$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: VeriyGkk/aA1M7+vkPciLUU0ptCaQtQm4kVSHKQ6hE8= Subject key identifier: 87:75:5E:F5:6A:6B:3F:3D:CE:49:BB:1F:18:9C:21:AF:60:2C:EA:F6 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 01974EC5ED5440CDA7EF30D6CF79A88CD399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 1596 Signing time: Sun 08 Jun 2025 09:01:23 +0000 Manifest this update: Sun 08 Jun 2025 09:01:23 +0000 Manifest next update: Mon 09 Jun 2025 09:01:23 +0000 Files and hashes: 1: 0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa (hash: a8ZOlpawdj+woIZuCvEmwdR4gKs6qg0nNvaIeVFf0+o=) 2: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=) 3: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=) 4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: f0R7ewAZlvOVWwdu8/InWCXn+Jxixxw+/RlJpnbebqc=) 5: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=) 6: AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa (hash: Jv1vanIsUJEv2fbabmogBnj/mQ6LDnoYHz1QpK/aP2I=) 7: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=) 8: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=) 9: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=) 10: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=) 11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=) 12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=) 13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=) 14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=) 15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=) 16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=) 17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=) 18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4e:c5:ed:54:40:cd:a7:ef:30:d6:cf:79:a8:8c:d3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jun 8 09:01:23 2025 GMT Not After : Jun 9 09:01:23 2025 GMT Subject: CN=87755ef56a6b3f3dce49bb1f189c21af602ceaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:25:69:d6:55:d5:d3:eb:34:50:d8:77:b3: 1d:36:5f:63:a4:0f:2e:23:42:3e:4a:bd:be:fd:4f: 91:d5:be:5c:6a:84:67:10:c1:d4:13:59:03:cf:5e: 75:16:cf:41:d7:b1:4e:82:af:3f:46:a4:74:9c:a9: fc:b7:7f:4a:a8:7f:80:a0:a5:8d:d2:fe:3a:85:20: 27:dd:8f:aa:fe:40:26:4b:25:c5:c4:e7:e5:ee:77: 14:ba:a9:1c:c8:db:69:ca:1e:b1:f0:43:b8:86:f0: 50:b0:fc:42:f2:2b:df:44:d6:ea:b2:73:a4:15:ca: f0:51:97:65:c7:20:20:91:9e:f5:43:8c:58:8b:3c: 75:10:f2:ce:36:f5:63:7a:dc:6c:79:ed:ea:b1:c5: a2:3f:80:75:c4:eb:cc:7e:c8:33:7c:d8:d4:3e:23: 96:69:92:59:16:62:41:b5:87:e9:0f:1b:9e:dc:87: 22:e7:d7:51:24:9c:28:be:35:0f:c1:41:09:70:e7: 12:ee:8e:72:56:5d:c9:60:d3:f2:39:fa:9d:b4:fb: ca:3d:2d:0d:70:dc:2f:4f:a4:47:25:2e:52:01:45: 42:1e:e1:25:0c:d9:07:cb:06:b6:8a:10:ed:da:1e: 83:70:b7:fc:e2:48:6d:95:2c:2f:33:a7:ac:e8:d8: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:5E:F5:6A:6B:3F:3D:CE:49:BB:1F:18:9C:21:AF:60:2C:EA:F6 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:20:fb:d7:f3:df:25:8d:0c:e6:72:bb:4d:36:98:d0:c7:b3: 7c:0d:9c:31:fb:91:34:e1:86:12:85:0d:05:e3:e1:23:99:4c: 2b:0b:93:4b:9a:a9:43:d1:71:82:e9:90:4a:b3:ae:94:5a:37: 86:46:ee:b8:2a:e8:2c:7c:37:7c:7d:44:5e:60:57:7b:bf:55: ad:b7:11:27:b0:1c:ce:3a:5d:5e:e5:9f:77:b8:af:d3:46:d4: 70:60:43:c5:31:a3:0e:2d:59:f8:b8:21:1a:e8:ec:d0:b0:24: 0f:e8:69:37:ef:71:b1:1b:62:4f:d3:ac:f9:af:0d:81:36:0c: 15:7f:03:38:b5:01:96:7a:3c:5d:d9:e1:9c:24:08:8c:a3:f8: c8:a2:c8:78:c9:53:c8:1f:d4:5e:0a:64:45:6c:36:67:29:14: b8:13:40:0a:99:41:0e:53:bf:18:a8:36:38:36:58:27:c6:2e: c2:95:06:98:9d:92:fd:04:6b:9b:a6:80:4a:19:4a:21:d4:bf: d2:07:c1:1d:0f:78:b1:bf:a4:7e:6a:42:dc:36:b5:2c:cc:42: 36:8a:b1:5f:0b:6a:8f:4a:07:0c:4e:2c:b5:65:69:53:19:ec: 8b:38:21:bd:a2:17:c1:35:3c:84:45:d3:c5:19:06:08:90:4e: 9f:db:5e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdOxe1UQM2n7zDWz3mojNOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjUwNjA4MDkwMTIzWhcNMjUwNjA5MDkwMTIzWjAzMTEwLwYDVQQD Eyg4Nzc1NWVmNTZhNmIzZjNkY2U0OWJiMWYxODljMjFhZjYwMmNlYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V4ladZV1dPrNFDYd7MdNl9jpA8u I0I+Sr2+/U+R1b5caoRnEMHUE1kDz151Fs9B17FOgq8/RqR0nKn8t39KqH+AoKWN 0v46hSAn3Y+q/kAmSyXFxOfl7ncUuqkcyNtpyh6x8EO4hvBQsPxC8ivfRNbqsnOk FcrwUZdlxyAgkZ71Q4xYizx1EPLONvVjetxsee3qscWiP4B1xOvMfsgzfNjUPiOW aZJZFmJBtYfpDxue3Ici59dRJJwovjUPwUEJcOcS7o5yVl3JYNPyOfqdtPvKPS0N cNwvT6RHJS5SAUVCHuElDNkHywa2ihDt2h6DcLf84khtlSwvM6es6NiEOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId1XvVqaz89zkm7HxicIa9gLOr2MB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyD71/Pf JY0M5nK7TTaY0MezfA2cMfuRNOGGEoUNBePhI5lMKwuTS5qpQ9FxgumQSrOulFo3 hkbuuCroLHw3fH1EXmBXe79VrbcRJ7AczjpdXuWfd7iv00bUcGBDxTGjDi1Z+Lgh Gujs0LAkD+hpN+9xsRtiT9Os+a8NgTYMFX8DOLUBlno8XdnhnCQIjKP4yKLIeMlT yB/UXgpkRWw2ZykUuBNACplBDlO/GKg2ODZYJ8YuwpUGmJ2S/QRrm6aAShlKIdS/ 0gfBHQ94sb+kfmpC3Da1LMxCNoqxXwtqj0oHDE4stWVpUxnsizghvaIXwTU8hEXT xRkGCJBOn9te0Q== -----END CERTIFICATE-----Generated at Sun Jun 8 12:46:24 2025 by rpki-client