$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft File: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft (raw, json) Hash identifier: ZsU/zjGelyiuaB8abV+HsfnjyzGjLdgUR/v90BITfPw= Subject key identifier: 71:51:9E:84:2D:2B:1D:0A:81:CE:D6:5D:99:2C:A5:87:F7:E5:D0:95 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 01983FBD79CB71FBD9A579EBEFFE155B79F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft Manifest number: 0864 Signing time: Fri 25 Jul 2025 04:00:38 +0000 Manifest this update: Fri 25 Jul 2025 04:00:38 +0000 Manifest next update: Sat 26 Jul 2025 04:00:38 +0000 Files and hashes: 1: 1oQvv0jSoSu53ss0BELp3o4jFmM.roa (hash: I2MUurYubFmbZ7GZ8bLKTpYRYZB3nGjsRDVL/GxzZxA=) 2: 1upwVvOth0ESwzIfWwpLuCD_3Es.roa (hash: 6LIM0TJ502zyJgxqFVPqSxya65Y/9B+s8bx0dBkgTEM=) 3: 3uRumfjw_VNGN2REHhoEdbfv8Q4.roa (hash: EtjitrJqAc6g+S42UzHgJmm7oOPTI5kPog/yLqbDlSw=) 4: 5CMiZU4pAmiJpfvxBLsG5vubIRA.roa (hash: +oEkF/3njM8s7nBWqWOxZXJl1ZryJZVB3JA4uLNAhxw=) 5: 5VfBBY8o-FF5RY7s0zaWFHorhdI.roa (hash: MEJ7BA63gOy4ZsbxMVinMlFma6agN7MnA7HJhj46ixE=) 6: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl (hash: AcuZ37rIodlDW9/Negs+EAQim6hIeYnxMw71CckDbg0=) 7: CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa (hash: sn3GvdltPLasZQw3sHAj9RA9PaVADblnC7vtnVoU5qc=) 8: JPT84J8sgcKOXjYFNH6TAuUvNk4.roa (hash: e3bD4e8Uvkqff5stQpbUdZdhMmIlcTkZivV1M7IJw9U=) 9: NpWIoMyjqyMb_Zaw1o9kw3JDDi4.roa (hash: wMXhMaV/pVnTHbpuxwyjif970THZSh4/vwdthTw+gqc=) 10: RmnXvYZt-mmbFhnuP7k2fQRabUA.roa (hash: gHLzUci7yfQ24zvXoIAPAC4wOBAEeqj8cAzMrTtaW54=) 11: W6vwiq-voKk2QAWV9ym9B7kGas4.roa (hash: 7ovXfRXZRQGLha60QudJ3CQy5egOSDRax/h7CJvWjlE=) 12: ZhZRZT8ZPo8M2a9MIYRNwZyhQ8w.roa (hash: HBtX5WX5rNstuEn0JYCNOPxyzZKZRsOHcscK1aN6ogc=) 13: aIYlg9Z6r6J1_C5VfiKtlldGRrI.roa (hash: 1xF0uCQBhw+1hm6OeRG2O6mFUnL8nVyDlkoB9bdADr8=) 14: fMzNpGVWR81PY-itrM6ZWrxbxR4.roa (hash: JzHaCWidPtRsdVXuThinCzpkb7ljHyzzEpjdEgADrSY=) 15: juN5scO2Se5ibgJWhuefFYhuow8.roa (hash: 7FUVxUG+oCbfQXWhPZm065agLV2zBdGhwYNN6FPH3LM=) 16: l0dBWs1YlE17AhstVW2VWnIvp0s.roa (hash: iWBATYIpP0dSJktBmp9NkaeXH+SClXQSdpBWrPAbzlM=) 