$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: fGo+nAiz44jhNJl1enyqiY2fLRbxJAsOCY7bIRGu0mo= Subject key identifier: 59:B4:3D:0E:F7:8A:69:72:CB:67:8A:AE:17:11:F9:BE:56:8D:6C:C9 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019A4DE2315B8D3C95D98F7213BA4E28EEBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1714 Signing time: Tue 04 Nov 2025 08:01:00 +0000 Manifest this update: Tue 04 Nov 2025 08:01:00 +0000 Manifest next update: Wed 05 Nov 2025 08:01:00 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: XvTV8btXYfd5Ms3eHEd/tRj8xwJUni/cnrygD3At5sc=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e2:31:5b:8d:3c:95:d9:8f:72:13:ba:4e:28:ee:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Nov 4 08:01:00 2025 GMT Not After : Nov 5 08:01:00 2025 GMT Subject: CN=59b43d0ef78a6972cb678aae1711f9be568d6cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:e8:20:79:e7:9e:75:45:16:b4:9f:4e:56: 41:e3:f8:ca:64:e0:4a:45:e4:03:5a:ce:7e:2f:ab: 14:1c:94:89:5f:58:2e:50:d4:0d:7e:cd:e8:d6:0b: 4c:85:70:1e:72:b2:f9:2c:7a:31:e6:b5:ee:1d:ab: 2b:b0:88:f9:4a:6b:a8:31:5d:49:65:ce:dd:2e:ad: df:ee:13:0c:09:50:5a:e9:c5:b4:41:50:61:22:45: 2c:d1:ba:a2:54:59:a7:01:aa:4d:78:14:a8:59:52: 22:d8:30:61:ef:b9:35:a0:ce:ce:64:7f:3b:3f:88: ed:1b:5e:db:9d:5f:31:95:73:36:da:6d:20:89:96: 82:41:70:10:96:cd:2d:d8:16:d1:cf:a3:9e:bd:40: ca:32:12:c4:f6:ff:e1:ea:96:b6:4a:c1:02:f0:49: 32:c8:e2:83:1b:b4:ed:11:92:e3:4f:eb:c5:27:a9: 12:cd:f6:f4:79:fc:fc:10:d6:c5:e1:fb:c1:82:db: a1:50:df:a6:76:a4:88:d2:ff:2a:04:71:e7:e0:16: 97:2f:4b:58:ad:df:27:36:32:36:2a:96:47:10:ac: 1a:45:e6:25:c3:33:eb:60:b2:bc:e2:36:e3:97:cd: de:36:13:50:f0:50:3d:c8:87:b1:95:5f:a5:09:a6: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B4:3D:0E:F7:8A:69:72:CB:67:8A:AE:17:11:F9:BE:56:8D:6C:C9 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5b:d6:67:21:36:1b:78:4c:a9:ca:ec:3b:a3:dc:0b:c6:1d: 76:28:de:69:36:9e:b9:2e:8b:fd:9c:dc:ae:4a:58:05:fc:87: 94:ad:e4:61:bc:01:bb:71:a4:f3:98:18:03:93:46:0d:21:75: 82:5c:92:8c:f8:ad:16:bb:90:bd:ad:ac:f9:6c:e9:cc:4b:9f: 3f:1e:9b:51:82:a1:f4:f3:76:e0:e1:b9:77:4b:58:db:ea:38: a7:c8:05:69:b1:f3:9c:83:f1:51:a0:55:a1:07:03:c0:cf:4f: 61:a4:9f:61:d2:51:fd:3e:89:e2:65:3f:d5:b7:ad:10:64:f5: b4:f2:f2:72:8b:fb:8d:54:f5:1f:61:47:39:2e:80:9f:af:56: 16:0c:37:7c:ad:81:d6:5c:db:d3:b8:bb:6c:df:87:66:52:e9: ea:88:71:7b:29:1b:68:e0:4d:67:ab:e7:21:99:c8:30:17:eb: 00:78:4c:9f:3b:6d:ac:a6:e3:70:7f:cc:85:51:5b:ea:ee:05: 8b:bf:c0:26:cd:54:c0:8b:3a:29:6c:42:5e:a3:0a:4f:31:e7: 21:27:48:2e:0c:fd:9f:95:71:45:bf:97:99:30:0c:ea:df:0d: 31:47:13:7f:c6:b8:42:1c:b5:9c:35:d7:44:91:b8:ed:3a:39: db:71:0c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4jFbjTyV2Y9yE7pOKO6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMTA0MDgwMTAwWhcNMjUxMTA1MDgwMTAwWjAzMTEwLwYDVQQD Eyg1OWI0M2QwZWY3OGE2OTcyY2I2NzhhYWUxNzExZjliZTU2OGQ2Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1boIHnnnnVFFrSfTlZB4/jKZOBK ReQDWs5+L6sUHJSJX1guUNQNfs3o1gtMhXAecrL5LHox5rXuHasrsIj5SmuoMV1J Zc7dLq3f7hMMCVBa6cW0QVBhIkUs0bqiVFmnAapNeBSoWVIi2DBh77k1oM7OZH87 P4jtG17bnV8xlXM22m0giZaCQXAQls0t2BbRz6OevUDKMhLE9v/h6pa2SsEC8Eky yOKDG7TtEZLjT+vFJ6kSzfb0efz8ENbF4fvBgtuhUN+mdqSI0v8qBHHn4BaXL0tY rd8nNjI2KpZHEKwaReYlwzPrYLK84jbjl83eNhNQ8FA9yIexlV+lCabXEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm0PQ73imlyy2eKrhcR+b5WjWzJMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlvWZyE2 G3hMqcrsO6PcC8YddijeaTaeuS6L/ZzcrkpYBfyHlK3kYbwBu3Gk85gYA5NGDSF1 glySjPitFruQva2s+WzpzEufPx6bUYKh9PN24OG5d0tY2+o4p8gFabHznIPxUaBV oQcDwM9PYaSfYdJR/T6J4mU/1betEGT1tPLycov7jVT1H2FHOS6An69WFgw3fK2B 1lzb07i7bN+HZlLp6ohxeykbaOBNZ6vnIZnIMBfrAHhMnzttrKbjcH/MhVFb6u4F i7/AJs1UwIs6KWxCXqMKTzHnISdILgz9n5VxRb+XmTAM6t8NMUcTf8a4Qhy1nDXX RJG47To523EMLQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:05:07 2025 by rpki-client