$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json) Hash identifier: cwDzVps+pzBY+obAoeK4fhyZ0YyYQK8ctdDSOIWrnP8= Subject key identifier: 10:8E:AF:E3:2B:0E:1A:C8:E8:2F:DC:8B:D4:3B:A0:B9:79:F7:C8:55 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019A4EF4FF36E10221C08DD4F6F9ABC05555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft Manifest number: 02B3 Signing time: Tue 04 Nov 2025 13:01:10 +0000 Manifest this update: Tue 04 Nov 2025 13:01:10 +0000 Manifest next update: Wed 05 Nov 2025 13:01:10 +0000 Files and hashes: 1: 2X78Dh7C7IK9HQpIdvex6cBM1zY.roa (hash: wipecr4RWsrjr1LobZ27g68/o0lGoPvjX6FqbG4G5vg=) 2: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=) 3: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=) 4: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=) 5: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: ZEqwjW/WVYbZnwECIe/+9y0mBoPW3ehLUPiZPkJaG2s=) 6: BtaWKpewp0t-jzKE-k6lFnfI0_c.roa (hash: DCOoNIe4oBMll7PycXcrB8Q8Pxkmj5k38ygxgzs+uLA=) 7: Ck51eA081sqLICziway3EXtym_k.roa (hash: 2MWWtOANjJSmkcfpJCe5Dn7HPUNug/jW3r3pG5kbs+E=) 8: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=) 9: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=) 10: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=) 11: JoUfo8H1U_tX7-0dKDqJaymZsXY.roa (hash: A9+Iuh6JRa8bCENv4yMaHkzJCpWN/TEw/VICLDubzQE=) 12: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=) 13: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=) 14: PsmRSosaJeQmzFSK3qy4_ABXXTU.roa (hash: Y7apUM55LCHcQ0UAKmKLhKFwZ/5OJTrUlZSSaxMEOws=) 15: QPW6iA9FJOgzaLE48bOh_0GVsTw.roa (hash: z4wyylTLX8zY2v0eX1XbK+ruego1UaaBEsWnBWgnpiE=) 16: R8N31IenIt0xkEBBTQjeM4Z87uM.roa (hash: Ic4nMSUJKsiGM69kIZMaWnmOqFQT0bgB9YdN5w98kIY=) 17: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=) 18: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=) 19: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=) 20: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=) 21: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (hash: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=) 22: bnbO6YG10PCmqlCsmyP50Fd_o4g.roa (hash: FN6GI1Kp7T9KjFIMw11eQNYoSIQT81c+97qaaX9eCCg=) 23: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=) 24: iuyN3NwXdsZlXThiwcR0LWVmoX4.roa (hash: 6R/JhKvtjb4C81R377gB5uUKDJijkYxAPU8kK0mmRJQ=) 25: orew-SZoJvPcTJUnedjnSBKBfbM.roa (hash: 8roQZwcvJWWnQRl6cSbABAI9tipciWJXmPX/Azw+0F8=) 26: uxc5vfve3Si08_1CchI8ifdgJPY.roa (hash: /SI48xsbMIADKemEHZ6Oy1FfH6dit3gQxDwLPx1S1UQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:ff:36:e1:02:21:c0:8d:d4:f6:f9:ab:c0:55:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Nov 4 13:01:10 2025 GMT Not After : Nov 5 13:01:10 2025 GMT Subject: CN=108eafe32b0e1ac8e82fdc8bd43ba0b979f7c855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:11:f3:51:03:f0:7c:e3:18:3d:23:e3:f5: