$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: V9+WIbVS55kemp7aqFZ+61bBS25xudLbqdt/gyi2Vuw= Subject key identifier: 24:EF:CB:17:F8:5A:88:40:80:16:22:61:3F:81:DD:C8:E6:0F:27:84 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019A006C7E0A7D11992686F01B59E60A8A78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0AFA Signing time: Mon 20 Oct 2025 07:01:41 +0000 Manifest this update: Mon 20 Oct 2025 07:01:41 +0000 Manifest next update: Tue 21 Oct 2025 07:01:41 +0000 Files and hashes: 1: 1PsVRfIiPVKY4ABPWs2nohy1K7o.roa (hash: 88rVHfdMbj5v8kA496lVtNpxvgUPEFaY8NhwRRj8/+8=) 2: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 3: HHzsEBFa2A05NKAPqXI5OVwnNw8.roa (hash: 8OesrSo0HOp6GSF2gGuN1ejfkOvUPRQ23ED1PAULVsg=) 4: Hwqj86OyZwv6zumPMOdDEHh1OVU.roa (hash: BeyVonGRSiJplCz1koR2l3WRSO3lLoBYCWhiCNd1pi0=) 5: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 6: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: InxLbZE6xNUOxedXoKscIjiuMpYK7+CzcOHarJt889I=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) 17: vd8_SJHzr8iO1aPmpCSJojiHuI8.roa (hash: BqDMc74v4M4R1zQB5Olz3LroGyuHdM7yMcXWbB2ojHg=) 18: yovHEk4MCHBICdJuNjwrUiUUEdU.roa (hash: tz5eQ1SCmrb2HGOXNXrueYcHiXH/+vqaOpIdOvKxSrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:6c:7e:0a:7d:11:99:26:86:f0:1b:59:e6:0a:8a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Oct 20 07:01:41 2025 GMT Not After : Oct 21 07:01:41 2025 GMT Subject: CN=24efcb17f85a8840801622613f81ddc8e60f2784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:df:6f:52:4c:60:88:2a:81:e1:20:47:e8:64: 0a:e1:d0:de:50:70:d9:33:f7:fd:d5:44:78:c4:39: bc:40:5e:fd:9d:40:44:0b:ef:26:ea:34:45:c4:87: 90:9b:e5:c8:10:97:14:e3:de:39:b6:72:9f:62:8d: 47:03:5a:ae:f6:d0:49:53:6b:29:d2:ea:e7:f0:9e: 54:95:d8:fa:a8:6d:0a:db:68:3a:6e:a3:73:f3:ca: af:1e:f7:c7:10:05:98:e5:95:91:b3:c9:69:5c:a5: 92:8e:d9:85:c2:aa:96:46:35:ff:c3:b9:f1:f1:eb: 1a:47:fe:71:8a:5f:a2:42:5f:bc:e0:2e:eb:1c:cc: c4:92:f9:a0:1a:3d:0e:01:db:ec:f7:d2:c1:3b:1e: 9e:74:42:ea:e5:4a:03:7e:82:58:cb:51:0e:d0:0d: 58:66:fe:cc:04:f3:09:4b:5c:80:ef:2b:fb:ff:d8: 13:1d:ba:8d:20:12:0d:89:0b:63:8d:e2:a4:d2:32: 39:18:47:a8:e9:2f:fc:cb:01:a5:11:88:4b:fe:3d: 7b:31:3e:dc:d9:dc:77:dd:6c:43:70:af:5e:d5:8f: 28:fc:8b:27:8f:6b:13:ef:d8:d0:a5:59:b2:96:4f: 93:a3:f0:bb:8d:13:4a:cc:a5:62:8a:4e:88:b9:56: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:CB:17:F8:5A:88:40:80:16:22:61:3F:81:DD:C8:E6:0F:27:84 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d2:77:b1:b4:4b:a6:f0:b5:50:21:a5:6e:9b:8e:8c:17:33: 8a:32:bb:ad:f3:99:76:6f:3c:ed:19:c5:df:1e:e1:20:b7:2c: 6c:e2:0e:15:14:0f:a2:2f:14:f5:e5:6a:04:3f:4a:3f:ec:71: 43:2d:30:ab:a4:9f:19:90:06:e3:6d:42:63:35:04:86:9c:26: 8f:d9:7b:15:aa:c1:00:ce:33:e0:a8:56:d1:8c:bc:38:22:92: a4:80:0b:10:58:c2:65:60:ee:82:c6:2c:e8:22:c0:ac:d6:b4: ab:de:39:b7:95:f9:b3:7b:7e:da:a1:96:a6:3e:7f:d2:25:57: 41:21:06:e1:1d:b2:20:0c:e9:b3:06:02:b1:68:98:d2:83:ff: e6:f1:6a:96:ab:5b:08:93:b8:35:81:2f:a3:67:bb:97:2a:07: 8a:b8:44:73:90:be:51:a3:8c:1f:7c:39:fc:fe:78:4d:b4:66: 8d:b4:81:51:bc:bc:42:1d:b9:35:36:11:59:68:ca:04:27:83: 5a:04:54:61:ff:82:fe:27:d9:c9:5c:59:f9:2c:94:8d:b3:6e: d9:de:24:7e:51:49:bb:a1:08:04:e6:a0:ea:24:36:33:0e:f3: 7d:fe:3f:bd:a3:3a:df:15:35:42:32:b9:7f:c4:51:d2:ad:51: 06:35:77:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAbH4KfRGZJobwG1nmCop4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUxMDIwMDcwMTQxWhcNMjUxMDIxMDcwMTQxWjAzMTEwLwYDVQQD EygyNGVmY2IxN2Y4NWE4ODQwODAxNjIyNjEzZjgxZGRjOGU2MGYyNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA599vUkxgiCqB4SBH6GQK4dDeUHDZ M/f91UR4xDm8QF79nUBEC+8m6jRFxIeQm+XIEJcU4945tnKfYo1HA1qu9tBJU2sp 0urn8J5Uldj6qG0K22g6bqNz88qvHvfHEAWY5ZWRs8lpXKWSjtmFwqqWRjX/w7nx 8esaR/5xil+iQl+84C7rHMzEkvmgGj0OAdvs99LBOx6edELq5UoDfoJYy1EO0A1Y Zv7MBPMJS1yA7yv7/9gTHbqNIBINiQtjjeKk0jI5GEeo6S/8ywGlEYhL/j17MT7c 2dx33WxDcK9e1Y8o/Isnj2sT79jQpVmylk+To/C7jRNKzKViik6IuVYBqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTvyxf4WohAgBYiYT+B3cjmDyeEMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9J3sbRL pvC1UCGlbpuOjBczijK7rfOZdm887RnF3x7hILcsbOIOFRQPoi8U9eVqBD9KP+xx Qy0wq6SfGZAG421CYzUEhpwmj9l7FarBAM4z4KhW0Yy8OCKSpIALEFjCZWDugsYs 6CLArNa0q945t5X5s3t+2qGWpj5/0iVXQSEG4R2yIAzpswYCsWiY0oP/5vFqlqtb CJO4NYEvo2e7lyoHirhEc5C+UaOMH3w5/P54TbRmjbSBUby8Qh25NTYRWWjKBCeD WgRUYf+C/ifZyVxZ+SyUjbNu2d4kflFJu6EIBOag6iQ2Mw7zff4/vaM63xU1QjK5 f8RR0q1RBjV34Q== -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:34 2025 by rpki-client