$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: 2tdIv6pQ17h6kuCwkGKgE+BJ14OtkEb6bVYosmDNwVU= Subject key identifier: 87:E3:D0:87:16:42:D6:37:A2:99:62:99:1F:B1:AD:C1:0C:5C:97:71 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 0199FC21BBFBA3F99BA17C248FE273E5C373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1729 Signing time: Sun 19 Oct 2025 11:01:33 +0000 Manifest this update: Sun 19 Oct 2025 11:01:33 +0000 Manifest next update: Mon 20 Oct 2025 11:01:33 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 52AprETIRbFDUqM46ur0ZcU_kJ8.roa (hash: r7B0mvb9UUSQmten8hxAPFepljFzhrKT4KBjDSQtBTw=) 3: 568PBTNOog5zQd02Gzfw8j53pp0.roa (hash: 9zEg7rD8+zhtCTeBHh1OB7HwhHMIZEI66k67FO3erWc=) 4: 7dayy-ue9GUJpzyclEIimtif3_w.roa (hash: 4JgYJRahEh68+u63kEGGgHtYOlGh91xC0Hb+kdcP4aU=) 5: 9RxTwcsio1S5_RkC0WTrzOMaZhc.roa (hash: 9h7l9iTJhi27U8gTTfYmIzbUUM7p2Wt+DSj4crg7JCc=) 6: Ce0eRLxLAlI4cxE5occdRxJvx1k.roa (hash: tdH5GjSB/LW0PULc/zqg0vc5nhMDtGNzUfHe7tJZQ8w=) 7: EQCLJlgmcNp6Np7zuKBQeJ1HMBg.roa (hash: k4j2l8243gZl27loBQC1srNx3SmtQxfanDuXrBBIDpw=) 8: JP-S2o0I_nUtLAOKPN3MfRIN6RY.roa (hash: JfTdIpHmF4T1dIihVESOhyJNGp+NKyB+FhmpQnwIZKg=) 9: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 10: KSrqd-K2qN25PnwAmClxYgD_VwI.roa (hash: R/U3yBT9e4imvw3Tjw/+/dIWqaaKNifNNdmI6TUsVik=) 11: LECXwwOJkYXSvoEkkhVQqcZQMCw.roa (hash: c2nAj2MsaYNhv7IXToz+zt87p0StOKZqVhSYKT3pEAI=) 12: PnKU_Q2HHtCU1pCr_1KaGPkN2ek.roa (hash: GbYc2B1qBjTyAVup6jSWAzMh9yA2HZhkMGLtK25rTiQ=) 13: TSChuoUoxhH4RDl93vItxLbWmjA.roa (hash: Yt5QjTI9IjJMsTBQGdHqIoHSZWBchoO0b+jSiGXzfpY=) 14: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: +5Twhixw7la3Ko8BKkkuIxAV/uCP0SlDmbJheIP4poU=) 15: YQ9Y8mt0ihX-1hkt028wgnIveVM.roa (hash: 2Za3dQMpt5hHnoKCpKq9CmdrcwegpUJWhl7wmxiI9U0=) 16: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 17: c2VFzo6HIF3n3ndt-0M0fKvy_JA.roa (hash: slufhKCxNg4CGSzXhwjvX2O0dejt4P3KbS4VdSLKP/8=) 18: h-A858ZfddXvJk42E4zciUqkDGo.roa (hash: dyn6NbexTrThIgZ64mOYzwXCatyWxi4d3djRyVn/ZTk=) 19: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 20: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 21: kJU-KgD8cYtkfeivKCJEB0DdEd8.roa (hash: 5IehEg28rjh+Szw0jXY9Pro/E9tT/kZUcz/KhGmkIUc=) 22: qNG0NYBaxNnb4tvED5blrbZaQm4.roa (hash: kx0filtmJdFwdMqR9tMIqBohoW63H61VsrxnAdch0ZQ=) 23: qmJe_5PAVbEyU3Hz9mqWWayqxrg.roa (hash: 4j7w+emJPvjo8IC4c65G1J9dI6AZT4RULSbnACF02rM=) 24: rjAOeGQCTQyMZoRG4Z022m8KN8o.roa (hash: 35P0Nm9Y4NVT17MO0LbHCMl2O9jDGjPVXc264sSYKEY=) 25: schVxcLi_65lH1A2TemMS4xoeKI.roa (hash: G26ZU92J67QU7tCHqdeTryKRkasRzJr5JoJepYvpSa0=) 26: uUi0KofDbqtYMEaXZKuzUf6j_g8.roa (hash: alyYmtkZg04IYls6laYaGC7Xxo8kIqLyOx7CWUJ5vD8=) 27: vI0U7fkAkt3cTATzOlCKhJuroAc.roa (hash: 5B6VWqHRTBuf463R5V8OHEKJoYOEzFD7hCy/PBP0gEw=) 28: vm8G1CJtR8NoqwuLLwSubFgOmS0.roa (hash: lZ9XUGMQa5iMmI7NjUpdLuwQ8xNfL1R8duvU6nNgaek=) 29: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=) 30: wBatYwo8u1aByajgkyhRfdNJP_g.roa (hash: nfoN3wikvs52QiHqhmSnuZg2zLzQrUv+rPJKHtdHMZ0=) 31: wVIN0cBImlfNWFOz4IT7aYaexqE.roa (hash: BV94o+pd1hE2+f5obJYSJgfF2TueBCqdTmVe9yx/Lfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:bb:fb:a3:f9:9b:a1:7c:24:8f:e2:73:e5:c3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Oct 