ac:18:5c:fc:e2:e2:9d:a4:c3:d5:95:65:a3:36:ac: 83:76:53:f7:d8:8b:f6:7a:a4:1d:14:9a:c8:d2:ab: 48:b1:b7:43:56:25:96:74:d1:5d:e5:51:25:e4:c0: 88:b0:d8:af:ed:9f:ec:d1:1f:4e:dc:b8:26:6c:f8: d3:f2:e6:8f:9b:0d:9c:d2:f0:6a:ad:f4:72:78:ca: 8a:f5:39:94:53:eb:e9:2b:c1:f9:46:a6:91:6a:66: 62:f0:5e:ce:24:e3:7b:d5:9c:3f:64:bf:00:cf:27: 87:cc:b3:95:b4:29:ef:29:33:9a:5f:43:ae:67:d7: f3:07:82:e1:30:91:d0:c6:76:8d:e5:7d:e6:08:9c: 15:d6:3b:80:0a:5e:77:77:97:d6:4a:1a:57:61:30: f2:f9:db:a1:48:9c:e9:c6:aa:2d:e2:e4:54:60:86: 8f:a5:53:83:3b:df:67:18:8a:a4:6c:7f:ea:d8:9c: 62:a0:d2:fd:44:aa:51:86:1b:7f:fe:93:dc:90:7e: 3e:05:39:42:c0:8c:f3:90:6c:04:80:96:5d:fa:04: 13:16:1d:b0:a3:2d:c5:3b:79:25:c1:6f:12:22:68: 19:16:d6:32:2b:68:c6:e8:d9:0d:5a:28:58:ef:f2: 12:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8E:AF:E3:2B:0E:1A:C8:E8:2F:DC:8B:D4:3B:A0:B9:79:F7:C8:55 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e0:da:c1:4a:99:b8:ac:80:d4:43:90:a8:bd:11:3a:52:76: 0f:69:19:a4:b1:b1:ce:0e:54:3e:2a:ac:63:d5:0d:43:4e:08: 05:83:c5:c4:ef:4a:42:3b:8a:a3:6b:1c:83:10:27:0b:55:97: ab:47:b4:3b:0f:99:a0:e3:a1:c1:65:b5:64:73:af:ab:22:8d: e8:70:f8:f9:d0:6c:f1:13:d9:fb:ad:8e:44:01:20:e2:9a:d1: 17:b5:0b:83:f3:c3:4e:a8:b1:43:9b:e5:43:a3:9f:21:11:46: f8:9d:35:4a:12:49:7c:e1:6f:0e:fb:d1:f8:b2:10:2f:54:f6: 69:92:2b:9e:9a:cc:21:c4:61:43:4f:d4:05:83:3e:f8:95:84: 87:ea:ea:d4:2a:a1:bb:d4:2f:b0:4a:66:be:a2:01:f3:c3:16: 90:2a:4e:93:58:5c:0a:9e:1f:3c:f2:98:ac:ae:f8:b7:09:3c: 24:86:f0:c4:c2:cf:85:4e:b3:bf:14:30:f6:9d:ec:db:f6:a3: f4:de:9b:55:3a:1b:1e:95:b3:f5:47:fd:71:15:2d:4e:20:7c: 28:e7:f8:0e:ae:18:da:ea:59:7a:a0:43:f2:6b:fe:ca:1e:72: 3d:89:f3:b9:6b:fc:67:8e:05:6d:b6:04:20:c5:b6:d9:6c:d7: 2a:ce:da:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9P824QIhwI3U9vmrwFVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMTA0MTMwMTEwWhcNMjUxMTA1MTMwMTEwWjAzMTEwLwYDVQQD EygxMDhlYWZlMzJiMGUxYWM4ZTgyZmRjOGJkNDNiYTBiOTc5ZjdjODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nsR81ED8HzjGD0j4/WsGFz84uKd pMPVlWWjNqyDdlP32Iv2eqQdFJrI0qtIsbdDViWWdNFd5VEl5MCIsNiv7Z/s0R9O 3LgmbPjT8uaPmw2c0vBqrfRyeMqK9TmUU+vpK8H5RqaRamZi8F7OJON71Zw/ZL8A zyeHzLOVtCnvKTOaX0OuZ9fzB4LhMJHQxnaN5X3mCJwV1juACl53d5fWShpXYTDy +duhSJzpxqot4uRUYIaPpVODO99nGIqkbH/q2JxioNL9RKpRhht//pPckH4+BTlC wIzzkGwEgJZd+gQTFh2woy3FO3klwW8SImgZFtYyK2jG6NkNWihY7/ISdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCOr+MrDhrI6C/ci9Q7oLl598hVMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeDawUqZ uKyA1EOQqL0ROlJ2D2kZpLGxzg5UPiqsY9UNQ04IBYPFxO9KQjuKo2scgxAnC1WX q0e0Ow+ZoOOhwWW1ZHOvqyKN6HD4+dBs8RPZ+62ORAEg4prRF7ULg/PDTqixQ5vl Q6OfIRFG+J01ShJJfOFvDvvR+LIQL1T2aZIrnprMIcRhQ0/UBYM++JWEh+rq1Cqh u9QvsEpmvqIB88MWkCpOk1hcCp4fPPKYrK74twk8JIbwxMLPhU6zvxQw9p3s2/aj 9N6bVTobHpWz9Uf9cRUtTiB8KOf4Dq4Y2upZeqBD8mv+yh5yPYnzuWv8Z44FbbYE IMW22WzXKs7alg== -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:54 2025 by rpki-client