$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: AMGNNcfruotmXF8RNUM0VZKR+gO0O15AQq2IF/tKoMw= Subject key identifier: 2E:B1:28:B6:01:CA:16:5C:56:A8:2D:63:A5:35:9B:9C:F3:D2:80:27 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019A4F994B7703995278B9F9FC43AE6320BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 11E5 Signing time: Tue 04 Nov 2025 16:00:37 +0000 Manifest this update: Tue 04 Nov 2025 16:00:37 +0000 Manifest next update: Wed 05 Nov 2025 16:00:37 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: r4opWZZCJonG2EB0v6m8nCx+y2JlfchgSvRChIHUhls=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:4b:77:03:99:52:78:b9:f9:fc:43:ae:63:20:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Nov 4 16:00:37 2025 GMT Not After : Nov 5 16:00:37 2025 GMT Subject: CN=2eb128b601ca165c56a82d63a5359b9cf3d28027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:86:c9:a2:33:43:21:f6:98:06:60:c5:41: a9:1e:4d:f1:26:8e:c9:d4:a4:d1:a4:5f:c9:02:1d: 8c:59:d9:2c:63:c7:dc:13:eb:bf:3a:06:31:7b:33: 96:4f:02:a2:7f:4d:f3:ac:ad:f5:0a:85:93:b6:7e: 7a:f6:9e:e3:08:d5:82:f0:13:0a:48:0f:4f:9a:e4: 9e:f3:bc:99:c1:7e:90:53:17:2d:79:38:11:75:83: 0e:2f:c6:50:2e:13:fc:ba:85:52:b4:15:ba:a9:4f: 0d:cf:17:47:89:4e:dd:3d:3d:e6:4a:44:7c:89:c2: 0c:3d:96:77:28:55:cf:c4:bd:0c:12:52:d1:a6:a7: 1c:65:5e:e7:52:ae:4e:e6:6d:90:00:48:da:13:a0: c1:35:f6:00:03:ef:54:b5:cf:7f:e4:d9:c5:2e:5e: c5:23:ed:73:8e:fc:21:ae:bd:da:00:38:9a:8d:34: d0:e6:a7:8f:0e:33:9a:63:7b:2f:05:1b:1d:ec:9d: 06:80:9e:a8:1d:66:1b:2a:07:96:44:3f:ab:cd:cb: 8e:e7:c8:63:8c:aa:40:f7:bb:3a:d4:b2:df:45:fd: 05:ba:03:09:52:c3:fe:4a:55:30:7f:a3:ee:f6:31: 62:1d:fc:cf:e8:8d:ea:f0:af:8e:70:7b:7a:6f:94: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B1:28:B6:01:CA:16:5C:56:A8:2D:63:A5:35:9B:9C:F3:D2:80:27 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9a:50:4e:92:72:49:6d:d2:e7:b3:a4:2c:0f:11:ee:dc:77: a3:bb:6d:fd:02:39:19:1b:96:9d:55:27:97:31:a3:49:c3:68: 86:d4:52:b8:1a:27:5c:21:dd:44:0f:99:5b:fb:dc:45:10:3a: 75:79:e5:bb:53:ee:cb:e1:0c:bb:18:a3:dc:67:1a:0d:93:19: e0:c5:02:a9:d2:82:11:a0:ec:7c:e0:df:52:a8:cd:ac:b2:15: fc:ac:a3:4c:93:70:1f:db:9b:1a:79:10:b5:68:7f:77:08:01: 71:39:5e:e9:91:f1:19:92:c6:47:5f:e4:eb:11:41:cc:22:c7: a7:63:fb:49:e2:29:29:68:56:b4:d1:20:4d:02:eb:79:52:ad: b2:07:20:4c:70:3c:96:b8:8e:3a:da:6c:db:36:7b:dc:e9:17: 77:c0:a8:c0:5a:d2:99:01:65:cb:02:6b:28:4c:d2:e4:f8:84: e3:29:98:f1:a8:2b:ff:d0:28:5d:2c:8f:76:1e:cc:c1:80:82: 9c:30:95:43:3e:8e:3c:f2:04:52:ad:14:1b:06:11:db:18:29: 69:2d:92:f7:f0:c6:58:25:43:78:37:1f:b8:cb:54:a4:9b:97: 66:14:9b:b0:b3:4e:1d:c5:64:42:53:38:92:ba:a3:01:ef:9c: 07:a2:22:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmUt3A5lSeLn5/EOuYyC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUxMTA0MTYwMDM3WhcNMjUxMTA1MTYwMDM3WjAzMTEwLwYDVQQD EygyZWIxMjhiNjAxY2ExNjVjNTZhODJkNjNhNTM1OWI5Y2YzZDI4MDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fmGyaIzQyH2mAZgxUGpHk3xJo7J 1KTRpF/JAh2MWdksY8fcE+u/OgYxezOWTwKif03zrK31CoWTtn569p7jCNWC8BMK SA9PmuSe87yZwX6QUxcteTgRdYMOL8ZQLhP8uoVStBW6qU8NzxdHiU7dPT3mSkR8 icIMPZZ3KFXPxL0MElLRpqccZV7nUq5O5m2QAEjaE6DBNfYAA+9Utc9/5NnFLl7F I+1zjvwhrr3aADiajTTQ5qePDjOaY3svBRsd7J0GgJ6oHWYbKgeWRD+rzcuO58hj jKpA97s61LLfRf0FugMJUsP+SlUwf6Pu9jFiHfzP6I3q8K+OcHt6b5QeqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6xKLYByhZcVqgtY6U1m5zz0oAnMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkppQTpJy SW3S57OkLA8R7tx3o7tt/QI5GRuWnVUnlzGjScNohtRSuBonXCHdRA+ZW/vcRRA6 dXnlu1Puy+EMuxij3GcaDZMZ4MUCqdKCEaDsfODfUqjNrLIV/KyjTJNwH9ubGnkQ tWh/dwgBcTle6ZHxGZLGR1/k6xFBzCLHp2P7SeIpKWhWtNEgTQLreVKtsgcgTHA8 lriOOtps2zZ73OkXd8CowFrSmQFlywJrKEzS5PiE4ymY8agr/9AoXSyPdh7MwYCC nDCVQz6OPPIEUq0UGwYR2xgpaS2S9/DGWCVDeDcfuMtUpJuXZhSbsLNOHcVkQlM4 krqjAe+cB6Iiow== -----END CERTIFICATE-----Generated at Tue Nov 4 17:59:48 2025 by rpki-client