$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: qMTXCbfESfGwK6R3qZwZRRj87MVlQWpWbMS5EZftMAc= Subject key identifier: 73:0B:28:C7:C6:D5:CD:93:96:E5:6D:BB:EF:EF:A7:8D:8E:E0:ED:56 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019A28C2A8D5D1EBD0A3EB1867B4F4F1E175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1703 Signing time: Tue 28 Oct 2025 03:00:37 +0000 Manifest this update: Tue 28 Oct 2025 03:00:37 +0000 Manifest next update: Wed 29 Oct 2025 03:00:37 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: 7cGHGsjDNtJZdqcX3b1gGvYbEC+PmsebG1UYUjsEE8g=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=) 10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:c2:a8:d5:d1:eb:d0:a3:eb:18:67:b4:f4:f1:e1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Oct 28 03:00:37 2025 GMT Not After : Oct 29 03:00:37 2025 GMT Subject: CN=730b28c7c6d5cd9396e56dbbefefa78d8ee0ed56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:d1:a0:a8:70:c9:4c:6d:19:86:73:f3:61: 1c:d6:cf:81:82:7b:40:09:4a:77:a4:db:93:4d:9f: 57:32:c5:66:30:3d:93:14:66:15:e8:ab:47:ab:d9: d2:03:b8:27:b0:86:47:b0:b2:6b:f7:e2:b7:18:dc: 7c:4f:ff:2f:3b:cd:3e:7a:49:24:a9:e2:f6:29:e6: 10:33:9a:4c:f7:52:e0:97:f0:67:b4:15:3d:6b:93: 11:7f:82:ad:32:9c:5a:ba:e7:77:57:58:a7:e3:8b: 33:f5:02:d0:51:92:2c:6a:3d:51:fa:a8:0b:6c:8b: b6:fc:cb:0d:8a:3d:45:db:05:ff:e8:eb:c1:10:60: c8:09:9d:5d:2a:74:70:d8:a0:ab:9e:7f:1e:95:16: 22:4b:da:0b:ff:5f:f2:61:06:bf:22:bc:29:07:8d: e9:ca:47:3e:52:80:b1:48:eb:97:81:69:bc:86:d1: 71:16:6f:84:86:1f:d4:76:84:8e:d7:6d:d9:71:65: 12:a3:80:56:4d:4d:78:b4:f5:99:47:b4:8a:7a:6b: 18:ab:f8:d5:10:a3:c6:8a:dc:4d:da:eb:15:17:6e: 08:bb:0e:91:e3:7a:5d:0c:88:69:e6:e0:8e:55:14: 32:5d:0f:b4:6b:93:1d:a5:9f:8c:17:cb:a3:28:b7: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0B:28:C7:C6:D5:CD:93:96:E5:6D:BB:EF:EF:A7:8D:8E:E0:ED:56 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6d:e4:7a:71:a2:cf:5a:b1:b6:b9:9a:82:aa:4a:ce:a5:63: 36:2a:63:0c:a9:87:3b:bc:91:f8:04:06:48:9b:74:31:d1:17: 97:e3:5b:d0:4e:d3:4c:52:24:6d:f5:e1:90:7f:76:3e:b1:11: b6:e9:96:dc:c1:b5:16:03:03:69:53:4a:e4:9a:b8:34:23:b0: 53:57:5a:74:d1:e9:a4:95:ad:e6:b0:33:8a:f4:0f:71:a2:41: 69:6b:54:f1:aa:b3:2b:f5:d9:93:67:96:95:bb:12:cc:67:3a: f4:fe:51:1e:8f:5e:24:8b:1c:bd:2d:61:f1:62:c5:cf:bf:cf: 2f:15:c2:21:c6:b6:94:8b:35:78:56:e7:df:78:cc:a1:f3:b7: d1:ea:01:43:0b:32:e3:46:e4:1d:c5:76:e6:39:47:6d:f2:0e: 02:22:03:4f:55:49:fc:11:bc:fc:c4:fb:43:b1:1b:6d:1f:df: 6e:c9:12:a2:01:2f:e4:58:d5:7b:e6:be:75:23:ec:47:51:63: f8:a3:6f:30:6f:60:4f:73:6c:92:d5:0c:94:a9:32:a0:c7:47: e3:7f:d4:13:5e:1d:ae:22:52:d2:5d:75:cd:f0:2f:32:10:e2: a6:d1:39:bc:70:cd:d9:99:55:4c:6b:ee:fb:44:bd:a9:ad:27: 0b:dc:31:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoowqjV0evQo+sYZ7T08eF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUxMDI4MDMwMDM3WhcNMjUxMDI5MDMwMDM3WjAzMTEwLwYDVQQD Eyg3MzBiMjhjN2M2ZDVjZDkzOTZlNTZkYmJlZmVmYTc4ZDhlZTBlZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wTRoKhwyUxtGYZz82Ec1s+BgntA CUp3pNuTTZ9XMsVmMD2TFGYV6KtHq9nSA7gnsIZHsLJr9+K3GNx8T/8vO80+ekkk qeL2KeYQM5pM91Lgl/BntBU9a5MRf4KtMpxauud3V1in44sz9QLQUZIsaj1R+qgL bIu2/MsNij1F2wX/6OvBEGDICZ1dKnRw2KCrnn8elRYiS9oL/1/yYQa/IrwpB43p ykc+UoCxSOuXgWm8htFxFm+Ehh/UdoSO123ZcWUSo4BWTU14tPWZR7SKemsYq/jV EKPGitxN2usVF24Iuw6R43pdDIhp5uCOVRQyXQ+0a5MdpZ+MF8ujKLeCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMLKMfG1c2TluVtu+/vp42O4O1WMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW3kenGi z1qxtrmagqpKzqVjNipjDKmHO7yR+AQGSJt0MdEXl+Nb0E7TTFIkbfXhkH92PrER tumW3MG1FgMDaVNK5Jq4NCOwU1dadNHppJWt5rAzivQPcaJBaWtU8aqzK/XZk2eW lbsSzGc69P5RHo9eJIscvS1h8WLFz7/PLxXCIca2lIs1eFbn33jMofO30eoBQwsy 40bkHcV25jlHbfIOAiIDT1VJ/BG8/MT7Q7EbbR/fbskSogEv5FjVe+a+dSPsR1Fj +KNvMG9gT3NsktUMlKkyoMdH43/UE14driJS0l11zfAvMhDiptE5vHDN2ZlVTGvu +0S9qa0nC9wx8g== -----END CERTIFICATE-----Generated at Tue Oct 28 12:37:01 2025 by rpki-client