$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: jQtryLXKUpwZ3wvhHYCMzLVZnx4O3ROoAfWkOLvZh10= Subject key identifier: 76:E3:05:E2:F6:03:80:E1:B4:83:83:B8:61:9D:76:1E:06:3B:23:B8 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019762BA21DB2191CF33C0F28B07DC98959F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 1590 Signing time: Thu 12 Jun 2025 06:00:54 +0000 Manifest this update: Thu 12 Jun 2025 06:00:54 +0000 Manifest next update: Fri 13 Jun 2025 06:00:54 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 9Y2dzJ0ozHtzxMdVYO/W+M6hYpw3aFNGam7JBBUW7J4=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:62:ba:21:db:21:91:cf:33:c0:f2:8b:07:dc:98:95:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jun 12 06:00:54 2025 GMT Not After : Jun 13 06:00:54 2025 GMT Subject: CN=76e305e2f60380e1b48383b8619d761e063b23b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:b4:92:78:55:92:3f:01:0c:c9:1d:34:ad: 9d:87:d6:bf:b8:d1:20:8c:85:9c:21:f3:0c:82:cd: 65:f4:af:d6:6f:e8:a0:39:79:84:53:ad:4e:8a:54: 04:b9:0b:6b:0e:2f:63:87:76:c4:d2:ec:e0:c5:11: fd:a5:1f:ce:4c:48:7b:8d:10:e2:da:a5:e2:a0:30: 7a:9b:57:7a:ed:77:47:05:48:4e:d1:35:2c:50:08: bb:36:35:b1:cb:dd:81:cd:00:ec:95:50:4f:5c:7a: b8:6e:e7:e7:79:e1:8a:c8:c6:66:46:6e:67:cc:13: 9c:a4:89:82:7b:52:d8:e0:3f:fa:88:88:23:30:5e: c5:08:9a:1e:9a:1a:63:27:46:7a:ec:b0:a3:54:29: bc:5d:62:bb:31:a8:31:66:f6:ca:a1:43:c2:81:a1: ba:ea:8a:23:2c:b4:b0:72:88:16:0a:bb:fc:f4:7b: df:e4:bc:b2:7e:cf:a0:c1:49:9b:08:e1:e6:d0:7b: 94:1b:75:c1:50:5e:c3:e2:9e:fc:ce:8f:52:4e:48: 48:79:bb:55:79:a7:7e:da:cd:50:90:f0:03:b4:56: 89:3a:39:04:45:81:28:5b:95:db:45:9c:c8:1b:ef: eb:64:8c:a4:69:6c:4e:c9:9a:03:41:ea:42:41:1a: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:05:E2:F6:03:80:E1:B4:83:83:B8:61:9D:76:1E:06:3B:23:B8 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5a:30:c0:0a:ab:a4:ca:e8:1c:4a:65:43:2a:f4:bd:20:72: 63:64:3e:73:b2:f1:1a:16:9f:95:51:3e:05:ca:bd:1c:77:3f: 7e:60:3a:d4:f6:98:09:41:0e:f3:e2:28:c0:32:86:58:93:da: 87:b4:87:1e:fc:fe:28:35:f9:04:8e:97:e6:f5:50:30:d9:56: b4:69:52:0f:0e:0e:20:13:78:28:20:84:0b:c7:83:fa:57:2d: 94:ce:b4:2f:75:95:a3:7f:dd:f7:2b:c6:ce:65:c1:b1:51:64: 79:3c:03:97:da:66:3b:38:44:15:4b:e4:eb:c8:30:31:2a:a9: f6:c2:81:2e:de:2c:44:3a:b6:ea:64:28:54:54:dc:9b:55:af: 13:2e:5f:04:b5:c6:ff:49:15:dd:25:17:e9:00:c4:a6:b1:46: 11:c1:d8:98:5c:aa:52:15:0e:eb:e0:40:f8:8e:73:7d:17:02: 71:85:e7:ba:26:9e:ca:a1:32:9f:a9:4c:16:54:d8:60:99:6d: cc:34:14:48:64:e0:cb:82:4f:b5:83:df:82:a5:8f:5b:2d:a9: b6:ed:cd:84:a5:74:00:94:b4:ee:02:9c:ac:1a:b7:af:8c:e6: 56:61:e0:ca:44:6f:ee:a9:5a:8d:1b:a1:13:43:bc:0f:76:01: 9c:92:84:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdiuiHbIZHPM8DyiwfcmJWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwNjEyMDYwMDU0WhcNMjUwNjEzMDYwMDU0WjAzMTEwLwYDVQQD Eyg3NmUzMDVlMmY2MDM4MGUxYjQ4MzgzYjg2MTlkNzYxZTA2M2IyM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApau0knhVkj8BDMkdNK2dh9a/uNEg jIWcIfMMgs1l9K/Wb+igOXmEU61OilQEuQtrDi9jh3bE0uzgxRH9pR/OTEh7jRDi 2qXioDB6m1d67XdHBUhO0TUsUAi7NjWxy92BzQDslVBPXHq4bufneeGKyMZmRm5n zBOcpImCe1LY4D/6iIgjMF7FCJoemhpjJ0Z67LCjVCm8XWK7MagxZvbKoUPCgaG6 6oojLLSwcogWCrv89Hvf5Lyyfs+gwUmbCOHm0HuUG3XBUF7D4p78zo9STkhIebtV ead+2s1QkPADtFaJOjkERYEoW5XbRZzIG+/rZIykaWxOyZoDQepCQRoL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbjBeL2A4DhtIODuGGddh4GOyO4MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1owwAqr pMroHEplQyr0vSByY2Q+c7LxGhaflVE+Bcq9HHc/fmA61PaYCUEO8+IowDKGWJPa h7SHHvz+KDX5BI6X5vVQMNlWtGlSDw4OIBN4KCCEC8eD+lctlM60L3WVo3/d9yvG zmXBsVFkeTwDl9pmOzhEFUvk68gwMSqp9sKBLt4sRDq26mQoVFTcm1WvEy5fBLXG /0kV3SUX6QDEprFGEcHYmFyqUhUO6+BA+I5zfRcCcYXnuiaeyqEyn6lMFlTYYJlt zDQUSGTgy4JPtYPfgqWPWy2ptu3NhKV0AJS07gKcrBq3r4zmVmHgykRv7qlajRuh E0O8D3YBnJKEyA== -----END CERTIFICATE-----Generated at Thu Jun 12 12:03:41 2025 by rpki-client