$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft File: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft (raw, json) Hash identifier: vFQjTM7nD9cPqVAU4vCowjhrzbkCTJtGE5H0hyqFksA= Subject key identifier: B4:C3:98:0E:A5:8E:C0:DC:22:BD:0C:CD:33:8E:6D:06:B3:5F:1B:85 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019A4E4FE1288376138854754A770384096F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft Manifest number: 0985 Signing time: Tue 04 Nov 2025 10:00:49 +0000 Manifest this update: Tue 04 Nov 2025 10:00:49 +0000 Manifest next update: Wed 05 Nov 2025 10:00:49 +0000 Files and hashes: 1: 1kR_POGuTAaHovLOCX1lTOE57lI.roa (hash: LYln6QfL2ITaLtdjdV6guC1+sxTxxkTnmxcczxAsWTE=) 2: 1oQvv0jSoSu53ss0BELp3o4jFmM.roa (hash: I2MUurYubFmbZ7GZ8bLKTpYRYZB3nGjsRDVL/GxzZxA=) 3: 1upwVvOth0ESwzIfWwpLuCD_3Es.roa (hash: 6LIM0TJ502zyJgxqFVPqSxya65Y/9B+s8bx0dBkgTEM=) 4: 3uFQKPWJKcDIvIEeAENW1NzNn44.roa (hash: fnvFL8/JoFoe9FclNSH9uFw8LFKWDcq7HGx2lOk3h+8=) 5: 5CMiZU4pAmiJpfvxBLsG5vubIRA.roa (hash: +oEkF/3njM8s7nBWqWOxZXJl1ZryJZVB3JA4uLNAhxw=) 6: 5VfBBY8o-FF5RY7s0zaWFHorhdI.roa (hash: MEJ7BA63gOy4ZsbxMVinMlFma6agN7MnA7HJhj46ixE=) 7: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl (hash: CrAfu2M7KRAGGwyjWTST9WWFT3PX7UM187ETfxSIaxw=) 8: 9UI8QHrJWiND1lOzhrtnfp-eGw4.roa (hash: YAvemtBgd1AjG5xnd7soCmWTZEzEAfuHPdJDb2pKHRI=) 9: 9w-AYcN2Du3yEu4R4Eh4lHezdM8.roa (hash: bF5U6MICFYifWaj4ebB3BhxIrLb9u26IVOk8Y1lVIG4=) 10: CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa (hash: sn3GvdltPLasZQw3sHAj9RA9PaVADblnC7vtnVoU5qc=) 11: EbdHJttkvnZu6ykROrZEWjs4mj0.roa (hash: bSAVjbIUv95GkOUnVUptC037tkrahIdQXM4OOzOGm+4=) 12: HBUKOHoGfS-O1UaCFvWsn02qBEE.roa (hash: Ag5zVImRtng++cs33j0jy4sb9hNGriH9QTizVQRFGwg=) 13: JPT84J8sgcKOXjYFNH6TAuUvNk4.roa (hash: e3bD4e8Uvkqff5stQpbUdZdhMmIlcTkZivV1M7IJw9U=) 14: KVRjxZ9s0_8Tlm3_5G1g5GCGPbY.roa (hash: z7k03hsouFlLjW70rfVUo5HQwW0TZUHJjhGSz4YiiQw=) 15: KiDsVhw56QU2iy0IMAi4EJdqHlM.roa (hash: LibO9sa7HWqbRvwGzvXHvKUHFf3hfVmQIFAA8/Tf1iE=) 16: NpWIoMyjqyMb_Zaw1o9kw3JDDi4.roa (hash: wMXhMaV/pVnTHbpuxwyjif970THZSh4/vwdthTw+gqc=) 17: RmnXvYZt-mmbFhnuP7k2fQRabUA.roa (hash: gHLzUci7yfQ24zvXoIAPAC4wOBAEeqj8cAzMrTtaW54=) 18: W6vwiq-voKk2QAWV9ym9B7kGas4.roa (hash: 7ovXfRXZRQGLha60QudJ3CQy5egOSDRax/h7CJvWjlE=) 19: Xb2iPGNquec9FIHc2pP6Khjop-Y.roa (hash: