$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: 2d6spq+xtJK36qux6UYtbCRoiydLCezAlAWCOBdJAQE= Subject key identifier: 64:2B:0A:5D:FE:EF:06:91:5D:D4:77:08:A1:FD:D3:7A:2F:7B:D3:D3 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019A16F35C87146996194CDE7D7AC2A1C8E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 16F7 Signing time: Fri 24 Oct 2025 16:00:38 +0000 Manifest this update: Fri 24 Oct 2025 16:00:38 +0000 Manifest next update: Sat 25 Oct 2025 16:00:38 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: RmrifAR3hfay+Twkk7Z3a/JLCAaLBoPSueBizCSvqMg=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) 15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:16:f3:5c:87:14:69:96:19:4c:de:7d:7a:c2:a1:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Oct 24 16:00:38 2025 GMT Not After : Oct 25 16:00:38 2025 GMT Subject: CN=642b0a5dfeef06915dd47708a1fdd37a2f7bd3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:0e:ab:72:7e:17:df:77:82:e4:1a:6b:73: 61:b3:46:d8:5d:31:ad:15:db:60:0b:3d:a9:dd:9f: 96:d2:45:2e:3c:24:e2:2a:47:20:9c:05:19:a8:42: 69:bb:ec:7b:00:d3:0c:f3:9b:f6:a7:d8:9a:23:08: c9:53:b5:3d:96:26:cd:db:8c:79:02:07:52:32:ec: c7:d5:50:ce:97:eb:bf:6e:e8:ef:66:64:4f:32:b4: 2c:86:ad:c5:ef:77:b1:9b:c5:f3:50:88:0c:2a:04: 22:4f:b0:26:2a:78:eb:02:50:0e:eb:01:d2:18:16: 24:b5:6a:90:5f:19:98:4a:c1:b0:ea:08:b8:8d:7b: 55:27:9e:bf:97:32:97:4d:42:fe:5c:28:b9:14:cb: 64:35:c8:52:dc:6a:f1:b8:30:c3:97:51:0e:d7:ea: 78:04:83:cb:a3:dd:44:75:c0:17:f7:bd:67:93:a5: 95:ea:11:9d:4e:35:0d:82:4b:5e:76:11:08:5f:20: 83:6d:b9:f4:76:5f:3b:b1:fb:06:f5:13:5c:04:c7: 27:60:27:c2:4d:1a:18:6d:8e:15:37:c4:06:7c:de: 5d:84:10:f1:eb:fa:84:ba:99:db:04:97:4a:c2:b9: ce:3e:c8:ed:71:38:35:cf:82:55:4f:6f:c0:e9:2a: 4b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:0A:5D:FE:EF:06:91:5D:D4:77:08:A1:FD:D3:7A:2F:7B:D3:D3 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:63:bd:a1:7e:6b:6f:29:b2:f2:97:48:e2:b8:fd:01:2e:ae: bc:4c:09:36:bb:cf:e4:66:f8:44:56:78:c7:75:70:71:54:1d: 86:b2:ac:f5:96:4f:34:59:8a:a1:3d:7f:ac:8c:f5:67:d0:29: 89:43:70:0e:dc:32:de:7b:12:ef:69:99:86:8d:f5:be:6a:3c: 60:7a:dc:9f:d5:f5:d7:1a:df:fe:e6:b8:65:e0:98:e5:64:bc: 29:4f:c9:f0:39:14:bf:fc:ce:80:e0:e2:f6:9f:25:fd:fa:41: 73:a7:7c:0b:85:8b:f2:03:89:c9:b5:03:52:31:55:48:58:cd: ff:97:d0:23:06:cc:51:51:4a:9d:f4:5b:7e:78:f0:33:fb:fe: c3:e7:01:2c:c5:c4:b5:47:11:ea:96:2d:1b:eb:b3:a6:d9:23: 7f:1d:fe:80:b6:8e:11:e8:d3:22:dc:1d:2b:e8:d0:d1:76:10: 58:ad:30:31:8b:6c:11:d0:ef:cb:6a:4c:2a:6b:f9:77:b0:c3: a6:4b:82:2c:13:fe:54:7d:b5:8b:50:6f:ae:f6:c3:d5:af:5d: 25:12:80:80:c9:46:98:12:9a:d9:49:99:ee:cf:7c:13:15:9f: a6:bd:1b:57:f4:cc:19:8f:02:ae:14:62:f9:40:32:f1:d9:64: 2d:09:b7:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoW81yHFGmWGUzefXrCocjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUxMDI0MTYwMDM4WhcNMjUxMDI1MTYwMDM4WjAzMTEwLwYDVQQD Eyg2NDJiMGE1ZGZlZWYwNjkxNWRkNDc3MDhhMWZkZDM3YTJmN2JkM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z8Oq3J+F993guQaa3Nhs0bYXTGt FdtgCz2p3Z+W0kUuPCTiKkcgnAUZqEJpu+x7ANMM85v2p9iaIwjJU7U9libN24x5 AgdSMuzH1VDOl+u/bujvZmRPMrQshq3F73exm8XzUIgMKgQiT7AmKnjrAlAO6wHS GBYktWqQXxmYSsGw6gi4jXtVJ56/lzKXTUL+XCi5FMtkNchS3GrxuDDDl1EO1+p4 BIPLo91EdcAX971nk6WV6hGdTjUNgktedhEIXyCDbbn0dl87sfsG9RNcBMcnYCfC TRoYbY4VN8QGfN5dhBDx6/qEupnbBJdKwrnOPsjtcTg1z4JVT2/A6SpLDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQrCl3+7waRXdR3CKH903ove9PTMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmO9oX5r bymy8pdI4rj9AS6uvEwJNrvP5Gb4RFZ4x3VwcVQdhrKs9ZZPNFmKoT1/rIz1Z9Ap iUNwDtwy3nsS72mZho31vmo8YHrcn9X11xrf/ua4ZeCY5WS8KU/J8DkUv/zOgODi 9p8l/fpBc6d8C4WL8gOJybUDUjFVSFjN/5fQIwbMUVFKnfRbfnjwM/v+w+cBLMXE tUcR6pYtG+uzptkjfx3+gLaOEejTItwdK+jQ0XYQWK0wMYtsEdDvy2pMKmv5d7DD pkuCLBP+VH21i1BvrvbD1a9dJRKAgMlGmBKa2UmZ7s98ExWfpr0bV/TMGY8CrhRi +UAy8dlkLQm3+g== -----END CERTIFICATE-----Generated at Fri Oct 24 19:16:34 2025 by rpki-client