$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft File: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft (raw, json) Hash identifier: CJktVS5e8+zwwD21rMx/XzlJNhqHe7f27x8Ags9xnz0= Subject key identifier: B6:CC:3F:88:11:1F:E8:E3:2C:F2:93:33:9F:41:39:C7:64:BE:C3:0F Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019A541B27092B27B49A04D79493231863F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft Manifest number: 0988 Signing time: Wed 05 Nov 2025 13:00:56 +0000 Manifest this update: Wed 05 Nov 2025 13:00:56 +0000 Manifest next update: Thu 06 Nov 2025 13:00:56 +0000 Files and hashes: 1: 1kR_POGuTAaHovLOCX1lTOE57lI.roa (hash: LYln6QfL2ITaLtdjdV6guC1+sxTxxkTnmxcczxAsWTE=) 2: 1oQvv0jSoSu53ss0BELp3o4jFmM.roa (hash: I2MUurYubFmbZ7GZ8bLKTpYRYZB3nGjsRDVL/GxzZxA=) 3: 1upwVvOth0ESwzIfWwpLuCD_3Es.roa (hash: 6LIM0TJ502zyJgxqFVPqSxya65Y/9B+s8bx0dBkgTEM=) 4: 3uFQKPWJKcDIvIEeAENW1NzNn44.roa (hash: fnvFL8/JoFoe9FclNSH9uFw8LFKWDcq7HGx2lOk3h+8=) 5: 5CMiZU4pAmiJpfvxBLsG5vubIRA.roa (hash: +oEkF/3njM8s7nBWqWOxZXJl1ZryJZVB3JA4uLNAhxw=) 6: 5VfBBY8o-FF5RY7s0zaWFHorhdI.roa (hash: MEJ7BA63gOy4ZsbxMVinMlFma6agN7MnA7HJhj46ixE=) 7: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl (hash: QyY+YTJpEWv0HTs/x8DWdfjR9go6XcJOreamK/n88fk=) 8: 9UI8QHrJWiND1lOzhrtnfp-eGw4.roa (hash: YAvemtBgd1AjG5xnd7soCmWTZEzEAfuHPdJDb2pKHRI=) 9: 9w-AYcN2Du3yEu4R4Eh4lHezdM8.roa (hash: bF5U6MICFYifWaj4ebB3BhxIrLb9u26IVOk8Y1lVIG4=) 10: CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa (hash: sn3GvdltPLasZQw3sHAj9RA9PaVADblnC7vtnVoU5qc=) 11: EbdHJttkvnZu6ykROrZEWjs4mj0.roa (hash: bSAVjbIUv95GkOUnVUptC037tkrahIdQXM4OOzOGm+4=) 12: HBUKOHoGfS-O1UaCFvWsn02qBEE.roa (hash: Ag5zVImRtng++cs33j0jy4sb9hNGriH9QTizVQRFGwg=) 13: JPT84J8sgcKOXjYFNH6TAuUvNk4.roa (hash: e3bD4e8Uvkqff5stQpbUdZdhMmIlcTkZivV1M7IJw9U=) 14: KVRjxZ9s0_8Tlm3_5G1g5GCGPbY.roa (hash: z7k03hsouFlLjW70rfVUo5HQwW0TZUHJjhGSz4YiiQw=) 15: KiDsVhw56QU2iy0IMAi4EJdqHlM.roa (hash: LibO9sa7HWqbRvwGzvXHvKUHFf3hfVmQIFAA8/Tf1iE=) 16: NpWIoMyjqyMb_Zaw1o9kw3JDDi4.roa (hash: wMXhMaV/pVnTHbpuxwyjif970THZSh4/vwdthTw+gqc=) 17: RmnXvYZt-mmbFhnuP7k2fQRabUA.roa (hash: gHLzUci7yfQ24zvXoIAPAC4wOBAEeqj8cAzMrTtaW54=) 18: W6vwiq-voKk2QAWV9ym9B7kGas4.roa (hash: 7ovXfRXZRQGLha60QudJ3CQy5egOSDRax/h7CJvWjlE=) 19: Xb2iPGNquec9FIHc2pP6Khjop-Y.roa (hash: