$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: WCu0p9owkkmT8lmuslGE2+ZXFCUXCsaEMXXB7cnl/eE= Subject key identifier: 34:64:3B:5C:AA:D6:63:09:E5:95:8F:4C:3A:A9:AD:4C:B3:48:B0:29 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 0199FB0F0046E8FB84F2E7576E1326877D12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 1702 Signing time: Sun 19 Oct 2025 06:01:28 +0000 Manifest this update: Sun 19 Oct 2025 06:01:28 +0000 Manifest next update: Mon 20 Oct 2025 06:01:28 +0000 Files and hashes: 1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=) 2: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=) 3: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: yaxXwF8jK5UhNDvcAE3xNigFNO504NCpFAD6ZaVfD7U=) 4: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=) 5: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=) 6: RPNVta1i_68ETzE6TtaaOFHYjFg.roa (hash: FJ6/94/8Wm2f6M9BRBCD4vKtrBrwPPP4N1wQnShAIwQ=) 7: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=) 8: aZPp_cV5jr5aukOafXhVZHLOxO8.roa (hash: HiVo5n2AfzX/D2YKvojUG77iVNrUKo2LAmIGlr0XbVQ=) 9: goiFRwOZl4s-9eBS6-ty9Aa39xg.roa (hash: v1XADcYkOBOq2ag0EAvzsyypI+irjQ9kDOaWYQtUUzg=) 10: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=) 11: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=) 12: kpBZgUoI5SVEvkUD2itySup6KcI.roa (hash: XeEaX76YfLu7oqRet3KoyuM4S4TCuYJpZv/8fGXU5lk=) 13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=) 14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=) 15: xqrG1-afUyLJs-76v_kaVff1bzQ.roa (hash: qv2oTeJPi+2iZxHlxw+NMd9cTjH6NJtDH3DW5nEIJZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0f:00:46:e8:fb:84:f2:e7:57:6e:13:26:87:7d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Oct 19 06:01:28 2025 GMT Not After : Oct 20 06:01:28 2025 GMT Subject: CN=34643b5caad66309e5958f4c3aa9ad4cb348b029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:70:99:6e:64:36:3d:86:33:78:4f:83:61: 10:27:e5:ee:c3:95:93:d2:b2:35:ea:f8:86:c9:3f: 66:b7:61:84:19:a3:72:dc:ce:8b:31:f9:83:33:14: d9:84:91:b1:82:67:29:95:c1:c2:55:17:3b:47:ae: 8f:12:db:81:61:b9:60:5c:b1:84:90:7d:c5:da:f6: 38:e1:71:93:ee:de:b0:e6:45:ea:0b:c7:22:7a:7d: cf:21:2a:4b:33:91:1e:49:75:48:e1:f0:59:70:28: 05:8b:b7:45:06:92:af:a8:17:1e:ea:d8:87:cc:9d: 9d:af:db:58:1e:a2:47:12:4d:f0:dd:0b:9e:eb:58: f4:11:2b:a1:61:10:5e:fb:6a:7e:22:45:a6:7f:8b: b1:ef:58:d7:50:f3:b9:59:6a:7a:1f:be:90:52:33: e6:88:4c:c4:7a:6f:e2:b7:87:59:ea:46:c5:f7:88: ab:40:d7:2b:84:51:95:5a:ef:7f:1d:3f:6d:1b:19: 24:cc:3a:91:79:65:ae:9c:74:61:28:4d:23:bb:8c: 8c:d2:de:e9:54:d9:23:6e:6e:3b:5a:bd:66:1c:f8: 96:2b:12:15:ab:49:45:46:2d:e1:8c:b7:f6:ec:6f: b5:81:c1:2a:f2:4a:74:3d:ce:42:e6:7b:57:82:d2: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:3B:5C:AA:D6:63:09:E5:95:8F:4C:3A:A9:AD:4C:B3:48:B0:29 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fa:7c:2b:2e:37:8a:14:d8:78:17:a2:b6:88:58:93:06:20: f3:06:9b:99:c2:18:07:a3:0f:ce:46:0e:0d:92:fa:46:10:4a: d0:69:c0:32:b1:ae:7c:c1:ec:30:18:43:e6:21:61:75:b7:e3: 1e:b0:ce:34:70:80:3d:28:7a:19:ed:b5:c4:9a:e0:09:d2:dc: d0:3e:ff:84:04:aa:e9:21:9f:37:de:96:20:1b:fe:8e:60:1d: 44:aa:36:1e:09:dd:f5:88:fd:cf:8a:fb:a4:cc:ce:17:07:e2: 6a:20:b6:09:0e:ed:fa:88:60:de:ef:9d:f1:3d:ee:be:ff:47: 1f:e5:f0:a8:48:8b:d2:6e:56:48:81:79:c0:2f:b4:44:14:eb: 6e:e1:96:bc:1e:e5:8a:c8:e6:c0:b3:08:b8:40:d3:d7:b1:97: 15:c3:70:80:6f:50:63:64:bf:e1:d1:92:cb:9d:fa:42:68:bb: 53:2d:bd:11:ee:f4:1b:85:71:cb:fb:80:7a:cd:bb:bc:33:8c: 9d:ee:90:64:39:fe:c2:a6:41:91:36:b8:e3:77:91:5b:c9:15: 2c:0c:ce:87:3e:83:a1:65:f1:fe:c6:a0:c0:51:0e:58:6f:41: 00:d3:47:46:d3:49:8b:fb:69:48:96:f0:ad:18:f9:ff:92:d7: 29:08:4e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7DwBG6PuE8udXbhMmh30SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUxMDE5MDYwMTI4WhcNMjUxMDIwMDYwMTI4WjAzMTEwLwYDVQQD EygzNDY0M2I1Y2FhZDY2MzA5ZTU5NThmNGMzYWE5YWQ0Y2IzNDhiMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpVwmW5kNj2GM3hPg2EQJ+Xuw5WT 0rI16viGyT9mt2GEGaNy3M6LMfmDMxTZhJGxgmcplcHCVRc7R66PEtuBYblgXLGE kH3F2vY44XGT7t6w5kXqC8cien3PISpLM5EeSXVI4fBZcCgFi7dFBpKvqBce6tiH zJ2dr9tYHqJHEk3w3Que61j0ESuhYRBe+2p+IkWmf4ux71jXUPO5WWp6H76QUjPm iEzEem/it4dZ6kbF94irQNcrhFGVWu9/HT9tGxkkzDqReWWunHRhKE0ju4yM0t7p VNkjbm47Wr1mHPiWKxIVq0lFRi3hjLf27G+1gcEq8kp0Pc5C5ntXgtLSfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRkO1yq1mMJ5ZWPTDqprUyzSLApMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/p8Ky43 ihTYeBeitohYkwYg8wabmcIYB6MPzkYODZL6RhBK0GnAMrGufMHsMBhD5iFhdbfj HrDONHCAPSh6Ge21xJrgCdLc0D7/hASq6SGfN96WIBv+jmAdRKo2Hgnd9Yj9z4r7 pMzOFwfiaiC2CQ7t+ohg3u+d8T3uvv9HH+XwqEiL0m5WSIF5wC+0RBTrbuGWvB7l isjmwLMIuEDT17GXFcNwgG9QY2S/4dGSy536Qmi7Uy29Ee70G4Vxy/uAes27vDOM ne6QZDn+wqZBkTa443eRW8kVLAzOhz6DoWXx/sagwFEOWG9BANNHRtNJi/tpSJbw rRj5/5LXKQhOuw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:34:33 2025 by rpki-client