$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: UX/FqU4cFf8IiPL9XdqyqZb5AWv1+t4wVqYGAfTJTeQ= Subject key identifier: 0A:21:9E:81:BD:76:FA:DC:2D:49:7E:2C:CD:5B:B5:EE:75:30:B1:38 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 0199FBEB8E5B74657E38197E907D362FCAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 16E9 Signing time: Sun 19 Oct 2025 10:02:22 +0000 Manifest this update: Sun 19 Oct 2025 10:02:22 +0000 Manifest next update: Mon 20 Oct 2025 10:02:22 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 4R6oNFIl2e1VGT8HDRzDwCbKuHAdax5Hid1h9hNFUiA=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) 15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:8e:5b:74:65:7e:38:19:7e:90:7d:36:2f:ca:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Oct 19 10:02:22 2025 GMT Not After : Oct 20 10:02:22 2025 GMT Subject: CN=0a219e81bd76fadc2d497e2ccd5bb5ee7530b138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:82:e9:98:d3:6f:0c:f7:39:c8:2d:45:5c: c4:d5:75:7c:13:b0:71:c5:f5:94:65:15:00:0a:fd: d8:b3:5c:f6:a8:a1:1e:65:46:23:98:63:b7:02:4e: c4:76:57:d2:a7:50:dc:c4:27:57:e7:13:56:25:2c: cf:20:04:ac:22:07:ba:17:aa:8e:2b:bc:f0:2d:59: 2b:5e:51:ea:c3:eb:ba:39:7a:8b:9c:8a:1e:20:b0: 31:25:1b:bb:4a:84:c8:94:85:6e:41:73:64:92:55: 59:ba:1b:11:54:68:a7:e5:5e:df:73:f9:9a:3f:6f: 04:b4:3a:5a:a2:eb:17:62:42:d1:b8:11:67:3f:af: 23:f5:1c:c8:5a:95:7c:2e:b5:c3:cb:ed:98:ef:39: 5c:ea:57:f1:2f:88:86:aa:11:58:6b:0c:bb:bd:cc: ab:ce:e0:76:56:5e:6b:fc:76:47:1b:6d:d7:73:b2: 83:85:18:37:c0:7d:bc:60:f3:1c:f5:05:2a:6b:2e: ea:d3:6d:7e:f2:97:8e:c2:14:2c:0b:4a:c5:9f:4a: cc:d3:c5:a9:ee:f0:46:c5:b4:17:7c:af:0b:64:1d: 88:cd:9b:01:be:e3:e1:d3:8f:76:98:ac:38:b5:89: 33:45:60:f0:05:d4:e2:19:54:b0:84:6e:d6:7e:89: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:21:9E:81:BD:76:FA:DC:2D:49:7E:2C:CD:5B:B5:EE:75:30:B1:38 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6f:2c:ff:8b:9d:02:88:4c:47:6a:1d:60:a2:f0:67:b1:8e: 90:d3:bf:d1:39:5e:39:7f:bb:38:1d:7f:9e:87:22:21:75:6f: 92:90:c8:c4:22:08:e5:02:cd:fa:3c:e0:b5:a7:25:49:f3:48: 00:39:cf:0c:d0:9c:94:2c:68:50:78:b1:84:4e:19:e7:a0:92: 87:18:ba:1a:39:26:16:83:aa:94:e5:cd:b6:25:4d:52:11:bc: 11:10:5a:43:84:18:d0:71:c0:99:3c:29:25:8e:fe:15:1c:cf: 04:91:1d:77:01:93:b6:1f:69:38:33:14:10:91:12:4c:aa:18: 29:bb:d1:e9:69:c9:01:1d:3a:00:1d:5a:7d:3d:de:ac:7a:69: 58:67:b5:fa:f7:e6:be:3f:6f:fc:a5:ee:91:fd:41:d5:e8:e4: e5:b5:ea:e6:84:a0:e3:c7:b4:5b:b9:ba:fa:98:27:28:c0:1a: 64:d7:5c:26:42:14:ce:9f:31:ff:e6:6a:0c:a1:25:af:67:da: 9d:74:51:fc:a2:9a:a4:33:20:53:92:98:85:74:81:f2:38:94: 5d:ed:a5:c7:96:35:62:62:1d:0a:c1:b8:e5:6c:2a:48:f7:d2: 67:d5:df:9b:53:d9:5d:6f:57:6b:d7:1e:4f:1f:49:87:71:af: 46:be:e7:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7645bdGV+OBl+kH02L8rEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUxMDE5MTAwMjIyWhcNMjUxMDIwMTAwMjIyWjAzMTEwLwYDVQQD EygwYTIxOWU4MWJkNzZmYWRjMmQ0OTdlMmNjZDViYjVlZTc1MzBiMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOOC6ZjTbwz3OcgtRVzE1XV8E7Bx xfWUZRUACv3Ys1z2qKEeZUYjmGO3Ak7EdlfSp1DcxCdX5xNWJSzPIASsIge6F6qO K7zwLVkrXlHqw+u6OXqLnIoeILAxJRu7SoTIlIVuQXNkklVZuhsRVGin5V7fc/ma P28EtDpaousXYkLRuBFnP68j9RzIWpV8LrXDy+2Y7zlc6lfxL4iGqhFYawy7vcyr zuB2Vl5r/HZHG23Xc7KDhRg3wH28YPMc9QUqay7q021+8peOwhQsC0rFn0rM08Wp 7vBGxbQXfK8LZB2IzZsBvuPh0492mKw4tYkzRWDwBdTiGVSwhG7WfolHiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAohnoG9dvrcLUl+LM1bte51MLE4MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW8s/4ud AohMR2odYKLwZ7GOkNO/0TleOX+7OB1/nociIXVvkpDIxCII5QLN+jzgtaclSfNI ADnPDNCclCxoUHixhE4Z56CShxi6GjkmFoOqlOXNtiVNUhG8ERBaQ4QY0HHAmTwp JY7+FRzPBJEddwGTth9pODMUEJESTKoYKbvR6WnJAR06AB1afT3erHppWGe1+vfm vj9v/KXukf1B1ejk5bXq5oSg48e0W7m6+pgnKMAaZNdcJkIUzp8x/+ZqDKElr2fa nXRR/KKapDMgU5KYhXSB8jiUXe2lx5Y1YmIdCsG45WwqSPfSZ9Xfm1PZXW9Xa9ce Tx9Jh3GvRr7n/Q== -----END CERTIFICATE-----Generated at Sun Oct 19 18:18:40 2025 by rpki-client