l4FvMrjJP9ah0vuOXJLW2iFF79s4czWdlziid/+K75w=) 20: ZhZRZT8ZPo8M2a9MIYRNwZyhQ8w.roa (hash: HBtX5WX5rNstuEn0JYCNOPxyzZKZRsOHcscK1aN6ogc=) 21: _DnWQD0CMumMdByDOpwzfoBcOTo.roa (hash: cPbtQFfSB4dPoJ85o+FHzqAzBi3SqJWlECATby1tFa0=) 22: abYGyLAPbqJHUN4OgPJ4kSh32-A.roa (hash: vWRxXzMhkOYcxdNq7oKZ4XFTV09UKCaMmWEVfb3hino=) 23: bPxYWT1wnngqDhHRNDBAtz9BJgs.roa (hash: nWexsycSC4zjDn7e4SR1Q+j4Ka0KKXzBUyIVuPqcH7c=) 24: krPfKn-NjNjAy0u2Ta2SG0T8IYI.roa (hash: PwpNiDEaLhogjcVUrfT2nhjld8L1XOnWViSxcZDbO8s=) 25: l0dBWs1YlE17AhstVW2VWnIvp0s.roa (hash: iWBATYIpP0dSJktBmp9NkaeXH+SClXQSdpBWrPAbzlM=) 26: ob2zBPNLtLFzxUuttNyvYQ_i-K0.roa (hash: ahdcq6qcFuk7beprX/QZiv/lO1jQP9BjCIRZOB7i01o=) 27: ocjyC2jwDA6Rk88oFGWfNBa6O7c.roa (hash: up4NQEqOBhPBKs8ybW1tNgCMgHUS+uI7TPV3nH5jRFI=) 28: p52ECLHacG3z-Gg5eipSNQK8sHg.roa (hash: iCIbKxHFKwisNq/0rdSKxF6SJ72XE0XsI1+USxkuvdQ=) 29: psmHOp3-aOww6iHm80VyyrFtkiQ.roa (hash: Yla89xbigUWiTbgkyJUTV3H+yuHmB1DjNyN/GgbwUm4=) 30: t5YmhSpQh7hJVJ9rbPKosrK995g.roa (hash: 46VBCXnM3N7gfr2V6b7t3B2sNT8I6Oa9hSbR5q+FAqY=) 31: vfHbIoTnUxhnAwnrFKAEBgGqbIw.roa (hash: m840ACktEyZoGVV96T6Ly3VBkVNyCX1wXuDPZajskuA=) 32: xc-ziwt5L4IQBhtwr3KHv3MBn_E.roa (hash: Jan/MaJ/3rtTJkw1eayxGH+OJS2zK9UT117u0//wABw=) 33: xpX6hcRMPz87CNu8WZKKgI6VmHc.roa (hash: 2GtFRUTOon6G4VNM6WyrbperIlxaZ7rGbYCzZWHktHU=) 34: yrw-APdDdrKZbC_GG5pC5x9IuaE.roa (hash: 1L4TnTdUXnzWd1fgMXk6voGBQgtXreTq+fSZW4h+FH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:e1:28:83:76:13:88:54:75:4a:77:03:84:09:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Nov 4 10:00:49 2025 GMT Not After : Nov 5 10:00:49 2025 GMT Subject: CN=b4c3980ea58ec0dc22bd0ccd338e6d06b35f1b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:8a:e7:03:33:b9:8b:78:d9:24:aa:2a:62: b7:8e:06:c7:85:49:a9:13:ab:e7:cf:cd:b7:aa:ef: fd:c8:57:a2:ff:26:42:25:dd:09:e5:a7:e2:93:ba: 1c:9b:94:1d:d7:37:44:81:48:8c:21:78:c7:92:3a: 64:f2:80:2f:c2:8a:53:2e:e9:2d:13:9e:55:99:d9: 50:19:a7:b5:37:19:6a:7f:66:d9:95:ae:d6:03:f2: 18:16:9b:da:eb:38:f6:c2:97:50:48:55:16:32:79: 05:bd:67:01:9b:a0:e6:8d:60:ce:89:d1:a7:47:4f: 9b:d9:6d:38:69:9a:b8:58:80:60:db:4a:56:6a:03: 6f:bb:5f:ed:47:a9:ff:61:86:c5:5c:0d:a4:83:bc: a2:fc:1d:bf:30:93:d7:63:74:6f:eb:a1:87:ab:36: c3:61:1c:47:79:9a:81:f8:75:df:57:63:72:39:ee: d3:2a:32:33:b5:28:33:8d:a4:b9:89:f7:b2:8a:96: