$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft File: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft (raw, json) Hash identifier: ZK6opcPTO9ZH1GVQyXvonRBM9QIR4MgXwGpqFMnumtA= Subject key identifier: 6B:14:05:41:2C:B7:A8:9B:8E:8B:69:E8:E4:88:44:E3:F2:41:99:6A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 69E9F4BF5E49E9866F436F5F36E96B23C8ABEC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft Manifest number: 14 Signing time: Sat 06 Sep 2025 21:33:56 +0000 Manifest this update: Sat 06 Sep 2025 21:28:56 +0000 Manifest next update: Sun 07 Sep 2025 21:34:56 +0000 Files and hashes: 1: 3134372e3132352e3232382e302f32322d3234203d3e2034373636.roa (hash: PVVcyUK2P5//ata0jnwAz9lNNY70RdkLtJoVoUxLuN0=) 2: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl (hash: ylS6IzchftKB7PIjPpEQoOwjkpt5P/9FscK03aiPNiU=) 3: 3134372e3132352e3132382e302f31382d3234203d3e20383334.roa (hash: MXQQAdZ8/q0SSX+7EZEMmeULL4t51ObUNh0wwFo4T1Y=) 4: 3134372e3132352e3234302e302f32302d3234203d3e20383334.roa (hash: mnT59Zk6vK+EObn+Uh5rjMs0THRFSLoujmDqi34ugi4=) 5: 3134372e3132352e302e302f31372d3137203d3e2032343838.roa (hash: EoI+/sdnscPf0nnBKFSXR5qMiqWVqm1nNdIQnTkhnSs=) 6: 3134372e3132352e3232342e302f32322d3234203d3e20383334.roa (hash: 7BQpsp5b87Pd5nAPC5RJIQ0J7871i9zQkSyc3r5OJHE=) 7: 3134372e3132352e3233322e302f32312d3234203d3e20383334.roa (hash: PzCUgTkBwW8VHpbwE6woq9A2p7hCBp4BqcDYp7cL7lU=) 8: 3134372e3132352e3139322e302f31392d3234203d3e20383334.roa (hash: yJCm62X6spaLh/9t1jxflGgqNnHd/f8JdFGtJRue5Gc=) 9: 323030313a3637633a316237303a3a2f34382d3438203d3e2032343838.roa (hash: nLc6b+BJhcWqteWvSt4lz7/51CfameMyZ399v4d2P0c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 21:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e9:f4:bf:5e:49:e9:86:6f:43:6f:5f:36:e9:6b:23:c8:ab:ec:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Sep 6 21:28:56 2025 GMT Not After : Sep 7 21:34:56 2025 GMT Subject: CN=6B1405412CB7A89B8E8B69E8E48844E3F241996A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:3f:da:ec:4a:cb:3e:ac:f5:01:c1:ae:57: 11:3e:47:cc:f5:97:9f:52:92:16:b7:0c:03:af:5f: 56:f7:dc:87:7a:0a:97:02:74:f6:af:b0:b9:17:a6: 30:f4:8a:ce:6d:1b:fb:9e:4a:60:f2:23:53:7c:2d: b3:33:2e:68:58:28:54:1c:20:b0:d6:16:c5:8c:32: 27:15:47:b8:4b:c0:98:4e:a3:30:be:40:63:c9:bc: e6:79:bd:55:4b:6b:3d:8a:22:65:19:04:b9:11:2d: 4b:2d:c9:4f:73:3b:1a:d6:9d:a4:25:d9:98:27:0c: 3e:f4:94:8c:28:76:b1:4c:c6:80:dd:95:46:45:ae: 1e:88:15:34:ca:a1:b3:1a:fa:00:b9:19:40:a1:8c: f6:22:e2:7b:75:94:e9:29:f5:02:a1:e6:3d:4a:d7: ae:65:e2:d0:a6:c6:73:03:55:2a:07:3e:f3:0c:b0: 