$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: 9ZPP/3IEQXxeaEF4rtVe8IfHvpAKJ3FS03by8bw+pZw= Subject key identifier: 09:C2:C3:16:6F:91:3A:7D:EF:DA:B1:CA:56:3F:3B:46:52:45:AE:56 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019A4DE164AF7E0DBBB02F417F3DA0D4D178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 172F Signing time: Tue 04 Nov 2025 08:00:08 +0000 Manifest this update: Tue 04 Nov 2025 08:00:08 +0000 Manifest next update: Wed 05 Nov 2025 08:00:08 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: UIhRabg+lFYKWnFUtLkiQPPNOU6hqiSpFZpjQC48jRg=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:64:af:7e:0d:bb:b0:2f:41:7f:3d:a0:d4:d1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Nov 4 08:00:08 2025 GMT Not After : Nov 5 08:00:08 2025 GMT Subject: CN=09c2c3166f913a7defdab1ca563f3b465245ae56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:ec:96:0b:87:24:6a:c2:5b:c7:7b:ca:83: b6:69:f9:02:67:47:7c:09:4b:ec:26:76:1d:41:a8: 44:27:d4:11:57:ed:72:31:56:08:57:8d:c6:6e:30: 0b:4b:42:7b:66:30:65:a7:29:07:f4:c8:de:72:9d: 2d:d3:89:30:d0:47:64:ea:76:ae:7a:d2:1f:16:8b: eb:02:5d:f6:63:9f:ba:4e:36:d8:8a:a2:a4:e1:5f: d8:85:c4:57:c7:5c:6e:b5:ee:da:5d:05:dc:4c:f5: 4e:ae:bb:49:86:a1:3f:04:21:88:3e:81:bf:18:ae: fd:79:7f:47:8c:24:53:6c:aa:b0:e6:10:3e:25:b6: 6a:f7:6f:2b:f2:63:a8:c4:a8:c0:81:32:24:b8:1d: d5:8d:b4:ef:19:08:26:75:d3:1f:ba:f4:77:51:9c: 32:63:3c:44:be:b7:df:35:62:83:1e:b7:7a:95:7b: 6e:60:a5:64:da:87:69:07:0d:2a:6f:fe:ff:05:a7: 05:c4:2f:53:4a:fb:73:6d:e1:7b:c9:38:53:e0:73: fc:ce:65:43:5b:ba:2d:4b:ed:86:41:cd:09:3a:13: 48:58:24:33:52:49:52:d6:ac:5a:a7:df:8f:be:40: 09:49:18:ea:26:da:57:f7:0c:ba:ea:df:49:0a:49: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C2:C3:16:6F:91:3A:7D:EF:DA:B1:CA:56:3F:3B:46:52:45:AE:56 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2e:1d:2b:46:8f:15:5d:0e:48:de:3d:36:4a:1a:60:16:7c: d8:f1:18:2f:0d:a8:1a:da:a9:8c:49:03:3c:5b:44:1c:49:b1: ef:03:08:11:f2:90:f3:0f:a6:28:df:7f:b9:7b:dd:e3:97:e4: 28:cf:3e:1a:11:c1:74:71:5b:62:e7:45:c2:b2:de:3e:77:f7: 15:ae:fa:92:a4:a7:f5:0d:ed:ba:18:59:a9:07:63:c3:91:68: f5:e3:00:91:39:d1:ca:87:b1:3f:48:1a:bc:51:f6:14:79:e8: 1f:62:85:7a:df:06:ed:be:35:02:00:16:85:aa:47:f5:5b:e2: 05:ee:42:29:84:66:22:bb:64:d1:48:da:9f:fa:7f:77:69:89: 3f:8d:1b:58:a1:d6:36:92:b4:f4:80:c5:99:c8:29:a1:60:df: f2:68:c2:62:59:fb:66:4f:07:c6:58:35:20:2f:a8:18:5f:d7: 85:5e:d9:1c:8f:62:f6:27:ee:4e:06:fb:13:27:23:86:e5:56: 74:3e:4e:d4:d8:39:0b:92:ef:36:46:63:95:57:97:fc:f1:53: b6:ad:32:37:94:fa:89:1e:53:31:6a:bb:7e:7c:37:2f:f0:54: 03:ea:0a:ec:4c:db:17:bd:d4:00:7e:d1:04:a4:17:71:a1:ab: 15:dc:b4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4WSvfg27sC9Bfz2g1NF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUxMTA0MDgwMDA4WhcNMjUxMTA1MDgwMDA4WjAzMTEwLwYDVQQD EygwOWMyYzMxNjZmOTEzYTdkZWZkYWIxY2E1NjNmM2I0NjUyNDVhZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w/slguHJGrCW8d7yoO2afkCZ0d8 CUvsJnYdQahEJ9QRV+1yMVYIV43GbjALS0J7ZjBlpykH9Mjecp0t04kw0Edk6nau etIfFovrAl32Y5+6TjbYiqKk4V/YhcRXx1xute7aXQXcTPVOrrtJhqE/BCGIPoG/ GK79eX9HjCRTbKqw5hA+JbZq928r8mOoxKjAgTIkuB3VjbTvGQgmddMfuvR3UZwy YzxEvrffNWKDHrd6lXtuYKVk2odpBw0qb/7/BacFxC9TSvtzbeF7yThT4HP8zmVD W7otS+2GQc0JOhNIWCQzUklS1qxap9+PvkAJSRjqJtpX9wy66t9JCkk7AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnCwxZvkTp979qxylY/O0ZSRa5WMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArS4dK0aP FV0OSN49NkoaYBZ82PEYLw2oGtqpjEkDPFtEHEmx7wMIEfKQ8w+mKN9/uXvd45fk KM8+GhHBdHFbYudFwrLePnf3Fa76kqSn9Q3tuhhZqQdjw5Fo9eMAkTnRyoexP0ga vFH2FHnoH2KFet8G7b41AgAWhapH9VviBe5CKYRmIrtk0Ujan/p/d2mJP40bWKHW NpK09IDFmcgpoWDf8mjCYln7Zk8Hxlg1IC+oGF/XhV7ZHI9i9ifuTgb7EycjhuVW dD5O1Ng5C5LvNkZjlVeX/PFTtq0yN5T6iR5TMWq7fnw3L/BUA+oK7EzbF73UAH7R BKQXcaGrFdy02w== -----END CERTIFICATE-----Generated at Tue Nov 4 18:05:08 2025 by rpki-client