$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: KLrZMX1niPTlK+c/zNT1GlsEx0NJ1gLt2c3sArcONpk= Subject key identifier: A5:C8:23:92:D8:CA:C8:48:32:43:55:D8:36:03:C3:4F:D3:8D:49:B2 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019849D2F7F65D1922E5CBB8ACA39114D1B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 1618 Signing time: Sun 27 Jul 2025 03:00:19 +0000 Manifest this update: Sun 27 Jul 2025 03:00:19 +0000 Manifest next update: Mon 28 Jul 2025 03:00:19 +0000 Files and hashes: 1: 0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa (hash: a8ZOlpawdj+woIZuCvEmwdR4gKs6qg0nNvaIeVFf0+o=) 2: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=) 3: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=) 4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: nOCdLYj51o8Bv4YmgSyPj9X1g5xdue30G3ZeFn4GDSE=) 5: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=) 6: AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa (hash: Jv1vanIsUJEv2fbabmogBnj/mQ6LDnoYHz1QpK/aP2I=) 7: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=) 8: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=) 9: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=) 10: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=) 11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=) 12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=) 13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=) 14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=) 15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=) 16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=) 17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=) 18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:d2:f7:f6:5d:19:22:e5:cb:b8:ac:a3:91:14:d1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jul 27 03:00:19 2025 GMT Not After : Jul 28 03:00:19 2025 GMT Subject: CN=a5c82392d8cac848324355d83603c34fd38d49b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:fc:28:01:02:f5:e0:00:b1:39:fb:4a:f7: 8e:99:31:6e:6b:0a:56:a3:87:03:0f:cc:ed:f7:f5: ed:01:de:24:9b:67:5a:31:6a:25:9b:7d:ed:f7:75: 9a:90:80:8a:7a:7c:c5:2f:5a:24:6f:8c:dd:c2:09: 29:2e:eb:26:0f:bf:ea:58:2e:09:ea:5c:a4:1f:75: 28:34:ee:9e:99:ed:1f:5a:7f:80:7f:b7:de:e5:8f: c4:71:21:a3:16:dd:43:92:6f:44:69:a4:b1:b6:9d: fe:d5:fc:c9:21:50:7a:f4:be:1f:80:6c:e3:31:17: 6e:9c:41:d6:64:9a:14:2c:5c:2b:cb:e2:5d:74:d9: ae:6b:44:02:a4:2f:79:c8:27:19:3d:f6:54:f4:8a: 60:d4:0f:79:db:da:7c:fb:58:50:73:b7:62:98:66: 39:16:23:e5:93:8b:26:8f:5f:be:d9:08:1d:9f:58: f2:e7:a5:c9:4f:31:2f:f4:41:18:30:0e:63:d8:54: bd:e8:7f:43:f3:f2:20:7d:45:b3:b4:92:60:1e:53: 88:81:39:94:8e:31:55:ae:1f:9f:c7:d3:cd:a5:87: c1:14:85:34:5a:d2:9a:e2:eb:9e:59:1f:1c:43:5d: 1c:60:47:6d:7a:1e:2a:2b:e5:df:c9:a4:10:cc:21: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:23:92:D8:CA:C8:48:32:43:55:D8:36:03:C3:4F:D3:8D:49:B2 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a5:2c:ee:bd:d6:4f:21:2d:e0:33:24:50:ce:fe:50:de:d8: 0e:96:f3:94:5b:81:70:d3:ef:2b:0b:ea:7f:f2:13:73:45:e5: 39:78:f9:71:f7:da:e5:99:a2:b3:fc:a4:0a:9c:7c:cb:45:80: a1:f2:6d:ae:d9:37:00:e4:29:ee:6d:70:29:c5:e4:35:6e:ea: 76:07:3f:76:82:16:a4:8d:c1:58:84:e0:83:20:fb:64:87:d1: ac:86:1e:84:e3:28:52:e1:7d:36:34:19:f5:bf:78:7d:d3:73: f4:7e:59:8d:04:5f:a2:6b:3b:06:9e:e5:98:dc:dc:e4:3a:cd: 5e:82:11:30:6e:ba:a7:dd:6a:7e:d4:2d:7e:0a:9a:a3:3d:f9: be:3c:83:42:a8:fe:5f:c0:ab:8a:fc:5b:73:ff:2e:a4:21:87: 6a:0b:fe:a0:e4:0e:2b:ec:c1:94:f0:14:15:b4:01:44:4c:fd: f7:56:74:8d:0a:fb:68:29:e2:34:db:b1:5a:53:b5:2e:16:82: bf:ff:a0:a1:d6:bc:38:66:7b:b6:c4:93:74:b5:0e:ec:c5:d7: 14:5c:ac:af:30:3b:1b:c0:c4:54:de:ad:83:be:c7:48:a9:62: 37:15:16:35:f9:13:7b:a9:2e:79:30:f8:d9:aa:08:09:4f:bb: 5b:c9:30:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJ0vf2XRki5cu4rKORFNG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjUwNzI3MDMwMDE5WhcNMjUwNzI4MDMwMDE5WjAzMTEwLwYDVQQD EyhhNWM4MjM5MmQ4Y2FjODQ4MzI0MzU1ZDgzNjAzYzM0ZmQzOGQ0OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HD8KAEC9eAAsTn7SveOmTFuawpW o4cDD8zt9/XtAd4km2daMWolm33t93WakICKenzFL1okb4zdwgkpLusmD7/qWC4J 6lykH3UoNO6eme0fWn+Af7fe5Y/EcSGjFt1Dkm9EaaSxtp3+1fzJIVB69L4fgGzj MRdunEHWZJoULFwry+JddNmua0QCpC95yCcZPfZU9Ipg1A9529p8+1hQc7dimGY5 FiPlk4smj1++2Qgdn1jy56XJTzEv9EEYMA5j2FS96H9D8/IgfUWztJJgHlOIgTmU jjFVrh+fx9PNpYfBFIU0WtKa4uueWR8cQ10cYEdteh4qK+XfyaQQzCHPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXII5LYyshIMkNV2DYDw0/TjUmyMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaUs7r3W TyEt4DMkUM7+UN7YDpbzlFuBcNPvKwvqf/ITc0XlOXj5cffa5Zmis/ykCpx8y0WA ofJtrtk3AOQp7m1wKcXkNW7qdgc/doIWpI3BWITggyD7ZIfRrIYehOMoUuF9NjQZ 9b94fdNz9H5ZjQRfoms7Bp7lmNzc5DrNXoIRMG66p91qftQtfgqaoz35vjyDQqj+ X8Crivxbc/8upCGHagv+oOQOK+zBlPAUFbQBREz991Z0jQr7aCniNNuxWlO1LhaC v/+goda8OGZ7tsSTdLUO7MXXFFysrzA7G8DEVN6tg77HSKliNxUWNfkTe6kueTD4 2aoICU+7W8kw7g== -----END CERTIFICATE-----Generated at Sun Jul 27 07:53:31 2025 by rpki-client