$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: 7KBD5m8SblpegZ5ION5eVrzEkkCynWICUSCOERmz2l8= Subject key identifier: 78:AD:15:83:2E:EC:15:3A:5E:0C:4B:6A:B6:0D:99:B6:2A:D1:60:C0 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 01992FA3AE9BE933928306E788E869193EDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1682 Signing time: Tue 09 Sep 2025 18:01:20 +0000 Manifest this update: Tue 09 Sep 2025 18:01:20 +0000 Manifest next update: Wed 10 Sep 2025 18:01:20 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: Vnc3jkZ16jyjrgKKH/I36xQZJE/siFM6hPc1ZsBCbZE=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:a3:ae:9b:e9:33:92:83:06:e7:88:e8:69:19:3e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Sep 9 18:01:20 2025 GMT Not After : Sep 10 18:01:20 2025 GMT Subject: CN=78ad15832eec153a5e0c4b6ab60d99b62ad160c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:14:13:21:c4:a8:53:4f:9c:1b:e6:84:60: 58:47:e1:6d:d6:0c:51:7d:a3:f2:b0:b8:78:4e:c6: f0:be:f5:9b:34:2e:45:72:98:88:7a:ca:1f:9d:83: 09:b7:a2:9d:e9:ca:18:b4:1b:53:83:c8:b7:a0:44: 3c:28:30:e2:8e:bf:5e:56:9e:aa:99:18:61:52:86: 45:b9:03:9f:c0:09:5b:4f:18:bd:f7:e6:83:22:8f: 3e:36:f6:bb:c0:e5:1a:89:42:c2:c5:c9:a8:ae:3f: 09:b1:95:c2:80:bd:fc:78:2b:3b:9e:5c:2d:1a:84: 5e:0b:68:7e:15:16:16:81:29:df:31:8a:8c:30:a2: 83:26:74:e9:d7:00:77:0b:14:e8:e7:e0:5e:65:be: 2d:f0:d3:a5:e4:55:69:2f:2b:65:bd:cf:b2:e5:f4: 8f:88:9a:29:45:92:ce:27:f1:aa:a1:cc:60:9d:c9: d4:ff:4f:71:5a:c7:95:d8:2a:e9:93:12:0b:4f:8f: 13:46:08:a6:b3:42:e7:3f:15:46:52:ea:7e:eb:54: 42:84:15:eb:1f:c5:a1:51:e1:cb:37:9a:4e:68:1d: 82:2f:3b:4c:f2:c7:f1:b1:f6:37:ce:06:1a:24:8e: 29:93:ef:22:cb:15:a7:43:73:9a:7e:16:f1:9c:72: 9f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:15:83:2E:EC:15:3A:5E:0C:4B:6A:B6:0D:99:B6:2A:D1:60:C0 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:da:2d:23:d0:91:5e:10:4f:d8:0e:4c:1e:95:0d:30:86: 63:e9:df:52:b5:cc:f5:75:c8:a6:34:b6:28:e4:dd:36:1d:b7: 9e:2b:7c:9d:75:a9:18:98:af:41:92:34:14:af:eb:03:5a:bc: 11:01:b7:92:87:3b:24:cd:68:b1:d3:e6:68:0a:7f:84:fa:7b: e0:11:d7:de:0f:c4:f8:f0:64:7a:58:22:dc:58:5b:ed:e0:7f: 71:43:10:af:11:18:3d:aa:c4:9f:4c:bb:ff:94:f6:32:45:e2: e8:bf:c2:3e:f9:13:fd:11:b6:38:e4:6a:6f:d2:0b:05:68:84: 75:81:5d:cf:ff:3e:c1:94:2b:96:4b:f0:20:81:57:20:0a:1b: 72:83:6a:88:cb:7b:03:fd:fe:8e:3d:e3:60:86:c5:55:23:6c: 3e:74:e0:4e:2f:4d:c5:fc:fe:5d:b2:34:ca:f3:d5:60:3d:dc: 72:ef:e9:b8:59:9c:17:a8:59:3d:4d:64:e2:63:7b:a9:b3:5e: e7:48:9f:2f:32:b1:9c:6c:d7:76:6d:f2:3b:b5:02:db:27:5d: ae:5e:99:cd:dc:6f:d7:6e:33:37:c1:f2:db:72:1d:94:99:d8: e2:d1:23:61:38:97:c1:0e:48:92:ea:15:07:d8:49:3f:d8:bb: e0:4c:89:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvo66b6TOSgwbniOhpGT7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwOTA5MTgwMTIwWhcNMjUwOTEwMTgwMTIwWjAzMTEwLwYDVQQD Eyg3OGFkMTU4MzJlZWMxNTNhNWUwYzRiNmFiNjBkOTliNjJhZDE2MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA040UEyHEqFNPnBvmhGBYR+Ft1gxR faPysLh4TsbwvvWbNC5FcpiIesofnYMJt6Kd6coYtBtTg8i3oEQ8KDDijr9eVp6q mRhhUoZFuQOfwAlbTxi99+aDIo8+Nva7wOUaiULCxcmorj8JsZXCgL38eCs7nlwt GoReC2h+FRYWgSnfMYqMMKKDJnTp1wB3CxTo5+BeZb4t8NOl5FVpLytlvc+y5fSP iJopRZLOJ/GqocxgncnU/09xWseV2CrpkxILT48TRgims0LnPxVGUup+61RChBXr H8WhUeHLN5pOaB2CLztM8sfxsfY3zgYaJI4pk+8iyxWnQ3OafhbxnHKfCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHitFYMu7BU6XgxLarYNmbYq0WDAMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXDaLSPQ kV4QT9gOTB6VDTCGY+nfUrXM9XXIpjS2KOTdNh23nit8nXWpGJivQZI0FK/rA1q8 EQG3koc7JM1osdPmaAp/hPp74BHX3g/E+PBkelgi3Fhb7eB/cUMQrxEYParEn0y7 /5T2MkXi6L/CPvkT/RG2OORqb9ILBWiEdYFdz/8+wZQrlkvwIIFXIAobcoNqiMt7 A/3+jj3jYIbFVSNsPnTgTi9Nxfz+XbI0yvPVYD3ccu/puFmcF6hZPU1k4mN7qbNe 50ifLzKxnGzXdm3yO7UC2yddrl6Zzdxv124zN8Hy23IdlJnY4tEjYTiXwQ5IkuoV B9hJP9i74EyJJA== -----END CERTIFICATE-----Generated at Wed Sep 10 03:16:36 2025 by rpki-client