$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: qpXOAiPQ3fuhqWNhD/JWGSyPft8NEsqPqwHkREd/d6Q= Subject key identifier: EA:17:26:EA:A9:C3:A9:C8:82:DC:54:BD:40:F2:5E:DE:72:63:2F:01 Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 0199FCFD7EAB88E4F9648ADEC56679C3131E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 08FC Signing time: Sun 19 Oct 2025 15:01:35 +0000 Manifest this update: Sun 19 Oct 2025 15:01:35 +0000 Manifest next update: Mon 20 Oct 2025 15:01:35 +0000 Files and hashes: 1: 2rSo3-q09N7iB7jaYOjneDrv5u0.roa (hash: SeBUuABk516SvykaHeAgwtcJvEimuVjuj4HjynLJdB4=) 2: 7LJP4TTrnOvYHrxDIcD68WvMpkk.roa (hash: lLcekHLAvj7EJiZGkNr9eVZ0bS3xvv53hGQkkk7vZH0=) 3: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 5: JP20HQEng-usG2Tg4OvQmMsT8lE.roa (hash: 3rAazc1ah93oj3YYeUuAqyDzX9FMmIEaFnXDdVjLfD0=) 6: RcvJDa-cbOmIaa4og35Ma3bmLs4.roa (hash: GGKEWRmYEZ5B7wJ/8LINfgpwU0+7mRGdZ5NWQrU75S4=) 7: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 8: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: glvJ/ZOJi+z2ALMwhfTrCGl70wHon+09kmwH7l7UZu0=) 9: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 10: bfGAioHYnVCwURtmCUj955sCQiY.roa (hash: LAys+jZEOLTjTbxBgUViTiDI40ywquJv6pzZYNrFeD0=) 11: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) 12: sshGfE0PHQJIsMjWQ6xCwAfL9ss.roa (hash: NRl6+hvMuRUovTUsdUnT3sLoBJp473sUMroon6ol0SE=) 13: t4KmAsN3n5hvYH7SrJ3ol5Me5m4.roa (hash: MXA7Vri5dzrq8tShc6Jw5y5UGeZgcbY1ukge4h+UeLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:7e:ab:88:e4:f9:64:8a:de:c5:66:79:c3:13:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Oct 19 15:01:35 2025 GMT Not After : Oct 20 15:01:35 2025 GMT Subject: CN=ea1726eaa9c3a9c882dc54bd40f25ede72632f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:c6:4e:0e:1f:68:bb:94:a0:9b:96:1a:48: e1:61:1a:21:be:18:fa:44:5a:0c:c9:78:81:fc:b9: 17:83:76:ed:2f:26:e0:8f:ba:f2:2e:da:cf:09:44: ed:b6:47:92:ad:70:4b:bd:27:ae:fd:a0:3b:bc:e4: 57:69:41:86:03:10:45:30:f7:4d:2e:83:f4:70:3e: 87:17:c7:19:7a:dc:d6:41:d1:88:17:78:6c:98:3d: eb:20:df:91:3b:c8:ff:f2:87:b8:87:b5:1f:d0:a7: 02:a0:be:c4:3e:8c:7e:42:c0:52:13:9b:a0:4f:22: a9:7c:40:26:3a:aa:51:f2:e7:b4:68:69:81:7f:e0: 8d:78:fb:ac:98:f9:82:ae:b3:81:49:2b:7e:00:4b: 62:f0:c4:45:67:1c:3c:9f:70:5b:9d:cc:d9:4a:83: 3e:73:99:e5:5a:4d:11:5b:a0:ed:87:3f:26:c1:4f: 82:a0:65:22:a2:55:30:c3:77:fe:84:5d:af:44:35: