$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft File: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft (raw, json) Hash identifier: f+yY8ezPKF/nMx65UaJYTnZfiLRMJFwMkRegP3a8KXw= Subject key identifier: 34:54:A2:24:31:B3:89:EE:9A:37:4F:C6:A4:19:5C:B5:07:E9:70:90 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019A4C6184A6003A7C3CB7CF1D5A5447A902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft Manifest number: 1714 Signing time: Tue 04 Nov 2025 01:00:50 +0000 Manifest this update: Tue 04 Nov 2025 01:00:50 +0000 Manifest next update: Wed 05 Nov 2025 01:00:50 +0000 Files and hashes: 1: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl (hash: o8VFvkbtRkYx4u10LkNvyt8F5DDraUt4CmXLA4ur4Vk=) 2: 6bDtTigEJHvfITo5EDhb-HZYmus.roa (hash: pn8MSlEBA6t8aqrinf0kHwKBgbSA1XvILb1MNY3rWQI=) 3: FNUQanu9g30CB8nbV4vNSU8f7jM.roa (hash: IqvdgFfnbRltyax3es1NYZCCU6t/WnmDX7u4htxiU80=) 4: InvIy5S9tlR4aDUpgLN3Xylz49U.roa (hash: 7GjdWDVJ1CX3HDP5vvhNeyxqOM+ASi2a2B3QT2M/wLg=) 5: OW4SBqRM0pZLREvB8PwvS9CKnp0.roa (hash: jMEiAew60dJvOGLRJzz/Ax99USUZbxKTbl9S96vSsP4=) 6: Rhxcko7xogGD7PUNQ7GFVcIyo3E.roa (hash: wxRtMGUVR1vUKsC3N9YTO9zRxZclKO3OVLRoHoS7u/o=) 7: Rxrp1heOaEaWEFtYKe0f2dBga1o.roa (hash: 7XFvUguakglknudZUQRNwg58TL7mPN+urYYYiKg5sug=) 8: XPP7F5mDO8fdtvjirfCgsQBUDPE.roa (hash: Do3JY163ktXxFxe8bc2aG6JJs1uQbqKOw3uTRl+UJg8=) 9: ZA2jyfPuy6j6A-NhVK6Bhm7mxDI.roa (hash: XMBKezoMpNGmkUM/VB4AXfshcbnXpRVYmNttAzxnQJw=) 10: _poZJvklbAqh3jP2K6-dITgfjgE.roa (hash: /92aJ523PYlzwTJSWkZsdV9NObt6PgIzUkANpCeKD3w=) 11: jyL0IQjTkW6WZMu6S10YICMBXpo.roa (hash: XFpGb73TqJsH0jUYMWLfh8nB2eSn7FmYwyY8desafVs=) 12: lk6Hfi9KbB1Ij-185K3YXtagWKE.roa (hash: mdxJ9JVD7IZDkycD97vqs0ohPExMqonhzHpDt9YsSgg=) 13: oAUG8qSVxsbcnn5oCLrJKtKLuNc.roa (hash: o+LV+u3nMYQIizzPpiFLkTJNXnW4krdNAYxqeBL+QH8=) 14: qvCCYCJKwYp-OQiGJWrjQN6GnYE.roa (hash: IXEsDSXk7cKyv3gBbnxZ1ieqaPBJHIubd2ma3kMo8q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:84:a6:00:3a:7c:3c:b7:cf:1d:5a:54:47:a9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Nov 4 01:00:50 2025 GMT Not After : Nov 5 01:00:50 2025 GMT Subject: CN=3454a22431b389ee9a374fc6a4195cb507e97090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:1d:79:73:79:42:7b:68:09:b2:4f:7c:5f: a6:0e:25:28:c2:5a:64:1f:f2:3a:8a:6b:4e:ba:6d: d6:a8:d7:f8:fa:b9:d4:1d:c6:50:83:ee:ed:25:4e: 15:eb:83:1a:56:0a:fa:90:b8:b3:ce:6c:20:83:23: 58:ac:1b:be:ba:d0:a9:c2:92:ba:c4:b7:90:df:24: f2:85:e8:5a:49:0a:8e:75:1c:82:88:e8:a8:a1:4f: 97:d0:25:39:22:eb:6c:92:2a:b7:26:76:50:f6:95: 29:6d:fd:31:64:ed:07:d9:96:7e:43:15:04:6c:67: f0:c0:23:b8:d4:35:e7:91:a9:30:a2:89:6b:00:f2: a6:44:08:c3:e3:1e:82:af:50:61:7d:a5:df:e6:3c: 67:4c:d9:9c:9c:24:2d:60:a3:3d:b4:e2:bc:d6:8d: 3d:5e:39:db:8a:c2:7c:ed:e2:74:46:51:8b:81:46: 82:30:24:08:d6:47:6c:f4:f6:50:9b:5d:6c:6f:5e: 93:2c:60:5e:59:cd:ef:81:65:cc:47:fd:f8:bb:f6: 58:e1:54:43:d7:d3:22:82:43:5a:3c:5f:73:f1:7b: 69:62:06:01:87:c1:cb:cc:91:5e:33:c4:a7:aa:e6: d1:da:fa:c6:9c:86:9d:5a:46:25:6e:50:f9:5d:a4: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:54:A2:24:31:B3:89:EE:9A:37:4F:C6:A4:19:5C:B5:07:E9:70:90 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0a:f5:44:37:d9:17:a6:51:5b:6d:0f:99:09:bf:7b:89:ef: 35:45:1c:3f:bb:50:d2:ee:82:ea:19:ea:9e:ae:64:26:61:ee: b1:ef:38:4c:c0:29:39:b2:aa:7b:90:f7:da:9c:6a:a5:9a:09: b7:93:c9:06:30:66:64:cf:fc:f8:68:6b:e6:f4:1f:3f:7d:65: 7d:64:86:d1:1a:60:e9:10:d1:9a:1f:f3:ce:ac:75:b3:e7:38: e3:94:9f:20:58:c5:89:48:23:fb:9c:ac:6f:b2:b3:56:27:26: 92:5a:d5:ce:80:d3:5e:6a:d3:09:6d:a3:c1:96:88:41:8e:ce: c2:9d:db:19:21:41:51:4b:88:95:5e:a6:9d:b1:92:9e:12:e4: a5:3b:03:c9:56:cc:82:7f:09:83:25:e2:b1:9c:33:5a:c0:db: 7c:e7:29:16:0d:33:15:54:bf:3f:78:15:e4:8b:ce:f2:8c:86: 61:c1:0b:ce:77:48:ed:07:63:49:24:ba:05:fd:14:1d:70:d8: 85:c4:ce:38:c0:24:c4:ea:68:38:27:9d:30:9b:5b:0c:44:f1: 08:23:de:f0:30:67:93:e2:b8:b0:fb:19:ea:5c:c3:16:ef:a0: 9d:60:6e:52:3d:5c:da:93:e6:51:e6:8b:d2:ac:79:b7:4d:f9: e1:0a:71:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYYSmADp8PLfPHVpUR6kCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjUxMTA0MDEwMDUwWhcNMjUxMTA1MDEwMDUwWjAzMTEwLwYDVQQD EygzNDU0YTIyNDMxYjM4OWVlOWEzNzRmYzZhNDE5NWNiNTA3ZTk3MDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaAdeXN5QntoCbJPfF+mDiUowlpk H/I6imtOum3WqNf4+rnUHcZQg+7tJU4V64MaVgr6kLizzmwggyNYrBu+utCpwpK6 xLeQ3yTyhehaSQqOdRyCiOiooU+X0CU5Iutskiq3JnZQ9pUpbf0xZO0H2ZZ+QxUE bGfwwCO41DXnkakwoolrAPKmRAjD4x6Cr1BhfaXf5jxnTNmcnCQtYKM9tOK81o09 XjnbisJ87eJ0RlGLgUaCMCQI1kds9PZQm11sb16TLGBeWc3vgWXMR/34u/ZY4VRD 19MigkNaPF9z8XtpYgYBh8HLzJFeM8SnqubR2vrGnIadWkYlblD5XaQq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRUoiQxs4numjdPxqQZXLUH6XCQMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAr1RDfZ F6ZRW20PmQm/e4nvNUUcP7tQ0u6C6hnqnq5kJmHuse84TMApObKqe5D32pxqpZoJ t5PJBjBmZM/8+Ghr5vQfP31lfWSG0Rpg6RDRmh/zzqx1s+c445SfIFjFiUgj+5ys b7KzVicmklrVzoDTXmrTCW2jwZaIQY7Owp3bGSFBUUuIlV6mnbGSnhLkpTsDyVbM gn8JgyXisZwzWsDbfOcpFg0zFVS/P3gV5IvO8oyGYcELzndI7QdjSSS6Bf0UHXDY hcTOOMAkxOpoOCedMJtbDETxCCPe8DBnk+K4sPsZ6lzDFu+gnWBuUj1c2pPmUeaL 0qx5t0354QpxIw== -----END CERTIFICATE-----Generated at Tue Nov 4 10:46:42 2025 by rpki-client