$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: 63PjEAv7LkRI/7BqNTiXKkfT0BnyHpa+SOip5utYJBs= Subject key identifier: FD:27:B3:DE:F0:93:24:24:4D:A8:DA:E1:C8:FD:3A:D5:78:E9:AB:AE Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 01987F0A3413CCEF1DAE0C7E855E151244BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 1638 Signing time: Wed 06 Aug 2025 11:00:31 +0000 Manifest this update: Wed 06 Aug 2025 11:00:31 +0000 Manifest next update: Thu 07 Aug 2025 11:00:31 +0000 Files and hashes: 1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=) 2: 1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa (hash: gjJx45guChbhy0m/xEIBSHB06+zn2ylMhRT3oYLGiWM=) 3: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=) 4: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: pSdpM9xkP5VjtdK4U+cti3OqdQBDWEc7YBBz94UrXJg=) 5: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=) 6: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=) 7: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=) 8: QQr8dSdla33R9gVFyh83mzea4FI.roa (hash: 2OgrfSmCdtssSO9KY+C8q6T3dfpnZAJiAzm5n74cRu4=) 9: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=) 10: TzuzSGjWwV3OX8zX79IT4KZ2KbM.roa (hash: km0dEl7ZooKnmSTFDQzgqnm2fuMBjhQx4KgIive/k7E=) 11: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=) 12: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=) 13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=) 14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7f:0a:34:13:cc:ef:1d:ae:0c:7e:85:5e:15:12:44:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Aug 6 11:00:31 2025 GMT Not After : Aug 7 11:00:31 2025 GMT Subject: CN=fd27b3def09324244da8dae1c8fd3ad578e9abae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:8f:a4:da:e1:30:6e:8d:9f:02:e3:eb:3c: ad:91:16:53:af:a5:eb:e4:fe:88:2e:9f:8d:04:7b: 79:02:d0:4e:dd:69:23:8a:e3:28:75:60:68:8b:3d: 8c:22:b1:51:59:8c:90:e1:8c:d2:bb:a0:4d:4b:93: ed:40:90:c1:09:b2:4f:ed:41:47:4c:c1:09:ba:cb: 2b:9e:6a:eb:57:ab:47:3e:95:c6:4b:bb:8f:cc:63: 02:50:03:74:f7:a5:40:a2:86:00:c1:f9:68:31:1e: 74:b5:49:66:ce:f4:28:e5:5b:64:9f:29:48:a5:e1: f9:9a:59:29:9e:56:12:93:a7:05:57:85:99:91:a1: 0b:5c:10:88:7d:b9:33:c3:01:6d:a2:89:14:71:b3: b4:5b:a5:b2:35:72:a1:47:73:4b:89:ad:09:ff:58: 3e:cd:ab:3f:ce:f4:b2:0d:19:10:eb:8d:6f:4a:5a: bc:cb:02:9b:2a:bf:fd:ac:cf:c4:56:db:c5:ee:60: cf:8b:d2:be:8d:77:c8:59:6d:cc:12:89:fc:fc:ce: 9d:6c:b5:82:5a:2a:0f:7e:69:2f:f4:db:bc:8a:2d: aa:9f:ef:3c:83:b2:12:d4:db:91:e1:d2:31:ee:57: fa:89:1c:6b:90:92:26:e8:b2:38:d3:02:4e:bc:4c: 90:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:27:B3:DE:F0:93:24:24:4D:A8:DA:E1:C8:FD:3A:D5:78:E9:AB:AE X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c5:4e:a9:bb:cb:d6:3f:2c:02:39:54:82:ac:4d:5f:4b:80: 53:46:0e:db:40:bb:92:47:2a:ca:87:11:63:26:b3:70:da:ec: 39:fb:da:b0:f7:3e:1c:34:48:af:3a:fb:d5:30:16:4f:a9:19: a0:d9:63:fe:c6:16:d5:af:00:2b:81:19:00:5a:cb:48:c6:0e: 22:a8:d2:91:db:0b:ee:1d:00:e9:40:d3:18:fc:7f:a7:93:f7: e4:60:b6:44:43:b3:b0:10:65:5b:e3:f9:30:cb:5b:d3:07:6f: c0:ab:b3:ac:10:8e:04:98:cf:1d:4a:96:12:41:30:4b:ba:76: 98:c0:87:28:55:35:79:90:48:d3:07:7c:31:0b:46:94:08:4e: 52:b7:f5:02:ee:df:95:b4:8d:79:ae:f7:27:ab:10:96:c1:2b: 5e:21:19:30:0b:56:e2:ef:23:17:c1:88:f0:eb:d7:07:c9:f8: e9:25:7c:62:a0:5f:43:06:d2:ae:4c:5a:eb:75:61:60:a3:9e: 75:4b:9f:37:4d:6f:b1:b2:e9:60:af:f4:8f:24:09:ec:18:e9: cb:54:de:f4:44:31:b9:4d:fe:54:24:ee:74:56:07:15:e0:2a: b1:67:0f:de:08:15:35:c3:c0:7d:3c:e1:32:22:22:2b:0d:64: 52:d7:92:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh/CjQTzO8drgx+hV4VEkS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUwODA2MTEwMDMxWhcNMjUwODA3MTEwMDMxWjAzMTEwLwYDVQQD EyhmZDI3YjNkZWYwOTMyNDI0NGRhOGRhZTFjOGZkM2FkNTc4ZTlhYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aOPpNrhMG6NnwLj6zytkRZTr6Xr 5P6ILp+NBHt5AtBO3WkjiuModWBoiz2MIrFRWYyQ4YzSu6BNS5PtQJDBCbJP7UFH TMEJussrnmrrV6tHPpXGS7uPzGMCUAN096VAooYAwfloMR50tUlmzvQo5VtknylI peH5mlkpnlYSk6cFV4WZkaELXBCIfbkzwwFtookUcbO0W6WyNXKhR3NLia0J/1g+ zas/zvSyDRkQ641vSlq8ywKbKr/9rM/EVtvF7mDPi9K+jXfIWW3MEon8/M6dbLWC WioPfmkv9Nu8ii2qn+88g7IS1NuR4dIx7lf6iRxrkJIm6LI40wJOvEyQcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0ns97wkyQkTaja4cj9OtV46auuMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcVOqbvL 1j8sAjlUgqxNX0uAU0YO20C7kkcqyocRYyazcNrsOfvasPc+HDRIrzr71TAWT6kZ oNlj/sYW1a8AK4EZAFrLSMYOIqjSkdsL7h0A6UDTGPx/p5P35GC2REOzsBBlW+P5 MMtb0wdvwKuzrBCOBJjPHUqWEkEwS7p2mMCHKFU1eZBI0wd8MQtGlAhOUrf1Au7f lbSNea73J6sQlsErXiEZMAtW4u8jF8GI8OvXB8n46SV8YqBfQwbSrkxa63VhYKOe dUufN01vsbLpYK/0jyQJ7Bjpy1Te9EQxuU3+VCTudFYHFeAqsWcP3ggVNcPAfTzh MiIiKw1kUteS1g== -----END CERTIFICATE-----Generated at Wed Aug 6 14:08:06 2025 by rpki-client