$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: Snbo+0Bh6ed3Duawxh9H3a5dXOeqnyPW9tx+YYWE2b0= Subject key identifier: FF:81:BF:12:D1:2A:94:AB:07:E3:9E:FB:27:23:E2:CC:56:4D:F5:47 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019A1AD0DADA3638A33E1E85EF8E4E6A3E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 1714 Signing time: Sat 25 Oct 2025 10:01:26 +0000 Manifest this update: Sat 25 Oct 2025 10:01:26 +0000 Manifest next update: Sun 26 Oct 2025 10:01:26 +0000 Files and hashes: 1: 8G17Uj9AIXGxXZ66yfJHOLsxPo8.roa (hash: qU/6T++9LyINzVzJ8CV6sT+MweAHyZF0SIUnm5bIRYg=) 2: Hrw24NCuWIUCpkj_ixSA3ykRPr4.roa (hash: EL86DxycBZAbHkapsC+FVYde7DJDbg6IvsLrlIhK4Mg=) 3: HzkqLbs1liYqOOnORyYsONDUWCk.roa (hash: uXYRvHJ6LJgN5jTlxHsTjXJyetqQoAXwubqH0//UAWg=) 4: N8YU9P6afQ3l1ax9yLIDe6D0fIk.roa (hash: EU77Dk5F7GrtkJ85p7yvIHvzXNj6aNgdhN+Tn5j+zs0=) 5: NxaezdRi3ofV0Ea6FtmKMCg4Xno.roa (hash: OxfdQ+cdMI49CYY0Q1jeMkKHuJPcs1w/NoTD4eAZ2MA=) 6: TO40FjbIwGNQNwtqPj8kwc1ZTTA.roa (hash: CxCIaev63Gqq5Rl8++kPvXMtj4T/C8ceRG4EudeHUmA=) 7: g0-0qeR0lc1LsLxknNYR3dnvEBA.roa (hash: EXsDcqkvYGuTEAGM2nI2WIcOnpMXlYj8og8Md2Id59Q=) 8: gG0DNUP64NYeP7QJN-nJ3HYb71o.roa (hash: TdYqV2WNRnqL2XDaa0pYRnVh8SMGr720PVd0f0ZigsI=) 9: jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa (hash: 4TEbxdiinYCpm4mycPqOwDmBBxQQxUxqZfGO0t4kbOg=) 10: oRsHwl0lqDdQsW8I1c5igLUyNzs.roa (hash: 8g9A+Hdue1idAErOv1qWZKgEKPMgG/A4+RlDqNfgnkI=) 11: oreGjQwv74g6OpxObQTCv-MnU1M.roa (hash: d1IJwSRdqQjA5VA/VLC7+miffsmnB8Nxer6G7ClHfMc=) 12: p2_R78qfiRDhzvxPsVGCBtVmaJE.roa (hash: AfONkYdMNZkN9Er/D4pbys1uxPQQYlJm+sdpKa5QxNI=) 13: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: MrjAIlHICBb2WiAquIHullVIi10I12avm7xzN2luXaU=) 14: wjy1-qmg6rYR0UilXbPOrktmKnc.roa (hash: OCHLZL4VOIDtWxajhki14b+EkeW6juZq6cOYKpzs8QI=) 15: xMcgE5el8x0M_rTEbVyhY3X3x1c.roa (hash: PGLJrZJLBXcLan5LC1jzJXTcMWQ+drrbyWZOiA3GgNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1a:d0:da:da:36:38:a3:3e:1e:85:ef:8e:4e:6a:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Oct 25 10:01:26 2025 GMT Not After : Oct 26 10:01:26 2025 GMT Subject: CN=ff81bf12d12a94ab07e39efb2723e2cc564df547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:a1:66:36:c9:8a:81:bb:5c:9b:79:78:e1: 50:ae:a0:c6:02:2a:15:38:97:12:3d:45:c1:2f:79: a7:aa:42:0f:8f:56:06:70:08:77:60:71:ad:af:71: 19:0f:7e:f7:70:97:6e:f2:38:8b:a1:c4:a6:79:20: b3:41:d6:bc:78:8f:34:be:1d:89:8a:ce:40:3c:2c: 55:53:31:2e:38:26:37:84:5c:69:52:7b:54:1c:26: d3:22:64:06:19:af:8b:28:dc:2b:34:5d:c0:9d:3b: 9f:15:bb:dc:3d:1b:db:bb:db:f8:4a:81:1a:3d:ad: 