$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json) Hash identifier: x4ES6UbnVPZQmMDtHlYNbilL+/2DoDzN+x7MtWxKiSc= Subject key identifier: FA:C2:4E:83:B2:F2:A7:00:B5:F9:41:60:42:7C:9F:2B:35:45:79:02 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 0198D6CD494A1AB631679BCF8A8520DE781C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft Manifest number: 166C Signing time: Sat 23 Aug 2025 12:00:34 +0000 Manifest this update: Sat 23 Aug 2025 12:00:34 +0000 Manifest next update: Sun 24 Aug 2025 12:00:34 +0000 Files and hashes: 1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=) 2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: rY7r3OrfwZUqlA8kFA7HaiptobE+axv2eimJbN2mZCw=) 3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=) 4: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=) 5: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=) 6: EpGUqveN8_iwqXtX3loQqZpefjQ.roa (hash: BK7p4b3/2gbXuD0eD7vqsFTJ+r23upun/RghpY97TiM=) 7: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=) 8: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=) 9: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=) 10: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=) 11: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=) 12: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=) 13: Tpzepq58z_aU3I05rjgHZjdSF4A.roa (hash: TQoun3PaU74elifnUAi84oWKWkBYuJXkGa74wDgLRTc=) 14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=) 15: XNivPuYpwzsyBWSVK0UP_mTGSTM.roa (hash: b8FsxpaUdfRYc57L8BwR77E37GuFMW2GwS9TNBfbgIo=) 16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=) 17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=) 18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=) 19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=) 20: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=) 21: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=) 22: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=) 23: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=) 24: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=) 25: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=) 26: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:cd:49:4a:1a:b6:31:67:9b:cf:8a:85:20:de:78:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Aug 23 12:00:34 2025 GMT Not After : Aug 24 12:00:34 2025 GMT Subject: CN=fac24e83b2f2a700b5f94160427c9f2b35457902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:8c:c0:61:61:0a:06:03:c0:dd:1f:ee:33: 7a:35:12:3f:44:f6:c0:07:d3:47:ab:0a:70:21:ab: 5a:0a:51:bb:7b:f1:f4:d6:81:6f:5d:16:3e:77:b6: 32:bb:a4:08:a4:5d:e1:16:f6:6d:67:32:d3:8b:4a: 79:0e:b1:ad:fa:37:49:01:af:95:c0:15:62:a6:42: d5:65:1d:29:61:12:d4:a3:3e:e9:47:ce:6b:51:a6: 32:40:99:83:80:75:35:f4:63:31:2b:fa:84:5b:6f: ef:af:21:a7:50:9d:23:e9:79:cf:b9:7a:36:a4:b8: 24:b1:35:da:8c:9a:58:a5:3a:28:9e:d8:18:a2:4f: 80:d3:cd:56:5c:30:01:50:5e:9c:51:fa:20:52:52: ec:b7:2f:33:6c:8c:e3:a4:7e:87:ed:db:23:c1:1e: b1:04:b8:33:9b:f7:e7:37:72:70:67:d6:a1:2f:9e: 5f:49:17:cf:07:ed:d3:48:a6:31:7d:76:74:85:e1: 54:cb:0b:a6:ed:57:1d:52:86:e5:64:8d:12:81:8d: d7:df:f9:c5:08:04:4f:55:5d:bd:1b:f2:ea:b5:df: 25:be:88:ff:bd:01:75:48:d5:2b:ab:23:80:5a:7a: c3:d7:59:19:47:22:0d:7a:41:9b:e9:65:c1:c2:40: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C2:4E:83:B2:F2:A7:00:B5:F9:41:60:42:7C:9F:2B:35:45:79:02 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ee:2d:ef:63:e4:02:b9:98:b0:76:6e:16:52:5c:a6:a0:d9: 3e:0c:04:6c:f1:d3:1a:0e:07:7f:65:b4:96:f6:93:68:61:a5: 52:2e:6a:31:64:bc:5b:e8:a6:06:b5:de:14:9a:c6:1c:79:55: 9e:ba:fc:48:30:3d:e0:b7:49:39:7e:e4:17:8c:b3:1b:cf:dc: f8:ac:fe:a3:58:4c:d9:7f:76:44:7b:75:f8:e1:00:71:db:06: c0:99:68:fa:ee:2d:85:5c:6d:ad:26:5e:08:c3:08:a2:31:1e: 20:25:46:fa:bc:10:24:c9:e2:72:1d:af:86:46:c5:ca:b1:eb: 68:e5:d5:01:4c:de:02:66:7a:1f:bb:fb:cf:d0:fd:88:02:12: e1:56:16:ec:06:ed:a9:42:47:3b:2b:7c:4e:ca:44:c1:4a:49: 57:7f:a4:2c:56:40:2d:77:93:6d:4a:bf:f9:e2:33:70:40:41: ee:10:11:e5:b4:5d:92:78:f8:ac:02:d6:15:4b:23:76:1f:cc: a3:5e:64:02:5a:df:80:ac:f7:82:fe:50:56:4c:85:ec:25:a5: c4:30:70:f0:98:b7:3d:0b:ae:b6:e7:e2:e7:34:ae:d4:57:30: 55:82:fa:28:d6:05:b0:c3:b4:ed:1d:55:d3:48:fc:20:7f:41: 26:c1:85:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzUlKGrYxZ5vPioUg3ngcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjUwODIzMTIwMDM0WhcNMjUwODI0MTIwMDM0WjAzMTEwLwYDVQQD EyhmYWMyNGU4M2IyZjJhNzAwYjVmOTQxNjA0MjdjOWYyYjM1NDU3OTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C6MwGFhCgYDwN0f7jN6NRI/RPbA B9NHqwpwIataClG7e/H01oFvXRY+d7Yyu6QIpF3hFvZtZzLTi0p5DrGt+jdJAa+V wBVipkLVZR0pYRLUoz7pR85rUaYyQJmDgHU19GMxK/qEW2/vryGnUJ0j6XnPuXo2 pLgksTXajJpYpToontgYok+A081WXDABUF6cUfogUlLsty8zbIzjpH6H7dsjwR6x BLgzm/fnN3JwZ9ahL55fSRfPB+3TSKYxfXZ0heFUywum7VcdUoblZI0SgY3X3/nF CARPVV29G/Lqtd8lvoj/vQF1SNUrqyOAWnrD11kZRyINekGb6WXBwkCe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrCToOy8qcAtflBYEJ8nys1RXkCMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgu4t72Pk ArmYsHZuFlJcpqDZPgwEbPHTGg4Hf2W0lvaTaGGlUi5qMWS8W+imBrXeFJrGHHlV nrr8SDA94LdJOX7kF4yzG8/c+Kz+o1hM2X92RHt1+OEAcdsGwJlo+u4thVxtrSZe CMMIojEeICVG+rwQJMnich2vhkbFyrHraOXVAUzeAmZ6H7v7z9D9iAIS4VYW7Abt qUJHOyt8TspEwUpJV3+kLFZALXeTbUq/+eIzcEBB7hAR5bRdknj4rALWFUsjdh/M o15kAlrfgKz3gv5QVkyF7CWlxDBw8Ji3PQuutufi5zSu1FcwVYL6KNYFsMO07R1V 00j8IH9BJsGF+g== -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:56 2025 by rpki-client