$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: s6HYo1WoT0SOmyvC5Yg0Y47OcazCoyolofnx/g2YBEg= Subject key identifier: C7:EE:40:09:36:76:CF:61:7A:81:69:5A:1F:A3:3B:B2:2D:DD:19:ED Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019A4FCFB743B13CA83AA804990497818C14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 1678 Signing time: Tue 04 Nov 2025 17:00:03 +0000 Manifest this update: Tue 04 Nov 2025 17:00:03 +0000 Manifest next update: Wed 05 Nov 2025 17:00:03 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 4: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: bezGhmPq8r4HEOJzDB1DzNsMuzGu+biqrAjlHwqZHw8=) 6: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 7: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 8: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 9: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 10: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 11: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:cf:b7:43:b1:3c:a8:3a:a8:04:99:04:97:81:8c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Nov 4 17:00:03 2025 GMT Not After : Nov 5 17:00:03 2025 GMT Subject: CN=c7ee40093676cf617a81695a1fa33bb22ddd19ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:05:ce:96:67:f6:dc:bf:7e:73:41:ad:c7: 37:dd:96:61:d8:6b:c7:c9:99:d0:f5:11:dc:3a:ea: 29:a3:b8:e5:8c:92:3c:d9:e0:ad:57:91:db:10:e1: 5f:e8:7f:12:e1:33:eb:1d:eb:11:4a:e0:30:03:c8: c5:2f:5b:b6:c3:ef:07:2d:5d:2c:ae:87:2a:e1:ec: 63:ae:b8:72:27:12:ab:3d:e4:c4:54:08:e0:92:46: c1:df:2e:d7:54:a1:cf:67:05:44:29:25:2c:0a:37: 5b:1a:5b:35:ce:24:c8:e4:5e:f7:c8:94:49:8d:a6: df:1d:56:6f:e3:10:26:42:1e:78:b5:4b:73:1f:79: 93:f0:fb:c3:62:fc:ea:7c:f7:69:7b:a2:db:b4:09: 6a:12:37:3e:ca:7e:9b:58:43:ed:99:97:e5:8c:c9: 00:18:ba:a4:26:1f:ff:e9:0c:42:91:44:72:b5:bb: 93:d2:73:36:99:03:22:2b:0d:70:af:61:1e:d2:bf: 08:85:9a:89:d1:2f:c5:fb:eb:10:24:42:ec:b7:e6: 8f:c1:06:c5:81:35:79:46:42:8d:a6:94:be:59:cb: c4:93:95:be:d9:2d:e8:06:f8:05:ea:80:30:6a:b8: 9c:2e:75:2c:63:83:f8:62:3c:ac:fd:90:58:f4:53: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EE:40:09:36:76:CF:61:7A:81:69:5A:1F:A3:3B:B2:2D:DD:19:ED X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b5:f2:66:9d:f2:b8:fa:9e:ca:5a:3a:c9:80:dd:ae:15:16: 76:58:c1:89:43:ad:95:77:78:14:10:a6:f1:66:3c:0c:b2:8f: 47:cc:9d:be:ac:aa:ec:f9:06:3e:3b:d3:f3:7d:92:8b:f7:9c: c8:19:49:28:1a:0b:98:67:3d:a7:cf:87:fc:37:c5:36:73:59: 99:66:79:19:d5:d9:23:82:d5:16:8b:67:1e:fa:62:fd:89:f9: ef:77:ce:b8:8d:e9:5a:f9:b8:ed:8a:f4:b5:97:9f:38:3a:46: 8f:3f:78:7f:70:df:8f:c3:cd:e5:e0:ca:11:8e:82:d5:e1:45: 0a:e0:e1:6e:bd:70:fa:20:47:c8:f4:ee:20:54:c6:fd:45:48: 73:d1:92:06:9c:11:dc:90:77:5b:50:43:a4:bd:bb:c7:ea:01: 71:be:49:cc:9d:f0:b4:9a:6c:34:5e:91:a7:d5:84:4f:1a:92: 45:c5:99:0f:29:6a:b5:f2:58:06:c7:77:6d:7b:17:0c:72:ef: 37:72:b1:4d:f1:71:51:64:e5:2c:50:80:e2:ca:37:24:29:44: d3:6d:3a:ba:b2:8b:02:dc:24:35:3f:db:77:a6:de:ba:23:9b: 47:f1:89:58:c9:1e:a2:23:f1:f0:a9:a7:e0:c4:13:4f:98:73: d1:07:88:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPz7dDsTyoOqgEmQSXgYwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMTA0MTcwMDAzWhcNMjUxMTA1MTcwMDAzWjAzMTEwLwYDVQQD EyhjN2VlNDAwOTM2NzZjZjYxN2E4MTY5NWExZmEzM2JiMjJkZGQxOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZEFzpZn9ty/fnNBrcc33ZZh2GvH yZnQ9RHcOuopo7jljJI82eCtV5HbEOFf6H8S4TPrHesRSuAwA8jFL1u2w+8HLV0s rocq4exjrrhyJxKrPeTEVAjgkkbB3y7XVKHPZwVEKSUsCjdbGls1ziTI5F73yJRJ jabfHVZv4xAmQh54tUtzH3mT8PvDYvzqfPdpe6LbtAlqEjc+yn6bWEPtmZfljMkA GLqkJh//6QxCkURytbuT0nM2mQMiKw1wr2Ee0r8IhZqJ0S/F++sQJELst+aPwQbF gTV5RkKNppS+WcvEk5W+2S3oBvgF6oAwaricLnUsY4P4Yjys/ZBY9FNaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfuQAk2ds9heoFpWh+jO7It3RntMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLXyZp3y uPqeylo6yYDdrhUWdljBiUOtlXd4FBCm8WY8DLKPR8ydvqyq7PkGPjvT832Si/ec yBlJKBoLmGc9p8+H/DfFNnNZmWZ5GdXZI4LVFotnHvpi/Yn573fOuI3pWvm47Yr0 tZefODpGjz94f3Dfj8PN5eDKEY6C1eFFCuDhbr1w+iBHyPTuIFTG/UVIc9GSBpwR 3JB3W1BDpL27x+oBcb5JzJ3wtJpsNF6Rp9WETxqSRcWZDylqtfJYBsd3bXsXDHLv N3KxTfFxUWTlLFCA4so3JClE0206urKLAtwkNT/bd6beuiObR/GJWMkeoiPx8Kmn 4MQTT5hz0QeI4A== -----END CERTIFICATE-----Generated at Wed Nov 5 03:17:44 2025 by rpki-client