l4FvMrjJP9ah0vuOXJLW2iFF79s4czWdlziid/+K75w=) 20: ZhZRZT8ZPo8M2a9MIYRNwZyhQ8w.roa (hash: HBtX5WX5rNstuEn0JYCNOPxyzZKZRsOHcscK1aN6ogc=) 21: _DnWQD0CMumMdByDOpwzfoBcOTo.roa (hash: cPbtQFfSB4dPoJ85o+FHzqAzBi3SqJWlECATby1tFa0=) 22: abYGyLAPbqJHUN4OgPJ4kSh32-A.roa (hash: vWRxXzMhkOYcxdNq7oKZ4XFTV09UKCaMmWEVfb3hino=) 23: bPxYWT1wnngqDhHRNDBAtz9BJgs.roa (hash: nWexsycSC4zjDn7e4SR1Q+j4Ka0KKXzBUyIVuPqcH7c=) 24: krPfKn-NjNjAy0u2Ta2SG0T8IYI.roa (hash: PwpNiDEaLhogjcVUrfT2nhjld8L1XOnWViSxcZDbO8s=) 25: l0dBWs1YlE17AhstVW2VWnIvp0s.roa (hash: iWBATYIpP0dSJktBmp9NkaeXH+SClXQSdpBWrPAbzlM=) 26: ob2zBPNLtLFzxUuttNyvYQ_i-K0.roa (hash: ahdcq6qcFuk7beprX/QZiv/lO1jQP9BjCIRZOB7i01o=) 27: ocjyC2jwDA6Rk88oFGWfNBa6O7c.roa (hash: up4NQEqOBhPBKs8ybW1tNgCMgHUS+uI7TPV3nH5jRFI=) 28: p52ECLHacG3z-Gg5eipSNQK8sHg.roa (hash: iCIbKxHFKwisNq/0rdSKxF6SJ72XE0XsI1+USxkuvdQ=) 29: psmHOp3-aOww6iHm80VyyrFtkiQ.roa (hash: Yla89xbigUWiTbgkyJUTV3H+yuHmB1DjNyN/GgbwUm4=) 30: t5YmhSpQh7hJVJ9rbPKosrK995g.roa (hash: 46VBCXnM3N7gfr2V6b7t3B2sNT8I6Oa9hSbR5q+FAqY=) 31: vfHbIoTnUxhnAwnrFKAEBgGqbIw.roa (hash: m840ACktEyZoGVV96T6Ly3VBkVNyCX1wXuDPZajskuA=) 32: xc-ziwt5L4IQBhtwr3KHv3MBn_E.roa (hash: Jan/MaJ/3rtTJkw1eayxGH+OJS2zK9UT117u0//wABw=) 33: xpX6hcRMPz87CNu8WZKKgI6VmHc.roa (hash: 2GtFRUTOon6G4VNM6WyrbperIlxaZ7rGbYCzZWHktHU=) 34: yrw-APdDdrKZbC_GG5pC5x9IuaE.roa (hash: 1L4TnTdUXnzWd1fgMXk6voGBQgtXreTq+fSZW4h+FH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:1b:27:09:2b:27:b4:9a:04:d7:94:93:23:18:63:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Nov 5 13:00:56 2025 GMT Not After : Nov 6 13:00:56 2025 GMT Subject: CN=b6cc3f88111fe8e32cf293339f4139c764bec30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:24:65:e1:63:5b:a3:16:a3:c3:56:9e:e7: 4b:f2:62:1e:dc:be:69:40:da:ec:a9:6c:16:b2:4d: ac:59:ea:f4:21:b8:72:22:ab:d4:0d:d0:cc:9f:6e: fe:5b:58:b0:a0:a8:fe:ea:68:2b:05:c6:9f:9a:8a: b0:70:62:3b:80:62:37:85:f0:71:84:b9:1c:54:64: 6d:2c:5c:86:4b:af:d6:19:62:47:42:ee:d8:9e:50: 22:2c:35:cc:ad:43:5e:44:91:b5:1c:89:d7:cc:1b: 55:db:9e:a7:7a:ba:20:17:52:0a:a3:7a:2d:3e:5b: dc:0d:b3:89:52:9e:52:9c:76:39:75:de:ff:38:59: 93:d5:e2:9b:e7:b4:32:c3:5e:c0:ec:72:a4:99:d8: e3:3c:e9:08:5b:0d:2d:e9:b1:3b:b4:05:59:1f:a2: 8b:dd:1a:48:e3:0b:47:1f:d5:b5:cf:c7:eb:2d:8a: 8d:6f:f0:71:ea:d0:42:fb:27:07:70:be:cc:d4:09: 