$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: MElnLa+gOMMhCV6pBYwxzeJa1Gub5lhX/NLJYE1LRwY= Subject key identifier: D3:32:33:93:A4:20:7C:6B:68:79:FF:6C:AD:4C:06:BB:79:30:C8:4F Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 01A0C85911153B05E7289B97595B7ED0EAF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1A72 Signing time: Tue 22 Sep 2026 09:01:15 +0000 Manifest this update: Tue 22 Sep 2026 09:01:15 +0000 Manifest next update: Wed 23 Sep 2026 09:01:15 +0000 Files and hashes: 1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=) 2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: 68rtOmSPrMzPZVnjzgQTd7g1UvJu2TOnFfobX3AQDQs=) 3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=) 4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=) 5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=) 6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=) 7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=) 8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=) 9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=) 10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=) 11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=) 12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=) 13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=) 14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=) 15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=) 16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:59:11:15:3b:05:e7:28:9b:97:59:5b:7e:d0:ea:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Sep 22 09:01:15 2026 GMT Not After : Sep 23 09:01:15 2026 GMT Subject: CN=d3323393a4207c6b6879ff6cad4c06bb7930c84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:7e:02:64:39:21:83:dc:d6:c1:a8:31:ff: 2d:48:96:43:f8:75:5f:6a:25:3b:29:8f:96:31:d7: c9:b7:19:7e:02:17:53:ed:cb:f2:5c:09:94:36:8e: 15:8b:f3:83:cb:45:b2:77:2f:69:5c:51:3c:6a:aa: 5b:c4:fb:24:f1:11:bd:39:ef:1c:8c:7a:4c:7b:93: 9c:92:0d:48:13:32:82:7b:3f:f1:25:60:ba:c7:75: f2:dc:ff:f2:91:af:d7:b4:cb:78:26:ac:89:10:38: f5:fb:8f:f1:9b:48:a7:60:80:16:57:ee:1a:86:2e: cc:f2:3b:30:1b:77:27:ed:ae:a0:b2:eb:41:6b:57: e6:25:04:a7:c8:58:2c:d9:86:d7:38:f3:0c:40:4a: f7:c7:33:41:6c:7c:99:84:1e:5a:93:88:80:85:98: 2b:b1:e8:c8:74:fc:00:06:0c:22:ba:4e:a8:0a:80: 36:c3:84:8d:d7:15:e1:89:13:90:30:ec:7f:a5:0f: ea:d7:9e:33:4d:02:85:b0:be:82:b9:a2:14:04:f9: 37:0d:8f:52:f3:0c:d4:2b:91:00:18:1c:7d:07:e7: 20:45:7b:d1:cd:63:49:fe:82:fc:3c:9f:a9:21:ab: 58:14:93:3b:ec:be:63:43:20:53:ac:8b:09:cd:7c: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:32:33:93:A4:20:7C:6B:68:79:FF:6C:AD:4C:06:BB:79:30:C8:4F X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:76:9f:75:2f:6e:13:2d:0b:78:66:14:0a:55:d3:aa:52:ad: 98:1f:0c:db:b9:ae:02:5b:db:90:fd:01:24:54:49:68:24:72: 32:a4:fc:f5:3e:8d:2b:7d:8c:69:ca:64:d2:08:32:62:71:d2: c7:43:ee:52:ca:41:44:7e:66:86:91:dc:58:a2:a0:98:9d:89: b2:9f:0d:14:5a:23:98:21:71:ba:29:19:54:fc:c8:49:43:f8: b6:87:59:ae:e1:cc:2b:9c:ab:c1:25:ee:29:2b:12:89:69:0d: e6:62:e1:81:a4:fb:72:eb:c7:c8:d8:bb:09:95:12:50:df:a2: 21:24:6e:08:cf:79:c5:ab:0f:4d:ef:e9:42:aa:cf:e2:0d:da: 1b:b3:60:95:79:c0:a8:ad:77:62:2f:f5:29:7a:cd:71:f8:66: 52:44:5c:f1:e9:e8:04:c8:aa:d8:61:c1:5f:91:d4:23:5f:6d: af:30:19:7e:89:20:78:8d:6c:3c:50:36:8e:4b:1a:0b:86:c3: 56:ff:be:ae:c0:ec:9e:6e:d4:fa:97:6d:fc:5a:ad:81:d7:cc: 41:19:ce:56:ba:48:e1:8c:aa:71:e4:76:76:12:89:b7:b1:23: e1:91:4b:23:f0:4e:eb:46:af:f1:95:00:fe:6a:fd:f3:2c:9f: f2:02:af:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIWREVOwXnKJuXWVt+0Or0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwOTIyMDkwMTE1WhcNMjYwOTIzMDkwMTE1WjAzMTEwLwYDVQQD EyhkMzMyMzM5M2E0MjA3YzZiNjg3OWZmNmNhZDRjMDZiYjc5MzBjODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6x+AmQ5IYPc1sGoMf8tSJZD+HVf aiU7KY+WMdfJtxl+AhdT7cvyXAmUNo4Vi/ODy0Wydy9pXFE8aqpbxPsk8RG9Oe8c jHpMe5Ockg1IEzKCez/xJWC6x3Xy3P/yka/XtMt4JqyJEDj1+4/xm0inYIAWV+4a hi7M8jswG3cn7a6gsutBa1fmJQSnyFgs2YbXOPMMQEr3xzNBbHyZhB5ak4iAhZgr sejIdPwABgwiuk6oCoA2w4SN1xXhiROQMOx/pQ/q154zTQKFsL6CuaIUBPk3DY9S 8wzUK5EAGBx9B+cgRXvRzWNJ/oL8PJ+pIatYFJM77L5jQyBTrIsJzXxXKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMyM5OkIHxraHn/bK1MBrt5MMhPMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXafdS9u Ey0LeGYUClXTqlKtmB8M27muAlvbkP0BJFRJaCRyMqT89T6NK32Macpk0ggyYnHS x0PuUspBRH5mhpHcWKKgmJ2Jsp8NFFojmCFxuikZVPzISUP4todZruHMK5yrwSXu KSsSiWkN5mLhgaT7cuvHyNi7CZUSUN+iISRuCM95xasPTe/pQqrP4g3aG7NglXnA qK13Yi/1KXrNcfhmUkRc8enoBMiq2GHBX5HUI19trzAZfokgeI1sPFA2jksaC4bD Vv++rsDsnm7U+pdt/FqtgdfMQRnOVrpI4YyqceR2dhKJt7Ej4ZFLI/BO60av8ZUA /mr98yyf8gKvAQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:54:32 2026 by rpki-client