$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: EWAq89xIZ2eRf+w4lQYppNDOLPIYqsu5GAKn3MngVPY= Subject key identifier: EA:57:75:B9:5F:12:27:DB:4A:9C:8C:0C:9C:E1:D4:A4:89:73:15:06 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019A4D745EDB3394E0DF15B44E49C7CE3070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0BBA Signing time: Tue 04 Nov 2025 06:01:03 +0000 Manifest this update: Tue 04 Nov 2025 06:01:03 +0000 Manifest next update: Wed 05 Nov 2025 06:01:03 +0000 Files and hashes: 1: 3O-D3rX4CFCdAkLP-WafPBWg7LI.roa (hash: ZjKqIVEFVR9cfjOaAvV16cE3fi3JRCek3PrT1Bdh+pE=) 2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: msItkVKo50chFmmqv6313wPgE0+o9leJEemNKfRg5JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:5e:db:33:94:e0:df:15:b4:4e:49:c7:ce:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Nov 4 06:01:03 2025 GMT Not After : Nov 5 06:01:03 2025 GMT Subject: CN=ea5775b95f1227db4a9c8c0c9ce1d4a489731506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:10:07:cd:b1:8c:18:bc:5c:51:cf:16:66: 34:0a:10:23:4b:32:9d:71:3e:55:be:1b:3f:41:5c: 44:78:a5:cb:f0:f4:85:2e:f6:86:59:74:35:bd:7c: d6:5d:11:65:ac:6a:64:ba:48:f9:c3:5c:6b:23:3b: 91:bf:88:5e:89:ed:64:1a:4a:5b:27:bd:cb:f7:0c: 50:f2:21:45:fc:6b:12:90:7b:a7:1e:88:ab:ea:2b: c1:99:22:6a:7e:fe:67:42:58:3b:2b:cd:fb:6a:b8: 8d:d5:1e:b2:e6:ac:e4:29:b2:4a:86:21:cf:ce:b3: 2f:9d:cb:c9:8c:58:b0:22:6e:11:78:0a:ff:d3:b2: d8:80:ed:70:c6:69:14:98:87:5a:d0:f6:d6:10:32: 1e:dc:7e:cb:a1:ec:40:4c:30:52:4f:b9:57:63:89: 60:1b:d4:c4:80:1b:b4:bb:18:88:65:ce:f8:08:8b: cd:34:32:28:2b:78:15:9a:32:80:22:e2:e0:64:0a: f8:36:cf:17:ad:7f:a8:24:9b:41:fa:5e:72:56:d4: 6b:dc:ca:0d:9f:9c:11:2e:d3:81:44:77:ca:62:48: b4:ce:a0:7d:32:ae:75:a6:46:77:c5:8d:ec:d0:88: d8:22:65:52:e4:a5:7c:ae:3d:15:1c:6e:d8:1f:82: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:75:B9:5F:12:27:DB:4A:9C:8C:0C:9C:E1:D4:A4:89:73:15:06 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1b:e9:5e:4f:34:f0:a3:3b:56:65:dd:09:5a:0e:fa:22:f0: df:0c:7e:5c:93:a5:4d:1b:0e:da:fb:1a:7d:95:c8:80:b3:cb: c8:97:66:a1:72:dd:2a:f8:00:c7:a1:d5:f4:25:a2:56:cf:37: db:80:52:46:ce:7a:41:7c:53:42:2d:26:9a:e9:d0:ed:35:f4: c7:e5:3d:b1:de:6c:d4:57:cb:f7:55:29:9c:d2:45:88:aa:74: 9f:ca:da:04:70:0e:c4:cb:4e:51:2f:ca:d2:4e:c0:7f:2a:00: e1:6e:7f:1d:00:fc:11:a4:49:c4:f5:bb:6f:30:da:ad:fa:8e: 03:69:bd:55:e5:8e:4d:65:97:74:6d:a5:35:b0:88:34:02:8b: 62:86:c8:c0:6c:a9:1a:5e:d4:0f:29:4b:7a:2d:a3:e6:3d:44: 54:2a:28:5e:3c:78:05:65:a4:45:9b:2d:94:80:10:c5:a5:b9: c0:4d:53:93:9c:24:7f:27:43:cd:51:1d:97:d2:5a:d2:2a:69: 92:cd:40:67:9a:4a:c2:d0:8d:cb:8e:40:bc:8b:4d:92:3a:06: 88:89:ec:47:4f:27:86:47:ce:20:8d:0f:c1:4a:3b:e0:58:c9: 39:1f:89:82:f2:47:46:9e:a1:70:a2:5a:48:2b:7e:98:f1:6e: b2:43:55:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdF7bM5Tg3xW0TknHzjBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUxMTA0MDYwMTAzWhcNMjUxMTA1MDYwMTAzWjAzMTEwLwYDVQQD EyhlYTU3NzViOTVmMTIyN2RiNGE5YzhjMGM5Y2UxZDRhNDg5NzMxNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpQQB82xjBi8XFHPFmY0ChAjSzKd cT5Vvhs/QVxEeKXL8PSFLvaGWXQ1vXzWXRFlrGpkukj5w1xrIzuRv4heie1kGkpb J73L9wxQ8iFF/GsSkHunHoir6ivBmSJqfv5nQlg7K837ariN1R6y5qzkKbJKhiHP zrMvncvJjFiwIm4ReAr/07LYgO1wxmkUmIda0PbWEDIe3H7LoexATDBST7lXY4lg G9TEgBu0uxiIZc74CIvNNDIoK3gVmjKAIuLgZAr4Ns8XrX+oJJtB+l5yVtRr3MoN n5wRLtOBRHfKYki0zqB9Mq51pkZ3xY3s0IjYImVS5KV8rj0VHG7YH4Kt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpXdblfEifbSpyMDJzh1KSJcxUGMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhvpXk80 8KM7VmXdCVoO+iLw3wx+XJOlTRsO2vsafZXIgLPLyJdmoXLdKvgAx6HV9CWiVs83 24BSRs56QXxTQi0mmunQ7TX0x+U9sd5s1FfL91UpnNJFiKp0n8raBHAOxMtOUS/K 0k7AfyoA4W5/HQD8EaRJxPW7bzDarfqOA2m9VeWOTWWXdG2lNbCINAKLYobIwGyp Gl7UDylLei2j5j1EVCooXjx4BWWkRZstlIAQxaW5wE1Tk5wkfydDzVEdl9Ja0ipp ks1AZ5pKwtCNy45AvItNkjoGiInsR08nhkfOII0PwUo74FjJOR+JgvJHRp6hcKJa SCt+mPFuskNVEQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:56:31 2025 by rpki-client