$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: XNhKrG25daTKBtTBD+aX25aksXcMYohSXwpkuHFq1Is= Subject key identifier: C6:40:99:8A:01:51:06:2F:30:1F:AE:2E:6D:AF:5D:11:B5:16:4D:AE Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019A50E380280650583FE1036B4A478088D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 172C Signing time: Tue 04 Nov 2025 22:01:17 +0000 Manifest this update: Tue 04 Nov 2025 22:01:17 +0000 Manifest next update: Wed 05 Nov 2025 22:01:17 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: HUKZLRqu5Yv91mn+oExSH326Ezxg1ersm9CD/4FAzjA=) 2: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 3: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 5: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=) 6: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=) 7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 8: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=) 9: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=) 10: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=) 13: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=) 14: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=) 15: ji_T031R5JpC7beRNkBxDFafiVw.roa (hash: 1TeYXNj1EDP13nwTEBI09Lq7/ivNqTb2BlS99x0i2Hs=) 16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:e3:80:28:06:50:58:3f:e1:03:6b:4a:47:80:88:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Nov 4 22:01:17 2025 GMT Not After : Nov 5 22:01:17 2025 GMT Subject: CN=c640998a0151062f301fae2e6daf5d11b5164dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:d7:0b:a9:01:f0:b0:8f:78:b6:8e:7a:f8: 58:11:eb:1c:90:26:61:be:a1:a1:ed:20:9a:81:b0: cc:f8:01:bc:b8:b9:58:11:d9:72:05:dc:4d:f7:12: eb:5a:5f:13:31:45:30:48:4c:4b:1c:9b:f5:0f:92: df:f3:62:97:9a:40:46:1e:75:c4:1a:e5:62:96:08: 55:12:be:53:28:43:dc:16:84:7e:28:53:6e:74:4a: 5e:bb:82:20:1e:da:d8:de:7c:66:35:e0:07:e5:7a: 01:e5:f3:cb:fb:44:b4:32:20:63:58:1e:85:21:b3: 0c:3d:d5:c2:6e:28:1c:64:f9:78:86:00:5a:ca:d1: bc:b9:3c:e6:74:29:4c:c6:98:67:16:fb:c7:39:d5: e0:c2:96:ef:75:92:25:6d:e0:1c:dc:db:e3:4c:db: ef:eb:de:d4:59:d7:a5:c5:86:30:46:8a:b4:da:4b: 57:2b:6e:6f:bb:0d:0b:df:75:05:5e:1f:9b:e7:3a: 04:29:60:c6:c6:50:76:24:53:b2:b8:e6:4a:d1:1c: b5:36:01:d2:a8:1d:58:c2:85:06:73:9d:85:9a:a1: bb:80:10:91:6f:6e:a9:90:b9:60:3c:43:c4:2c:bb: 09:f3:fb:41:bf:14:2a:e3:ee:d5:0f:04:2a:aa:bf: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:40:99:8A:01:51:06:2F:30:1F:AE:2E:6D:AF:5D:11:B5:16:4D:AE X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:6d:e5:88:91:3e:67:89:fe:f1:a6:66:26:be:ac:76:81: 97:f3:c8:44:60:83:6c:a0:23:a7:bd:33:88:24:bb:47:db:98: 2f:c1:81:4b:3d:46:0b:87:07:b5:1d:44:c5:8b:1a:85:d2:ba: 9f:6c:f0:47:dc:0f:2c:6c:eb:4d:fc:b8:81:9c:22:f4:df:c8: 5b:e8:a5:40:3c:25:86:d1:2c:23:06:c2:dd:31:8a:6a:75:1b: fd:bb:a1:42:ec:9d:b5:f0:b6:9d:88:b6:1b:c4:10:ee:e8:17: a1:ae:ca:c6:85:eb:b4:8e:7c:6a:74:6e:28:d5:d5:b7:ca:59: 0e:22:13:a3:30:0c:a2:56:fd:bb:6f:aa:c9:6a:bb:af:e4:df: f6:ea:0b:c6:e0:50:85:2a:b3:79:d7:0c:13:ff:75:8a:cd:03: ce:97:5e:74:d2:cd:f8:f4:90:21:52:06:ab:a6:a3:c1:da:00: 47:3f:45:1d:a3:47:88:fe:2d:9d:76:46:37:91:f3:e2:42:61: 9e:50:3a:9b:69:42:44:24:f4:ba:85:f5:c8:82:9a:70:5d:49: 3b:33:04:1e:6d:f4:11:ac:a4:8e:ce:07:b8:26:27:aa:c5:d3: 23:c9:98:15:06:06:46:7b:6c:1e:84:60:79:03:bd:17:c5:fe: 7f:36:cf:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQ44AoBlBYP+EDa0pHgIjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMTA0MjIwMTE3WhcNMjUxMTA1MjIwMTE3WjAzMTEwLwYDVQQD EyhjNjQwOTk4YTAxNTEwNjJmMzAxZmFlMmU2ZGFmNWQxMWI1MTY0ZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFbXC6kB8LCPeLaOevhYEesckCZh vqGh7SCagbDM+AG8uLlYEdlyBdxN9xLrWl8TMUUwSExLHJv1D5Lf82KXmkBGHnXE GuVilghVEr5TKEPcFoR+KFNudEpeu4IgHtrY3nxmNeAH5XoB5fPL+0S0MiBjWB6F IbMMPdXCbigcZPl4hgBaytG8uTzmdClMxphnFvvHOdXgwpbvdZIlbeAc3NvjTNvv 697UWdelxYYwRoq02ktXK25vuw0L33UFXh+b5zoEKWDGxlB2JFOyuOZK0Ry1NgHS qB1YwoUGc52FmqG7gBCRb26pkLlgPEPELLsJ8/tBvxQq4+7VDwQqqr+yFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZAmYoBUQYvMB+uLm2vXRG1Fk2uMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDVt5YiR PmeJ/vGmZia+rHaBl/PIRGCDbKAjp70ziCS7R9uYL8GBSz1GC4cHtR1ExYsahdK6 n2zwR9wPLGzrTfy4gZwi9N/IW+ilQDwlhtEsIwbC3TGKanUb/buhQuydtfC2nYi2 G8QQ7ugXoa7KxoXrtI58anRuKNXVt8pZDiITozAMolb9u2+qyWq7r+Tf9uoLxuBQ hSqzedcME/91is0DzpdedNLN+PSQIVIGq6ajwdoARz9FHaNHiP4tnXZGN5Hz4kJh nlA6m2lCRCT0uoX1yIKacF1JOzMEHm30Eaykjs4HuCYnqsXTI8mYFQYGRntsHoRg eQO9F8X+fzbPEg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:09:45 2025 by rpki-client