$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: ERI1rP0fgllRFOSqcK4y//Oa7T1jrATeX/6YZtUPEmg= Subject key identifier: A4:C5:32:62:EB:73:4C:B2:A6:E8:BA:E1:80:07:CB:6F:74:A0:60:9B Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 0198D6987C908325EE4F1474F80DD2642329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0A58 Signing time: Sat 23 Aug 2025 11:02:54 +0000 Manifest this update: Sat 23 Aug 2025 11:02:54 +0000 Manifest next update: Sun 24 Aug 2025 11:02:54 +0000 Files and hashes: 1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: XpSthbZtOjQNSWT5NaPEH3TanMEp5uFsyFQ4/rJluNU=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) 17: wT6-Zw7AGd86-fxWbGmTOHpfarE.roa (hash: sOi75jBrZgAaSe/N5e1cUDcPkkUhhPirWKuRm8pL5uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:7c:90:83:25:ee:4f:14:74:f8:0d:d2:64:23:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Aug 23 11:02:54 2025 GMT Not After : Aug 24 11:02:54 2025 GMT Subject: CN=a4c53262eb734cb2a6e8bae18007cb6f74a0609b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:a2:fe:bc:6b:bb:e3:8a:97:ff:69:b0:59: c8:ce:8e:ac:17:67:ec:74:5e:65:c5:02:09:ac:f2: 7e:2d:6a:68:47:24:67:fb:5f:6c:44:d6:77:cc:d9: 1f:69:14:cc:e0:dd:be:d1:a5:a7:ce:87:2b:14:f9: b5:61:ac:a1:3c:04:ab:c3:c7:8b:74:f3:ac:e4:c7: a7:ed:d3:d7:fd:f3:d9:f7:36:d1:8d:0d:51:5c:3d: d9:a0:77:df:a3:71:c7:f1:c6:3b:e4:f7:44:ba:84: 29:b2:ae:74:96:f3:d1:e1:ec:b4:cb:48:1d:a5:ba: c7:71:82:30:04:d9:09:d5:3b:df:52:c0:e5:14:73: fb:c1:de:c9:71:e3:b6:a0:93:43:6d:3e:32:07:af: 1e:60:36:29:5e:e4:a2:05:5c:23:1b:08:78:50:cf: 81:91:7c:fb:9d:c1:95:36:77:5a:ce:97:c8:1f:cc: 06:4b:64:83:77:32:59:08:02:86:f4:56:32:90:fd: 12:fd:05:d0:2b:23:72:0a:13:9c:5b:06:86:2a:c8: 84:ab:b6:f3:d3:cf:11:c2:2e:c3:f2:4a:5c:23:63: 92:87:18:22:8f:a9:2c:bc:3f:47:44:ab:b9:a4:03: eb:47:65:57:da:7d:db:6a:67:d9:ed:a9:36:f5:37: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:32:62:EB:73:4C:B2:A6:E8:BA:E1:80:07:CB:6F:74:A0:60:9B X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:84:76:bd:aa:0b:6e:67:e8:d5:bd:4f:20:06:0b:de:44:be: 2c:38:24:13:9e:98:62:fa:b7:4c:f8:a3:88:43:c4:49:2c:cf: fd:fb:29:ce:0f:2e:e4:e5:bd:e1:18:19:d1:ab:6d:b5:8d:fc: 97:61:7f:f0:a8:95:fc:9a:89:37:93:d1:f4:33:18:81:63:34: 2f:09:ab:96:af:7f:aa:e2:9c:31:20:32:8e:23:e1:c4:c2:57: cd:d9:31:b3:4b:65:eb:40:92:de:f4:bc:72:96:26:4f:62:b7: 4e:32:bf:f6:6d:62:f5:76:41:9c:c9:e3:44:dd:f8:98:1b:5a: 31:94:38:4a:1e:05:7c:88:b3:82:8c:2c:09:16:75:d9:48:7a: 6c:00:3f:ee:b6:e6:20:23:d4:b6:82:0c:0c:34:13:ba:1f:a1: 0e:70:c8:24:2c:f9:fb:42:64:54:72:07:eb:76:47:dc:a5:08: e6:e4:7f:71:b3:e9:cb:35:fa:04:3e:5d:90:fc:72:78:d4:7b: ff:55:eb:79:75:f2:7d:bf:5b:75:e9:f6:74:2a:ac:16:9b:04: ac:22:17:ec:6a:3e:ce:96:f1:60:3c:fb:48:25:e9:e1:17:2f: 66:88:c2:64:cd:92:d0:30:70:91:49:fb:16:ee:64:0c:69:3a: 30:af:9d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmHyQgyXuTxR0+A3SZCMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwODIzMTEwMjU0WhcNMjUwODI0MTEwMjU0WjAzMTEwLwYDVQQD EyhhNGM1MzI2MmViNzM0Y2IyYTZlOGJhZTE4MDA3Y2I2Zjc0YTA2MDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJii/rxru+OKl/9psFnIzo6sF2fs dF5lxQIJrPJ+LWpoRyRn+19sRNZ3zNkfaRTM4N2+0aWnzocrFPm1YayhPASrw8eL dPOs5Men7dPX/fPZ9zbRjQ1RXD3ZoHffo3HH8cY75PdEuoQpsq50lvPR4ey0y0gd pbrHcYIwBNkJ1TvfUsDlFHP7wd7JceO2oJNDbT4yB68eYDYpXuSiBVwjGwh4UM+B kXz7ncGVNndazpfIH8wGS2SDdzJZCAKG9FYykP0S/QXQKyNyChOcWwaGKsiEq7bz 088Rwi7D8kpcI2OShxgij6ksvD9HRKu5pAPrR2VX2n3bamfZ7ak29TcHzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTFMmLrc0yypui64YAHy290oGCbMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIR2vaoL bmfo1b1PIAYL3kS+LDgkE56YYvq3TPijiEPESSzP/fspzg8u5OW94RgZ0atttY38 l2F/8KiV/JqJN5PR9DMYgWM0Lwmrlq9/quKcMSAyjiPhxMJXzdkxs0tl60CS3vS8 cpYmT2K3TjK/9m1i9XZBnMnjRN34mBtaMZQ4Sh4FfIizgowsCRZ12Uh6bAA/7rbm ICPUtoIMDDQTuh+hDnDIJCz5+0JkVHIH63ZH3KUI5uR/cbPpyzX6BD5dkPxyeNR7 /1XreXXyfb9bden2dCqsFpsErCIX7Go+zpbxYDz7SCXp4RcvZojCZM2S0DBwkUn7 Fu5kDGk6MK+dLw== -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:27 2025 by rpki-client