17: ob2zBPNLtLFzxUuttNyvYQ_i-K0.roa (hash: ahdcq6qcFuk7beprX/QZiv/lO1jQP9BjCIRZOB7i01o=) 18: ocjyC2jwDA6Rk88oFGWfNBa6O7c.roa (hash: up4NQEqOBhPBKs8ybW1tNgCMgHUS+uI7TPV3nH5jRFI=) 19: p52ECLHacG3z-Gg5eipSNQK8sHg.roa (hash: iCIbKxHFKwisNq/0rdSKxF6SJ72XE0XsI1+USxkuvdQ=) 20: qvbIy1Yavbj0233wHe2zrZHk0AA.roa (hash: DKGDUdsoqfrfl7IYExYBHFE+EjcRxcEIzjOcF3VhFhQ=) 21: t4rkzqg5UT0OMi6WCldDkMgj1hs.roa (hash: xcRmLqo3j2wiDp8nBGiqG57D8mrRI/rgqKQBAn5LHRg=) 22: t5YmhSpQh7hJVJ9rbPKosrK995g.roa (hash: 46VBCXnM3N7gfr2V6b7t3B2sNT8I6Oa9hSbR5q+FAqY=) 23: vfHbIoTnUxhnAwnrFKAEBgGqbIw.roa (hash: m840ACktEyZoGVV96T6Ly3VBkVNyCX1wXuDPZajskuA=) 24: xc-ziwt5L4IQBhtwr3KHv3MBn_E.roa (hash: Jan/MaJ/3rtTJkw1eayxGH+OJS2zK9UT117u0//wABw=) 25: xpX6hcRMPz87CNu8WZKKgI6VmHc.roa (hash: 2GtFRUTOon6G4VNM6WyrbperIlxaZ7rGbYCzZWHktHU=) 26: yrw-APdDdrKZbC_GG5pC5x9IuaE.roa (hash: 1L4TnTdUXnzWd1fgMXk6voGBQgtXreTq+fSZW4h+FH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3f:bd:79:cb:71:fb:d9:a5:79:eb:ef:fe:15:5b:79:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jul 25 04:00:38 2025 GMT Not After : Jul 26 04:00:38 2025 GMT Subject: CN=71519e842d2b1d0a81ced65d992ca587f7e5d095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:a2:9b:6c:1a:2f:6b:18:23:77:c5:8d:4c: 61:8e:34:0a:3b:98:8f:74:75:37:2a:60:5f:86:a4: ea:25:3c:f9:40:a8:5d:7d:c5:83:4b:91:93:1c:11: d8:3d:62:ff:33:98:cf:74:16:28:01:1a:b6:30:16: 0b:85:cc:d0:3a:3f:61:85:96:4a:61:c4:3a:45:48: d7:91:8f:38:62:4f:44:f2:79:22:eb:04:5b:54:da: 7e:2e:f2:d7:ae:1a:33:cf:5e:56:03:c9:02:bb:15: a9:af:3f:bc:b6:77:b8:cc:ad:eb:fb:c2:dd:a0:1e: 58:4e:cd:ce:02:f4:c9:12:7d:c4:6f:49:a7:19:b9: 5f:20:cd:60:64:b0:47:80:d6:22:fd:da:be:76:45: 2c:77:9d:74:cd:50:f7:c2:35:c2:27:41:73:a4:b3: aa:3e:8f:a3:e5:fe:98:7a:0e:26:a9:b1:d6:5d:3a: e7:af:03:e1:9e:61:73:ff:f8:b5:1a:d4:13:8f:f3: 8b:fb:28:32:1c:16:22:2c:de:b9:39:ed:34:5c:0b: 6e:f5:0a:92:62:ef:73:d9:15:58:5a:1b:3a:ab:0e: 01:31:89:97:86:16:77:70:39:fd:8a:8b:c5:b6:33: cb:0c:7c:84:68:cd:98:1d:98:5b:9a:21:43:01:50: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:51:9E:84:2D:2B:1D:0A:81:CE:D6:5D:99:2C:A5:87:F7:E5:D0:95 