$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: JZ5cIBdtiQ2ZRz9eHfxkSjOpHMy0+HRSklNFPxVGXrE= Subject key identifier: 06:6A:F1:AE:E0:EC:72:45:41:EF:E0:A5:F2:5B:02:D7:B3:B8:F2:93 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019930B6053F79DA74BCBDA465E2D04EEE6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 1253 Signing time: Tue 09 Sep 2025 23:00:59 +0000 Manifest this update: Tue 09 Sep 2025 23:00:59 +0000 Manifest next update: Wed 10 Sep 2025 23:00:59 +0000 Files and hashes: 1: 53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa (hash: hcmIxv0Tq4ILIXkoyytgzjVrkSlA1EbanTY+o8bnAF0=) 2: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 3: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: 7EmlZRAkVGwoocmfiC3Nwe4llelc76wv2gbMySjX500=) 4: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 5: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 6: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 7: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 8: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 9: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 10: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 11: wmru7gkbD0Q5jhTBil0o1n-XXZY.roa (hash: aLSYcM7LxiQjHNTeSZsVR17gcFojmK5wcKMA+W/GnL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:30:b6:05:3f:79:da:74:bc:bd:a4:65:e2:d0:4e:ee:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Sep 9 23:00:59 2025 GMT Not After : Sep 10 23:00:59 2025 GMT Subject: CN=066af1aee0ec724541efe0a5f25b02d7b3b8f293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:c4:01:c5:bf:ab:16:7e:f9:9b:0d:c6:d8: 2f:ec:ea:6f:54:bd:0f:bb:eb:3b:6f:e4:8d:c0:13: b8:4e:de:1d:47:5d:27:4d:e7:3a:9b:47:65:ca:31: 14:bb:15:ec:04:d2:8e:08:df:5a:c1:ff:77:c3:6c: bd:af:07:2d:e7:46:3f:17:b4:6b:5c:90:cd:79:fd: 18:9d:29:d8:e8:e4:64:c0:11:32:96:f2:18:06:7f: fc:7a:bb:df:cc:06:bc:74:a4:09:72:08:c4:86:14: fc:26:96:a2:39:34:a9:c2:3d:77:47:d7:26:a9:0d: 28:14:93:df:38:57:29:e5:0a:9b:12:e5:3c:87:2f: 95:c4:77:aa:d3:eb:0f:69:ef:06:c8:1d:dc:b7:41: 82:e0:13:bb:ec:14:93:53:16:4a:8f:6b:c2:59:ce: 13:6a:19:c7:82:15:7a:c4:24:63:0a:27:3d:92:81: a7:74:ff:f2:22:39:7b:4c:e7:5d:60:17:16:65:10: ef:5d:53:6c:08:91:ce:51:e0:8c:08:96:a3:f1:7b: f3:3b:16:61:6e:7f:4d:52:f2:48:a3:df:cd:1b:5a: 42:f1:9a:b8:77:13:7a:9c:a9:22:f4:2e:09:3f:d5: 5c:73:69:e8:0c:22:10:77:e6:a1:2c:4d:b9:a3:92: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6A:F1:AE:E0:EC:72:45:41:EF:E0:A5:F2:5B:02:D7:B3:B8:F2:93 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e2:e1:a3:ce:b8:f1:64:a8:48:88:4c:ea:14:2f:23:0a:de: ee:77:e6:60:0c:35:16:8c:ea:fe:f6:5c:4e:c5:0d:3a:76:aa: be:d1:7f:aa:ef:4d:1d:89:45:af:aa:b7:c7:08:08:70:ba:f5: 67:4f:4a:51:9d:9d:00:03:0c:6d:26:b1:f6:7a:7e:42:22:1a: c0:02:52:62:f9:ec:80:7c:74:82:b7:36:7c:4f:9d:6d:91:72: 53:43:76:37:d7:8c:75:4c:17:85:c3:3a:91:9b:11:98:5e:b9: 91:91:6b:cb:77:a1:be:a9:46:30:fe:16:26:35:46:97:db:eb: 8f:7e:7e:94:75:ec:15:da:ec:ca:0d:bc:fa:b8:27:68:4a:bf: a8:99:f0:04:07:a1:fb:00:d9:f7:01:55:6b:d7:42:f0:88:1f: b8:cd:ce:92:e1:20:4a:28:dd:61:a4:9c:fc:4c:bb:1e:3f:72: 74:c8:d3:eb:40:04:7b:9e:50:59:8c:a3:2e:87:99:d9:32:c4: 51:39:a7:4a:b8:b3:20:38:cc:00:9a:86:7a:84:3e:2a:93:b3: fe:5e:d8:18:45:d2:44:3c:e5:71:d5:f7:bf:b7:57:3b:72:b5: 14:d5:31:c9:70:57:09:24:ef:ac:f2:76:32:ec:7b:fe:a6:b9: 10:b4:d6:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkwtgU/edp0vL2kZeLQTu5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUwOTA5MjMwMDU5WhcNMjUwOTEwMjMwMDU5WjAzMTEwLwYDVQQD EygwNjZhZjFhZWUwZWM3MjQ1NDFlZmUwYTVmMjViMDJkN2IzYjhmMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2zEAcW/qxZ++ZsNxtgv7OpvVL0P u+s7b+SNwBO4Tt4dR10nTec6m0dlyjEUuxXsBNKOCN9awf93w2y9rwct50Y/F7Rr XJDNef0YnSnY6ORkwBEylvIYBn/8ervfzAa8dKQJcgjEhhT8JpaiOTSpwj13R9cm qQ0oFJPfOFcp5QqbEuU8hy+VxHeq0+sPae8GyB3ct0GC4BO77BSTUxZKj2vCWc4T ahnHghV6xCRjCic9koGndP/yIjl7TOddYBcWZRDvXVNsCJHOUeCMCJaj8XvzOxZh bn9NUvJIo9/NG1pC8Zq4dxN6nKki9C4JP9Vcc2noDCIQd+ahLE25o5JFuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZq8a7g7HJFQe/gpfJbAtezuPKTMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeLho864 8WSoSIhM6hQvIwre7nfmYAw1Fozq/vZcTsUNOnaqvtF/qu9NHYlFr6q3xwgIcLr1 Z09KUZ2dAAMMbSax9np+QiIawAJSYvnsgHx0grc2fE+dbZFyU0N2N9eMdUwXhcM6 kZsRmF65kZFry3ehvqlGMP4WJjVGl9vrj35+lHXsFdrsyg28+rgnaEq/qJnwBAeh +wDZ9wFVa9dC8IgfuM3OkuEgSijdYaSc/Ey7Hj9ydMjT60AEe55QWYyjLoeZ2TLE UTmnSrizIDjMAJqGeoQ+KpOz/l7YGEXSRDzlcdX3v7dXO3K1FNUxyXBXCSTvrPJ2 Mux7/qa5ELTWDQ== -----END CERTIFICATE-----Generated at Wed Sep 10 04:02:43 2025 by rpki-client