$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: hOGnrODaJxH3lrhyTZ8GzXY+A+pZm/j47YCHh7hf21U= Subject key identifier: E8:6C:DC:94:E5:6D:D2:75:0C:04:74:0E:E2:99:92:B3:8A:6C:81:A8 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 01976884ED2C9E24ABF86C64D9302DA9DBE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 1593 Signing time: Fri 13 Jun 2025 09:00:31 +0000 Manifest this update: Fri 13 Jun 2025 09:00:31 +0000 Manifest next update: Sat 14 Jun 2025 09:00:31 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 3D3Sl4jTiNu0i7iH/l+xiX0J8zslLfUmn4Id20d6dH0=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:84:ed:2c:9e:24:ab:f8:6c:64:d9:30:2d:a9:db:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jun 13 09:00:31 2025 GMT Not After : Jun 14 09:00:31 2025 GMT Subject: CN=e86cdc94e56dd2750c04740ee29992b38a6c81a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:4a:c2:c0:92:8d:36:a8:ce:e1:8d:8b:b4: d5:80:b3:fd:b0:6b:95:fd:31:8c:73:14:82:7f:46: ed:90:f0:9e:6c:ce:3e:a2:7c:d3:b2:fc:e1:78:3e: 2a:7d:93:98:9d:1c:97:ac:c8:4d:0f:2b:95:ff:da: 67:43:fb:40:45:59:e6:a3:59:dd:88:3d:11:98:dc: de:b5:ce:fd:c1:6f:e3:32:40:9e:84:9d:cb:0e:a8: 9d:f2:58:87:5e:69:38:a1:15:50:fc:9a:e4:de:cc: 3f:ca:01:1f:89:01:87:f5:91:54:2f:ae:f5:6b:6e: f8:e1:80:e7:18:c1:80:a0:53:49:16:49:11:eb:ef: 3d:bc:5e:8d:b5:f7:5d:10:60:ec:3f:d4:41:61:05: 45:44:0b:37:f5:95:8d:c3:b8:60:95:6f:16:04:ed: 7c:c1:90:da:ae:86:8a:74:ff:d5:4b:44:1f:b0:55: 38:07:32:28:c3:64:af:05:fa:21:81:88:93:1b:77: a7:4c:41:5a:8c:05:7b:ee:c1:14:9a:8b:ff:99:d0: f5:a2:54:7e:29:3e:02:45:22:57:64:b4:06:07:5c: e7:24:55:1b:f8:73:1f:e2:f3:ee:5b:b8:43:2a:b7: e0:42:c5:78:76:d3:67:7a:7c:b8:ff:cc:a7:d5:1b: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:DC:94:E5:6D:D2:75:0C:04:74:0E:E2:99:92:B3:8A:6C:81:A8 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:39:e6:3d:3b:92:90:60:e8:3e:5a:db:14:7e:77:53:d0: 4d:0e:3f:d0:dd:b5:5d:b7:69:38:68:d3:41:ed:31:74:7d:2e: 61:62:00:75:94:85:29:bb:4b:78:b9:7d:a3:b7:3e:5e:db:4e: 16:17:bd:f7:09:46:9f:df:44:c1:34:b6:30:db:2d:36:fa:86: 6e:f2:1a:6a:87:1b:6c:4b:b8:8a:4b:2e:2d:59:1d:ef:e1:33: fc:cb:11:ea:cb:02:9f:ca:65:c2:a9:fd:80:23:2e:3a:c2:3b: 16:fa:92:03:83:a9:76:a0:96:7f:eb:9b:1d:53:12:9d:14:1b: ba:6f:d8:5f:25:53:10:c7:c9:05:38:a2:c7:9f:9d:cc:86:78: 45:a7:68:ed:21:b5:d7:24:f1:66:41:22:54:b4:8c:ca:9d:7c: 48:8c:3f:68:04:bf:b5:17:4f:ee:d6:67:09:62:85:9f:d3:a9: 19:fc:f5:be:34:e9:6e:2a:d1:88:55:eb:c2:8a:b1:35:e8:6f: f2:de:6a:34:d4:68:50:81:63:ab:bd:40:4b:a7:a4:e7:38:16: 1d:54:1c:6a:21:22:7e:6a:6f:30:fd:e1:56:6c:3b:cd:b2:9e: b1:e4:dd:47:1b:9f:e8:80:48:71:fb:50:ba:c1:84:54:fc:5f: f6:b6:9f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdohO0sniSr+Gxk2TAtqdvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwNjEzMDkwMDMxWhcNMjUwNjE0MDkwMDMxWjAzMTEwLwYDVQQD EyhlODZjZGM5NGU1NmRkMjc1MGMwNDc0MGVlMjk5OTJiMzhhNmM4MWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQVKwsCSjTaozuGNi7TVgLP9sGuV /TGMcxSCf0btkPCebM4+onzTsvzheD4qfZOYnRyXrMhNDyuV/9pnQ/tARVnmo1nd iD0RmNzetc79wW/jMkCehJ3LDqid8liHXmk4oRVQ/Jrk3sw/ygEfiQGH9ZFUL671 a2744YDnGMGAoFNJFkkR6+89vF6NtfddEGDsP9RBYQVFRAs39ZWNw7hglW8WBO18 wZDaroaKdP/VS0QfsFU4BzIow2SvBfohgYiTG3enTEFajAV77sEUmov/mdD1olR+ KT4CRSJXZLQGB1znJFUb+HMf4vPuW7hDKrfgQsV4dtNneny4/8yn1RuvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhs3JTlbdJ1DAR0DuKZkrOKbIGoMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6o55j07 kpBg6D5a2xR+d1PQTQ4/0N21XbdpOGjTQe0xdH0uYWIAdZSFKbtLeLl9o7c+XttO Fhe99wlGn99EwTS2MNstNvqGbvIaaocbbEu4iksuLVkd7+Ez/MsR6ssCn8plwqn9 gCMuOsI7FvqSA4OpdqCWf+ubHVMSnRQbum/YXyVTEMfJBTiix5+dzIZ4Rado7SG1 1yTxZkEiVLSMyp18SIw/aAS/tRdP7tZnCWKFn9OpGfz1vjTpbirRiFXrwoqxNehv 8t5qNNRoUIFjq71AS6ek5zgWHVQcaiEifmpvMP3hVmw7zbKeseTdRxuf6IBIcftQ usGEVPxf9raf0A== -----END CERTIFICATE-----Generated at Fri Jun 13 14:48:05 2025 by rpki-client