$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: VYFUismUcaDkUeTLecmKWzz236yP4wzhgRCbqb+YsnU= Subject key identifier: FD:F9:8C:07:27:D3:75:2D:5E:8B:AE:0A:5F:EE:23:D6:08:57:C9:A5 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019760CBBDC90E6D6994A9582C4DDB3B012B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 158F Signing time: Wed 11 Jun 2025 21:00:54 +0000 Manifest this update: Wed 11 Jun 2025 21:00:54 +0000 Manifest next update: Thu 12 Jun 2025 21:00:54 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: +9hn0FNtBvHxUKU95RenO7zqxTWGKALmsBuns77ey6w=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Jun 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:60:cb:bd:c9:0e:6d:69:94:a9:58:2c:4d:db:3b:01:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jun 11 21:00:54 2025 GMT Not After : Jun 12 21:00:54 2025 GMT Subject: CN=fdf98c0727d3752d5e8bae0a5fee23d60857c9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:b8:60:77:13:71:1f:df:46:ee:d9:32:8d: 1f:99:ed:21:a8:47:b4:02:b3:2d:53:bf:59:67:12: 50:59:77:2f:fb:b2:c1:7c:42:33:41:35:a4:62:43: 3d:69:97:2a:a6:03:86:86:44:27:04:14:0a:23:f4: 43:ab:ae:ee:c9:2f:a2:66:92:2e:7b:8d:de:6f:e3: 53:69:e8:f9:8b:b7:75:69:59:46:73:2d:4d:ee:34: 77:a5:83:05:b0:89:33:ba:4f:79:1d:5a:88:23:63: 91:13:54:f2:09:74:fc:a3:fb:fa:3f:a2:16:94:7c: ca:76:e4:e3:f3:c8:fd:15:e7:ca:9a:e4:85:bc:52: e7:be:6e:8d:93:8d:a0:7f:80:ab:9c:fa:26:78:80: 17:5e:2c:45:d7:9a:03:ad:69:f7:26:05:9f:b0:7b: 24:b0:53:bc:c3:30:8e:a0:89:f0:15:7d:84:db:7f: 97:4a:65:c4:39:51:46:10:98:46:58:39:d1:f5:c1: 86:d0:32:a9:fa:1c:51:b9:dc:5c:be:ee:84:62:e0: eb:89:4d:88:8a:6b:cd:71:eb:44:35:80:62:e6:4b: 23:c3:4d:73:ed:5e:bf:5e:9b:83:35:4d:cb:8c:86: 1a:71:b0:d3:0f:d2:a3:20:78:a6:f0:b1:0f:5e:ad: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F9:8C:07:27:D3:75:2D:5E:8B:AE:0A:5F:EE:23:D6:08:57:C9:A5 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:58:b1:f4:cb:c7:5d:e5:cc:fc:c5:c5:8a:32:39:67:3c:ec: 1b:8c:07:67:86:ee:ec:cf:e6:8f:5e:64:29:f4:fd:a7:29:5c: c9:68:32:8e:3f:28:13:fe:7f:d6:68:ce:a7:fe:ed:13:58:d0: da:e4:25:20:9e:eb:25:52:31:1c:8e:bd:32:dd:a4:fa:8c:d6: fd:9e:2c:e5:2f:dc:e1:b8:1c:2f:62:5f:96:57:af:a7:51:62: 5d:65:fa:25:ae:55:f7:19:7c:d0:6c:0c:65:8f:92:8c:ba:39: 72:ab:fe:74:1b:f1:09:7b:ac:72:e4:d0:95:72:a4:c9:86:d8: 83:11:ff:7c:b4:85:48:67:91:1d:fa:64:36:a6:85:c8:01:26: 66:04:a8:69:44:2c:15:a4:01:bf:45:c5:f2:92:95:01:81:11: 50:45:df:7a:af:62:5f:5e:53:5e:a9:a8:76:9b:f8:8b:99:d3: 2f:d8:08:ff:1a:53:b2:93:ac:5e:23:95:d1:33:f4:85:e3:ab: 45:db:0d:d4:1b:12:be:54:61:bc:d2:00:12:d9:38:ac:98:a2: ca:dc:e4:11:ed:78:0f:35:bd:ca:af:cd:c1:22:0c:97:34:03: 1a:4c:7c:63:dc:52:e1:7b:72:bd:a6:26:67:aa:88:31:a0:be: 90:c6:5a:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdgy73JDm1plKlYLE3bOwErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwNjExMjEwMDU0WhcNMjUwNjEyMjEwMDU0WjAzMTEwLwYDVQQD EyhmZGY5OGMwNzI3ZDM3NTJkNWU4YmFlMGE1ZmVlMjNkNjA4NTdjOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+4YHcTcR/fRu7ZMo0fme0hqEe0 ArMtU79ZZxJQWXcv+7LBfEIzQTWkYkM9aZcqpgOGhkQnBBQKI/RDq67uyS+iZpIu e43eb+NTaej5i7d1aVlGcy1N7jR3pYMFsIkzuk95HVqII2ORE1TyCXT8o/v6P6IW lHzKduTj88j9FefKmuSFvFLnvm6Nk42gf4CrnPomeIAXXixF15oDrWn3JgWfsHsk sFO8wzCOoInwFX2E23+XSmXEOVFGEJhGWDnR9cGG0DKp+hxRudxcvu6EYuDriU2I imvNcetENYBi5ksjw01z7V6/XpuDNU3LjIYacbDTD9KjIHim8LEPXq3MJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP35jAcn03UtXouuCl/uI9YIV8mlMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1ix9MvH XeXM/MXFijI5ZzzsG4wHZ4bu7M/mj15kKfT9pylcyWgyjj8oE/5/1mjOp/7tE1jQ 2uQlIJ7rJVIxHI69Mt2k+ozW/Z4s5S/c4bgcL2Jfllevp1FiXWX6Ja5V9xl80GwM ZY+SjLo5cqv+dBvxCXuscuTQlXKkyYbYgxH/fLSFSGeRHfpkNqaFyAEmZgSoaUQs FaQBv0XF8pKVAYERUEXfeq9iX15TXqmodpv4i5nTL9gI/xpTspOsXiOV0TP0heOr RdsN1BsSvlRhvNIAEtk4rJiiytzkEe14DzW9yq/NwSIMlzQDGkx8Y9xS4XtyvaYm Z6qIMaC+kMZapQ== -----END CERTIFICATE-----Generated at Thu Jun 12 02:17:12 2025 by rpki-client