$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft File: YYd-97uxsYmKrNV7io_8Kw5EKmU.mft (raw, json) Hash identifier: Q7ZvgJKX0X6Rpq+BhLyU2TwUJ236SZDuzBnVtJVe6rU= Subject key identifier: DB:02:2A:5F:68:94:DD:64:21:D5:AF:A9:96:DD:7E:CD:7D:33:CE:59 Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Certificate serial: 019D25BACBA73D369D6C288F664685A05A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft Manifest number: 72 Signing time: Wed 25 Mar 2026 16:01:31 +0000 Manifest this update: Wed 25 Mar 2026 16:01:31 +0000 Manifest next update: Thu 26 Mar 2026 16:01:31 +0000 Files and hashes: 1: 5bQGU7gd1oaPZmU8MHlH2V2ijYQ.roa (hash: 3iVCJ+BOX/LCZTDEWxMn9LlPO3BD2Lu0rUHcDDyUs3I=) 2: 6HfMkTXm8AyrDiv7sl95_jpKw9w.roa (hash: oZ6qiLSxkuba6wrWcn3NXx0/Pdfg0RcukNqqFUyOYnw=) 3: 9py5zhP2MzSr-p8h2khJDzxkSyI.roa (hash: 45wa/ByUsgujBeQclGot1VzIrEnY7GN39A/VaYjQ3Zk=) 4: Cyqj_ajFVFlMFT7Bam3q41e80WQ.roa (hash: z/I8RGLyNXq8xGmTi6dec05WT+gS5gSrIfoVwT9RIuo=) 5: OCJJC8KIk8kNADtYQ9jLM2vtnBM.roa (hash: II+NaBjTpFT66u2PxGtKNOXMHLF+3tDCncNYj0LtvjI=) 6: OFukwRdQoFEhkPdFPeWGq1nyuDk.roa (hash: PlU30Gfel0Y0GOVDxYkEY0/eaaEZrFchQD/yk0g+PiE=) 7: YYd-97uxsYmKrNV7io_8Kw5EKmU.crl (hash: K/AGmslC7BRQ0nMfNU+uXJJkrjeOe2YVUXCzn08d330=) 8: ZG6wYZmyiQ9GvlGchS5Qzv95WAo.roa (hash: OBWkXzn8KBtklIIHgP+ujdoR7lbQMtTuvT0d4AZ+ghg=) 9: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (hash: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=) 10: vwGIFE9db7TftAoGd3C3W-aOIvM.roa (hash: IpQ9e6i0QOWHjhuSrVzJFLUXvkKOTWlsK5mfL4KLjHw=) 11: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (hash: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:cb:a7:3d:36:9d:6c:28:8f:66:46:85:a0:5a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65 Validity Not Before: Mar 25 16:01:31 2026 GMT Not After : Mar 26 16:01:31 2026 GMT Subject: CN=db022a5f6894dd6421d5afa996dd7ecd7d33ce59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:c2:5c:52:be:a1:d7:cd:10:01:27:cc:14: 6e:eb:80:e5:12:44:4b:d4:e8:3d:21:7b:84:84:63: e4:06:0a:b0:c4:2d:1d:79:32:3f:ad:dc:22:bd:d6: c6:49:7e:26:2c:46:2d:58:f1:89:61:78:e9:5a:05: f8:06:f3:fe:60:af:dc:0c:26:86:08:e8:42:c9:48: 8f:0e:81:41:32:0f:08:c8:6d:76:d4:54:4c:58:68: f3:00:95:20:54:b8:75:09:fe:c3:40:3f:ab:9b:02: 43:98:84:2d:8e:0c:9f:7b:2b:a0:c4:f7:90:1e:96: 0c:57:2b:44:8d:6a:2d:b4:13:c5:30:19:90:49:3e: a8:6a:2c:71:ce:9f:6a:2c:20:e3:6f:6b:d1:2f:37: 6c:82:39:c2:39:a6:e1:18:5d:a6:8c:e3:3a:8b:ab: ef:f2:a4:65:68:3a:1d:57:b9:9d:30:c6:9a:13:ec: 4b:05:53:d3:09:16:73:ff:d0:9a:63:9b:be:1a:41: 8f:1c:e9:75:fd:ce:25:31:bd:b4:b5:93:49:fb:cb: e3:e0:2e:9c:06:06:cf:b8:93:89:27:fa:ae:1d:ef: 