$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft File: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft (raw, json) Hash identifier: JiXJ0brhdipTFZkW/yNovsR+vkwM2+i0nP957fCZpqQ= Subject key identifier: 25:D6:3A:DF:CE:CD:66:2C:59:A4:44:42:16:45:FF:A8:E2:DF:8F:A6 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 01992DB4C5120D8D53EE3C67A2AE009D96B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft Manifest number: 167F Signing time: Tue 09 Sep 2025 09:00:45 +0000 Manifest this update: Tue 09 Sep 2025 09:00:45 +0000 Manifest next update: Wed 10 Sep 2025 09:00:45 +0000 Files and hashes: 1: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl (hash: Ga8A3DScOF74piToWA6LF03rwNi3vr3VUtIpA5v0XGk=) 2: 6bDtTigEJHvfITo5EDhb-HZYmus.roa (hash: pn8MSlEBA6t8aqrinf0kHwKBgbSA1XvILb1MNY3rWQI=) 3: FNUQanu9g30CB8nbV4vNSU8f7jM.roa (hash: IqvdgFfnbRltyax3es1NYZCCU6t/WnmDX7u4htxiU80=) 4: InvIy5S9tlR4aDUpgLN3Xylz49U.roa (hash: 7GjdWDVJ1CX3HDP5vvhNeyxqOM+ASi2a2B3QT2M/wLg=) 5: OW4SBqRM0pZLREvB8PwvS9CKnp0.roa (hash: jMEiAew60dJvOGLRJzz/Ax99USUZbxKTbl9S96vSsP4=) 6: Rhxcko7xogGD7PUNQ7GFVcIyo3E.roa (hash: wxRtMGUVR1vUKsC3N9YTO9zRxZclKO3OVLRoHoS7u/o=) 7: Rxrp1heOaEaWEFtYKe0f2dBga1o.roa (hash: 7XFvUguakglknudZUQRNwg58TL7mPN+urYYYiKg5sug=) 8: XPP7F5mDO8fdtvjirfCgsQBUDPE.roa (hash: Do3JY163ktXxFxe8bc2aG6JJs1uQbqKOw3uTRl+UJg8=) 9: ZA2jyfPuy6j6A-NhVK6Bhm7mxDI.roa (hash: XMBKezoMpNGmkUM/VB4AXfshcbnXpRVYmNttAzxnQJw=) 10: _poZJvklbAqh3jP2K6-dITgfjgE.roa (hash: /92aJ523PYlzwTJSWkZsdV9NObt6PgIzUkANpCeKD3w=) 11: jyL0IQjTkW6WZMu6S10YICMBXpo.roa (hash: XFpGb73TqJsH0jUYMWLfh8nB2eSn7FmYwyY8desafVs=) 12: oAUG8qSVxsbcnn5oCLrJKtKLuNc.roa (hash: o+LV+u3nMYQIizzPpiFLkTJNXnW4krdNAYxqeBL+QH8=) 13: qvCCYCJKwYp-OQiGJWrjQN6GnYE.roa (hash: IXEsDSXk7cKyv3gBbnxZ1ieqaPBJHIubd2ma3kMo8q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:b4:c5:12:0d:8d:53:ee:3c:67:a2:ae:00:9d:96:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Sep 9 09:00:45 2025 GMT Not After : Sep 10 09:00:45 2025 GMT Subject: CN=25d63adfcecd662c59a444421645ffa8e2df8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:ec:77:47:02:3a:7d:2c:b0:48:e3:29:cb: 16:4b:ea:8c:8e:ae:ab:e9:82:5c:c8:3c:97:af:1f: 5d:db:b3:10:56:bc:d4:36:18:bf:a4:b4:a8:e2:a2: 2d:4b:34:1c:f9:ea:7d:8c:e2:d4:a6:05:af:01:90: 83:23:d1:8a:39:0c:c4:89:27:e7:f5:67:0c:27:87: ba:00:f0:4e:db:f8:15:4b:6c:d2:e4:ea:07:d4:14: 4c:10:9e:f5:b9:17:f2:91:99:16:eb:27:af:58:af: a1:2f:f2:37:dc:08:59:3f:42:91:32:eb:c3:c6:a2: 73:f2:6f:c4:a7:51:1c:0a:4d:c3:8b:75:df:47:da: 