b0:b3:dc:dd:3f:77:7d:ec:dc:26:36:78:e5:06:5f: 8a:89:09:a6:5f:cf:4d:53:d8:7a:2b:65:85:db:d4: a7:62:06:ad:7a:33:01:e4:57:1b:ef:c8:73:a1:02: 65:71:56:eb:cf:99:33:4b:92:00:e4:1a:81:b3:be: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:98:0E:A5:8E:C0:DC:22:BD:0C:CD:33:8E:6D:06:B3:5F:1B:85 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:57:59:2f:13:40:4c:9b:8c:08:91:c3:40:6e:e0:62:ca:c4: ba:c2:40:09:da:ef:91:cc:32:9b:b3:33:8c:1f:b1:5d:c6:f7: e9:20:cb:21:85:91:af:57:32:6d:c6:04:83:e7:2b:59:69:a1: 0c:12:c9:dc:43:d5:90:d9:9c:d3:52:58:f9:b9:10:e9:d6:cd: 00:77:e1:54:71:4f:16:dc:39:df:de:da:05:c1:a0:7e:5f:42: d4:08:6b:e0:89:e0:ff:48:c4:63:a6:1d:3a:1b:ee:93:c7:bb: cb:11:7f:f2:6f:ef:59:9d:a7:55:78:1a:e7:d6:4f:06:07:cb: b1:c5:0c:dc:ec:59:22:61:9c:1a:70:89:5b:52:cb:7a:89:c5: 7b:cf:ef:da:dd:0f:60:9a:65:4e:8f:c8:5c:1c:48:c8:36:ce: 73:2e:f3:ed:c8:33:1a:fc:17:56:d5:12:dd:83:db:fc:19:dc: 21:a8:b8:b8:60:35:15:8c:3a:33:81:bf:c1:1e:7a:90:e5:e0: 0f:54:c4:c5:e7:70:0c:f4:93:1a:6a:04:06:9b:0a:c4:f2:87: b4:e7:2e:fd:54:e5:4f:e4:5a:d4:4d:e1:98:f8:49:03:e8:d3: dd:95:a6:46:ad:22:0e:0b:4d:7b:11:68:9c:21:ed:31:d7:01: 14:96:30:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT+Eog3YTiFR1SncDhAlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMTA0MTAwMDQ5WhcNMjUxMTA1MTAwMDQ5WjAzMTEwLwYDVQQD EyhiNGMzOTgwZWE1OGVjMGRjMjJiZDBjY2QzMzhlNmQwNmIzNWYxYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHOK5wMzuYt42SSqKmK3jgbHhUmp E6vnz823qu/9yFei/yZCJd0J5afik7ocm5Qd1zdEgUiMIXjHkjpk8oAvwopTLukt E55VmdlQGae1Nxlqf2bZla7WA/IYFpva6zj2wpdQSFUWMnkFvWcBm6DmjWDOidGn R0+b2W04aZq4WIBg20pWagNvu1/tR6n/YYbFXA2kg7yi/B2/MJPXY3Rv66GHqzbD YRxHeZqB+HXfV2NyOe7TKjIztSgzjaS5ifeyipaws9zdP3d97NwmNnjlBl+KiQmm X89NU9h6K2WF29SnYgatejMB5Fcb78hzoQJlcVbrz5kzS5IA5BqBs76dOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTDmA6ljsDcIr0MzTOObQazXxuFMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXldZLxNA TJuMCJHDQG7gYsrEusJACdrvkcwym7MzjB+xXcb36SDLIYWRr1cybcYEg+crWWmh DBLJ3EPVkNmc01JY+bkQ6dbNAHfhVHFPFtw5397aBcGgfl9C1Ahr4Ing/0jEY6Yd Ohvuk8e7yxF/8m/vWZ2nVXga59ZPBgfLscUM3OxZImGcGnCJW1LLeonFe8/v2t0P YJplTo/IXBxIyDbOcy7z7cgzGvwXVtUS3YPb/BncIai4uGA1FYw6M4G/wR56kOXg D1TExedwDPSTGmoEBpsKxPKHtOcu/VTlT+Ra1E3hmPhJA+jT3ZWmRq0iDgtNexFo nCHtMdcBFJYwxg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:06:24 2025 by rpki-client