$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: 3r30K+9QMQVHDu6XFMAeYiG2dSR+15nHfxE25y/ZHrU= Subject key identifier: AE:9F:14:12:43:6C:4B:54:0A:4F:B1:9A:97:C8:CF:6D:08:25:81:04 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 01982BC94836AE5B039C070C435865959FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 160C Signing time: Mon 21 Jul 2025 07:01:08 +0000 Manifest this update: Mon 21 Jul 2025 07:01:08 +0000 Manifest next update: Tue 22 Jul 2025 07:01:08 +0000 Files and hashes: 1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=) 2: 1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa (hash: gjJx45guChbhy0m/xEIBSHB06+zn2ylMhRT3oYLGiWM=) 3: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=) 4: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: pSGzxNxAvSUeVbvrbHQn02vYgEeY5NG2kXGjfgkAySA=) 5: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=) 6: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=) 7: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=) 8: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=) 9: TzuzSGjWwV3OX8zX79IT4KZ2KbM.roa (hash: km0dEl7ZooKnmSTFDQzgqnm2fuMBjhQx4KgIive/k7E=) 10: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=) 11: iSq6cGAuS-ooYVrWA7niZMyPlFo.roa (hash: QyoIMqbJL1JJtOqvWLyfV9Y7kNoYmEY4hQTaduvFG90=) 12: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=) 13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=) 14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2b:c9:48:36:ae:5b:03:9c:07:0c:43:58:65:95:9f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Jul 21 07:01:08 2025 GMT Not After : Jul 22 07:01:08 2025 GMT Subject: CN=ae9f1412436c4b540a4fb19a97c8cf6d08258104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:72:26:2b:e8:63:ae:1d:00:7c:a0:b5:ce: ea:88:ba:e0:7b:0f:24:c8:6f:4c:22:06:ad:aa:67: d5:a5:5d:98:3a:24:7c:2e:2a:c2:0c:47:a0:24:dc: 4e:13:3b:c1:a1:b6:29:4a:29:d7:71:fb:61:f8:6a: 88:77:84:4b:0c:94:bb:89:9b:e7:8d:9c:10:88:9e: b9:e0:c9:2c:fa:85:77:b1:94:ee:e3:90:3d:08:30: 38:a4:cc:0f:24:fc:b2:5c:2b:a9:06:02:dc:c6:e3: 95:a1:c2:4b:19:05:df:2a:02:d4:7b:40:ec:8d:ac: 91:6e:de:50:26:d3:6e:9a:16:81:d7:b5:a0:5c:32: 78:e8:d4:d1:24:c2:4f:6d:20:0f:28:18:73:f2:a0: 77:e5:cc:b3:c1:ac:10:69:19:7a:ce:a0:59:8a:ed: c5:21:35:48:61:8c:3c:03:a0:53:9a:a4:ac:1f:f1: 83:7a:98:95:95:ec:1c:05:bb:8b:fd:95:5f:8d:78: 0f:7e:0b:e3:55:b9:d2:46:d0:3d:18:a7:af:af:c9: c0:f0:6c:62:24:93:f1:73:d3:d8:42:52:ff:26:92: 1b:69:71:49:90:b9:16:0b:e6:9e:15:32:f7:f1:32: 94:a1:4b:86:48:34:63:0c:c8:07:ac:9b:2c:2e:b3: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9F:14:12:43:6C:4B:54:0A:4F:B1:9A:97:C8:CF:6D:08:25:81:04 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:3b:32:da:8b:c0:cf:bb:14:07:32:38:21:88:dd:cd:e3:90: 59:7a:4c:5b:9e:03:7c:1c:42:dd:3a:4e:c4:b5:6c:6b:e4:12: 58:7d:18:fd:b6:7d:c4:93:d8:ea:2f:43:ac:fe:3d:40:0c:09: 98:0b:6e:62:62:b0:35:1d:f4:c5:36:13:90:b0:98:ad:94:cc: 4c:38:3c:6c:e0:84:d5:2d:83:8c:a5:17:39:0e:80:b0:f5:06: 9c:f5:3a:8c:3b:37:03:f1:6c:37:b4:59:a2:45:e7:7b:1c:eb: e6:10:c9:37:cc:1d:c6:02:0d:2e:bd:1a:32:0b:1d:0c:09:59: 2a:a3:aa:17:ec:98:dc:ed:fa:e5:3f:dc:43:10:10:92:82:5c: fd:0f:ef:a3:7e:0c:6a:16:68:dc:d9:1c:b3:3d:ab:85:f5:50: b4:05:d4:9a:46:e0:2e:94:3d:6e:39:8f:05:c4:9a:b4:c4:be: 0f:ba:4c:8e:ca:fa:d8:15:4f:e3:95:db:ef:08:cb:e7:bc:b3: e1:0d:af:a9:54:28:99:df:9c:c4:d6:de:fb:02:54:1f:a8:a8: 75:c6:ca:f4:47:0b:2e:e2:25:40:fe:e4:9d:54:52:22:16:2f: f0:11:a5:be:f8:9a:42:3a:31:d1:76:ef:58:7d:29:ef:7a:bc: da:22:1f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgryUg2rlsDnAcMQ1hllZ+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUwNzIxMDcwMTA4WhcNMjUwNzIyMDcwMTA4WjAzMTEwLwYDVQQD EyhhZTlmMTQxMjQzNmM0YjU0MGE0ZmIxOWE5N2M4Y2Y2ZDA4MjU4MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pNyJivoY64dAHygtc7qiLrgew8k yG9MIgatqmfVpV2YOiR8LirCDEegJNxOEzvBobYpSinXcfth+GqId4RLDJS7iZvn jZwQiJ654Mks+oV3sZTu45A9CDA4pMwPJPyyXCupBgLcxuOVocJLGQXfKgLUe0Ds jayRbt5QJtNumhaB17WgXDJ46NTRJMJPbSAPKBhz8qB35cyzwawQaRl6zqBZiu3F ITVIYYw8A6BTmqSsH/GDepiVlewcBbuL/ZVfjXgPfgvjVbnSRtA9GKevr8nA8Gxi JJPxc9PYQlL/JpIbaXFJkLkWC+aeFTL38TKUoUuGSDRjDMgHrJssLrNsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6fFBJDbEtUCk+xmpfIz20IJYEEMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjsy2ovA z7sUBzI4IYjdzeOQWXpMW54DfBxC3TpOxLVsa+QSWH0Y/bZ9xJPY6i9DrP49QAwJ mAtuYmKwNR30xTYTkLCYrZTMTDg8bOCE1S2DjKUXOQ6AsPUGnPU6jDs3A/FsN7RZ okXnexzr5hDJN8wdxgINLr0aMgsdDAlZKqOqF+yY3O365T/cQxAQkoJc/Q/vo34M ahZo3Nkcsz2rhfVQtAXUmkbgLpQ9bjmPBcSatMS+D7pMjsr62BVP45Xb7wjL57yz 4Q2vqVQomd+cxNbe+wJUH6iodcbK9EcLLuIlQP7knVRSIhYv8BGlvviaQjox0Xbv WH0p73q82iIfuA== -----END CERTIFICATE-----Generated at Mon Jul 21 12:26:17 2025 by rpki-client