ca:21:d0:13:71:a6:35:61:05:ef:e7:64:e6:8e:6a: a6:c3:e0:c2:3e:7f:c8:5a:3a:88:17:17:3d:3e:ab: d0:fb:53:1e:a7:7f:1d:b6:91:dd:83:59:e3:4a:8d: 96:52:06:3e:6a:85:8d:a5:60:f1:05:55:78:fd:7f: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:17:26:EA:A9:C3:A9:C8:82:DC:54:BD:40:F2:5E:DE:72:63:2F:01 X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cc:e1:27:06:94:99:e2:95:a9:73:4a:48:8b:89:e2:83:43: 94:61:e7:ec:6a:43:7a:1f:35:4e:b7:32:e5:b1:7b:a9:c0:d4: a0:45:b3:a7:9c:82:98:59:c1:20:bd:bc:69:8c:9c:71:c0:00: a0:76:68:e4:4f:13:9e:e4:c3:fc:7e:33:9c:b1:b2:47:3c:f6: b1:db:d6:4d:66:6b:b1:b8:06:8a:33:f3:e3:25:38:3c:ed:bb: 4e:0c:27:7d:d5:e4:c9:02:54:1f:af:d8:f6:08:4a:6d:69:a2: fe:18:32:b3:98:95:0b:d6:6a:3d:2c:db:29:e4:3b:92:ab:8a: 95:22:71:0d:52:e5:e6:dd:99:8e:fc:06:a3:09:47:8b:1c:52: 4a:46:2f:61:74:92:2d:9c:2f:50:61:ca:c9:c6:c9:02:d8:13: b5:03:6d:1f:35:74:63:b2:39:0b:9d:92:f4:fe:40:d6:3c:ec: b4:67:1d:be:60:87:e9:06:be:3a:9c:c9:ef:02:31:7d:af:27: cd:5f:b4:16:8c:4f:35:99:82:6b:38:b7:4b:ae:2b:3c:f0:26: f6:0b:f3:08:33:81:63:f6:6e:ed:9a:e2:57:78:29:83:5e:32: c2:c8:e6:ed:0f:06:69:8c:ed:47:0d:77:f4:71:1e:6d:a5:8b: d9:dc:60:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/X6riOT5ZIrexWZ5wxMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUxMDE5MTUwMTM1WhcNMjUxMDIwMTUwMTM1WjAzMTEwLwYDVQQD EyhlYTE3MjZlYWE5YzNhOWM4ODJkYzU0YmQ0MGYyNWVkZTcyNjMyZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX/GTg4faLuUoJuWGkjhYRohvhj6 RFoMyXiB/LkXg3btLybgj7ryLtrPCUTttkeSrXBLvSeu/aA7vORXaUGGAxBFMPdN LoP0cD6HF8cZetzWQdGIF3hsmD3rIN+RO8j/8oe4h7Uf0KcCoL7EPox+QsBSE5ug TyKpfEAmOqpR8ue0aGmBf+CNePusmPmCrrOBSSt+AEti8MRFZxw8n3BbnczZSoM+ c5nlWk0RW6Dthz8mwU+CoGUiolUww3f+hF2vRDXKIdATcaY1YQXv52Tmjmqmw+DC Pn/IWjqIFxc9PqvQ+1Mep38dtpHdg1njSo2WUgY+aoWNpWDxBVV4/X8MbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoXJuqpw6nIgtxUvUDyXt5yYy8BMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACszhJwaU meKVqXNKSIuJ4oNDlGHn7GpDeh81Trcy5bF7qcDUoEWzp5yCmFnBIL28aYycccAA oHZo5E8TnuTD/H4znLGyRzz2sdvWTWZrsbgGijPz4yU4PO27TgwnfdXkyQJUH6/Y 9ghKbWmi/hgys5iVC9ZqPSzbKeQ7kquKlSJxDVLl5t2ZjvwGowlHixxSSkYvYXSS LZwvUGHKycbJAtgTtQNtHzV0Y7I5C52S9P5A1jzstGcdvmCH6Qa+OpzJ7wIxfa8n zV+0FoxPNZmCazi3S64rPPAm9gvzCDOBY/Zu7ZriV3gpg14ywsjm7Q8GaYztRw13 9HEebaWL2dxgUg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:57 2025 by rpki-client