$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: BmyIchy/jvpP84mav5TigtHsvC8P9dhRR+CyPmR5LmA= Subject key identifier: 9D:90:B1:57:AD:D7:EC:EC:D5:CC:A6:B2:AA:C4:11:51:85:B5:95:76 Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 0198D515AC60258F6CC8C8962A9C5DACF018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 084D Signing time: Sat 23 Aug 2025 04:00:24 +0000 Manifest this update: Sat 23 Aug 2025 04:00:24 +0000 Manifest next update: Sun 24 Aug 2025 04:00:24 +0000 Files and hashes: 1: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 2: 8hUBZAg1ot5uc88r_U7o-l-F-80.roa (hash: B5mgRRtKRDmMyhL6+Oo4zUe018eCsxxY80vBNBSKaAg=) 3: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 4: HpOi7c_S_v8OgGfAcW8YhSlJRVk.roa (hash: CM7jTteVy3XFQV9Gw/Amlvv4uEMdN4ootFhXdwUocaA=) 5: JlsFviENh8N1RP1E916dIGDptKg.roa (hash: +Dvi0mBx115ZEIRNwTH/ZirDP0Z77O0cSwhZfqnusv0=) 6: L_uBncq6JPrhD07DEJ6xBAuvmUM.roa (hash: 7oHQZcP91VAepicxLsrLYdifXbG7hBNRiCty5f4IKcc=) 7: Rv56JbM9B0QRW871yiTV-6FdpRA.roa (hash: WXhKSn8R39elIT0wpsiUNOwPTK9oHy/wkiqB/Sxv7nI=) 8: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=) 9: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: yxfL8SiCFCT91QWKxGzpeTGfHxgQ8olZCozmzVU2l1A=) 10: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=) 11: l_9g3Du4hHizQDAhwWWUa5qFhwQ.roa (hash: OfRzTM/q1j5+rFyoMMu+YFugDrDSmoVuyE+jWGM553U=) 12: p9P5K0xM7gOW6zydCPng3SuZ7n8.roa (hash: K3+viqWr57xtQCGB1qA5AN7lD3i18qG/Hk+RK0nKQIo=) 13: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=) 14: uU44pG11DNdyipc4YD7btg_7gW0.roa (hash: jHssSgmDD1Mu9OxQ3VCtCrFMT69Ds4egSnfu3YSEpXk=) 15: zoJKKU_UCg8-ktBxKw-bCEDck7o.roa (hash: t/HhL8JHqN2l/JgR0XHogWXqUI0o5odIjuYe4hIp5ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:ac:60:25:8f:6c:c8:c8:96:2a:9c:5d:ac:f0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Aug 23 04:00:24 2025 GMT Not After : Aug 24 04:00:24 2025 GMT Subject: CN=9d90b157add7ececd5cca6b2aac4115185b59576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:02:60:78:61:52:8a:17:a4:71:25:54:fa: 77:88:d1:b6:3e:e8:51:c2:c2:c0:cc:77:22:4b:d6: b8:ea:60:55:ca:4b:e9:86:4f:bc:de:71:62:bf:5c: 75:0c:10:52:ce:31:b5:ff:96:10:97:a1:59:17:b8: fe:c1:d9:d8:9f:fa:cc:99:7c:cc:88:ba:b4:eb:64: 1e:61:15:95:87:ae:19:b1:18:a8:59:49:81:21:37: ec:60:74:ee:23:69:67:d6:98:26:cf:5f:3f:d3:9c: a1:0a:58:d9:b4:1b:cd:f5:bd:92:f6:1e:7a:10:3a: 32:1b:d8:f0:5f:4a:61:dc:df:2d:92:d0:75:61:d4: db:0c:23:2b:cb:80:64:68:da:ce:24:a0:4d:7a:7a: 