv4.roa (hash: VrwCJyMIT/Ba5OOALbfVM8cSGeibLJlkNY1h+iO6RIA=) 31: t8FNK2i0rMEbxc7JFCN8YTSfue4.roa (hash: TGDqC9aPRLO5Bs4rgvqauI1vjbtsLGhPLrnrECD+NJc=) 32: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: SayzAWXraxqIxE8f/eWPewL+8rjm3X57fJFuCcd2nJI=) 33: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=) 34: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=) 35: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d7:db:ee:be:40:97:67:c0:e7:c0:c1:b9:6c:b0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Oct 19 05:01:14 2025 GMT Not After : Oct 20 05:01:14 2025 GMT Subject: CN=7405bdfa26be2eb79c84811cf6601286613cd128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:22:50:a3:ac:b3:4b:3b:9d:c6:51:36:70: 11:8e:29:55:45:31:94:9f:54:01:83:a1:8e:95:da: cb:78:e6:12:c3:d3:17:ec:ac:ab:af:b8:3f:6a:cf: 7f:6a:b1:a5:f5:77:8b:48:1e:6f:1f:79:33:cb:6a: 8c:ac:03:cf:eb:f2:c6:c0:13:36:24:e0:e7:d1:6c: 79:5b:d3:df:a6:67:e9:d0:6a:e2:98:b7:fb:bf:7a: 95:d0:f7:66:0a:e2:1b:16:32:fd:ce:aa:56:9b:6c: 08:9f:34:a3:ed:9a:55:7a:c1:7d:13:15:4f:b4:35: 7d:5e:60:45:b8:c5:7a:e0:6b:db:1f:d7:96:78:a5: 11:26:06:6f:45:90:7a:b3:0c:51:15:b7:3d:87:14: 4f:f4:2c:9d:ff:a0:48:2e:5a:28:4b:95:75:6d:6e: 54:78:ee:f5:c7:5a:6f:63:08:f4:03:26:8e:d6:2e: bc:82:94:cd:07:34:b8:7c:59:88:43:18:3d:b5:b7: cc:3c:7e:85:b0:54:2e:d7:10:6c:ad:3a:89:28:18: b7:94:db:31:98:b2:4c:2c:97:fa:d9:b3:bf:56:f4: 07:55:ba:5b:c8:c4:50:e3:98:62:62:a4:cb:4f:34: 2d:64:1b:dc:e5:1f:7d:22:d1:bb:d2:23:65:5c:21: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:05:BD:FA:26:BE:2E:B7:9C:84:81:1C:F6:60:12:86:61:3C:D1:28 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:73:d1:9f:4c:7d:de:ae:7c:3e:69:c5:2c:1b:48:fd:e1:30: 67:65:a6:a4:f8:0d:bc:84:29:a2:44:b2:07:6f:25:81:a0:32: e2:a5:1b:87:c8:37:19:7d:63:8f:12:90:31:9a:6c:18:2f:be: ef:d5:4b:ef:b8:26:ac:cf:ad:4a:31:c8:b7:14:31:76:c8:69: 10:fe:ef:41:ac:a8:be:78:14:f2:8e:50:d6:22:bb:46:98:69: 8e:52:70:6d:1f:fc:50:33:96:8d:c6:27:6a:2a:fc:3f:29:f3: fe:b3:bc:6d:09:52:e5:62:55:3a:3f:7d:36:16:9b:fc:59:b1: 56:8e:05:cc:ba:6b:51:a2:02:f9:b3:16:16:17:89:34:3d:92: 78:a9:71:97:ca:e0:83:02:ad:5f:25:25:8f:d5:54:b1:f6:d1: c1:d0:9f:8c:ee:c5:01:68:cd:43:38:ba:99:03:a3:0c:6c:e5: 57:41:b1:96:1a:30:7f:a8:0b:7a:91:43:45:3a:29:25:d2:7b: 7c:e5:f1:d5:c6:f6:05:3d:cd:af:f2:11:9c:53:10:34:ae:3d: 64:94:12:e0:6d:2b:17:f7:04:95:19:9b:f4:bd:ef:8d:6b:43: a3:4a:26:f2:39:66:91:6b:ac:ec:96:e1:f6:dd:b2:b1:03:e7: cc:dd:02:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn619vuvkCXZ8DnwMG5bLCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMDE5MDUwMTE0WhcNMjUxMDIwMDUwMTE0WjAzMTEwLwYDVQQD Eyg3NDA1YmRmYTI2YmUyZWI3OWM4NDgxMWNmNjYwMTI4NjYxM2NkMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRIiUKOss0s7ncZRNnARjilVRTGU n1QBg6GOldrLeOYSw9MX7Kyrr7g/as9/arGl9XeLSB5vH3kzy2qMrAPP6/LGwBM2 JODn0Wx5W9Pfpmfp0GrimLf7v3qV0PdmCuIbFjL9zqpWm2wInzSj7ZpVesF9ExVP tDV9XmBFuMV64GvbH9eWeKURJgZvRZB6swxRFbc9hxRP9Cyd/6BILlooS5V1bW5U eO71x1pvYwj0AyaO1i68gpTNBzS4fFmIQxg9tbfMPH6FsFQu1xBsrTqJKBi3lNsx mLJMLJf62bO/VvQHVbpbyMRQ45hiYqTLTzQtZBvc5R99ItG70iNlXCHUkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQFvfomvi63nISBHPZgEoZhPNEoMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3PRn0x9 3q58PmnFLBtI/eEwZ2WmpPgNvIQpokSyB28lgaAy4qUbh8g3GX1jjxKQMZpsGC++ 79VL77gmrM+tSjHItxQxdshpEP7vQayovngU8o5Q1iK7RphpjlJwbR/8UDOWjcYn air8Pynz/rO8bQlS5WJVOj99Nhab/FmxVo4FzLprUaIC+bMWFheJND2SeKlxl8rg gwKtXyUlj9VUsfbRwdCfjO7FAWjNQzi6mQOjDGzlV0Gxlhowf6gLepFDRTopJdJ7 fOXx1cb2BT3Nr/IRnFMQNK49ZJQS4G0rF/cElRmb9L3vjWtDo0om8jlmkWus7Jbh 9t2ysQPnzN0Cow== -----END CERTIFICATE-----Generated at Sun Oct 19 15:25:59 2025 by rpki-client