$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: Sn2vjK1yJwVwM+XCaGCFJg4CRNwUNZJiPcsPk18rpgI= Subject key identifier: F4:98:75:1D:5C:7E:D2:91:16:99:B6:C8:60:CE:B7:16:DC:EB:FE:2E Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 0198D404F2104E938DAE9699464F32B02225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 1664 Signing time: Fri 22 Aug 2025 23:02:30 +0000 Manifest this update: Fri 22 Aug 2025 23:02:30 +0000 Manifest next update: Sat 23 Aug 2025 23:02:30 +0000 Files and hashes: 1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=) 2: 1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa (hash: gjJx45guChbhy0m/xEIBSHB06+zn2ylMhRT3oYLGiWM=) 3: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=) 4: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: B2UJ30HHz65eROrZ2VVMPpJxDCCbFZNwFy6EMWGzmnY=) 5: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=) 6: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=) 7: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=) 8: QQr8dSdla33R9gVFyh83mzea4FI.roa (hash: 2OgrfSmCdtssSO9KY+C8q6T3dfpnZAJiAzm5n74cRu4=) 9: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=) 10: TzuzSGjWwV3OX8zX79IT4KZ2KbM.roa (hash: km0dEl7ZooKnmSTFDQzgqnm2fuMBjhQx4KgIive/k7E=) 11: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=) 12: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=) 13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=) 14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:f2:10:4e:93:8d:ae:96:99:46:4f:32:b0:22:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Aug 22 23:02:30 2025 GMT Not After : Aug 23 23:02:30 2025 GMT Subject: CN=f498751d5c7ed2911699b6c860ceb716dcebfe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:02:11:bf:05:d3:13:2d:73:84:df:c8:32: f2:0b:d2:f6:ae:d5:21:4c:03:c1:57:0a:3a:a5:93: e0:d1:1b:0d:43:fe:de:2c:12:fb:ac:15:85:72:68: a7:f1:57:73:42:9b:08:57:d7:b8:24:66:18:ac:4b: 22:b3:ad:56:bf:89:3f:b5:76:25:ca:15:2b:fb:ed: e9:c9:21:8d:b1:e4:97:8b:ec:4b:ce:34:11:b5:28: 3e:11:80:f9:e7:67:df:a1:17:51:73:c1:ce:4b:59: 40:9a:e0:eb:14:ee:58:90:e8:98:ca:51:91:b4:05: b2:78:ca:db:1f:77:41:74:6f:b2:70:e4:82:3c:67: 7d:29:3f:03:46:93:23:a7:a0:e4:26:1e:29:bd:ee: 96:e2:b0:93:7d:f9:82:68:b2:d1:76:69:5f:04:eb: e5:86:90:b2:54:bd:58:4a:78:b5:57:36:58:df:d4: 55:d5:a5:83:33:de:9f:79:28:15:79:05:d5:f2:0a: 1f:3b:00:ab:5e:6f:70:0a:19:8d:43:b8:b8:2c:95: 20:d9:e7:9b:55:88:87:1d:c6:9f:da:c2:60:2d:49: 51:5e:7c:f6:89:c0:40:d5:af:42:c6:4d:40:f0:fe: e5:41:f3:35:61:77:06:99:08:be:9d:66:f6:68:f3: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:75:1D:5C:7E:D2:91:16:99:B6:C8:60:CE:B7:16:DC:EB:FE:2E X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:76:58:51:7e:79:df:ad:30:35:e3:ea:e7:62:cc:6f:f4:5a: 29:83:9e:86:43:16:0b:aa:1f:18:60:88:06:27:30:0b:f8:d3: f5:93:43:95:50:3e:c0:af:56:89:1d:fd:58:1b:66:8c:2b:6b: eb:26:a5:40:73:bb:cf:1a:56:e6:a4:9a:37:d9:0e:79:2b:37: c7:e0:54:ad:a0:bd:2d:2f:11:b7:db:e8:58:52:3d:b5:75:5e: 7c:8e:ef:ba:92:e0:ac:47:55:e0:44:d1:7d:63:95:e5:a0:6d: 2f:be:3b:2c:e7:45:31:58:c7:07:8a:6b:74:80:c0:1c:d3:74: 46:7f:05:26:a3:82:10:df:13:fa:01:ee:f8:9b:5b:c2:75:c1: e5:5d:bd:65:b3:f0:6d:0a:59:c4:58:6e:bf:b0:43:64:a6:b0: b8:6b:c6:53:f0:1d:a4:8e:ae:bf:c1:75:f3:5d:cd:8f:a1:3e: fa:0e:ca:32:0d:98:e3:94:7e:63:e7:6c:b8:51:25:eb:d6:fb: 26:f0:fc:a5:dd:c3:5a:88:0f:c8:ec:dd:5e:04:14:54:76:f3: 4a:12:cc:e8:d9:8d:d9:91:58:5a:fe:83:d6:c3:92:a1:b5:2d: 52:12:73:7b:91:92:1a:bf:ad:34:42:dc:18:5b:44:15:a4:4c: 62:88:80:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBPIQTpONrpaZRk8ysCIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUwODIyMjMwMjMwWhcNMjUwODIzMjMwMjMwWjAzMTEwLwYDVQQD EyhmNDk4NzUxZDVjN2VkMjkxMTY5OWI2Yzg2MGNlYjcxNmRjZWJmZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSgCEb8F0xMtc4TfyDLyC9L2rtUh TAPBVwo6pZPg0RsNQ/7eLBL7rBWFcmin8VdzQpsIV9e4JGYYrEsis61Wv4k/tXYl yhUr++3pySGNseSXi+xLzjQRtSg+EYD552ffoRdRc8HOS1lAmuDrFO5YkOiYylGR tAWyeMrbH3dBdG+ycOSCPGd9KT8DRpMjp6DkJh4pve6W4rCTffmCaLLRdmlfBOvl hpCyVL1YSni1VzZY39RV1aWDM96feSgVeQXV8gofOwCrXm9wChmNQ7i4LJUg2eeb VYiHHcaf2sJgLUlRXnz2icBA1a9Cxk1A8P7lQfM1YXcGmQi+nWb2aPOJYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSYdR1cftKRFpm2yGDOtxbc6/4uMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXZYUX55 360wNePq52LMb/RaKYOehkMWC6ofGGCIBicwC/jT9ZNDlVA+wK9WiR39WBtmjCtr 6yalQHO7zxpW5qSaN9kOeSs3x+BUraC9LS8Rt9voWFI9tXVefI7vupLgrEdV4ETR fWOV5aBtL747LOdFMVjHB4prdIDAHNN0Rn8FJqOCEN8T+gHu+JtbwnXB5V29ZbPw bQpZxFhuv7BDZKawuGvGU/AdpI6uv8F1813Nj6E++g7KMg2Y45R+Y+dsuFEl69b7 JvD8pd3DWogPyOzdXgQUVHbzShLM6NmN2ZFYWv6D1sOSobUtUhJze5GSGr+tNELc GFtEFaRMYoiArA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:43 2025 by rpki-client