$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json) Hash identifier: j5XpfOjh+1TbeeoND0N99TwkPb9tpRbL8FhMixVydd8= Subject key identifier: 60:63:6C:AC:4B:84:9F:B4:47:E4:AB:02:1C:47:E7:5F:D8:FC:48:C1 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 0198469B4DCA291F350210E860BBF643D0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft Manifest number: 1621 Signing time: Sat 26 Jul 2025 12:00:39 +0000 Manifest this update: Sat 26 Jul 2025 12:00:39 +0000 Manifest next update: Sun 27 Jul 2025 12:00:39 +0000 Files and hashes: 1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=) 2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: 5jFVmilg/kRNQ7+oA7XwZJb/mwjm2H1USPMOd+w6S3U=) 3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=) 4: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=) 5: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=) 6: EpGUqveN8_iwqXtX3loQqZpefjQ.roa (hash: BK7p4b3/2gbXuD0eD7vqsFTJ+r23upun/RghpY97TiM=) 7: KHEz-UIy1itbvqjSN-exHkznw7M.roa (hash: mV8K8D3yuT/lnpk/k3Efi2aUQNdC5dfkApy2KMYktWo=) 8: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=) 9: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=) 10: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=) 11: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=) 12: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=) 13: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=) 14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=) 15: XNivPuYpwzsyBWSVK0UP_mTGSTM.roa (hash: b8FsxpaUdfRYc57L8BwR77E37GuFMW2GwS9TNBfbgIo=) 16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=) 17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=) 18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=) 19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=) 20: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=) 21: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=) 22: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=) 23: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=) 24: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=) 25: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=) 26: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:46:9b:4d:ca:29:1f:35:02:10:e8:60:bb:f6:43:d0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jul 26 12:00:39 2025 GMT Not After : Jul 27 12:00:39 2025 GMT Subject: CN=60636cac4b849fb447e4ab021c47e75fd8fc48c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:c2:a5:14:ef:3c:82:68:c8:cb:00:12:34: 4d:ca:86:ae:ad:20:dd:cf:a3:dd:04:17:f4:42:fc: cd:36:a2:fa:cd:8d:ac:3c:52:f2:76:79:a6:3c:f1: 96:6e:20:9f:12:02:75:e2:57:69:25:17:09:2b:b2: 9b:29:0c:2c:cf:2b:ed:76:81:8e:f6:b5:35:2c:75: e2:4a:c7:31:fe:5e:eb:b4:4d:22:ac:ed:17:31:0b: 32:cc:52:ca:fe:fa:aa:2d:d1:a4:16:81:49:45:44: a4:18:1e:b7:4e:06:a1:a2:2d:97:1d:57:20:a5:67: 62:d1:d0:55:d2:eb:79:0b:80:77:30:90:ab:35:e5: e9:02:74:b6:72:41:3c:6e:30:49:70:30:1a:f3:06: 34:6d:ea:66:54:7f:92:06:cf:84:c8:ef:24:f0:3f: a9:c1:4c:8f:9f:6f:e7:07:d9:e3:24:f2:47:8c:96: e0:4a:ee:e5:d2:23:9b:aa:5c:10:8f:c1:93:c5:3a: be:57:35:ea:0b:04:79:1e:14:e6:04:78:12:8b:3c: 1f:25:65:67:10:f1:a3:c3:3b:3c:3f:cc:b8:2b:bd: 2b:4f:da:4d:c6:45:43:13:b0:41:9f:a4:38:d2:9e: 28:92:67:71:cb:92:ec:96:41:95:3c:8b:a7:d8:4e: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:63:6C:AC:4B:84:9F:B4:47:E4:AB:02:1C:47:E7:5F:D8:FC:48:C1 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:28:11:4b:50:25:f2:db:a6:42:ad:a6:a5:22:e1:10:a3:96: 7d:e0:ef:99:70:2c:3b:43:05:e9:77:fc:e0:31:ce:4a:fd:6a: 6e:e8:4e:0d:f8:2c:52:95:cc:6d:7d:f0:23:f4:14:74:87:88: ca:4a:b8:50:76:4f:62:93:26:7a:53:ef:ae:7b:cb:05:5c:54: 81:bc:f9:ed:27:a3:1f:37:a2:50:80:50:5b:98:fb:1b:9c:98: 7a:c4:5f:08:2a:29:6d:94:f3:82:9d:18:38:bd:a3:28:f5:6d: 55:17:ee:08:7b:25:4e:22:ff:b1:8d:11:2a:99:33:38:bb:85: 5a:0f:91:9b:fd:49:ab:1b:6b:dd:bc:27:38:c1:9e:e9:1d:60: 67:11:b1:f2:cb:3b:56:25:f7:ec:1b:5f:bb:ef:d9:aa:f0:6c: 6f:13:8f:c4:ed:ef:35:2d:1c:c1:8c:d1:ae:5d:ce:f0:69:ab: 34:cf:39:12:51:78:ec:fd:a3:30:0f:c6:a7:81:23:fa:79:bd: 5d:ed:62:da:c8:04:f0:ee:7c:10:6c:77:80:72:91:bc:37:7e: 9c:32:c0:20:51:87:77:3a:ef:27:04:5b:ad:f8:f5:32:63:08: b2:87:d8:6d:bc:5a:38:1f:81:79:16:78:12:a6:92:05:f3:d0: 01:3c:ca:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhGm03KKR81AhDoYLv2Q9C7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjUwNzI2MTIwMDM5WhcNMjUwNzI3MTIwMDM5WjAzMTEwLwYDVQQD Eyg2MDYzNmNhYzRiODQ5ZmI0NDdlNGFiMDIxYzQ3ZTc1ZmQ4ZmM0OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfnCpRTvPIJoyMsAEjRNyoaurSDd z6PdBBf0QvzNNqL6zY2sPFLydnmmPPGWbiCfEgJ14ldpJRcJK7KbKQwszyvtdoGO 9rU1LHXiSscx/l7rtE0irO0XMQsyzFLK/vqqLdGkFoFJRUSkGB63Tgahoi2XHVcg pWdi0dBV0ut5C4B3MJCrNeXpAnS2ckE8bjBJcDAa8wY0bepmVH+SBs+EyO8k8D+p wUyPn2/nB9njJPJHjJbgSu7l0iObqlwQj8GTxTq+VzXqCwR5HhTmBHgSizwfJWVn EPGjwzs8P8y4K70rT9pNxkVDE7BBn6Q40p4okmdxy5LslkGVPIun2E5rVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBjbKxLhJ+0R+SrAhxH51/Y/EjBMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtygRS1Al 8tumQq2mpSLhEKOWfeDvmXAsO0MF6Xf84DHOSv1qbuhODfgsUpXMbX3wI/QUdIeI ykq4UHZPYpMmelPvrnvLBVxUgbz57SejHzeiUIBQW5j7G5yYesRfCCopbZTzgp0Y OL2jKPVtVRfuCHslTiL/sY0RKpkzOLuFWg+Rm/1Jqxtr3bwnOMGe6R1gZxGx8ss7 ViX37Btfu+/ZqvBsbxOPxO3vNS0cwYzRrl3O8GmrNM85ElF47P2jMA/Gp4Ej+nm9 Xe1i2sgE8O58EGx3gHKRvDd+nDLAIFGHdzrvJwRbrfj1MmMIsofYbbxaOB+BeRZ4 EqaSBfPQATzKeg== -----END CERTIFICATE-----Generated at Sat Jul 26 20:01:45 2025 by rpki-client