6e:59:3a:d0:ee:4d:36:fa:27:9e:b8:96:97:52:6a: ec:cf:54:f2:7f:d0:c0:4d:3d:c8:3a:7f:3e:57:16: b2:ef:b1:41:4f:7e:4a:f5:94:e5:06:b7:13:31:2c: 00:b5:47:fa:f6:f2:b0:d1:5c:ae:63:51:c3:90:9c: 63:6d:1f:c5:30:28:f4:09:60:49:4a:df:a1:2c:f6: a9:b3:c6:b4:a8:d7:04:6a:e9:eb:34:9f:83:a4:3b: 0f:8a:55:9a:96:ec:c0:03:d4:e3:24:7f:67:19:15: 59:1e:1b:cc:41:c0:cb:e3:3f:13:fe:af:27:e4:f1: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D6:3A:DF:CE:CD:66:2C:59:A4:44:42:16:45:FF:A8:E2:DF:8F:A6 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f5:d4:29:c2:59:68:cd:8f:32:74:ae:ff:8c:77:8e:53:fd: ad:8f:67:c0:a5:da:dc:f8:60:4c:50:c6:b1:98:aa:99:af:9d: 43:5c:88:1e:be:0e:66:bd:62:59:22:bc:fa:a2:e7:4a:b0:6d: 89:aa:c2:65:b7:34:fe:9f:fd:7e:e0:ec:3b:c5:72:66:6d:b1: 9c:16:76:7c:45:c3:6c:67:61:90:d2:75:f9:53:2d:73:cc:dc: fc:c7:d8:cc:2c:a6:f1:78:ac:1e:d0:1b:38:2b:6d:c6:bf:16: 1c:63:95:4a:25:ca:09:8a:1b:b3:11:b8:32:fd:7c:47:20:c9: 36:78:84:5b:ea:7e:4e:9f:da:d4:67:0b:13:ce:2e:78:58:33: ab:f7:50:0d:3d:f7:d8:c2:a9:ed:69:a1:e3:8a:13:92:94:5b: ae:f5:d2:07:1c:a7:54:f6:d7:67:d7:c0:c4:84:3b:f9:98:14: 91:d5:a0:4a:fd:86:b0:91:ef:34:2a:e3:ff:e9:82:62:9c:b8: a5:15:ea:3c:e5:7c:d4:4d:d2:ca:3e:79:5b:0f:0c:c9:e0:cc: 0f:71:a0:1b:d8:e1:6d:fb:c0:6f:92:4a:3b:8b:53:35:47:7c: e5:2e:79:2f:30:da:06:2b:a5:8e:c6:d0:ac:74:12:e8:20:ff: 2d:c5:ce:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkttMUSDY1T7jxnoq4AnZayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjUwOTA5MDkwMDQ1WhcNMjUwOTEwMDkwMDQ1WjAzMTEwLwYDVQQD EygyNWQ2M2FkZmNlY2Q2NjJjNTlhNDQ0NDIxNjQ1ZmZhOGUyZGY4ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj/sd0cCOn0ssEjjKcsWS+qMjq6r 6YJcyDyXrx9d27MQVrzUNhi/pLSo4qItSzQc+ep9jOLUpgWvAZCDI9GKOQzEiSfn 9WcMJ4e6APBO2/gVS2zS5OoH1BRMEJ71uRfykZkW6yevWK+hL/I33AhZP0KRMuvD xqJz8m/Ep1EcCk3Di3XfR9puWTrQ7k02+ieeuJaXUmrsz1Tyf9DATT3IOn8+Vxay 77FBT35K9ZTlBrcTMSwAtUf69vKw0VyuY1HDkJxjbR/FMCj0CWBJSt+hLPaps8a0 qNcEaunrNJ+DpDsPilWaluzAA9TjJH9nGRVZHhvMQcDL4z8T/q8n5PFpswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXWOt/OzWYsWaREQhZF/6ji34+mMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvXUKcJZ aM2PMnSu/4x3jlP9rY9nwKXa3PhgTFDGsZiqma+dQ1yIHr4OZr1iWSK8+qLnSrBt iarCZbc0/p/9fuDsO8VyZm2xnBZ2fEXDbGdhkNJ1+VMtc8zc/MfYzCym8XisHtAb OCttxr8WHGOVSiXKCYobsxG4Mv18RyDJNniEW+p+Tp/a1GcLE84ueFgzq/dQDT33 2MKp7Wmh44oTkpRbrvXSBxynVPbXZ9fAxIQ7+ZgUkdWgSv2GsJHvNCrj/+mCYpy4 pRXqPOV81E3Syj55Ww8MyeDMD3GgG9jhbfvAb5JKO4tTNUd85S55LzDaBiuljsbQ rHQS6CD/LcXOKw== -----END CERTIFICATE-----Generated at Tue Sep 9 18:55:55 2025 by rpki-client