$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: 10RVokLFaFLvsZ+bDEkQlS3/rK9C86eGFFFNh2mWdg0= Subject key identifier: 07:23:71:34:A2:BE:E4:E1:3B:DA:26:CC:78:C3:92:A2:B2:D3:26:CF Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 0197B7B2FFCCF2170CE663A095968A436F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 15EF Signing time: Sat 28 Jun 2025 18:00:50 +0000 Manifest this update: Sat 28 Jun 2025 18:00:50 +0000 Manifest next update: Sun 29 Jun 2025 18:00:50 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 3I5SMzfV3X2bp-ZE5fRorVPE9yg.roa (hash: reA3H+soi2ZzCIioU9uZToGIBsR6YdfTtmzdGpud97o=) 3: 568PBTNOog5zQd02Gzfw8j53pp0.roa (hash: 9zEg7rD8+zhtCTeBHh1OB7HwhHMIZEI66k67FO3erWc=) 4: 7Ms2re6yrcU_4KWkqgeF0A-37o0.roa (hash: 2PS3jmQMAVO4d5GHcps6+eKUgMjnqVMn7yyAAVL6E+c=) 5: 9RxTwcsio1S5_RkC0WTrzOMaZhc.roa (hash: 9h7l9iTJhi27U8gTTfYmIzbUUM7p2Wt+DSj4crg7JCc=) 6: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=) 7: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=) 8: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 9: Y9dsLFqisNxUPX71m3LtAeDtLIk.roa (hash: reNcduh09ERErdZziIpW/z7aUXSWr9VEJ9+IRQL0fMA=) 10: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: 9m1ewT+1F70ZY1vYAdDwSAi3fKdrbJRdTd9thr6Zx6A=) 11: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 12: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=) 13: dWEbMjaLU3aUXNyJ1vBeLmObyYY.roa (hash: XYLS96k5QjcmvPO6+gN1adTzVReS6mK/09xNzzxTkQ0=) 14: jC0_OBlWrEljET3kitu_u4UMuGI.roa (hash: 1xtlBlnH8pKeA/LPN7gJ0+ahhITWUKhm73SYRTl4heQ=) 15: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 16: spUV2G_w7LexkppF_8NXsddCzgg.roa (hash: xQa6b3SJCPpD4G7b0ZQmHLdIcSdDt4YZdrIuM2arjjg=) 17: uUi0KofDbqtYMEaXZKuzUf6j_g8.roa (hash: alyYmtkZg04IYls6laYaGC7Xxo8kIqLyOx7CWUJ5vD8=) 18: vy2Tim2DO-ewqTW5JiC-wljnBqc.roa (hash: kUL4TPorWNhT03Pu7RvQiDQUgMW7VI5SJDKSj38x+BY=) 19: wp9K61d8US_z9eOzLYlHBqeH1W8.roa (hash: 3JoMXsjdoFnV+7KPgP8eik0lZMQTTuf6udwSvSPCpEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:ff:cc:f2:17:0c:e6:63:a0:95:96:8a:43:6f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jun 28 18:00:50 2025 GMT Not After : Jun 29 18:00:50 2025 GMT Subject: CN=07237134a2bee4e13bda26cc78c392a2b2d326cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:df:72:3d:16:cd:21:4e:f1:1f:57:06:9f: 5d:b9:da:4a:64:6d:db:d8:91:5e:e8:39:84:3f:d0: ec:e5:6d:53:45:f1:3c:02:17:b0:dd:41:28:ca:d4: c4:d4:f4:10:34:1b:76:b3:f2:2a:e6:9f:79:77:18: 85:e9:55:3f:70:9f:f0:4c:6a:e8:63:62:0e:b9:e1: a6:75:72:ed:a7:ec:46:bf:52:23:06:74:40:3e:d0: 77:21:a5:49:a3:1e:25:f4:c1:ff:c9:fb:2a:e6:29: 