$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: kNTOl83SdHJknM5XsI5X580aeAdsz8XTS50sQ25Y8No= Subject key identifier: 6D:9E:B8:3B:50:21:E9:EC:12:23:08:1F:E8:19:D5:BA:28:7D:D3:60 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019887A03575CAE6DD4CE179EA8ED9247EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 162B Signing time: Fri 08 Aug 2025 03:01:20 +0000 Manifest this update: Fri 08 Aug 2025 03:01:20 +0000 Manifest next update: Sat 09 Aug 2025 03:01:20 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: okIjepExWTTD6JOkyirbISbc92sxTgDbhFH40GRhyaQ=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:87:a0:35:75:ca:e6:dd:4c:e1:79:ea:8e:d9:24:7e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Aug 8 03:01:20 2025 GMT Not After : Aug 9 03:01:20 2025 GMT Subject: CN=6d9eb83b5021e9ec1223081fe819d5ba287dd360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:09:7f:7b:e2:2e:1c:2c:50:0e:e6:4d:3e: e3:dd:47:2b:c0:7c:0f:4a:f8:49:b8:cd:c9:6e:87: 79:20:68:60:b8:36:a2:d9:be:04:c5:07:8c:8f:0e: a6:1f:60:94:96:6b:0f:6d:f8:39:7a:47:a7:b8:1d: 40:bc:be:62:fa:ed:67:dd:47:cf:31:78:e4:1c:fe: fe:6f:c3:b9:35:dd:1b:da:a5:00:88:2e:3a:68:50: c0:a1:06:d1:6e:12:23:bf:0d:87:35:82:94:2a:61: 58:20:42:a6:a3:70:3b:93:4c:ae:c0:73:df:a1:9e: 97:b8:bd:41:4c:4d:0c:6a:9e:e7:5a:30:b6:b0:ec: 3e:33:6c:b7:35:ca:c3:59:7f:0a:ed:4a:26:7f:42: 46:2e:cc:27:b2:ec:9d:b2:19:82:b9:62:04:b9:6d: d9:3f:42:17:5e:e3:5d:b6:52:c1:48:25:82:0c:18: f5:1a:b8:df:8b:ba:3e:99:fa:ff:92:eb:73:f7:37: 30:d8:e5:ed:f1:fb:a9:97:3b:dc:7e:6b:d8:d0:30: d3:3f:4a:14:6d:af:36:58:57:ed:dc:e8:69:f5:4f: 0b:a6:9e:97:07:3f:b9:a6:5b:b0:94:3a:45:9f:af: 91:09:2e:72:b0:b4:ae:dd:d4:1d:95:ff:be:49:43: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9E:B8:3B:50:21:E9:EC:12:23:08:1F:E8:19:D5:BA:28:7D:D3:60 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b8:9f:c0:19:98:3c:a3:92:e0:ad:1a:a5:9f:49:1a:c9:43: 8c:52:64:4f:8e:20:62:6c:0f:8c:25:24:ef:41:9a:f8:f3:a2: d7:4b:3f:ad:16:60:48:94:a6:11:27:5d:ae:a6:7a:f8:e8:a6: a2:1d:b1:93:96:75:b2:3b:59:25:7b:eb:16:54:91:27:92:a4: 8e:e2:ea:cf:66:77:ba:fa:ad:ac:9d:0a:6d:93:e6:b0:84:ef: 81:e6:d5:6a:ee:6f:9e:05:08:22:3c:29:4b:6e:04:00:6f:5f: b1:50:b4:84:f6:ad:64:98:c5:80:22:38:2b:bc:72:27:87:fb: d8:27:da:5f:53:fd:99:e9:bc:26:6c:ab:c0:36:50:55:66:43: d3:59:ad:7b:c0:1d:84:d8:ee:de:3e:13:67:9e:d9:12:39:0d: f9:5b:b0:3f:b4:fb:21:4f:00:8c:20:36:00:f3:3f:07:b7:c3: a1:91:d5:9e:2f:ae:38:59:b4:ad:4a:db:fb:5c:fe:41:9a:83: a7:a3:e4:a4:96:46:01:64:fc:d6:4e:7e:4d:11:3c:2a:27:34: 55:ae:71:e4:95:55:76:64:b2:15:8e:4c:bb:82:cf:b5:6b:50: 35:a2:69:56:e8:ef:23:ac:da:3b:17:30:22:32:39:f2:51:f5: d8:3c:42:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiHoDV1yubdTOF56o7ZJH6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwODA4MDMwMTIwWhcNMjUwODA5MDMwMTIwWjAzMTEwLwYDVQQD Eyg2ZDllYjgzYjUwMjFlOWVjMTIyMzA4MWZlODE5ZDViYTI4N2RkMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBYJf3viLhwsUA7mTT7j3UcrwHwP SvhJuM3Jbod5IGhguDai2b4ExQeMjw6mH2CUlmsPbfg5ekenuB1AvL5i+u1n3UfP MXjkHP7+b8O5Nd0b2qUAiC46aFDAoQbRbhIjvw2HNYKUKmFYIEKmo3A7k0yuwHPf oZ6XuL1BTE0Map7nWjC2sOw+M2y3NcrDWX8K7Uomf0JGLswnsuydshmCuWIEuW3Z P0IXXuNdtlLBSCWCDBj1Grjfi7o+mfr/kutz9zcw2OXt8fuplzvcfmvY0DDTP0oU ba82WFft3Ohp9U8Lpp6XBz+5pluwlDpFn6+RCS5ysLSu3dQdlf++SUO5yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2euDtQIensEiMIH+gZ1boofdNgMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrifwBmY PKOS4K0apZ9JGslDjFJkT44gYmwPjCUk70Ga+POi10s/rRZgSJSmESddrqZ6+Oim oh2xk5Z1sjtZJXvrFlSRJ5KkjuLqz2Z3uvqtrJ0KbZPmsITvgebVau5vngUIIjwp S24EAG9fsVC0hPatZJjFgCI4K7xyJ4f72CfaX1P9mem8JmyrwDZQVWZD01mte8Ad hNju3j4TZ57ZEjkN+VuwP7T7IU8AjCA2APM/B7fDoZHVni+uOFm0rUrb+1z+QZqD p6PkpJZGAWT81k5+TRE8Kic0Va5x5JVVdmSyFY5Mu4LPtWtQNaJpVujvI6zaOxcw IjI58lH12DxCmg== -----END CERTIFICATE-----Generated at Fri Aug 8 12:59:00 2025 by rpki-client