$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: zu45A6CiczHMCKqHpaW6OIAkGlnyFGqHwSzrCDWXzMw= Subject key identifier: DC:A5:67:6C:02:40:3A:3C:1C:E8:1D:83:A8:0A:40:BD:4F:44:87:1C Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 0197B7B31BA830E778BED150C4F3DE1686BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 15BC Signing time: Sat 28 Jun 2025 18:00:57 +0000 Manifest this update: Sat 28 Jun 2025 18:00:57 +0000 Manifest next update: Sun 29 Jun 2025 18:00:57 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: B8c2bJoz6xxE1VaiY2R9Mww6mxvJilV7uCqtrcueNn4=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:1b:a8:30:e7:78:be:d1:50:c4:f3:de:16:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jun 28 18:00:57 2025 GMT Not After : Jun 29 18:00:57 2025 GMT Subject: CN=dca5676c02403a3c1ce81d83a80a40bd4f44871c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:47:33:b1:9c:96:ad:d0:a7:66:95:e3:3e: 06:b7:12:1e:29:97:03:f4:9d:e6:a3:d9:59:a9:ba: 6a:18:7c:74:87:be:e0:2f:67:91:6c:7c:1d:39:59: bf:ca:e9:10:a7:56:ec:22:8d:7c:0f:41:4d:30:f5: f3:d7:24:92:70:34:6a:d9:d0:f8:59:49:c9:63:5b: 9a:6b:be:53:64:b6:c1:4a:0a:ab:4e:23:88:c6:66: 04:bf:c4:9e:88:92:3a:86:4d:5e:2c:75:2f:80:ed: bd:ce:1d:9b:88:10:f3:dc:d5:6f:85:55:6c:b8:16: 6e:b5:4a:38:6b:65:6e:63:49:d1:08:d5:71:c8:65: c9:f9:28:40:64:b3:30:19:e8:bb:f8:85:84:f1:43: 67:92:cd:c3:28:86:39:72:89:ca:dc:57:08:e7:7f: 28:ab:0b:08:79:8a:ea:80:60:99:a3:1a:e0:a2:95: 47:9f:72:5e:ab:c4:87:5e:0a:de:28:d8:4c:77:f7: 2f:9a:ca:47:2a:3a:15:a9:f0:d4:4e:0f:ed:68:98: 81:25:f3:fe:63:fa:75:1b:9c:49:85:a3:af:62:67: 1b:c4:e6:5d:66:45:4a:45:c4:f0:98:8c:a3:1a:89: 87:66:6b:37:ce:86:f8:51:38:fd:f0:e2:92:50:52: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A5:67:6C:02:40:3A:3C:1C:E8:1D:83:A8:0A:40:BD:4F:44:87:1C X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fb:f8:40:06:a9:af:79:ee:20:06:23:89:75:d5:59:ce:b5: 7c:e8:8a:3d:c9:50:fe:f0:ed:d5:d6:34:a3:c5:dd:ef:32:1e: ba:85:37:2c:47:e2:9f:7c:76:59:60:14:56:72:a5:b7:90:f5: 59:1f:5d:3c:3f:b8:85:c2:61:18:92:b7:5f:81:a9:c3:70:ae: 8d:25:b1:be:0a:0a:84:92:43:3e:cb:ac:0f:fa:19:35:ba:8a: a8:8f:68:82:b6:34:fc:f9:de:38:4e:b2:df:58:4b:e0:ac:9d: d7:f6:08:de:3f:03:dc:3a:7a:f6:25:eb:34:52:ef:ca:e4:01: 9b:7a:2c:6e:93:49:25:f1:68:a4:eb:96:16:a0:24:8c:4f:0b: cd:d1:a7:e2:24:28:cc:78:e5:86:16:02:bd:f7:03:f9:b4:cd: 33:31:7c:9c:ed:f5:b1:fd:7e:2f:53:64:33:ad:a0:1d:52:8a: 0c:75:1c:31:54:d3:b2:5c:10:e9:b3:97:05:66:44:71:dd:9a: 1c:43:9c:17:08:75:ff:2a:3b:66:04:f8:8a:0f:57:cd:65:50: b7:41:ec:4a:9d:42:29:42:24:b5:b4:03:83:2e:e7:77:53:58: 32:56:97:dc:74:e9:c7:e6:51:7a:c2:60:d3:e2:29:d2:84:f5: e7:d1:d9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3sxuoMOd4vtFQxPPeFoa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwNjI4MTgwMDU3WhcNMjUwNjI5MTgwMDU3WjAzMTEwLwYDVQQD EyhkY2E1Njc2YzAyNDAzYTNjMWNlODFkODNhODBhNDBiZDRmNDQ4NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUlHM7Gclq3Qp2aV4z4GtxIeKZcD 9J3mo9lZqbpqGHx0h77gL2eRbHwdOVm/yukQp1bsIo18D0FNMPXz1ySScDRq2dD4 WUnJY1uaa75TZLbBSgqrTiOIxmYEv8SeiJI6hk1eLHUvgO29zh2biBDz3NVvhVVs uBZutUo4a2VuY0nRCNVxyGXJ+ShAZLMwGei7+IWE8UNnks3DKIY5conK3FcI538o qwsIeYrqgGCZoxrgopVHn3Jeq8SHXgreKNhMd/cvmspHKjoVqfDUTg/taJiBJfP+ Y/p1G5xJhaOvYmcbxOZdZkVKRcTwmIyjGomHZms3zob4UTj98OKSUFJLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNylZ2wCQDo8HOgdg6gKQL1PRIccMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/v4QAap r3nuIAYjiXXVWc61fOiKPclQ/vDt1dY0o8Xd7zIeuoU3LEfin3x2WWAUVnKlt5D1 WR9dPD+4hcJhGJK3X4Gpw3CujSWxvgoKhJJDPsusD/oZNbqKqI9ogrY0/PneOE6y 31hL4Kyd1/YI3j8D3Dp69iXrNFLvyuQBm3osbpNJJfFopOuWFqAkjE8LzdGn4iQo zHjlhhYCvfcD+bTNMzF8nO31sf1+L1NkM62gHVKKDHUcMVTTslwQ6bOXBWZEcd2a HEOcFwh1/yo7ZgT4ig9XzWVQt0HsSp1CKUIktbQDgy7nd1NYMlaX3HTpx+ZResJg 0+Ip0oT159HZTw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:33:58 2025 by rpki-client