0d:25:9f:8c:43:f8:58:a5:f9:7b:9d:fc:b2:1c:45: 68:44:bf:59:38:24:34:c2:0a:0c:68:de:c0:7d:86: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:02:2A:5F:68:94:DD:64:21:D5:AF:A9:96:DD:7E:CD:7D:33:CE:59 X509v3 Authority Key Identifier: keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:69:0f:87:8f:2e:94:74:eb:56:56:53:61:1d:4a:61:2d:e1: e6:92:d2:0c:4d:87:5b:e6:7d:de:1b:35:3e:48:7a:e3:b8:24: b8:4f:28:d8:d3:78:c8:36:33:53:ec:47:ab:f7:06:b4:61:7a: 18:b3:ac:00:15:c3:ec:69:08:24:97:9d:77:45:ee:8d:7b:ac: 04:c1:36:d5:ef:d2:48:32:88:1f:9d:cb:6d:fd:3d:65:cd:34: a3:7f:dd:c8:c2:7b:05:06:22:a3:ba:c2:54:ba:10:14:21:ed: 55:f3:dd:96:81:0f:2b:a7:20:75:86:09:48:06:d7:95:72:01: 80:14:76:99:ae:81:72:7d:06:44:78:66:38:44:9e:ec:3a:26: 93:40:42:e7:d6:80:20:9a:91:57:6f:28:90:25:26:15:48:4c: e0:b3:1c:e1:34:4f:49:db:f2:da:ee:bd:2d:26:92:4f:44:35: 84:ed:76:5c:fc:fa:71:a5:be:1b:0c:9f:77:9e:ff:40:50:bf: d4:7a:2e:a4:dc:ab:3c:6e:13:3f:e7:72:82:c9:ba:89:0f:e8: ac:45:6b:7c:db:d1:61:d9:29:2f:37:cf:17:b9:3b:93:dd:45: 01:c5:5b:14:45:96:5b:63:ff:05:6a:26:77:eb:11:c1:af:cf: 0d:bd:42:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lusunPTadbCiPZkaFoFpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZWY3YmJiMWIxODk4YWFjZDU3YjhhOGZmYzJiMGU0 NDJhNjUwHhcNMjYwMzI1MTYwMTMxWhcNMjYwMzI2MTYwMTMxWjAzMTEwLwYDVQQD EyhkYjAyMmE1ZjY4OTRkZDY0MjFkNWFmYTk5NmRkN2VjZDdkMzNjZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB7CXFK+odfNEAEnzBRu64DlEkRL 1Og9IXuEhGPkBgqwxC0deTI/rdwivdbGSX4mLEYtWPGJYXjpWgX4BvP+YK/cDCaG COhCyUiPDoFBMg8IyG121FRMWGjzAJUgVLh1Cf7DQD+rmwJDmIQtjgyfeyugxPeQ HpYMVytEjWottBPFMBmQST6oaixxzp9qLCDjb2vRLzdsgjnCOabhGF2mjOM6i6vv 8qRlaDodV7mdMMaaE+xLBVPTCRZz/9CaY5u+GkGPHOl1/c4lMb20tZNJ+8vj4C6c BgbPuJOJJ/quHe8NJZ+MQ/hYpfl7nfyyHEVoRL9ZOCQ0wgoMaN7AfYZX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsCKl9olN1kIdWvqZbdfs19M85ZMB8GA1UdIwQY MBaAFGGHfve7sbGJiqzVe4qP/CsORCplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDct ZWU5NGRiZTQ2YTAyLzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82YjEyZmMtODNkYi00ZDFlLWJmMDctZWU5NGRiZTQ2YTAy LzEvWVlkLTk3dXhzWW1Lck5WN2lvXzhLdzVFS21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2kPh48u lHTrVlZTYR1KYS3h5pLSDE2HW+Z93hs1Pkh647gkuE8o2NN4yDYzU+xHq/cGtGF6 GLOsABXD7GkIJJedd0XujXusBME21e/SSDKIH53Lbf09Zc00o3/dyMJ7BQYio7rC VLoQFCHtVfPdloEPK6cgdYYJSAbXlXIBgBR2ma6Bcn0GRHhmOESe7Domk0BC59aA IJqRV28okCUmFUhM4LMc4TRPSdvy2u69LSaST0Q1hO12XPz6caW+Gwyfd57/QFC/ 1HoupNyrPG4TP+dygsm6iQ/orEVrfNvRYdkpLzfPF7k7k91FAcVbFEWWW2P/BWom d+sRwa/PDb1CiA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:27 2026 by rpki-client