$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json) Hash identifier: bwkeNR9U7TmoPDOmAb3JbkO7tXknqn7gNkEy6KZgeYU= Subject key identifier: 34:38:ED:C5:99:F7:D2:C1:90:45:1E:A6:D4:5E:5B:A3:B7:8B:67:9F Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019A0780D33C5BD610D76F1565FD0C08936E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft Manifest number: 02F2 Signing time: Tue 21 Oct 2025 16:01:14 +0000 Manifest this update: Tue 21 Oct 2025 16:01:14 +0000 Manifest next update: Wed 22 Oct 2025 16:01:14 +0000 Files and hashes: 1: 0pHcVGxKroxOni6LgFtqt0banSw.roa (hash: Q40CZpsU0+RiU4O4YQFtbp1L/7Yepswrm+UiOB95fSM=) 2: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: 4EiIwBuGt/r1Z7cxsL/i3JWd/ilU3L+tHJUvsPHFwlQ=) 3: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (hash: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=) 4: 5O6iyLYqjxgK3EFjvB7TPec4vNc.roa (hash: +zN5xcfrGyrSvPX2aPdQntXT/Zvfyz7ULplVdMhrq7w=) 5: BnL626pcSJW84hvMFQ1G4Qrz04U.roa (hash: 3us+txzDTK3Uzjb5+hEvvCFMUnMHD1ygkmUal1BKvv4=) 6: DJsHawN4UfC7y3M-cvB8yQD8M34.roa (hash: 7erERMTFq4HfOI3TzB2K6MSVRmBE9HH5uCjfWAVLlJk=) 7: QjojGFow0Vpe3_AWaTD7e7dWICs.roa (hash: azKbcXaFk37HPIXqgZTrsiA6Aj4W7zGHRG5fz7k2ea4=) 8: XcKo7ctmpUBqVfx0JPs9RsSZGCs.roa (hash: 1T8ZHVnMW4fbGLyFMTAkhaxOama9czmojEH2rCd/x6I=) 9: Y6_ZV6NF7RoiWmbFLBxE7pMgIPU.roa (hash: ZuhCYbtUpHTYiqCVZqHt+pgHRUwBZmO0POksb2R5n14=) 10: g31y-rKLvjosua_ERt6smuGZVHc.roa (hash: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:80:d3:3c:5b:d6:10:d7:6f:15:65:fd:0c:08:93:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Oct 21 16:01:14 2025 GMT Not After : Oct 22 16:01:14 2025 GMT Subject: CN=3438edc599f7d2c190451ea6d45e5ba3b78b679f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:ea:71:e2:7a:46:fd:e1:b8:87:bd:6a:f6: c4:40:20:dc:7b:88:a1:7e:18:a7:4b:cb:10:0b:21: 9c:46:0b:70:97:9f:d2:87:1d:4b:be:15:09:86:9f: 04:db:b6:3d:5f:a3:c7:fa:44:6e:07:e6:05:71:c0: d1:76:c1:e6:c0:6c:6d:02:94:bc:e7:b6:af:ea:06: 4d:99:5b:03:ed:82:d7:f7:cc:b9:42:c6:ea:b7:d0: 1f:ab:1b:5a:05:e2:17:d3:50:12:83:16:bd:3a:a7: 29:d4:5a:8c:bc:f0:fe:cd:6e:b3:60:f9:10:09:e7: 12:fc:87:ff:cf:58:8f:93:a3:84:e6:a5:47:1c:1e: 33:f1:50:90:24:f1:b5:5f:55:f1:f8:bb:ca:62:3b: cd:63:a9:74:5e:cb:c3:65:f3:1f:be:75:b3:46:f3: 59:19:ee:f5:b0:b6:6e:97:51:71:fe:89:01:42:7b: 18:b4:b4:61:01:32:f2:83:90:fe:c3:e6:2d:e3:8b: 