8d:aa:70:99:2d:3e:ce:f8:47:66:b0:c7:62:52:cd: dd:9b:a3:1f:a7:29:ec:37:5e:bf:54:23:dc:f6:63: 39:06:be:a7:3e:1f:da:f9:87:e2:24:f1:cc:d5:fb: 5b:60:8b:24:23:41:1a:6e:78:67:d0:e6:d4:75:50: 66:c0:96:f2:29:62:6e:6a:81:f0:8a:e4:f0:06:0c: 57:4c:98:71:3e:b3:32:f6:e3:dc:b7:76:3c:e8:2b: 5e:25:f4:fe:5b:42:91:69:93:97:99:7e:ea:98:ed: a7:1b:60:43:ed:53:60:9c:2e:aa:62:45:4d:fc:e1: b7:d7:7f:0b:68:23:43:e4:83:6d:e1:a5:54:09:0d: 4b:07:03:45:6a:32:49:fd:aa:0a:7a:18:31:22:9b: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:23:71:34:A2:BE:E4:E1:3B:DA:26:CC:78:C3:92:A2:B2:D3:26:CF X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2f:11:c2:57:7f:d3:03:2d:6b:17:ee:55:d8:70:58:88:7b: af:d4:52:25:f0:a2:ac:95:4b:9d:47:65:ad:f6:7a:b0:d0:39: 54:30:40:f9:e6:22:10:e2:d3:11:f9:d1:66:8b:90:a2:06:ac: 58:ce:0f:d9:de:88:55:26:92:94:2d:fb:b6:42:2d:ec:4b:22: a9:e5:75:84:55:7d:64:45:35:05:4e:4c:9d:61:62:65:6b:2b: 89:8f:5d:07:6b:a7:70:5c:eb:24:f5:50:5e:ee:22:f2:4b:8f: 13:02:0b:9a:63:4f:5d:eb:e5:5b:c4:cf:d7:05:b8:18:e3:cb: d9:a9:e9:d5:36:94:a0:1c:3d:96:28:9a:9d:3d:2e:1c:31:00: 00:37:d9:7e:e7:ce:5b:7c:56:ca:63:c8:06:a9:63:72:29:36: 0f:67:e9:6a:bc:33:39:1f:d9:90:4d:51:6e:26:b1:f5:3d:03: 76:6c:62:17:32:a4:f6:2c:d3:27:f2:1b:ae:b0:74:dd:95:9e: ee:f6:59:d0:cb:02:6d:8d:09:78:ed:65:26:ba:47:88:4f:93: 20:70:16:41:77:b1:59:64:89:a8:39:38:c9:32:b4:af:35:0f: 1f:61:d3:92:2b:86:de:36:a6:d0:16:fa:7e:7e:03:f6:69:47: f5:67:ab:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3sv/M8hcM5mOglZaKQ28JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwNjI4MTgwMDUwWhcNMjUwNjI5MTgwMDUwWjAzMTEwLwYDVQQD EygwNzIzNzEzNGEyYmVlNGUxM2JkYTI2Y2M3OGMzOTJhMmIyZDMyNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQXfcj0WzSFO8R9XBp9dudpKZG3b 2JFe6DmEP9Ds5W1TRfE8Ahew3UEoytTE1PQQNBt2s/Iq5p95dxiF6VU/cJ/wTGro Y2IOueGmdXLtp+xGv1IjBnRAPtB3IaVJox4l9MH/yfsq5imNqnCZLT7O+EdmsMdi Us3dm6MfpynsN16/VCPc9mM5Br6nPh/a+YfiJPHM1ftbYIskI0Eabnhn0ObUdVBm wJbyKWJuaoHwiuTwBgxXTJhxPrMy9uPct3Y86CteJfT+W0KRaZOXmX7qmO2nG2BD 7VNgnC6qYkVN/OG3138LaCND5INt4aVUCQ1LBwNFajJJ/aoKehgxIptpswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcjcTSivuThO9omzHjDkqKy0ybPMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS8Rwld/ 0wMtaxfuVdhwWIh7r9RSJfCirJVLnUdlrfZ6sNA5VDBA+eYiEOLTEfnRZouQogas WM4P2d6IVSaSlC37tkIt7EsiqeV1hFV9ZEU1BU5MnWFiZWsriY9dB2uncFzrJPVQ Xu4i8kuPEwILmmNPXevlW8TP1wW4GOPL2anp1TaUoBw9liianT0uHDEAADfZfufO W3xWymPIBqljcik2D2fparwzOR/ZkE1Rbiax9T0DdmxiFzKk9izTJ/IbrrB03ZWe 7vZZ0MsCbY0JeO1lJrpHiE+TIHAWQXexWWSJqDk4yTK0rzUPH2HTkiuG3jam0Bb6 fn4D9mlH9WerNg== -----END CERTIFICATE-----Generated at Sun Jun 29 01:44:19 2025 by rpki-client