$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: hYoJqxOOuuiyKdDY/S6UkesXpqzYgcsknAK4dHVbl/Q= Subject key identifier: 72:E1:50:36:48:97:71:E8:1B:4A:89:30:0B:FC:C4:D8:D1:8D:01:97 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 0198D66120E23B0E5AB90DFDED3C89E0046A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 1651 Signing time: Sat 23 Aug 2025 10:02:26 +0000 Manifest this update: Sat 23 Aug 2025 10:02:26 +0000 Manifest next update: Sun 24 Aug 2025 10:02:26 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 2fksrP8UG4NptqjotGFsrx/Sp4Tnv0TLLupwuZIIjNY=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) 15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:61:20:e2:3b:0e:5a:b9:0d:fd:ed:3c:89:e0:04:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Aug 23 10:02:26 2025 GMT Not After : Aug 24 10:02:26 2025 GMT Subject: CN=72e15036489771e81b4a89300bfcc4d8d18d0197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5b:14:0b:d1:16:ca:b3:fc:3d:96:7f:ab:99: 5c:5f:94:00:9c:6d:de:81:91:5c:0e:ca:38:7e:15: e8:3d:3a:89:6b:e3:4c:92:38:41:5b:50:18:93:88: fd:98:a4:2e:1d:f1:c0:c0:13:fd:5c:3b:91:5f:40: 96:bc:a5:e3:64:05:0b:9a:8d:8f:b5:2e:2f:f9:a4: c0:5f:ba:29:1d:75:4f:dd:16:09:bd:c7:15:3b:f6: 40:a6:c8:02:9d:11:65:28:9f:13:c0:7e:f8:cd:05: 0b:2d:9c:5d:f2:70:bb:d3:f3:8f:9f:1a:a3:91:d8: 0b:33:a7:b8:ee:dd:69:0d:4d:3b:c1:bf:d2:d9:d5: ed:5f:ee:23:a7:ca:0d:4c:28:6a:0f:45:44:5e:80: 7d:61:3f:f2:70:c6:30:ad:f8:bf:88:9d:af:ab:87: 4f:44:48:8b:54:20:d1:5c:e2:76:58:7a:79:ee:36: c0:5e:b0:f7:2e:39:34:fd:d6:88:4a:3a:b1:dd:5d: 57:0b:86:5b:59:24:15:80:7c:16:7f:f1:41:fa:2b: c8:d7:f6:c6:89:6b:0c:20:c5:47:32:f6:fb:90:14: dd:25:9d:0f:59:74:07:47:b6:14:79:36:8d:46:83: d8:95:6d:67:b8:68:a5:d4:eb:b8:eb:8f:5e:4f:ba: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:50:36:48:97:71:E8:1B:4A:89:30:0B:FC:C4:D8:D1:8D:01:97 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6f:29:e8:0e:75:6a:46:d3:57:eb:6d:a5:90:12:26:fd:e6: d2:0f:14:b4:d0:7f:64:3e:b6:5c:22:ee:ac:05:ba:0c:47:bf: 7f:7a:ce:5c:7d:5e:b2:a5:a7:9d:f8:47:0f:e3:2d:6d:aa:33: 07:64:fa:46:06:53:ed:9d:7e:e2:5e:00:c1:5c:92:61:b8:60: 9c:66:84:ec:0b:18:ff:73:bd:21:d1:f9:cd:84:ba:b4:31:fc: e5:5f:6f:05:08:8a:fb:d2:53:c6:32:3d:e6:03:84:77:cc:21: 27:ff:e6:05:28:b3:a6:bb:49:a9:82:31:df:0c:58:44:24:dd: c4:68:51:e0:31:a5:9d:08:61:8d:23:48:65:55:f6:93:1f:0f: 5f:fb:35:36:06:45:0a:67:f3:76:c2:8d:05:ce:a1:93:5f:bc: b6:3d:a0:12:2d:a0:db:2c:2f:83:3a:ae:08:60:c9:ad:00:bb: 8b:af:96:5a:04:da:8a:15:a4:81:b6:2d:6c:39:78:5b:83:98: d0:ae:42:4d:a3:57:df:61:f8:eb:0c:40:dd:1e:61:66:3d:d2: cf:9c:55:0a:7d:de:e9:4a:5f:af:40:5f:e4:db:89:58:eb:9c: 46:9d:fe:75:69:17:19:7b:4c:ab:90:44:1b:02:19:23:8c:a8: 3e:ff:e6:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYSDiOw5auQ397TyJ4ARqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwODIzMTAwMjI2WhcNMjUwODI0MTAwMjI2WjAzMTEwLwYDVQQD Eyg3MmUxNTAzNjQ4OTc3MWU4MWI0YTg5MzAwYmZjYzRkOGQxOGQwMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1sUC9EWyrP8PZZ/q5lcX5QAnG3e gZFcDso4fhXoPTqJa+NMkjhBW1AYk4j9mKQuHfHAwBP9XDuRX0CWvKXjZAULmo2P tS4v+aTAX7opHXVP3RYJvccVO/ZApsgCnRFlKJ8TwH74zQULLZxd8nC70/OPnxqj kdgLM6e47t1pDU07wb/S2dXtX+4jp8oNTChqD0VEXoB9YT/ycMYwrfi/iJ2vq4dP REiLVCDRXOJ2WHp57jbAXrD3Ljk0/daISjqx3V1XC4ZbWSQVgHwWf/FB+ivI1/bG iWsMIMVHMvb7kBTdJZ0PWXQHR7YUeTaNRoPYlW1nuGil1Ou4649eT7reuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLhUDZIl3HoG0qJMAv8xNjRjQGXMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG8p6A51 akbTV+ttpZASJv3m0g8UtNB/ZD62XCLurAW6DEe/f3rOXH1esqWnnfhHD+Mtbaoz B2T6RgZT7Z1+4l4AwVySYbhgnGaE7AsY/3O9IdH5zYS6tDH85V9vBQiK+9JTxjI9 5gOEd8whJ//mBSizprtJqYIx3wxYRCTdxGhR4DGlnQhhjSNIZVX2kx8PX/s1NgZF CmfzdsKNBc6hk1+8tj2gEi2g2ywvgzquCGDJrQC7i6+WWgTaihWkgbYtbDl4W4OY 0K5CTaNX32H46wxA3R5hZj3Sz5xVCn3e6Upfr0Bf5NuJWOucRp3+dWkXGXtMq5BE GwIZI4yoPv/m7A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:39:58 2025 by rpki-client