99:92:0d:63:08:1a:93:f3:55:4d:5a:a5:24:00:0c: e1:42:f3:96:8a:ea:54:6a:03:74:8b:60:dd:0d:e8: 46:4f:05:02:0b:4e:1a:93:21:89:42:28:1e:b1:d7: 47:e5:c7:fa:a6:c1:0b:70:79:d2:d0:45:83:ad:a4: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CC:3F:88:11:1F:E8:E3:2C:F2:93:33:9F:41:39:C7:64:BE:C3:0F X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:42:35:bf:06:a0:40:9a:cb:db:44:08:9c:76:3b:9e:66:ce: 17:f9:b6:38:ee:e4:23:37:9e:45:85:2f:77:9a:5e:2c:40:b7: 42:5d:5e:36:42:58:08:61:0e:a0:eb:9b:0c:8c:32:60:b5:9a: 13:79:7b:98:72:79:8c:33:b2:5b:ca:9d:f9:91:c2:84:45:8f: 13:53:40:b4:77:77:6e:5a:60:49:2f:a2:ed:bf:ac:09:50:2e: 54:17:0f:f7:04:3b:9d:e2:6a:93:8d:1e:73:af:92:7d:cb:3e: 1b:25:3b:e5:f6:94:ba:cb:e6:26:e7:b2:c9:be:94:6e:9c:e9: f9:01:63:1c:a5:79:5e:7c:5b:cf:e7:68:7b:0e:25:6f:ff:8f: 8c:4d:56:70:eb:41:84:3d:5d:45:88:4f:fa:c9:17:35:ce:cd: da:42:a9:d4:b9:e6:dc:a5:f8:87:82:94:cf:68:46:36:e0:09: 4c:71:30:62:f3:16:3b:be:af:82:30:07:05:54:30:d5:da:1f: ba:b1:3d:12:4c:92:7c:ac:7d:4e:28:95:6e:5d:55:f4:d5:53: db:ef:6c:0d:44:54:3e:cd:c4:9f:c6:e0:54:95:d4:6d:69:1e: a0:21:8f:e9:ce:7a:d8:af:79:8d:14:78:05:d8:bd:df:18:75: c4:31:9e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpUGycJKye0mgTXlJMjGGP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMTA1MTMwMDU2WhcNMjUxMTA2MTMwMDU2WjAzMTEwLwYDVQQD EyhiNmNjM2Y4ODExMWZlOGUzMmNmMjkzMzM5ZjQxMzljNzY0YmVjMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre0kZeFjW6MWo8NWnudL8mIe3L5p QNrsqWwWsk2sWer0IbhyIqvUDdDMn27+W1iwoKj+6mgrBcafmoqwcGI7gGI3hfBx hLkcVGRtLFyGS6/WGWJHQu7YnlAiLDXMrUNeRJG1HInXzBtV256nerogF1IKo3ot PlvcDbOJUp5SnHY5dd7/OFmT1eKb57Qyw17A7HKkmdjjPOkIWw0t6bE7tAVZH6KL 3RpI4wtHH9W1z8frLYqNb/Bx6tBC+ycHcL7M1AmZkg1jCBqT81VNWqUkAAzhQvOW iupUagN0i2DdDehGTwUCC04akyGJQigesddH5cf6psELcHnS0EWDraTNMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbMP4gRH+jjLPKTM59BOcdkvsMPMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0I1vwag QJrL20QInHY7nmbOF/m2OO7kIzeeRYUvd5peLEC3Ql1eNkJYCGEOoOubDIwyYLWa E3l7mHJ5jDOyW8qd+ZHChEWPE1NAtHd3blpgSS+i7b+sCVAuVBcP9wQ7neJqk40e c6+Sfcs+GyU75faUusvmJueyyb6Ubpzp+QFjHKV5Xnxbz+doew4lb/+PjE1WcOtB hD1dRYhP+skXNc7N2kKp1Lnm3KX4h4KUz2hGNuAJTHEwYvMWO76vgjAHBVQw1dof urE9EkySfKx9TiiVbl1V9NVT2+9sDURUPs3En8bgVJXUbWkeoCGP6c562K95jRR4 Bdi93xh1xDGeGg== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:18 2025 by rpki-client