$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: Gm1DZJZUhr/Arbl4Sle3aCfb0q29ejVtH1GLKriNEUI= Subject key identifier: C7:6F:1F:C9:3D:AB:0D:D6:F7:FA:63:41:17:31:FA:14:61:E9:61:61 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019A4E4FA975607C00AD96626DA7645AD1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 172D Signing time: Tue 04 Nov 2025 10:00:34 +0000 Manifest this update: Tue 04 Nov 2025 10:00:34 +0000 Manifest next update: Wed 05 Nov 2025 10:00:34 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: vNevB1xF-PoTwPfY-Z2XsIwL7H8.roa (hash: vt4+GN3bRBOdbYFvvPoZYOFbNH+Yt+zM3zx61HscKi0=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: 7VhwheV9TY2M3E+jMG2GDJOnGlOU0Q3Nr6gWRK55y9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:a9:75:60:7c:00:ad:96:62:6d:a7:64:5a:d1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Nov 4 10:00:34 2025 GMT Not After : Nov 5 10:00:34 2025 GMT Subject: CN=c76f1fc93dab0dd6f7fa63411731fa1461e96161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:03:41:38:ed:a1:be:06:e9:92:a1:6d:5c: 6b:a0:63:5a:16:69:40:d0:75:bd:e6:27:8a:4d:d8: 97:15:77:48:a9:8b:46:84:e0:1f:e1:77:7b:72:32: 77:07:27:78:2d:a6:bb:11:e9:74:07:f5:7c:4a:c1: 4a:39:36:30:09:41:f0:eb:85:17:ca:4b:ac:94:1e: c6:24:b6:5d:25:0b:de:b1:75:75:0c:70:cc:ff:36: 7c:f5:4d:ac:ea:45:58:fc:89:25:d1:e0:cf:30:99: 13:0f:13:18:59:ac:0b:8e:95:88:75:85:69:af:06: ff:fe:f0:50:53:d8:af:05:e4:53:70:5f:d7:39:32: d5:74:1e:da:b3:0d:ee:3b:da:e5:d8:30:01:ce:1b: 3c:92:63:73:c3:7c:33:56:3d:e5:4d:06:d2:d7:f0: 26:08:a3:15:29:9e:44:70:73:c8:83:bb:60:90:53: 54:9a:f5:d7:1d:3c:c6:37:6f:d7:61:5e:be:8c:21: c9:bf:c1:49:8d:a8:cb:15:28:27:eb:68:fe:76:8f: cf:4a:d7:42:e5:5e:8d:a7:ed:32:0c:96:de:06:e5: 06:44:b5:9c:df:93:0a:1f:c3:42:7f:d0:10:fa:49: d6:b1:d9:09:10:b0:df:d1:3c:fc:09:d7:b3:c8:9e: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6F:1F:C9:3D:AB:0D:D6:F7:FA:63:41:17:31:FA:14:61:E9:61:61 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fb:71:0d:26:db:af:6c:c6:6e:ad:d5:45:d8:ca:a4:65:7c: 33:be:48:f0:21:a3:81:8a:79:b9:df:26:24:44:7e:74:a0:48: c4:f9:6f:45:8d:8b:74:ce:c6:ab:c6:bf:0a:fc:cb:fd:f4:2c: e4:10:74:b9:ee:7c:94:4d:85:51:cc:a2:91:d5:1f:bf:90:d1: 3f:03:77:ae:00:3b:8a:39:0c:a0:0f:ca:4c:03:c6:5a:76:63: 26:f0:99:97:93:24:ae:29:05:81:56:fe:33:b6:3e:57:a2:8b: 22:d5:00:51:02:ae:93:9e:be:5c:a8:ce:5b:c6:07:a5:28:f3: 0d:ac:5d:0a:c9:78:72:76:38:c2:ca:76:d7:2a:f0:2e:31:33: e8:cb:0d:a1:64:40:15:2c:d8:f0:60:5c:b9:b7:8a:54:e1:c9: 8c:d9:e2:55:e7:2f:7f:85:f8:d8:39:af:b5:16:d0:ff:8d:69: f9:b7:53:f9:8a:d1:40:d7:d8:d0:b1:1c:78:06:a1:05:04:fb: 1f:d7:89:28:29:b1:64:97:44:4c:5e:6e:0b:b8:31:2b:51:a9: 92:80:f6:3f:d7:aa:7a:5b:c2:d0:88:15:38:3b:29:e5:5b:28: ec:14:69:f6:a1:a2:bd:36:c1:bb:fc:2c:98:68:92:c8:73:51: 36:65:51:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT6l1YHwArZZibadkWtHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUxMTA0MTAwMDM0WhcNMjUxMTA1MTAwMDM0WjAzMTEwLwYDVQQD EyhjNzZmMWZjOTNkYWIwZGQ2ZjdmYTYzNDExNzMxZmExNDYxZTk2MTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsYDQTjtob4G6ZKhbVxroGNaFmlA 0HW95ieKTdiXFXdIqYtGhOAf4Xd7cjJ3Byd4Laa7Eel0B/V8SsFKOTYwCUHw64UX ykuslB7GJLZdJQvesXV1DHDM/zZ89U2s6kVY/Ikl0eDPMJkTDxMYWawLjpWIdYVp rwb//vBQU9ivBeRTcF/XOTLVdB7asw3uO9rl2DABzhs8kmNzw3wzVj3lTQbS1/Am CKMVKZ5EcHPIg7tgkFNUmvXXHTzGN2/XYV6+jCHJv8FJjajLFSgn62j+do/PStdC 5V6Np+0yDJbeBuUGRLWc35MKH8NCf9AQ+knWsdkJELDf0Tz8CdezyJ6TuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdvH8k9qw3W9/pjQRcx+hRh6WFhMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/txDSbb r2zGbq3VRdjKpGV8M75I8CGjgYp5ud8mJER+dKBIxPlvRY2LdM7Gq8a/CvzL/fQs 5BB0ue58lE2FUcyikdUfv5DRPwN3rgA7ijkMoA/KTAPGWnZjJvCZl5MkrikFgVb+ M7Y+V6KLItUAUQKuk56+XKjOW8YHpSjzDaxdCsl4cnY4wsp21yrwLjEz6MsNoWRA FSzY8GBcubeKVOHJjNniVecvf4X42DmvtRbQ/41p+bdT+YrRQNfY0LEceAahBQT7 H9eJKCmxZJdETF5uC7gxK1GpkoD2P9eqelvC0IgVODsp5Vso7BRp9qGivTbBu/ws mGiSyHNRNmVRBQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:53:30 2025 by rpki-client