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:46:21:40:52:bf:f4:9f:02:67:46:42:80:1d:24:17:b6:9b: b2:bc:1a:41:61:ac:80:1a:af:87:08:e4:c9:ae:fa:fc:b2:05: 1b:6d:1d:21:c9:f0:3b:51:b9:ea:c2:02:9b:89:ba:a0:13:28: f2:51:66:de:b6:e0:f1:04:c8:41:dd:d9:ee:70:6e:ad:ba:fd: 02:7d:43:ec:db:f9:39:6e:ee:da:23:db:27:20:7e:7f:9e:ec: c3:84:9a:79:66:cf:89:6d:89:90:1e:ea:dd:02:2d:62:dc:09: 2c:0c:32:48:60:5a:08:64:92:23:2a:77:c7:be:1f:8b:6a:f2: 63:f5:19:ea:5a:a4:a7:aa:77:98:a0:e8:f9:9a:45:f3:40:0a: 50:3f:1d:9c:11:28:86:e3:70:fb:52:f5:b1:af:6d:6f:44:b8: d7:f1:dd:fd:7c:72:8f:2b:27:0f:fa:cb:12:c1:b6:23:6f:2f: 95:9d:1d:29:03:af:b7:4f:19:4a:e8:82:ad:3b:ca:ec:6a:8e: 62:e7:df:a2:88:ed:9c:44:d3:0e:fc:15:86:2c:40:13:bc:79: 9e:e3:09:61:80:7c:4c:38:6b:9c:ac:61:e1:8c:35:d6:e2:9e: 2f:9d:f0:a9:07:17:76:aa:2f:a1:54:84:4e:32:d1:0e:5c:46: e9:d2:a3:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg/vXnLcfvZpXnr7/4VW3n2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUwNzI1MDQwMDM4WhcNMjUwNzI2MDQwMDM4WjAzMTEwLwYDVQQD Eyg3MTUxOWU4NDJkMmIxZDBhODFjZWQ2NWQ5OTJjYTU4N2Y3ZTVkMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXmim2waL2sYI3fFjUxhjjQKO5iP dHU3KmBfhqTqJTz5QKhdfcWDS5GTHBHYPWL/M5jPdBYoARq2MBYLhczQOj9hhZZK YcQ6RUjXkY84Yk9E8nki6wRbVNp+LvLXrhozz15WA8kCuxWprz+8tne4zK3r+8Ld oB5YTs3OAvTJEn3Eb0mnGblfIM1gZLBHgNYi/dq+dkUsd510zVD3wjXCJ0FzpLOq Po+j5f6Yeg4mqbHWXTrnrwPhnmFz//i1GtQTj/OL+ygyHBYiLN65Oe00XAtu9QqS Yu9z2RVYWhs6qw4BMYmXhhZ3cDn9iovFtjPLDHyEaM2YHZhbmiFDAVBWiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFRnoQtKx0Kgc7WXZkspYf35dCVMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkYhQFK/ 9J8CZ0ZCgB0kF7absrwaQWGsgBqvhwjkya76/LIFG20dIcnwO1G56sICm4m6oBMo 8lFm3rbg8QTIQd3Z7nBurbr9An1D7Nv5OW7u2iPbJyB+f57sw4SaeWbPiW2JkB7q 3QItYtwJLAwySGBaCGSSIyp3x74fi2ryY/UZ6lqkp6p3mKDo+ZpF80AKUD8dnBEo huNw+1L1sa9tb0S41/Hd/XxyjysnD/rLEsG2I28vlZ0dKQOvt08ZSuiCrTvK7GqO YuffoojtnETTDvwVhixAE7x5nuMJYYB8TDhrnKxh4Yw11uKeL53wqQcXdqovoVSE TjLRDlxG6dKj8A== -----END CERTIFICATE-----Generated at Fri Jul 25 07:08:04 2025 by rpki-client