63:8f:96:25:2e:fe:b4:39:6c:91:0b:ad:fe:b8:d2: 9b:8f:2f:c2:8b:c0:17:9e:32:0f:d5:35:e2:46:87: 43:95:b3:62:27:38:5a:bd:76:ad:8f:85:de:05:97: dc:12:97:a2:9b:5a:c4:fa:47:a2:10:5c:19:b7:03: d4:4b:94:40:5f:7b:37:84:0a:4a:25:ee:bf:ae:08: 22:48:d6:68:6b:78:c9:f6:8e:8c:3d:10:82:26:d1: 80:4f:ca:3b:8d:14:b1:a5:9f:29:f3:16:65:81:e8: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:90:B1:57:AD:D7:EC:EC:D5:CC:A6:B2:AA:C4:11:51:85:B5:95:76 X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:16:a4:89:61:eb:8a:bc:2b:01:bd:bb:a0:0a:48:0f:41:98: 5e:75:75:6e:3a:fd:78:ee:95:43:77:17:0b:7e:6c:8a:61:6c: c9:80:27:e3:19:45:43:c5:ba:83:0f:30:71:e1:d9:42:ae:87: 2e:cf:d0:1b:b0:c2:f5:07:46:94:94:9b:d4:9b:76:34:ab:95: f9:c0:55:52:2d:18:bc:8f:b3:75:41:6a:e6:18:a5:86:35:a9: 8b:a9:9e:1c:55:d6:57:73:5b:8d:d9:c4:94:55:99:ad:cd:72: d1:da:57:34:d8:94:5a:37:4f:f6:b7:63:94:d3:d9:16:24:94: f7:73:51:2f:e8:e3:51:2c:e7:80:54:0d:eb:1a:9f:b8:02:91: 21:2c:4f:66:b2:d3:8a:70:93:b4:a0:26:0f:83:84:8e:50:8d: 1d:0a:60:02:23:25:7b:d3:00:d6:a4:db:5a:ce:5e:10:40:b0: 04:9a:32:c3:95:2e:4e:f4:39:80:52:8a:e2:85:b5:91:65:db: 30:ee:27:b8:56:10:8f:8a:3f:85:30:6d:4b:35:4d:d8:d0:9a: dd:e9:6f:0c:d3:86:d4:5d:13:3d:14:71:61:26:68:18:dc:af: 5e:f9:86:2a:81:7e:e8:10:b6:96:19:28:f0:96:7c:1c:91:5f: 94:07:ef:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFaxgJY9syMiWKpxdrPAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUwODIzMDQwMDI0WhcNMjUwODI0MDQwMDI0WjAzMTEwLwYDVQQD Eyg5ZDkwYjE1N2FkZDdlY2VjZDVjY2E2YjJhYWM0MTE1MTg1YjU5NTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfsCYHhhUooXpHElVPp3iNG2PuhR wsLAzHciS9a46mBVykvphk+83nFiv1x1DBBSzjG1/5YQl6FZF7j+wdnYn/rMmXzM iLq062QeYRWVh64ZsRioWUmBITfsYHTuI2ln1pgmz18/05yhCljZtBvN9b2S9h56 EDoyG9jwX0ph3N8tktB1YdTbDCMry4BkaNrOJKBNenpjj5YlLv60OWyRC63+uNKb jy/Ci8AXnjIP1TXiRodDlbNiJzhavXatj4XeBZfcEpeim1rE+keiEFwZtwPUS5RA X3s3hApKJe6/rggiSNZoa3jJ9o6MPRCCJtGAT8o7jRSxpZ8p8xZlgehBxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2QsVet1+zs1cymsqrEEVGFtZV2MB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBakiWHr irwrAb27oApID0GYXnV1bjr9eO6VQ3cXC35simFsyYAn4xlFQ8W6gw8wceHZQq6H Ls/QG7DC9QdGlJSb1Jt2NKuV+cBVUi0YvI+zdUFq5hilhjWpi6meHFXWV3NbjdnE lFWZrc1y0dpXNNiUWjdP9rdjlNPZFiSU93NRL+jjUSzngFQN6xqfuAKRISxPZrLT inCTtKAmD4OEjlCNHQpgAiMle9MA1qTbWs5eEECwBJoyw5UuTvQ5gFKK4oW1kWXb MO4nuFYQj4o/hTBtSzVN2NCa3elvDNOG1F0TPRRxYSZoGNyvXvmGKoF+6BC2lhko 8JZ8HJFflAfv8Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:19 2025 by rpki-client