95:1c:57:f5:aa:ec:21:f0:38:b6:18:c3:c3:0f:9a: 3f:4a:5b:88:df:45:52:b0:a1:5d:24:85:37:eb:6f: b6:7a:b7:7c:7d:7e:e2:eb:eb:f6:bd:54:db:e4:21: a4:13:2a:62:a2:cc:a8:55:9b:9e:d4:62:54:5e:2a: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:38:ED:C5:99:F7:D2:C1:90:45:1E:A6:D4:5E:5B:A3:B7:8B:67:9F X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:99:14:10:05:38:82:e6:56:78:93:f4:56:12:95:62:39:e1: 9f:bf:4a:9e:5b:bf:5a:30:64:a6:34:24:5d:20:00:f6:85:c2: 0c:2f:2d:ae:9f:8d:84:52:a2:30:5c:48:ff:a7:0e:e4:14:17: 7d:a2:4d:e9:08:7a:1e:70:af:8d:af:a1:47:8b:05:68:1c:ee: df:57:6e:d2:25:c5:9d:32:56:d8:01:b0:1f:f0:df:cf:86:31: bb:bd:2b:d7:4e:60:9c:da:bb:79:29:ec:0b:82:a5:10:5f:68: 6f:61:a4:68:60:97:07:55:da:7a:a3:a6:16:12:80:5a:d0:77: 65:c8:0f:f5:9b:ad:9d:e1:a2:7e:2a:7e:e6:22:ae:d4:cf:7d: 89:66:45:f1:ca:b0:24:76:5b:64:4c:d3:90:8f:d3:31:7e:72: 7f:96:4d:15:8f:b2:2a:0b:a4:03:09:27:3b:a6:f8:b4:56:eb: e5:66:e2:2f:aa:9e:bf:94:b1:38:90:dd:e7:0e:20:f8:8e:59: 60:e9:04:9f:bd:09:df:9f:e9:84:4b:f8:d3:27:e8:11:af:85: f5:75:72:65:86:be:cf:ca:85:ec:fe:9b:61:ce:ef:07:98:6f: a6:d7:05:37:92:b3:a9:ff:70:ca:8b:44:82:95:bb:ed:be:d2: 73:83:09:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHgNM8W9YQ128VZf0MCJNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjUxMDIxMTYwMTE0WhcNMjUxMDIyMTYwMTE0WjAzMTEwLwYDVQQD EygzNDM4ZWRjNTk5ZjdkMmMxOTA0NTFlYTZkNDVlNWJhM2I3OGI2NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qjqceJ6Rv3huIe9avbEQCDce4ih fhinS8sQCyGcRgtwl5/Shx1LvhUJhp8E27Y9X6PH+kRuB+YFccDRdsHmwGxtApS8 57av6gZNmVsD7YLX98y5Qsbqt9AfqxtaBeIX01ASgxa9Oqcp1FqMvPD+zW6zYPkQ CecS/If/z1iPk6OE5qVHHB4z8VCQJPG1X1Xx+LvKYjvNY6l0XsvDZfMfvnWzRvNZ Ge71sLZul1Fx/okBQnsYtLRhATLyg5D+w+Yt44uVHFf1quwh8Di2GMPDD5o/SluI 30VSsKFdJIU362+2erd8fX7i6+v2vVTb5CGkEypiosyoVZue1GJUXirwQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ47cWZ99LBkEUeptReW6O3i2efMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpkUEAU4 guZWeJP0VhKVYjnhn79Knlu/WjBkpjQkXSAA9oXCDC8trp+NhFKiMFxI/6cO5BQX faJN6Qh6HnCvja+hR4sFaBzu31du0iXFnTJW2AGwH/Dfz4Yxu70r105gnNq7eSns C4KlEF9ob2GkaGCXB1XaeqOmFhKAWtB3ZcgP9ZutneGifip+5iKu1M99iWZF8cqw JHZbZEzTkI/TMX5yf5ZNFY+yKgukAwknO6b4tFbr5WbiL6qev5SxOJDd5w4g+I5Z YOkEn70J35/phEv40yfoEa+F9XVyZYa+z8qF7P6bYc7vB5hvptcFN5Kzqf9wyotE gpW77b7Sc4MJ/g== -----END CERTIFICATE-----Generated at Tue Oct 21 22:33:46 2025 by rpki-client