$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: 7xBMFXeBQrfK/Aex3uBtokHeKppcOBQaMAAk2onJ5PI= Subject key identifier: 33:36:86:4D:AF:10:60:80:B3:F6:CE:76:35:28:54:54:8A:7E:94:F3 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 0198D4DFFB89C564EBA7C28977939A0CC715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1653 Signing time: Sat 23 Aug 2025 03:01:45 +0000 Manifest this update: Sat 23 Aug 2025 03:01:45 +0000 Manifest next update: Sun 24 Aug 2025 03:01:45 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: wVZ07+pR6vT9dL1R7nD9oPgKmsO+85klqm5EsCU/I4c=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:df:fb:89:c5:64:eb:a7:c2:89:77:93:9a:0c:c7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Aug 23 03:01:45 2025 GMT Not After : Aug 24 03:01:45 2025 GMT Subject: CN=3336864daf106080b3f6ce76352854548a7e94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:97:96:19:79:6c:f5:1f:14:ab:7d:51:ea: aa:11:75:6d:83:01:4f:79:71:80:ca:68:fa:c1:12: df:81:60:8d:63:0f:12:3f:64:fb:4f:87:d5:07:1e: 70:db:b0:5b:63:ef:3f:57:a6:fc:18:91:6b:17:a8: 70:8d:6b:95:ad:c2:16:8d:09:a1:5a:35:3c:33:42: bf:15:fc:c8:73:1b:70:03:63:b1:86:1e:65:49:b8: 21:fb:ae:bb:58:3f:d7:d1:03:6a:31:7c:81:d7:ed: a0:9b:bf:ad:9c:f0:d0:4c:b8:45:4a:f7:a1:a2:4b: 73:5d:fa:c2:b2:84:02:5f:e4:a6:1f:16:10:43:fa: 8e:36:b7:4c:54:1f:cd:8e:92:13:be:b2:43:7d:31: 27:65:63:14:f5:35:1e:8c:ca:c5:ac:f5:fd:97:6e: 6f:c1:32:74:9b:b2:13:22:88:03:9c:24:f4:18:94: 4f:f6:06:d7:71:c1:d1:3c:2b:7a:5d:a3:e2:6d:09: f4:33:a2:cf:4e:f8:eb:6a:69:29:60:dc:62:e8:f5: b9:fd:0c:f7:25:ce:4e:69:33:9e:60:d3:4e:b1:f1: 14:1e:21:21:41:bb:10:2b:db:fa:07:99:3f:53:2c: 38:8d:e9:32:1c:2e:1f:9c:05:f1:6a:b6:21:7d:34: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:36:86:4D:AF:10:60:80:B3:F6:CE:76:35:28:54:54:8A:7E:94:F3 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9b:c8:26:90:a0:e6:02:27:b2:78:f1:b5:da:30:3d:4b:b1: f2:fe:0b:00:31:af:3d:91:f9:a4:d8:1b:67:32:70:79:d2:b2: fc:eb:4a:e7:5b:c9:a2:2b:af:35:3d:88:4a:12:01:bd:8d:cb: 86:41:44:3f:c1:58:36:d6:4c:53:64:6e:27:8e:53:90:68:e2: f7:20:d8:6a:86:b3:36:59:af:c9:9f:79:ad:ec:54:6d:fc:50: 34:b1:16:43:22:4a:80:30:cb:71:45:c8:3d:5f:bb:91:c9:22: bd:1a:a2:40:7d:3c:f8:17:71:13:34:44:66:34:2d:39:8e:df: 39:00:82:0d:ea:b8:6b:33:b0:73:ab:b7:ac:08:98:08:fd:fd: 02:7c:c0:af:48:7e:38:12:ca:49:c2:49:25:bb:c7:2d:c0:97: bc:cf:14:32:5f:fb:87:f3:7b:50:54:8b:49:94:12:fb:bb:45: 1d:87:3b:be:dc:34:c4:13:1a:ed:a0:51:c2:26:aa:7b:54:df: 60:f6:d3:ee:be:4b:58:ce:19:09:c6:29:b9:c0:ee:d6:48:1d: ae:6f:28:da:24:c5:0b:68:ea:9c:61:d0:8a:dc:56:f3:04:4c: 81:85:1e:54:63:4f:8b:a4:af:4f:7f:bb:3e:6a:23:d1:fd:06: ea:99:e7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU3/uJxWTrp8KJd5OaDMcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwODIzMDMwMTQ1WhcNMjUwODI0MDMwMTQ1WjAzMTEwLwYDVQQD EygzMzM2ODY0ZGFmMTA2MDgwYjNmNmNlNzYzNTI4NTQ1NDhhN2U5NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKXlhl5bPUfFKt9UeqqEXVtgwFP eXGAymj6wRLfgWCNYw8SP2T7T4fVBx5w27BbY+8/V6b8GJFrF6hwjWuVrcIWjQmh WjU8M0K/FfzIcxtwA2Oxhh5lSbgh+667WD/X0QNqMXyB1+2gm7+tnPDQTLhFSveh oktzXfrCsoQCX+SmHxYQQ/qONrdMVB/NjpITvrJDfTEnZWMU9TUejMrFrPX9l25v wTJ0m7ITIogDnCT0GJRP9gbXccHRPCt6XaPibQn0M6LPTvjramkpYNxi6PW5/Qz3 Jc5OaTOeYNNOsfEUHiEhQbsQK9v6B5k/Uyw4jekyHC4fnAXxarYhfTTSaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM2hk2vEGCAs/bOdjUoVFSKfpTzMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJvIJpCg 5gInsnjxtdowPUux8v4LADGvPZH5pNgbZzJwedKy/OtK51vJoiuvNT2IShIBvY3L hkFEP8FYNtZMU2RuJ45TkGji9yDYaoazNlmvyZ95rexUbfxQNLEWQyJKgDDLcUXI PV+7kckivRqiQH08+BdxEzREZjQtOY7fOQCCDeq4azOwc6u3rAiYCP39AnzAr0h+ OBLKScJJJbvHLcCXvM8UMl/7h/N7UFSLSZQS+7tFHYc7vtw0xBMa7aBRwiaqe1Tf YPbT7r5LWM4ZCcYpucDu1kgdrm8o2iTFC2jqnGHQitxW8wRMgYUeVGNPi6SvT3+7 Pmoj0f0G6pnnjw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:39:20 2025 by rpki-client