$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: J5L6mV/WsbWz0jazgRgb6cUbrL9ktIgl02NqQJfxtdo= Subject key identifier: 22:81:0A:9A:D7:3F:22:E3:1E:53:0C:31:8D:ED:EC:3C:35:C2:C5:E8 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 0199FC58C1F16A42B547E6B9A5DF7C49F97B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 16F0 Signing time: Sun 19 Oct 2025 12:01:39 +0000 Manifest this update: Sun 19 Oct 2025 12:01:39 +0000 Manifest next update: Mon 20 Oct 2025 12:01:39 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: SYW7vJR8jh6OnS0xw0zxS3bgN60.roa (hash: RRdRxhUDlZPMyyr5BdAFCoJYcDMXRiJFFRNcVSSyJoQ=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: /G1JKbaNpVvjTS6qRb9mmtwCHNciQRs83BHGuWl93po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:c1:f1:6a:42:b5:47:e6:b9:a5:df:7c:49:f9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Oct 19 12:01:39 2025 GMT Not After : Oct 20 12:01:39 2025 GMT Subject: CN=22810a9ad73f22e31e530c318dedec3c35c2c5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:56:92:c4:62:18:15:f5:9c:2a:d8:5c:78: 91:f4:dc:3a:59:9c:8e:3e:09:fa:74:71:08:d7:24: a2:bc:4e:b9:3d:e3:a5:09:13:c0:8a:8e:05:cb:93: 75:8b:99:8f:a6:36:e3:eb:c2:f0:39:24:95:91:fc: 8f:b3:28:a6:eb:f7:b1:6f:4e:f7:4b:74:9c:2d:e3: 13:11:18:12:41:ad:34:f8:c0:22:0d:5c:06:01:89: 89:a4:d4:90:b6:c2:23:85:85:6a:cc:db:f2:4b:8d: 04:a3:b4:9c:5c:16:b6:83:ec:cd:65:f2:97:dd:7e: ec:04:28:5e:d1:12:6a:95:1b:25:a2:56:0f:18:19: d5:9f:7a:66:f6:6c:8a:b8:9f:c6:b3:cf:45:96:15: 39:88:ea:a4:67:b3:d7:b7:fe:fa:29:ea:b8:24:5d: 64:4e:c6:7e:75:fc:de:7f:cc:76:76:d7:91:d4:80: 92:93:1d:6d:31:61:10:36:04:18:3f:1e:92:27:19: a9:43:cb:73:79:00:cb:fa:aa:c4:1c:fd:d1:15:e4: e5:f6:89:b8:9b:7e:43:02:8f:2c:14:c0:ab:d0:47: cc:97:5a:91:18:13:92:ab:e4:c6:f9:d3:62:82:e1: 1b:95:14:f5:3a:a5:07:0a:67:c2:95:b4:1f:a2:22: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:0A:9A:D7:3F:22:E3:1E:53:0C:31:8D:ED:EC:3C:35:C2:C5:E8 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:67:1c:07:ac:4c:bf:55:8b:58:1b:ac:c6:86:c0:c4:05:b2: c0:12:28:33:bd:7f:30:1a:b5:00:6b:41:97:cd:ff:cd:14:bf: fa:75:05:b7:5d:72:ac:8b:ce:ff:04:35:5d:7b:9c:65:b7:1d: c6:c8:91:7c:eb:d4:94:d3:32:be:18:25:aa:90:3c:8f:b9:b0: 99:14:ab:9d:ce:d6:8e:cf:31:15:44:da:20:e8:9d:8b:25:33: 93:56:2a:08:27:43:c0:27:3f:ae:39:5d:46:5b:e4:43:e3:af: 02:a6:2a:e7:0f:f6:02:20:c1:f4:2d:a6:ad:61:9d:d2:51:87: 0f:56:25:f8:b0:52:0f:b7:1c:b0:96:d2:98:8a:02:1c:1e:10: c2:a8:d3:a5:5b:54:75:51:59:4c:0b:8e:e6:0a:c1:1b:46:0f: f3:dd:de:69:59:59:d5:8e:43:c6:9f:8a:98:7a:50:18:52:cc: d0:cd:e8:f6:9f:9c:33:ed:3d:54:98:b8:26:60:87:75:4d:34: d9:70:50:4b:dd:d5:fb:9a:d2:a8:4c:7d:65:df:3a:fd:ac:a3: d9:0b:6e:7b:dd:d9:f0:7a:d1:c0:c0:49:e9:46:31:cb:8d:a9: 44:12:a1:64:ee:b9:42:97:43:f3:ad:35:a0:c4:53:63:55:ce: 72:6d:36:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WMHxakK1R+a5pd98Sfl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUxMDE5MTIwMTM5WhcNMjUxMDIwMTIwMTM5WjAzMTEwLwYDVQQD EygyMjgxMGE5YWQ3M2YyMmUzMWU1MzBjMzE4ZGVkZWMzYzM1YzJjNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3dWksRiGBX1nCrYXHiR9Nw6WZyO Pgn6dHEI1ySivE65PeOlCRPAio4Fy5N1i5mPpjbj68LwOSSVkfyPsyim6/exb073 S3ScLeMTERgSQa00+MAiDVwGAYmJpNSQtsIjhYVqzNvyS40Eo7ScXBa2g+zNZfKX 3X7sBChe0RJqlRslolYPGBnVn3pm9myKuJ/Gs89FlhU5iOqkZ7PXt/76Keq4JF1k TsZ+dfzef8x2dteR1ICSkx1tMWEQNgQYPx6SJxmpQ8tzeQDL+qrEHP3RFeTl9om4 m35DAo8sFMCr0EfMl1qRGBOSq+TG+dNiguEblRT1OqUHCmfClbQfoiK3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKBCprXPyLjHlMMMY3t7Dw1wsXoMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGccB6xM v1WLWBusxobAxAWywBIoM71/MBq1AGtBl83/zRS/+nUFt11yrIvO/wQ1XXucZbcd xsiRfOvUlNMyvhglqpA8j7mwmRSrnc7Wjs8xFUTaIOidiyUzk1YqCCdDwCc/rjld RlvkQ+OvAqYq5w/2AiDB9C2mrWGd0lGHD1Yl+LBSD7ccsJbSmIoCHB4QwqjTpVtU dVFZTAuO5grBG0YP893eaVlZ1Y5Dxp+KmHpQGFLM0M3o9p+cM+09VJi4JmCHdU00 2XBQS93V+5rSqEx9Zd86/ayj2Qtue93Z8HrRwMBJ6UYxy42pRBKhZO65QpdD8601 oMRTY1XOcm022w== -----END CERTIFICATE-----Generated at Sun Oct 19 18:15:33 2025 by rpki-client