$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: BOkPPoVf3hNjRdRwSH1N0BWdF0JRC6+jWOPd5pHnUjU= Subject key identifier: E1:9C:03:63:08:E2:C9:9E:1A:D7:13:5E:64:B4:40:72:C2:AE:78:EF Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 01988EEBA91F6BE5B1C8938BA774263DF54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 162C Signing time: Sat 09 Aug 2025 13:01:05 +0000 Manifest this update: Sat 09 Aug 2025 13:01:05 +0000 Manifest next update: Sun 10 Aug 2025 13:01:05 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: c2PoO2ZES8Ziq3eL4a+VOBCFMqtXmZ8BxEeJuVVmFgU=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) 15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8e:eb:a9:1f:6b:e5:b1:c8:93:8b:a7:74:26:3d:f5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Aug 9 13:01:05 2025 GMT Not After : Aug 10 13:01:05 2025 GMT Subject: CN=e19c036308e2c99e1ad7135e64b44072c2ae78ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:38:1b:2a:07:dd:7f:b5:f1:8a:d1:e0:aa:ed: bd:3a:6d:70:f4:41:e3:c5:2f:58:fb:78:9a:16:f4: e4:bc:7a:d3:75:39:91:59:20:48:5e:2d:8f:15:cb: d9:2d:c0:29:1c:de:73:69:bf:4e:dc:8e:10:02:da: 41:7c:f1:a6:77:e6:10:ad:2c:41:90:f0:0d:0a:a6: a2:16:19:cd:71:e9:6d:9c:0a:0e:94:01:b2:3d:80: 3a:13:2d:c4:26:1a:a4:62:69:00:61:c7:dd:43:e2: 6d:42:43:c2:ab:4a:a7:b7:f4:73:cd:a4:e9:24:5b: 77:48:23:0e:34:85:74:8a:6d:e0:1d:79:fc:21:4f: 00:82:88:de:21:33:02:3c:56:81:8b:a1:96:7b:6d: 47:1d:d0:bf:48:8c:c2:43:5d:4f:3d:47:af:47:72: 71:0e:39:a1:38:eb:d2:be:a3:37:cd:64:07:ac:bb: 8c:c3:98:8c:65:1b:4c:3a:05:6b:80:3e:24:ca:55: d0:7d:46:61:60:a2:58:9b:cd:55:7c:c6:65:96:8b: f0:3e:b2:f1:7a:4d:3f:15:39:4a:c0:17:b8:32:da: 76:e4:6c:29:7e:d1:20:71:18:3b:d9:92:9f:fd:7c: e6:e0:ab:e7:71:ca:15:80:da:8d:9c:5a:08:57:b6: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9C:03:63:08:E2:C9:9E:1A:D7:13:5E:64:B4:40:72:C2:AE:78:EF X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c5:df:e7:42:42:43:fa:bd:b9:24:ac:6c:7e:e4:e4:79:a2: 38:22:b2:a7:76:e0:ef:17:6b:61:54:52:92:84:1d:0c:14:1b: 08:d0:ee:cd:81:8d:92:be:c3:97:8e:bb:30:4b:ed:92:27:26: 33:d2:59:c3:16:1e:33:a9:67:0f:cf:d7:67:03:05:56:1c:a2: dd:ac:61:90:57:21:9b:d1:e1:18:fe:76:fc:fa:9a:df:69:56: b0:6b:95:a5:d6:49:1b:a8:d6:5b:fa:8e:75:17:d3:cc:2e:50: 9c:60:eb:22:dd:aa:b0:b4:44:a6:b4:dd:50:1b:8f:45:ee:59: 7e:34:45:04:ef:0a:32:90:11:e2:b8:c0:b2:d1:b5:69:12:ca: 8b:df:da:7f:86:82:0e:4c:27:f0:15:4b:b4:67:ef:dd:ec:52: a9:b5:14:61:ea:2b:30:3b:ac:eb:b6:2e:46:72:04:1e:df:f2: b5:e2:4e:09:29:ba:49:e9:c7:27:5b:2e:56:ae:87:af:48:84: 8d:3f:c5:0e:19:66:47:c8:dc:15:ee:10:05:a6:6c:9f:0e:13: 6f:82:df:0f:1a:6d:9e:6d:53:15:c0:05:8e:fe:d4:48:e3:b4: 67:64:2e:dc:bc:c0:ba:a1:24:46:a7:3d:85:8c:12:dc:f3:df: 90:4c:0d:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiO66kfa+WxyJOLp3QmPfVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwODA5MTMwMTA1WhcNMjUwODEwMTMwMTA1WjAzMTEwLwYDVQQD EyhlMTljMDM2MzA4ZTJjOTllMWFkNzEzNWU2NGI0NDA3MmMyYWU3OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DgbKgfdf7XxitHgqu29Om1w9EHj xS9Y+3iaFvTkvHrTdTmRWSBIXi2PFcvZLcApHN5zab9O3I4QAtpBfPGmd+YQrSxB kPANCqaiFhnNceltnAoOlAGyPYA6Ey3EJhqkYmkAYcfdQ+JtQkPCq0qnt/RzzaTp JFt3SCMONIV0im3gHXn8IU8AgojeITMCPFaBi6GWe21HHdC/SIzCQ11PPUevR3Jx DjmhOOvSvqM3zWQHrLuMw5iMZRtMOgVrgD4kylXQfUZhYKJYm81VfMZllovwPrLx ek0/FTlKwBe4Mtp25GwpftEgcRg72ZKf/Xzm4KvnccoVgNqNnFoIV7aQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGcA2MI4smeGtcTXmS0QHLCrnjvMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMXf50JC Q/q9uSSsbH7k5HmiOCKyp3bg7xdrYVRSkoQdDBQbCNDuzYGNkr7Dl467MEvtkicm M9JZwxYeM6lnD8/XZwMFVhyi3axhkFchm9HhGP52/Pqa32lWsGuVpdZJG6jWW/qO dRfTzC5QnGDrIt2qsLREprTdUBuPRe5ZfjRFBO8KMpAR4rjAstG1aRLKi9/af4aC Dkwn8BVLtGfv3exSqbUUYeorMDus67YuRnIEHt/yteJOCSm6SenHJ1suVq6Hr0iE jT/FDhlmR8jcFe4QBaZsnw4Tb4LfDxptnm1TFcAFjv7USOO0Z2Qu3LzAuqEkRqc9 hYwS3PPfkEwNCQ== -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:35 2025 by rpki-client