$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: 9vUwEUnqnLfT0EfE8izAcAp8nyA6Ngc3UB3UtwTvkyg= Subject key identifier: 1F:2E:C3:F4:84:13:29:D4:72:8B:9A:CC:C9:39:CA:A0:0A:D5:46:53 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019A4EF526DD237D1F53EC23DEE40461FE45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 172B Signing time: Tue 04 Nov 2025 13:01:20 +0000 Manifest this update: Tue 04 Nov 2025 13:01:20 +0000 Manifest next update: Wed 05 Nov 2025 13:01:20 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: PUskoUFvX+704IeH+b/YC39sfXEKd1vIatjy87eP+4s=) 2: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 3: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 5: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=) 6: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=) 7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 8: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=) 9: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=) 10: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=) 13: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=) 14: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=) 15: ji_T031R5JpC7beRNkBxDFafiVw.roa (hash: 1TeYXNj1EDP13nwTEBI09Lq7/ivNqTb2BlS99x0i2Hs=) 16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:26:dd:23:7d:1f:53:ec:23:de:e4:04:61:fe:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Nov 4 13:01:20 2025 GMT Not After : Nov 5 13:01:20 2025 GMT Subject: CN=1f2ec3f4841329d4728b9accc939caa00ad54653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:9a:55:c6:1b:28:37:29:1b:58:ab:20:c8: 03:29:74:72:e5:74:13:ba:1d:1f:8a:4d:6c:56:00: d5:82:8a:56:0b:4b:77:fb:43:07:c4:30:c1:6a:4b: bc:f1:e9:86:42:6d:fc:81:b0:8d:51:54:7b:7c:8e: 5e:bb:90:90:ee:c7:cd:d4:a8:3b:b8:de:6e:2f:fd: 00:09:a2:08:c4:76:9a:ec:d2:4e:98:cc:12:44:be: 9c:e3:88:ae:f0:74:33:b6:c2:d2:b1:90:73:38:c7: b5:32:08:80:b7:11:c5:f6:d2:5c:7e:d8:fc:cc:9f: e2:de:77:a8:ed:85:a4:69:d6:f4:ea:73:d3:9c:13: b4:35:75:ca:9c:40:85:3e:3d:bc:ff:3b:26:68:35: c3:f0:a2:ef:41:f1:ff:0d:49:ca:af:fd:09:df:eb: a9:a9:31:11:01:3a:d5:18:4d:b6:cd:09:c6:28:1f: 5d:d9:c0:e3:c4:82:21:65:ac:76:0a:c7:8d:a7:a7: 3a:a3:93:e5:e3:f0:f7:36:26:1a:61:11:cb:3f:f5: c0:cb:3d:c9:f5:de:b1:b8:b1:ed:18:a4:42:9e:44: bb:32:f2:63:4f:37:54:97:62:a6:06:30:d3:6f:7a: 1b:0f:fd:f6:1a:12:6f:66:86:39:81:97:b6:0e:41: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2E:C3:F4:84:13:29:D4:72:8B:9A:CC:C9:39:CA:A0:0A:D5:46:53 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4d:70:32:84:e0:29:2e:7f:75:60:23:24:ca:07:fd:65:e7: d4:f6:fa:b0:e7:1f:f2:19:be:45:e3:b5:58:c5:75:93:e0:79: 30:ee:a4:a2:43:bf:e2:bf:65:a4:8e:79:80:40:0d:f2:1d:da: 87:6d:52:db:88:ce:db:a2:70:87:e1:fb:8b:45:ed:8a:f0:8d: d0:b6:05:b1:50:77:c8:a9:9e:f0:e7:a6:33:4d:9a:85:8a:29: 27:48:2a:6b:95:c9:ba:d6:6a:08:4e:73:15:c7:ff:7d:e9:9c: b9:ff:51:88:e9:5c:55:1f:6b:bf:73:08:af:f6:0b:c5:73:87: 36:52:c9:c6:f4:c9:45:b4:ec:bd:7b:ac:ef:8e:b3:0c:e2:ca: de:ba:ec:c7:6f:9e:1d:cb:fd:99:8f:20:30:1f:07:f8:f5:2a: b7:5f:94:84:a4:31:3b:d3:6d:bc:8c:bd:1a:e4:ef:7a:9f:64: 59:15:7f:13:b4:1b:4a:07:2f:32:e0:1c:f5:22:43:e7:3a:8b: 33:c5:89:6b:a1:d4:96:ed:33:ba:60:ef:3a:b0:72:b0:c0:2c: 28:05:f7:45:bb:a4:ef:00:7c:79:17:1c:0c:62:dc:c7:ee:5e: a7:9f:c0:4a:db:cf:49:30:29:ba:f1:c8:7e:09:38:a9:38:b0: 2e:79:3e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9SbdI30fU+wj3uQEYf5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMTA0MTMwMTIwWhcNMjUxMTA1MTMwMTIwWjAzMTEwLwYDVQQD EygxZjJlYzNmNDg0MTMyOWQ0NzI4YjlhY2NjOTM5Y2FhMDBhZDU0NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsleaVcYbKDcpG1irIMgDKXRy5XQT uh0fik1sVgDVgopWC0t3+0MHxDDBaku88emGQm38gbCNUVR7fI5eu5CQ7sfN1Kg7 uN5uL/0ACaIIxHaa7NJOmMwSRL6c44iu8HQztsLSsZBzOMe1MgiAtxHF9tJcftj8 zJ/i3neo7YWkadb06nPTnBO0NXXKnECFPj28/zsmaDXD8KLvQfH/DUnKr/0J3+up qTERATrVGE22zQnGKB9d2cDjxIIhZax2CseNp6c6o5Pl4/D3NiYaYRHLP/XAyz3J 9d6xuLHtGKRCnkS7MvJjTzdUl2KmBjDTb3obD/32GhJvZoY5gZe2DkFmWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8uw/SEEynUcouazMk5yqAK1UZTMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeE1wMoTg KS5/dWAjJMoH/WXn1Pb6sOcf8hm+ReO1WMV1k+B5MO6kokO/4r9lpI55gEAN8h3a h21S24jO26Jwh+H7i0XtivCN0LYFsVB3yKme8OemM02ahYopJ0gqa5XJutZqCE5z Fcf/femcuf9RiOlcVR9rv3MIr/YLxXOHNlLJxvTJRbTsvXus746zDOLK3rrsx2+e Hcv9mY8gMB8H+PUqt1+UhKQxO9NtvIy9GuTvep9kWRV/E7QbSgcvMuAc9SJD5zqL M8WJa6HUlu0zumDvOrBysMAsKAX3Rbuk7wB8eRccDGLcx+5ep5/AStvPSTApuvHI fgk4qTiwLnk+Gw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:29 2025 by rpki-client