$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: oJiWY3Z3qJcKyoplFUzk2hBPrm0t7dpjKC0mlf7Kzfw= Subject key identifier: 76:06:F8:B4:39:AB:D7:00:4F:92:E1:70:E8:8C:2C:2C:EF:D3:23:EA Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 0199FC5907BE47B7F75C054CCA19A5E1DF23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 16EC Signing time: Sun 19 Oct 2025 12:01:57 +0000 Manifest this update: Sun 19 Oct 2025 12:01:57 +0000 Manifest next update: Mon 20 Oct 2025 12:01:57 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: M2bU4BoCMnjORWhXmeYaOhtOhh9i4p2+8BTmWGRTvaw=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:59:07:be:47:b7:f7:5c:05:4c:ca:19:a5:e1:df:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Oct 19 12:01:57 2025 GMT Not After : Oct 20 12:01:57 2025 GMT Subject: CN=7606f8b439abd7004f92e170e88c2c2cefd323ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:4b:a2:fa:5e:3c:ed:e0:40:c8:5e:65:be: 1d:07:72:1d:cf:94:14:ad:8a:ab:a9:f9:46:8b:40: e8:78:14:28:cd:fe:7d:8d:e2:84:5c:89:b1:6b:8f: 9f:31:09:68:8a:58:46:d2:b2:ee:94:e0:aa:b5:37: 84:28:ee:72:03:ae:40:fc:ef:78:d9:05:cc:f0:da: fd:cd:0e:92:bb:ab:91:7d:ce:b0:11:ac:58:ee:39: 32:4d:a9:01:39:94:24:f0:3d:4d:04:17:d3:0b:33: 4c:0a:c6:48:2e:64:98:a9:02:4e:7c:92:37:f1:f3: 3a:7c:b0:ed:f3:bb:53:d3:2a:f0:95:ae:68:c2:fb: 7d:9d:30:da:2c:e4:4f:96:0f:4b:a6:ad:2a:60:e7: a3:cb:22:55:f0:85:19:d2:f6:5f:fd:b0:6f:fb:a1: 14:33:51:aa:0f:e0:77:88:86:b1:1d:64:d9:da:10: 75:8d:67:0b:74:80:e4:9c:78:0f:b3:82:1c:36:ff: f6:98:cc:f7:58:f4:85:e4:9a:e0:ce:81:93:98:d3: af:9d:22:53:f8:d4:89:39:51:9a:c2:87:ed:9f:3d: e8:46:bb:3a:ae:79:a0:7f:b0:df:1e:44:a4:a0:ba: e5:58:43:cc:59:d4:db:df:01:6d:f8:c5:57:cf:46: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:06:F8:B4:39:AB:D7:00:4F:92:E1:70:E8:8C:2C:2C:EF:D3:23:EA X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:99:f0:26:36:f9:83:ef:bf:53:70:85:07:7a:33:2b:e0:a4: 6e:d7:cf:cc:8d:94:0f:30:e3:1f:96:64:ff:ce:51:56:30:77: 5d:ef:23:96:32:54:ea:2a:c2:88:bc:12:ea:45:49:43:79:78: a5:d1:3f:31:5e:8d:2d:6d:98:e3:b8:4e:ff:eb:6d:2d:4d:65: 98:6f:12:8e:a4:65:70:f9:cd:d4:55:00:8c:53:c1:f2:4b:29: 0b:39:dc:f3:c5:c5:84:d7:7f:f6:0f:ea:2c:53:73:22:57:79: 9a:36:31:fe:28:65:08:75:43:9f:74:8e:31:31:94:a5:9e:68: f6:9f:7a:17:aa:94:b8:cd:15:60:cd:5d:aa:27:af:f6:28:7b: 61:3f:98:41:83:14:c7:3b:0e:a3:f6:f6:40:c7:c7:60:d8:c3: 05:7b:1d:ea:7e:3f:8a:e2:b0:0e:de:76:ac:e7:c0:3b:7a:d2: 67:a8:2c:f0:7d:c1:87:a9:c1:9a:00:f2:ee:1f:c7:a3:34:17: ae:d7:82:e8:7d:42:3a:fc:72:93:af:1c:5d:5c:91:16:28:2b: b7:ee:77:1b:5e:e8:19:ea:79:a6:e7:45:0c:e3:91:6b:b0:bf: 6c:18:dc:e4:07:09:59:25:62:39:6a:40:43:0e:5f:8d:02:04: 79:79:3f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WQe+R7f3XAVMyhml4d8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUxMDE5MTIwMTU3WhcNMjUxMDIwMTIwMTU3WjAzMTEwLwYDVQQD Eyg3NjA2ZjhiNDM5YWJkNzAwNGY5MmUxNzBlODhjMmMyY2VmZDMyM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEpLovpePO3gQMheZb4dB3Idz5QU rYqrqflGi0DoeBQozf59jeKEXImxa4+fMQloilhG0rLulOCqtTeEKO5yA65A/O94 2QXM8Nr9zQ6Su6uRfc6wEaxY7jkyTakBOZQk8D1NBBfTCzNMCsZILmSYqQJOfJI3 8fM6fLDt87tT0yrwla5owvt9nTDaLORPlg9Lpq0qYOejyyJV8IUZ0vZf/bBv+6EU M1GqD+B3iIaxHWTZ2hB1jWcLdIDknHgPs4IcNv/2mMz3WPSF5JrgzoGTmNOvnSJT +NSJOVGawoftnz3oRrs6rnmgf7DfHkSkoLrlWEPMWdTb3wFt+MVXz0YbIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYG+LQ5q9cAT5LhcOiMLCzv0yPqMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpnwJjb5 g++/U3CFB3ozK+CkbtfPzI2UDzDjH5Zk/85RVjB3Xe8jljJU6irCiLwS6kVJQ3l4 pdE/MV6NLW2Y47hO/+ttLU1lmG8SjqRlcPnN1FUAjFPB8kspCznc88XFhNd/9g/q LFNzIld5mjYx/ihlCHVDn3SOMTGUpZ5o9p96F6qUuM0VYM1dqiev9ih7YT+YQYMU xzsOo/b2QMfHYNjDBXsd6n4/iuKwDt52rOfAO3rSZ6gs8H3Bh6nBmgDy7h/HozQX rteC6H1COvxyk68cXVyRFigrt+53G17oGep5pudFDOORa7C/bBjc5AcJWSViOWpA Qw5fjQIEeXk//A== -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:01 2025 by rpki-client