$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json) Hash identifier: 5zT7Zx2qTQ71mlZ6dMpBMJ8xuEOq6FOh14xBExjVcBA= Subject key identifier: A2:38:19:FD:F4:58:B8:41:E7:70:7E:F6:9E:CE:E8:FC:AC:1A:3B:E2 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 0199FBB362F4F084DD789786E099FEAC49B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft Manifest number: 0286 Signing time: Sun 19 Oct 2025 09:01:01 +0000 Manifest this update: Sun 19 Oct 2025 09:01:01 +0000 Manifest next update: Mon 20 Oct 2025 09:01:01 +0000 Files and hashes: 1: 2X78Dh7C7IK9HQpIdvex6cBM1zY.roa (hash: wipecr4RWsrjr1LobZ27g68/o0lGoPvjX6FqbG4G5vg=) 2: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=) 3: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=) 4: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=) 5: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: xrjuqd4dTTjl0WmMFn9g8rs6qFqrEr+kvS8RM2VgOBQ=) 6: BtaWKpewp0t-jzKE-k6lFnfI0_c.roa (hash: DCOoNIe4oBMll7PycXcrB8Q8Pxkmj5k38ygxgzs+uLA=) 7: Ck51eA081sqLICziway3EXtym_k.roa (hash: 2MWWtOANjJSmkcfpJCe5Dn7HPUNug/jW3r3pG5kbs+E=) 8: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=) 9: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=) 10: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=) 11: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=) 12: LX3OTkyoDxVaZPtiMRu4AJM_0HM.roa (hash: rRmco46iM3rwfYnatxB53SSXErwXAR8mqcUhXYapGxc=) 13: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=) 14: PsmRSosaJeQmzFSK3qy4_ABXXTU.roa (hash: Y7apUM55LCHcQ0UAKmKLhKFwZ/5OJTrUlZSSaxMEOws=) 15: QPW6iA9FJOgzaLE48bOh_0GVsTw.roa (hash: z4wyylTLX8zY2v0eX1XbK+ruego1UaaBEsWnBWgnpiE=) 16: R8N31IenIt0xkEBBTQjeM4Z87uM.roa (hash: Ic4nMSUJKsiGM69kIZMaWnmOqFQT0bgB9YdN5w98kIY=) 17: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=) 18: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=) 19: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=) 20: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=) 21: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (hash: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=) 22: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (hash: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=) 23: d7U-ookAGCge9LaNfi22RlsyZWQ.roa (hash: FfX+qu+GqgfdTqytefa68xojvszCI+zg/mATQV2JG6c=) 24: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=) 25: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (hash: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=) 26: uxc5vfve3Si08_1CchI8ifdgJPY.roa (hash: /SI48xsbMIADKemEHZ6Oy1FfH6dit3gQxDwLPx1S1UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:b3:62:f4:f0:84:dd:78:97:86:e0:99:fe:ac:49:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Oct 19 09:01:01 2025 GMT Not After : Oct 20 09:01:01 2025 GMT Subject: CN=a23819fdf458b841e7707ef69ecee8fcac1a3be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:61:a6:df:7e:ae:fb:31:a9:af:aa:a8:da: cc:79:6c:76:49:72:3f:12:9b:7b:fc:3b:bb:d5:e0: ca:91:52:a5:d1:3a:99:cb:25:bd:4c:e7:3b:01:91: 9f:ba:08:03:82:55:5d:a0:f4:10:54:12:42:d2:4c: 70:e7:cf:4d:a7:92:47:97:05:6d:96:e9:40:ba:9a: 5a:e2:cd:37:f7:93:96:96:1d:08:f2:51:7b:05:05: 92:04:7c:1e:1b:bd:a5:d2:92:1b:38:69:df:4e:6e: 05:c3:e8:4d:1c:c1:c7:db:dc:20:c0:d4:2c:2d:a0: e6:8d:63:18:4c:5d:40:06:f5:f0:fe:f4:d3:32:7c: d2:0e:7d:7f:f7:c2:c5:93:94:f9:89:2a:0c:9f:e5: 55:54:d9:59:08:86:63:60:7d:a1:e7:a1:0c:1c:f9: a8:19:6f:92:20:0a:bd:d4:0d:df:d4:d3:79:0d:83: 94:19:0e:77:92:0e:01:87:0c:4c:bb:d4:97:c7:a7: 92:80:60:0d:30:bd:9e:d6:b1:2b:04:e3:7b:da:d1: 5d:28:47:59:69:1a:4b:1a:10:dd:d6:c0:70:4a:87: 34:fb:fc:ab:e0:b7:f4:e2:3d:c0:9f:9f:6e:23:07: 87:fa:18:01:a9:e0:26:dd:b1:9c:90:09:fa:94:a4: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:38:19:FD:F4:58:B8:41:E7:70:7E:F6:9E:CE:E8:FC:AC:1A:3B:E2 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:f5:6e:24:c6:99:70:48:32:44:6f:6b:a6:97:0e:15:69:96: 01:27:79:c9:00:18:13:40:73:31:e5:69:67:14:9d:0d:a0:f9: ba:1a:23:f7:b7:1a:ec:91:9c:0a:e7:ff:8b:da:83:cd:f0:dc: 8e:4f:c6:48:0a:bc:e5:e3:2c:66:34:35:7b:69:30:dd:f4:92: 4d:4a:09:c6:75:25:20:65:16:d9:b9:b1:d2:a8:d5:10:f5:0f: 46:be:13:b8:29:33:d7:2a:dc:d0:77:4c:12:f2:67:94:8f:44: dc:dc:4f:af:32:5d:4e:e5:8a:a0:cc:20:fa:63:f4:3b:96:8f: 22:cd:07:d5:00:a8:6f:4e:8e:3b:d6:c8:24:2a:f5:01:c1:2b: 74:82:ca:99:be:9a:6a:5e:74:65:cb:da:39:f0:5b:21:01:d0: c4:94:ab:59:82:2e:9a:9b:d0:dc:6f:2c:22:74:97:52:1c:f4: 37:4f:e3:24:78:6d:0f:7f:e6:ca:67:06:a9:7b:50:cd:20:72: 12:4e:50:51:3f:b5:fd:b7:b8:3e:eb:bf:dc:b9:47:3b:8e:9e: ad:15:9f:79:af:55:85:1b:6a:f4:c0:b0:df:f8:a8:29:cd:26: 3f:20:98:58:4e:96:c8:6e:16:89:c7:65:2f:42:a6:cf:96:eb: e2:b5:ed:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7s2L08ITdeJeG4Jn+rEm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMDE5MDkwMTAxWhcNMjUxMDIwMDkwMTAxWjAzMTEwLwYDVQQD EyhhMjM4MTlmZGY0NThiODQxZTc3MDdlZjY5ZWNlZThmY2FjMWEzYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMFhpt9+rvsxqa+qqNrMeWx2SXI/ Ept7/Du71eDKkVKl0TqZyyW9TOc7AZGfuggDglVdoPQQVBJC0kxw589Np5JHlwVt lulAuppa4s0395OWlh0I8lF7BQWSBHweG72l0pIbOGnfTm4Fw+hNHMHH29wgwNQs LaDmjWMYTF1ABvXw/vTTMnzSDn1/98LFk5T5iSoMn+VVVNlZCIZjYH2h56EMHPmo GW+SIAq91A3f1NN5DYOUGQ53kg4BhwxMu9SXx6eSgGANML2e1rErBON72tFdKEdZ aRpLGhDd1sBwSoc0+/yr4Lf04j3An59uIweH+hgBqeAm3bGckAn6lKRhUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKI4Gf30WLhB53B+9p7O6PysGjviMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfVuJMaZ cEgyRG9rppcOFWmWASd5yQAYE0BzMeVpZxSdDaD5uhoj97ca7JGcCuf/i9qDzfDc jk/GSAq85eMsZjQ1e2kw3fSSTUoJxnUlIGUW2bmx0qjVEPUPRr4TuCkz1yrc0HdM EvJnlI9E3NxPrzJdTuWKoMwg+mP0O5aPIs0H1QCob06OO9bIJCr1AcErdILKmb6a al50ZcvaOfBbIQHQxJSrWYIumpvQ3G8sInSXUhz0N0/jJHhtD3/mymcGqXtQzSBy Ek5QUT+1/be4Puu/3LlHO46erRWfea9VhRtq9MCw3/ioKc0mPyCYWE6WyG4Wicdl L0Kmz5br4rXtCA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:06:20 2025 by rpki-client