19 11:01:33 2025 GMT Not After : Oct 20 11:01:33 2025 GMT Subject: CN=87e3d0871642d637a29962991fb1adc10c5c9771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1b:2c:ec:af:69:ed:31:99:22:1b:02:85:d4: e2:8c:25:7a:90:9a:2e:9b:0d:94:09:d0:e4:8d:0d: d0:b3:a6:35:b1:40:c4:2c:25:d3:b2:44:a3:23:80: ba:78:b4:35:ca:33:50:43:bc:ac:2c:ec:ea:61:24: da:fe:c0:96:17:16:56:46:b1:90:97:c0:d7:ca:8d: ce:bf:ee:c9:7c:fa:f6:37:38:be:7e:89:1e:26:c1: 68:b6:66:16:f5:91:28:ee:3d:9f:27:6b:a5:c6:b9: a5:4c:5f:54:ba:09:29:13:78:1a:7b:0d:6f:05:ee: 01:90:26:4f:2c:0a:12:58:a2:a4:85:46:a9:0b:52: 69:15:fc:3f:2b:71:af:03:6f:df:01:56:f6:5c:10: b7:5a:51:d6:8d:08:89:79:9b:f8:ed:8b:4f:1c:73: ad:a3:44:06:75:54:1f:f7:9c:b9:6d:60:1e:ca:17: 3b:6b:63:29:46:bb:01:b7:a8:e1:1b:d4:41:88:57: 3d:b1:d1:5d:b0:d8:3b:4d:67:f8:8c:98:b3:b5:94: 68:81:db:49:96:5d:1e:1a:48:55:52:4e:05:07:22: 7d:e1:92:bd:82:93:3e:25:1e:e9:a8:d5:9e:3b:fd: 58:27:df:1b:17:c9:fd:fd:31:57:37:24:ae:be:5b: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:D0:87:16:42:D6:37:A2:99:62:99:1F:B1:AD:C1:0C:5C:97:71 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:02:36:96:06:b3:70:35:df:96:56:b1:6f:bd:27:4d:c0:9e: 8a:ac:31:ba:f2:0d:95:b5:4a:00:58:fd:f6:c9:d4:83:61:33: f6:34:6f:ef:c7:8c:82:85:f0:ca:e4:07:ac:9f:51:99:0c:9a: ac:15:4d:1f:c2:ef:92:37:80:19:4e:2b:d0:a9:27:41:bf:5e: 4e:a7:4f:a6:3d:c6:c4:ea:79:2d:f0:c8:ee:a4:07:f7:aa:c3: 95:9d:40:9c:97:55:cf:3a:7d:7b:e9:bd:89:fa:1a:80:9c:ac: 39:95:3b:6c:81:38:a6:da:f7:81:c0:7d:3a:75:a8:1e:a5:c8: 68:bf:8a:3e:70:44:bc:6d:71:db:3a:35:64:a0:05:44:74:ef: 26:20:84:4e:2b:d3:d2:df:4b:7f:32:5c:0d:70:64:3b:28:30: 23:bb:1e:8e:ea:48:aa:b5:1a:78:9e:34:b0:e0:47:aa:ca:d4: d7:fa:7a:37:9d:e0:f9:cf:9f:86:44:50:8c:5e:c9:02:d2:b0: 77:84:63:16:2e:87:c0:6b:f0:55:eb:37:8a:9d:04:78:89:fe: f0:e7:fc:ff:16:e8:67:54:74:a1:d9:bd:1f:10:18:d4:dc:21: a1:27:5c:ff:11:c7:6d:7d:e9:e7:21:9c:74:db:ab:ef:7e:63: 38:8d:dc:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8Ibv7o/mboXwkj+Jz5cNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUxMDE5MTEwMTMzWhcNMjUxMDIwMTEwMTMzWjAzMTEwLwYDVQQD Eyg4N2UzZDA4NzE2NDJkNjM3YTI5OTYyOTkxZmIxYWRjMTBjNWM5NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRss7K9p7TGZIhsChdTijCV6kJou mw2UCdDkjQ3Qs6Y1sUDELCXTskSjI4C6eLQ1yjNQQ7ysLOzqYSTa/sCWFxZWRrGQ l8DXyo3Ov+7JfPr2Nzi+fokeJsFotmYW9ZEo7j2fJ2ulxrmlTF9UugkpE3gaew1v Be4BkCZPLAoSWKKkhUapC1JpFfw/K3GvA2/fAVb2XBC3WlHWjQiJeZv47YtPHHOt o0QGdVQf95y5bWAeyhc7a2MpRrsBt6jhG9RBiFc9sdFdsNg7TWf4jJiztZRogdtJ ll0eGkhVUk4FByJ94ZK9gpM+JR7pqNWeO/1YJ98bF8n9/TFXNySuvls/fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfj0IcWQtY3oplimR+xrcEMXJdxMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQI2lgaz cDXfllaxb70nTcCeiqwxuvINlbVKAFj99snUg2Ez9jRv78eMgoXwyuQHrJ9RmQya rBVNH8LvkjeAGU4r0KknQb9eTqdPpj3GxOp5LfDI7qQH96rDlZ1AnJdVzzp9e+m9 ifoagJysOZU7bIE4ptr3gcB9OnWoHqXIaL+KPnBEvG1x2zo1ZKAFRHTvJiCETivT 0t9LfzJcDXBkOygwI7sejupIqrUaeJ40sOBHqsrU1/p6N53g+c+fhkRQjF7JAtKw d4RjFi6HwGvwVes3ip0EeIn+8Of8/xboZ1R0odm9HxAY1NwhoSdc/xHHbX3p5yGc dNur735jOI3cuw== -----END CERTIFICATE-----Generated at Sun Oct 19 13:14:18 2025 by rpki-client