$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: LBDhZdN4nsT56Qhr2xjnHHDCNbXxsXNjG9ENfRgZysE= Subject key identifier: 01:DB:86:91:64:D9:61:46:71:F3:CD:FF:96:75:3D:81:2B:3B:73:10 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 0199221F31FC35899AF0E0F1809AD7FA057F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 168D Signing time: Sun 07 Sep 2025 03:01:33 +0000 Manifest this update: Sun 07 Sep 2025 03:01:33 +0000 Manifest next update: Mon 08 Sep 2025 03:01:33 +0000 Files and hashes: 1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=) 2: 1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa (hash: gjJx45guChbhy0m/xEIBSHB06+zn2ylMhRT3oYLGiWM=) 3: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=) 4: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: vMWfJsD3KMkh3XgGLHVBsy9W3k6rkWcy8+rqcnEv21I=) 5: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=) 6: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=) 7: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=) 8: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=) 9: TzuzSGjWwV3OX8zX79IT4KZ2KbM.roa (hash: km0dEl7ZooKnmSTFDQzgqnm2fuMBjhQx4KgIive/k7E=) 10: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=) 11: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=) 12: kpBZgUoI5SVEvkUD2itySup6KcI.roa (hash: XeEaX76YfLu7oqRet3KoyuM4S4TCuYJpZv/8fGXU5lk=) 13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=) 14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:1f:31:fc:35:89:9a:f0:e0:f1:80:9a:d7:fa:05:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Sep 7 03:01:33 2025 GMT Not After : Sep 8 03:01:33 2025 GMT Subject: CN=01db869164d9614671f3cdff96753d812b3b7310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:43:19:57:57:98:da:1e:6a:e6:40:94:54: d6:7d:40:03:17:4d:78:2f:f9:59:85:f5:93:25:b6: 2e:82:e6:75:1f:c9:2f:a8:bb:b2:b6:66:cf:50:a3: 7f:e3:82:ef:d1:9d:3d:8d:44:b1:cc:5f:8e:09:3f: 48:f1:ac:3b:ea:c4:fd:70:e9:f5:50:62:d8:72:60: 61:1c:6b:3c:fd:36:46:b3:94:03:e8:50:f8:9c:5a: e6:e7:3a:e0:1b:4a:e2:82:18:f6:37:fa:88:07:7b: 9f:1c:29:d8:42:ca:7d:51:44:58:8a:80:94:c0:c3: b2:30:b7:89:09:b1:72:24:ea:95:2f:69:f4:ed:0f: 6c:28:62:da:a6:13:2a:4d:21:d2:d1:83:cd:4b:22: 08:92:3d:97:60:be:df:5c:94:a9:9d:d0:dd:08:f7: 54:5e:1f:e4:0d:2d:1e:34:7b:d6:0a:1d:ec:3a:74: 5b:b6:5a:f4:e7:bf:7b:99:e2:cb:17:8d:ef:d9:60: 71:b2:5a:d6:3b:07:aa:ee:f0:62:3d:8f:9f:54:db: e3:a4:39:96:31:8e:f2:2d:94:41:8a:11:66:ab:2e: 76:11:75:da:d6:02:f9:ab:cd:4a:38:40:33:7a:e5: e3:2f:3e:3c:bf:e0:92:31:27:93:4b:12:0c:30:3b: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:86:91:64:D9:61:46:71:F3:CD:FF:96:75:3D:81:2B:3B:73:10 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:56:c2:c1:41:24:a9:d7:92:11:94:07:20:f1:04:99:1a:5d: ca:58:71:66:dd:d0:78:6a:9c:6e:ea:e6:d7:3c:30:cb:8b:b4: be:15:db:3a:4e:67:64:05:a0:f6:e0:e8:23:fb:26:d8:78:59: c1:eb:c9:9c:6a:b1:cf:b9:73:a1:42:41:64:88:52:94:ed:b5: a9:8f:76:9f:41:8f:a5:00:23:64:f6:2d:11:d1:d7:68:6f:80: 06:0f:63:8b:76:02:85:a2:6d:46:eb:b3:3b:cc:1c:64:7c:41: e2:3f:37:1a:ff:7b:72:ce:d4:69:bd:f4:cf:a3:10:e8:8d:6b: cd:18:ab:17:22:ca:dd:ea:5d:9d:a1:ad:5b:12:45:a8:b6:f3: ef:57:f9:d0:d4:27:8e:d8:a8:8c:d4:0e:ad:b2:17:e0:33:54: fa:98:0b:2b:6e:6a:91:c5:2c:c9:2f:4b:14:8d:06:ed:8a:9b: 00:7e:a6:d0:a1:9e:60:8a:f1:d2:15:b9:83:f7:8a:53:b9:2a: d8:84:d1:25:56:4f:d0:7b:ff:2b:d9:56:2e:63:3e:ed:c3:60: f9:1b:ad:08:63:47:9f:f0:15:2e:1d:c6:d7:75:b6:4c:6c:38: 86:e5:f7:21:30:33:c8:1d:65:48:59:a4:ee:8c:94:fe:80:63: 30:92:14:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiHzH8NYma8ODxgJrX+gV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjUwOTA3MDMwMTMzWhcNMjUwOTA4MDMwMTMzWjAzMTEwLwYDVQQD EygwMWRiODY5MTY0ZDk2MTQ2NzFmM2NkZmY5Njc1M2Q4MTJiM2I3MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2hDGVdXmNoeauZAlFTWfUADF014 L/lZhfWTJbYuguZ1H8kvqLuytmbPUKN/44Lv0Z09jUSxzF+OCT9I8aw76sT9cOn1 UGLYcmBhHGs8/TZGs5QD6FD4nFrm5zrgG0righj2N/qIB3ufHCnYQsp9UURYioCU wMOyMLeJCbFyJOqVL2n07Q9sKGLaphMqTSHS0YPNSyIIkj2XYL7fXJSpndDdCPdU Xh/kDS0eNHvWCh3sOnRbtlr05797meLLF43v2WBxslrWOweq7vBiPY+fVNvjpDmW MY7yLZRBihFmqy52EXXa1gL5q81KOEAzeuXjLz48v+CSMSeTSxIMMDtyzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHbhpFk2WFGcfPN/5Z1PYErO3MQMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVbCwUEk qdeSEZQHIPEEmRpdylhxZt3QeGqcburm1zwwy4u0vhXbOk5nZAWg9uDoI/sm2HhZ wevJnGqxz7lzoUJBZIhSlO21qY92n0GPpQAjZPYtEdHXaG+ABg9ji3YChaJtRuuz O8wcZHxB4j83Gv97cs7Uab30z6MQ6I1rzRirFyLK3epdnaGtWxJFqLbz71f50NQn jtiojNQOrbIX4DNU+pgLK25qkcUsyS9LFI0G7YqbAH6m0KGeYIrx0hW5g/eKU7kq 2ITRJVZP0Hv/K9lWLmM+7cNg+RutCGNHn/AVLh3G13W2TGw4huX3ITAzyB1lSFmk 7oyU/oBjMJIUqg== -----END CERTIFICATE-----Generated at Sun Sep 7 10:06:20 2025 by rpki-client