$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: 1HGYD72lq4rECI++OXq8NicwiwrkTU9pulZlEg8Mtx0= Subject key identifier: 5A:EB:F0:7F:DC:38:05:0E:2C:3E:D3:59:7C:CB:3F:AF:79:98:55:F8 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019845F6A39E0FE67903769F2EDD78E767F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1609 Signing time: Sat 26 Jul 2025 09:00:48 +0000 Manifest this update: Sat 26 Jul 2025 09:00:48 +0000 Manifest next update: Sun 27 Jul 2025 09:00:48 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: +VDnR+GwWcNPubKL614jcijaYBXs9bIlLmwoAvltG64=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:f6:a3:9e:0f:e6:79:03:76:9f:2e:dd:78:e7:67:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jul 26 09:00:48 2025 GMT Not After : Jul 27 09:00:48 2025 GMT Subject: CN=5aebf07fdc38050e2c3ed3597ccb3faf799855f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:6f:4a:43:cf:0c:28:d9:12:a9:7a:f0:87: df:69:43:2c:4a:2e:02:25:29:ba:db:b0:87:5a:57: fe:59:c4:5e:b4:90:2d:9b:64:93:cc:d8:2f:b6:74: 9b:72:a4:93:b2:ef:43:13:7b:96:a5:03:39:98:25: 5d:ab:7e:71:8b:98:03:57:4c:d3:ca:47:57:bf:dd: 5c:18:83:97:a8:ad:1e:7e:8d:93:58:45:20:11:94: 55:51:6c:b6:bb:86:69:b6:54:90:52:93:ac:61:a1: 5e:ad:24:37:e9:b7:4d:0a:86:ef:7e:a3:5a:1f:02: 6f:17:6f:d0:c9:79:3e:c3:6f:e5:39:61:1b:ef:b3: fe:b2:03:0a:f8:15:16:65:6f:d3:88:18:e2:b7:75: 59:00:b1:b1:16:3a:05:23:59:cf:c5:67:93:0c:1c: b9:9e:d8:13:a3:0d:4a:10:cc:da:64:ff:5d:c7:7c: 71:f4:eb:42:f5:50:f1:a8:22:f2:72:d5:38:3e:a8: f5:d9:dd:bf:1d:da:85:d7:38:1d:0b:ba:32:90:89: 01:20:54:c0:50:73:90:24:ca:b7:20:a6:88:0c:6e: c7:00:e7:07:3e:cb:c0:14:ba:46:32:d1:49:97:0a: bc:4d:02:e6:c4:41:a6:8c:38:ec:90:07:8b:b0:fc: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EB:F0:7F:DC:38:05:0E:2C:3E:D3:59:7C:CB:3F:AF:79:98:55:F8 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1f:07:cc:0e:eb:55:e5:1d:93:a7:5f:00:57:ba:44:e8:5b: 15:77:b4:27:6e:e8:99:0b:83:1b:90:3a:ec:9f:ae:a2:11:9b: 02:86:56:17:3c:a9:4e:4c:53:c4:f3:db:f0:c8:c3:4a:ea:2b: 8d:72:21:65:90:90:ae:d7:b6:df:36:e2:54:9a:32:fd:c1:3e: 41:49:d5:97:ee:3e:58:b2:4d:94:0b:77:46:11:04:65:1b:96: f8:ee:45:e7:c3:d7:1b:ee:b9:9c:81:41:31:8a:4e:40:f8:d3: 72:a9:a0:5a:89:71:ee:f2:a0:9b:19:94:c2:bb:79:48:5f:06: 55:77:58:16:52:01:88:b3:21:a2:d1:98:28:66:c9:aa:20:c4: bd:42:19:5f:54:53:39:d8:6d:4c:08:4f:a2:b5:ef:e8:ce:56: 82:94:05:78:ac:25:e2:96:c8:9d:73:01:aa:3b:03:43:2d:76: 46:8b:1e:7e:ca:29:79:46:f8:83:df:73:de:b0:f2:7b:e3:84: c1:cc:34:9a:0a:64:45:19:5b:58:48:b4:ba:be:18:98:12:fa: 5d:19:d1:a0:5e:c5:7a:cb:21:3c:b4:08:fe:a0:f1:59:f1:33: ed:ae:5b:51:39:1c:96:2f:85:cb:d9:4e:85:28:40:78:0a:6f: 65:0d:10:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhF9qOeD+Z5A3afLt1452f5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwNzI2MDkwMDQ4WhcNMjUwNzI3MDkwMDQ4WjAzMTEwLwYDVQQD Eyg1YWViZjA3ZmRjMzgwNTBlMmMzZWQzNTk3Y2NiM2ZhZjc5OTg1NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApppvSkPPDCjZEql68IffaUMsSi4C JSm627CHWlf+WcRetJAtm2STzNgvtnSbcqSTsu9DE3uWpQM5mCVdq35xi5gDV0zT ykdXv91cGIOXqK0efo2TWEUgEZRVUWy2u4ZptlSQUpOsYaFerSQ36bdNCobvfqNa HwJvF2/QyXk+w2/lOWEb77P+sgMK+BUWZW/TiBjit3VZALGxFjoFI1nPxWeTDBy5 ntgTow1KEMzaZP9dx3xx9OtC9VDxqCLyctU4Pqj12d2/HdqF1zgdC7oykIkBIFTA UHOQJMq3IKaIDG7HAOcHPsvAFLpGMtFJlwq8TQLmxEGmjDjskAeLsPwUfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrr8H/cOAUOLD7TWXzLP695mFX4MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB8HzA7r VeUdk6dfAFe6ROhbFXe0J27omQuDG5A67J+uohGbAoZWFzypTkxTxPPb8MjDSuor jXIhZZCQrte23zbiVJoy/cE+QUnVl+4+WLJNlAt3RhEEZRuW+O5F58PXG+65nIFB MYpOQPjTcqmgWolx7vKgmxmUwrt5SF8GVXdYFlIBiLMhotGYKGbJqiDEvUIZX1RT OdhtTAhPorXv6M5WgpQFeKwl4pbInXMBqjsDQy12RosefsopeUb4g99z3rDye+OE wcw0mgpkRRlbWEi0ur4YmBL6XRnRoF7FesshPLQI/qDxWfEz7a5bUTkcli+Fy9lO hShAeApvZQ0QbA== -----END CERTIFICATE-----Generated at Sat Jul 26 11:52:59 2025 by rpki-client