$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json) Hash identifier: P4M/h8EYOvpYhU6TPH77wwVsD3Qn6cbxKHSAIrIlfkQ= Subject key identifier: 90:A3:D6:D1:59:2D:4A:03:DD:A8:32:EC:84:58:90:40:17:83:F9:52 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019A4F2B1F448D2744ADE20BCF4308EB701C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft Manifest number: 1731 Signing time: Tue 04 Nov 2025 14:00:17 +0000 Manifest this update: Tue 04 Nov 2025 14:00:17 +0000 Manifest next update: Wed 05 Nov 2025 14:00:17 +0000 Files and hashes: 1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=) 2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: WiowxwYkDGGlqMY7y9ZOgVALBtASD1GLrrgA/Pj5P3k=) 3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=) 4: Dfhtm3wnVobQG_cxKx6XV-YuVZ0.roa (hash: J7uIopIFjTtbgOcYcub/DlKdoJsUFsxhBk7dyA8dGqI=) 5: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=) 6: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=) 7: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=) 8: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=) 9: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=) 10: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=) 11: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=) 12: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=) 13: Tpzepq58z_aU3I05rjgHZjdSF4A.roa (hash: TQoun3PaU74elifnUAi84oWKWkBYuJXkGa74wDgLRTc=) 14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=) 15: WfSl-86_mfoIJuScKSbJnl76Jx8.roa (hash: PkkzLM5m04N+NZaQE6iPdMZ6dxz1m5m2zTeTZ1W/PGk=) 16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=) 17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=) 18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=) 19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=) 20: bHy-mIa0N2PUBmcSaAbEEYNgoP4.roa (hash: iverEw7JZB7HHr8v7fULJa+xWlt0LPnIKcpn5P2mNxQ=) 21: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=) 22: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=) 23: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=) 24: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=) 25: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=) 26: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=) 27: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:1f:44:8d:27:44:ad:e2:0b:cf:43:08:eb:70:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Nov 4 14:00:17 2025 GMT Not After : Nov 5 14:00:17 2025 GMT Subject: CN=90a3d6d1592d4a03dda832ec845890401783f952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:e1:59:f5:90:bf:39:51:4c:e0:df:4b:24: 55:72:fa:bd:07:12:f7:16:45:c3:e8:79:4c:8d:fc: 3d:e2:ec:ef:27:61:86:1b:0b:1c:b4:6f:0f:00:c7: 69:82:f7:b9:ee:39:1f:09:f1:4b:e4:75:4b:ed:4e: 4e:67:aa:7a:74:f8:71:84:33:09:d2:1c:fc:7f:c1: 87:4d:68:0d:91:3c:2f:f4:9d:df:50:06:f1:41:84: 70:99:96:54:c3:c1:b9:e6:d5:b6:5f:3f:38:1b:9f: 16:d9:44:e3:52:8e:5f:4e:97:56:50:19:11:20:32: 73:98:30:49:0d:5e:e2:41:58:f7:b3:d4:a0:70:bb: 58:b5:d3:6e:e6:cc:e4:0f:54:e5:73:25:07:26:51: 3d:cb:02:b7:fa:86:3f:aa:91:59:8a:25:b3:e7:ba: c6:3d:6d:94:d4:14:1f:7b:d7:25:c5:2c:12:2a:fd: 59:86:66:3e:9a:62:c3:ad:43:2a:6d:99:0c:69:40: f2:fd:48:49:e3:ff:f6:dd:26:6e:d9:93:a6:c0:ea: 84:37:df:a2:d6:50:81:45:7b:f3:26:5e:33:71:1d: f6:9c:a0:d8:05:19:7e:de:2a:41:36:25:6d:8f:82: 69:d0:61:cd:56:76:86:1e:f0:87:d7:19:df:8e:7b: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:D6:D1:59:2D:4A:03:DD:A8:32:EC:84:58:90:40:17:83:F9:52 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:61:fe:5b:28:af:a4:f7:ef:9f:ba:ae:a4:22:f9:65:f1:45: a6:ec:38:21:fa:a7:c1:ce:06:d4:32:2b:b8:a6:b2:01:80:a9: e8:08:3f:d8:9a:90:9f:8c:79:87:32:bc:38:0c:7c:c3:20:72: b2:22:ff:5b:88:e2:39:be:9a:77:02:b3:5d:0c:80:c2:3e:47: 20:4c:92:ae:e8:94:57:09:18:c1:78:7e:87:a3:e2:e7:e0:53: b7:cb:74:fa:d0:45:cc:87:24:b4:1b:11:40:b9:1e:e7:91:36: 25:88:56:79:87:77:bd:a1:e0:37:17:15:1e:df:21:79:65:17: 54:65:86:86:fc:00:09:eb:07:a9:2d:85:de:e7:6c:81:8e:9c: 90:da:1f:11:92:c5:f5:7d:a4:32:cc:ef:bc:da:37:0d:70:7f: c0:a1:33:da:f7:40:9e:5a:a6:86:ba:21:b5:a8:a7:3f:ad:cf: 5e:83:23:0b:9e:d1:20:aa:f7:6a:a8:1e:fa:2d:c6:15:43:97: b7:c5:06:d5:44:7c:42:e8:bf:8d:31:69:4f:65:52:3b:d5:cc: e9:7c:ab:7f:f0:85:92:4f:37:f0:fe:a7:80:e6:d0:98:36:65: 3a:1d:ce:a8:f8:e3:9b:31:c9:2e:4c:e5:74:2e:cd:44:8f:e0: 1b:97:a2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKx9EjSdEreILz0MI63AcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjUxMTA0MTQwMDE3WhcNMjUxMTA1MTQwMDE3WjAzMTEwLwYDVQQD Eyg5MGEzZDZkMTU5MmQ0YTAzZGRhODMyZWM4NDU4OTA0MDE3ODNmOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyovhWfWQvzlRTODfSyRVcvq9BxL3 FkXD6HlMjfw94uzvJ2GGGwsctG8PAMdpgve57jkfCfFL5HVL7U5OZ6p6dPhxhDMJ 0hz8f8GHTWgNkTwv9J3fUAbxQYRwmZZUw8G55tW2Xz84G58W2UTjUo5fTpdWUBkR IDJzmDBJDV7iQVj3s9SgcLtYtdNu5szkD1TlcyUHJlE9ywK3+oY/qpFZiiWz57rG PW2U1BQfe9clxSwSKv1ZhmY+mmLDrUMqbZkMaUDy/UhJ4//23SZu2ZOmwOqEN9+i 1lCBRXvzJl4zcR32nKDYBRl+3ipBNiVtj4Jp0GHNVnaGHvCH1xnfjnsYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCj1tFZLUoD3agy7IRYkEAXg/lSMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWH+Wyiv pPfvn7qupCL5ZfFFpuw4Ifqnwc4G1DIruKayAYCp6Ag/2JqQn4x5hzK8OAx8wyBy siL/W4jiOb6adwKzXQyAwj5HIEySruiUVwkYwXh+h6Pi5+BTt8t0+tBFzIcktBsR QLke55E2JYhWeYd3vaHgNxcVHt8heWUXVGWGhvwACesHqS2F3udsgY6ckNofEZLF 9X2kMszvvNo3DXB/wKEz2vdAnlqmhrohtainP63PXoMjC57RIKr3aqge+i3GFUOX t8UG1UR8Qui/jTFpT2VSO9XM6Xyrf/CFkk838P6ngObQmDZlOh3OqPjjmzHJLkzl dC7NRI/gG5eiYg== -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:47 2025 by rpki-client