$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: xnVc6d3bSp1FeDR//fOmrndh4Ts5zWGOS4arUeL6+yc= Subject key identifier: E7:9E:91:6E:C8:F1:B0:57:82:40:3D:24:5B:47:8E:E4:B5:FF:1E:BA Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 0197B70E9A5306D8978988B6432BA8C084E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 15BF Signing time: Sat 28 Jun 2025 15:01:16 +0000 Manifest this update: Sat 28 Jun 2025 15:01:16 +0000 Manifest next update: Sun 29 Jun 2025 15:01:16 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: /jcWApbxtWca3v381PlCZjEOYmUP2cAkAeYDqj6+1RU=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:9a:53:06:d8:97:89:88:b6:43:2b:a8:c0:84:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jun 28 15:01:16 2025 GMT Not After : Jun 29 15:01:16 2025 GMT Subject: CN=e79e916ec8f1b05782403d245b478ee4b5ff1eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:07:0d:04:e0:df:f4:cb:cd:da:fb:f8:35: c5:55:95:f5:a0:76:5b:c9:78:7f:86:4e:ce:52:bd: 66:ee:c5:c1:71:dd:29:cb:f6:f6:0a:74:43:0f:12: a9:0d:cd:5c:18:af:9c:6c:64:a8:ba:cc:ce:1d:4e: 6b:47:bb:38:a8:93:63:0f:f7:bd:19:96:6c:bb:7a: dc:55:4c:62:36:d1:d8:de:28:15:54:a4:2d:c3:21: b6:9c:e5:96:03:05:d3:b0:f7:b5:ba:53:d2:c0:90: 47:40:c3:4e:ff:65:4b:44:4d:8a:3b:3f:7f:c3:39: 4b:64:47:14:8a:30:63:42:ea:f9:cf:6f:f2:fa:f6: 9a:7e:97:59:fd:30:10:d7:c3:c1:a5:4a:3b:f7:1d: c9:d4:60:64:ea:59:cf:3a:7c:2d:15:de:33:14:30: 86:bc:bb:5d:98:16:6e:08:85:57:f7:22:7d:4e:be: a8:f7:f1:14:eb:aa:e8:4c:e8:ee:2f:b6:eb:e0:3e: 83:54:da:fd:4b:a7:0d:b5:76:02:6f:63:50:80:c7: 57:1e:b3:1a:e5:30:e8:a3:b3:51:ff:12:ea:4d:4e: cb:89:13:c0:d6:ed:ef:70:e9:60:30:31:bf:e4:d2: 95:7c:34:16:49:85:44:11:95:27:22:3a:6c:8d:c4: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9E:91:6E:C8:F1:B0:57:82:40:3D:24:5B:47:8E:E4:B5:FF:1E:BA X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2c:4b:ec:7b:b6:97:a3:cb:9e:9b:46:1b:2b:aa:78:3b:e7: 46:a0:e6:33:27:2f:13:cb:47:87:62:dd:b3:11:86:e0:a5:be: f2:2d:39:a6:9d:18:ca:62:c9:1a:5f:ba:76:65:37:31:c0:18: 78:eb:2a:98:bc:88:e4:2b:23:2c:99:89:e7:52:ac:55:aa:34: 41:27:39:9f:ca:85:ba:95:7f:e0:50:b2:65:6a:7f:04:69:a6: d2:aa:1f:79:78:82:01:3a:c5:01:20:ac:76:ab:2c:1b:2b:0d: c5:1b:3e:f0:98:c9:f5:83:bc:30:d7:24:2e:7e:54:95:b9:97: d8:c3:ef:d5:4e:ba:29:02:0d:8c:cd:db:50:eb:91:6e:0f:cc: 91:a5:be:83:5f:f6:71:9b:9e:32:b3:f1:a0:8d:6e:a6:a8:fc: 38:56:1e:f7:86:d3:a5:d2:7e:b1:73:fb:82:c6:49:d1:db:64: 2e:73:6f:f4:00:4e:fb:bb:a9:c0:3c:f2:eb:08:59:e6:10:f5: e1:8b:02:8b:7f:0b:b1:58:f2:af:cd:18:f6:ce:90:d2:7e:35: 62:10:ce:ec:03:89:c2:bb:49:14:57:8e:e9:c0:91:a2:a9:b4: 32:57:38:40:f6:ef:cd:31:9a:51:e1:02:01:66:39:f7:c3:34: fd:5c:ba:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DppTBtiXiYi2QyuowIThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwNjI4MTUwMTE2WhcNMjUwNjI5MTUwMTE2WjAzMTEwLwYDVQQD EyhlNzllOTE2ZWM4ZjFiMDU3ODI0MDNkMjQ1YjQ3OGVlNGI1ZmYxZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CAHDQTg3/TLzdr7+DXFVZX1oHZb yXh/hk7OUr1m7sXBcd0py/b2CnRDDxKpDc1cGK+cbGSouszOHU5rR7s4qJNjD/e9 GZZsu3rcVUxiNtHY3igVVKQtwyG2nOWWAwXTsPe1ulPSwJBHQMNO/2VLRE2KOz9/ wzlLZEcUijBjQur5z2/y+vaafpdZ/TAQ18PBpUo79x3J1GBk6lnPOnwtFd4zFDCG vLtdmBZuCIVX9yJ9Tr6o9/EU66roTOjuL7br4D6DVNr9S6cNtXYCb2NQgMdXHrMa 5TDoo7NR/xLqTU7LiRPA1u3vcOlgMDG/5NKVfDQWSYVEEZUnIjpsjcRIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeekW7I8bBXgkA9JFtHjuS1/x66MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyxL7Hu2 l6PLnptGGyuqeDvnRqDmMycvE8tHh2LdsxGG4KW+8i05pp0YymLJGl+6dmU3McAY eOsqmLyI5CsjLJmJ51KsVao0QSc5n8qFupV/4FCyZWp/BGmm0qofeXiCATrFASCs dqssGysNxRs+8JjJ9YO8MNckLn5UlbmX2MPv1U66KQINjM3bUOuRbg/MkaW+g1/2 cZueMrPxoI1upqj8OFYe94bTpdJ+sXP7gsZJ0dtkLnNv9ABO+7upwDzy6whZ5hD1 4YsCi38LsVjyr80Y9s6Q0n41YhDO7AOJwrtJFFeO6cCRoqm0Mlc4QPbvzTGaUeEC AWY598M0/Vy6mQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:54:13 2025 by rpki-client