99:35:7a:7b:81:29:d9:41:d4:70:69:81:80:38:f8: fc:e2:94:85:73:b0:6d:37:7b:6b:43:f0:77:00:4a: 84:f9:bd:0f:4e:55:40:76:91:22:2c:cd:94:72:d2: 76:ad:b1:72:fd:d8:f3:70:8e:b6:4a:61:3b:6e:2f: 6f:bb:e1:49:ca:d7:b7:33:f1:22:87:7d:44:8c:21: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:14:05:41:2C:B7:A8:9B:8E:8B:69:E8:E4:88:44:E3:F2:41:99:6A X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:47:17:13:26:96:5c:12:f1:29:be:3a:9f:d2:97:c3:01:98: e1:c5:ed:e3:97:14:b8:ba:77:3e:5d:c5:57:a1:16:eb:4d:39: 80:c7:90:27:19:4e:1c:91:08:a6:e3:3c:d8:b8:67:89:b7:eb: 80:73:66:c5:0f:76:5e:18:80:71:46:67:9e:b4:c0:44:52:7b: a1:b6:b8:cc:c3:d1:09:32:ca:f0:1b:8f:b4:99:9b:f2:f0:5c: c6:69:83:8c:19:52:52:8f:7a:f5:57:38:a1:74:c3:c3:cf:9e: c6:e6:56:a9:46:2a:94:50:5d:43:ab:23:04:84:b8:9b:ce:78: 25:4f:ff:53:d8:b8:d6:e7:4e:ec:0a:3c:c9:2d:66:de:16:35: ad:6c:6b:ae:bf:d6:f8:e3:6f:69:e2:1d:3d:5b:97:4e:c0:0c: 66:c5:85:fc:8d:6e:61:7a:85:97:94:c9:2b:85:32:3e:a3:a9: f7:eb:10:f6:fd:19:22:52:48:0e:92:5c:84:95:c5:6a:88:ff: 74:2f:bc:bf:01:d0:ca:bf:29:fb:c2:e8:f0:8c:75:c1:c9:df: 89:81:fb:7d:99:38:2a:c8:34:91:76:80:96:13:1f:b5:39:6d: dc:dd:88:5f:b2:42:d7:1e:9a:95:3d:70:b2:4f:f8:b3:f1:f2: 26:11:6e:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaen0v15J6YZvQ29fNulrI8ir7EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTA5MDYyMTI4NTZaFw0yNTA5MDcyMTM0NTZaMDMxMTAvBgNV BAMTKDZCMTQwNTQxMkNCN0E4OUI4RThCNjlFOEU0ODg0NEUzRjI0MTk5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Vz/a7ErLPqz1AcGuVxE+R8z1 l59Skha3DAOvX1b33Id6CpcCdPavsLkXpjD0is5tG/ueSmDyI1N8LbMzLmhYKFQc ILDWFsWMMicVR7hLwJhOozC+QGPJvOZ5vVVLaz2KImUZBLkRLUstyU9zOxrWnaQl 2ZgnDD70lIwodrFMxoDdlUZFrh6IFTTKobMa+gC5GUChjPYi4nt1lOkp9QKh5j1K 165l4tCmxnMDVSoHPvMMsJk1enuBKdlB1HBpgYA4+PzilIVzsG03e2tD8HcASoT5 vQ9OVUB2kSIszZRy0natsXL92PNwjrZKYTtuL2+74UnK17cz8SKHfUSMIefJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaxQFQSy3qJuOi2no5IhE4/JBmWowHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2QzODg0YS1j Mzg1LTRiNjUtOTg2Ni00ZjYzODMxNzI2NzIvMC82Q0NEQzgyQkFFNzgwMEY3RDUw N0M3Mzc5MjQ4NjlCREVCNUE3NkVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0cXEyaWXBLxKb46n9KX wwGY4cXt45cUuLp3Pl3FV6EW6005gMeQJxlOHJEIpuM82LhnibfrgHNmxQ92XhiA cUZnnrTARFJ7oba4zMPRCTLK8BuPtJmb8vBcxmmDjBlSUo969Vc4oXTDw8+exuZW qUYqlFBdQ6sjBIS4m854JU//U9i41udO7Ao8yS1m3hY1rWxrrr/W+ONvaeIdPVuX TsAMZsWF/I1uYXqFl5TJK4UyPqOp9+sQ9v0ZIlJIDpJchJXFaoj/dC+8vwHQyr8p +8Lo8Ix1wcnfiYH7fZk4Ksg0kXaAlhMftTlt3N2IX7JC1x6alT1wsk/4s/HyJhFu CA== -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:01 2025 by rpki-client