$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: YRUG/7jMqsW7W+5yWsgQRqFfgty8d0lXT57qDib+p7A= Subject key identifier: F8:93:7D:AF:8A:38:E3:E4:E3:EE:AB:5B:F8:E5:AA:CB:BD:BB:97:C6 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019A4F2B8D02DA117989BB77087CD3538BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 1437 Signing time: Tue 04 Nov 2025 14:00:45 +0000 Manifest this update: Tue 04 Nov 2025 14:00:45 +0000 Manifest next update: Wed 05 Nov 2025 14:00:45 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 0FFNQw8+du1giVnfA4uJrCGTQss77oRTtHf7dMGilEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:8d:02:da:11:79:89:bb:77:08:7c:d3:53:8b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Nov 4 14:00:45 2025 GMT Not After : Nov 5 14:00:45 2025 GMT Subject: CN=f8937daf8a38e3e4e3eeab5bf8e5aacbbdbb97c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f6:f6:84:e6:cb:33:b7:ac:2b:a8:c5:f8:e5: f5:e3:8f:6d:53:db:3c:54:c2:36:7b:e8:f0:5f:21: 10:b3:2c:48:b2:7d:9c:a1:35:b4:c1:ee:ee:4a:92: 9b:7e:0d:a2:91:34:7f:a3:58:6c:78:b7:66:55:da: 2f:5f:c4:63:96:b7:9c:c3:43:ea:65:3e:0a:e1:c3: 2b:89:29:8a:e2:ec:c9:8b:87:26:6d:8a:07:c6:eb: 9e:38:03:9f:8f:90:84:e2:6f:91:a9:1e:89:a9:36: 4c:7d:f9:87:fc:be:cf:c4:8c:8d:c7:68:9b:19:6f: 0e:92:39:8d:96:25:33:55:74:f4:fd:9b:bd:f4:13: f1:9c:8f:45:eb:4c:20:96:f9:e6:1f:da:ec:ae:e7: 32:59:16:e7:99:ba:32:86:d6:b4:79:22:17:f3:23: e9:18:f8:82:65:38:69:96:30:9e:0a:30:df:72:eb: b8:70:b1:2f:ee:da:ce:79:c0:b3:e8:0b:10:e5:4e: 12:8e:66:93:89:88:59:21:cf:db:40:ab:0b:92:76: 8d:54:3f:16:5d:5f:1d:a6:3f:71:10:16:d8:05:4c: 16:bb:b8:fb:03:80:e8:a0:6c:e4:31:97:52:96:ae: 57:8e:eb:b4:c3:4e:74:db:78:85:8f:73:96:b4:a5: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:93:7D:AF:8A:38:E3:E4:E3:EE:AB:5B:F8:E5:AA:CB:BD:BB:97:C6 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:2c:82:9a:f6:cc:31:1a:28:1c:9b:e8:97:55:80:d6:b9: 36:9b:03:16:97:a4:76:68:80:96:f4:29:24:a3:5e:f7:e3:8c: f0:85:4b:31:8d:ef:32:c3:3f:d5:ea:3d:30:de:ec:23:67:03: 9b:53:01:20:d2:4a:36:65:c7:1c:22:16:e4:63:2d:49:24:7b: 1a:3b:50:7e:d1:95:f4:ae:3a:66:c9:5a:91:70:25:ee:34:39: 79:a9:66:87:2c:e0:ea:5a:13:a9:a6:6c:20:d2:df:10:a1:d5: 0f:2f:30:16:b0:cd:65:db:c4:c6:d4:97:62:56:76:44:7f:e2: e9:07:db:c9:e3:71:11:89:19:ac:ba:5c:13:03:7e:01:5c:37: 19:f9:a7:13:4f:8c:9f:54:83:2e:bc:68:14:98:c5:11:b6:ec: 90:b9:d4:3d:cd:21:74:50:11:2a:aa:30:43:e3:52:72:da:01: 83:4d:9a:7e:e9:e5:4c:ed:ee:14:aa:7c:79:3f:e1:9d:66:9a: ba:ad:a0:ea:5e:d0:89:a7:a4:15:73:ec:14:e7:8e:4a:8c:b7: 7e:07:a5:00:30:42:22:7a:89:97:52:7a:03:0b:11:39:ae:d6: 4b:dc:51:57:99:b5:d8:8d:bc:c6:2c:f4:35:23:27:50:a5:fe: d8:22:57:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK40C2hF5ibt3CHzTU4vhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMTA0MTQwMDQ1WhcNMjUxMTA1MTQwMDQ1WjAzMTEwLwYDVQQD EyhmODkzN2RhZjhhMzhlM2U0ZTNlZWFiNWJmOGU1YWFjYmJkYmI5N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fb2hObLM7esK6jF+OX1449tU9s8 VMI2e+jwXyEQsyxIsn2coTW0we7uSpKbfg2ikTR/o1hseLdmVdovX8Rjlrecw0Pq ZT4K4cMriSmK4uzJi4cmbYoHxuueOAOfj5CE4m+RqR6JqTZMffmH/L7PxIyNx2ib GW8OkjmNliUzVXT0/Zu99BPxnI9F60wglvnmH9rsrucyWRbnmboyhta0eSIX8yPp GPiCZThpljCeCjDfcuu4cLEv7trOecCz6AsQ5U4SjmaTiYhZIc/bQKsLknaNVD8W XV8dpj9xEBbYBUwWu7j7A4DooGzkMZdSlq5Xjuu0w05023iFj3OWtKXxyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiTfa+KOOPk4+6rW/jlqsu9u5fGMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbAsgpr2 zDEaKByb6JdVgNa5NpsDFpekdmiAlvQpJKNe9+OM8IVLMY3vMsM/1eo9MN7sI2cD m1MBINJKNmXHHCIW5GMtSSR7GjtQftGV9K46ZslakXAl7jQ5ealmhyzg6loTqaZs INLfEKHVDy8wFrDNZdvExtSXYlZ2RH/i6QfbyeNxEYkZrLpcEwN+AVw3GfmnE0+M n1SDLrxoFJjFEbbskLnUPc0hdFARKqowQ+NSctoBg02afunlTO3uFKp8eT/hnWaa uq2g6l7QiaekFXPsFOeOSoy3fgelADBCInqJl1J6AwsROa7WS9xRV5m12I28xiz0 NSMnUKX+2CJXNA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:59:47 2025 by rpki-client