63:90:54:5a:20:ad:fc:c8:15:3d:bb:48:0c:04:70: 42:13:63:05:5a:3a:6f:f9:fc:f2:72:dd:9c:39:1d: a2:f3:a9:bb:84:07:3a:4f:03:97:20:1e:8c:11:79: e6:8a:14:f0:6f:6b:4a:3f:07:68:ab:90:db:b0:92: 94:29:02:ef:2e:76:32:25:b7:54:ba:73:95:b0:a9: 2f:f8:65:f6:3a:86:15:4e:64:fa:1f:7e:58:14:ee: 31:e7:37:af:ed:d7:54:d3:d7:da:b6:00:12:09:90: d8:72:8c:b2:8c:ed:92:2d:22:20:ec:66:6c:92:b2: 05:e6:7f:c1:7c:d6:33:66:c0:35:1b:c8:42:bc:23: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:81:BF:12:D1:2A:94:AB:07:E3:9E:FB:27:23:E2:CC:56:4D:F5:47 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f7:fb:ce:bc:92:f2:f9:be:4c:74:a3:3b:46:1f:05:79:9c: 50:91:d9:1f:ee:a9:9b:b8:2a:76:a2:36:9b:50:eb:cb:0b:1a: 11:bd:d1:ea:e3:87:ed:0c:a9:4d:b4:9b:5e:88:cd:ac:be:00: cd:f7:0e:a6:5c:a3:80:cd:54:58:c0:35:81:a5:6d:0f:80:d0: e2:55:e1:18:61:80:93:f0:73:a8:7e:88:49:ba:5b:e6:ef:d3: 7c:1f:6a:36:e8:37:78:66:e2:d4:c0:e0:db:96:15:41:86:d4: a1:73:67:f7:3c:3d:4b:52:0b:ff:e4:37:40:07:32:02:38:7b: 08:ba:43:71:55:a9:c5:bc:51:97:43:63:57:17:a9:9a:a1:c4: 9c:f7:be:8d:6f:41:ac:10:e6:ee:c5:72:45:d4:fc:81:31:8e: e2:23:91:e8:7b:32:de:d6:ef:0e:be:41:fa:75:5c:84:5c:8f: bd:53:84:8d:f7:7d:ec:21:4b:13:fd:b1:64:d3:43:12:78:0c: b8:1f:12:ab:7b:f7:8c:43:26:07:23:20:fc:ea:20:c8:da:f6: 28:a8:40:69:2d:93:98:a5:24:10:a2:40:fc:ce:e9:b7:16:e8: 3e:96:ef:64:57:78:91:76:7e:78:22:b9:c6:94:2a:cb:e1:95: cc:2b:4a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoa0NraNjijPh6F745Oaj5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjUxMDI1MTAwMTI2WhcNMjUxMDI2MTAwMTI2WjAzMTEwLwYDVQQD EyhmZjgxYmYxMmQxMmE5NGFiMDdlMzllZmIyNzIzZTJjYzU2NGRmNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+ChZjbJioG7XJt5eOFQrqDGAioV OJcSPUXBL3mnqkIPj1YGcAh3YHGtr3EZD373cJdu8jiLocSmeSCzQda8eI80vh2J is5APCxVUzEuOCY3hFxpUntUHCbTImQGGa+LKNwrNF3AnTufFbvcPRvbu9v4SoEa Pa1jkFRaIK38yBU9u0gMBHBCE2MFWjpv+fzyct2cOR2i86m7hAc6TwOXIB6MEXnm ihTwb2tKPwdoq5DbsJKUKQLvLnYyJbdUunOVsKkv+GX2OoYVTmT6H35YFO4x5zev 7ddU09fatgASCZDYcoyyjO2SLSIg7GZskrIF5n/BfNYzZsA1G8hCvCMePwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+BvxLRKpSrB+Oe+ycj4sxWTfVHMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/f7zryS 8vm+THSjO0YfBXmcUJHZH+6pm7gqdqI2m1DrywsaEb3R6uOH7QypTbSbXojNrL4A zfcOplyjgM1UWMA1gaVtD4DQ4lXhGGGAk/BzqH6ISbpb5u/TfB9qNug3eGbi1MDg 25YVQYbUoXNn9zw9S1IL/+Q3QAcyAjh7CLpDcVWpxbxRl0NjVxepmqHEnPe+jW9B rBDm7sVyRdT8gTGO4iOR6Hsy3tbvDr5B+nVchFyPvVOEjfd97CFLE/2xZNNDEngM uB8Sq3v3jEMmByMg/OogyNr2KKhAaS2TmKUkEKJA/M7ptxboPpbvZFd4kXZ+eCK5 xpQqy+GVzCtKrA== -----END CERTIFICATE-----Generated at Sat Oct 25 20:01:13 2025 by rpki-client