$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: HXcs2/9nZ7PEJwjwqS7UU9d8qfcGx+NHnKgd3IR6yK4= Subject key identifier: 28:DD:56:55:72:AC:F7:4B:01:2C:E4:4C:05:8A:47:14:99:C8:6A:BD Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019A5074A11DB25B94C77BC0A1025C75177C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 180B Signing time: Tue 04 Nov 2025 20:00:11 +0000 Manifest this update: Tue 04 Nov 2025 20:00:11 +0000 Manifest next update: Wed 05 Nov 2025 20:00:11 +0000 Files and hashes: 1: 31WGNidSandr9euyp3MWEMrhhgA.roa (hash: x8vN4oWKPx+2cHAvBJjaBV1Li/LtuBIrATot66gBDS8=) 2: 671gBYW6ETXc3uLLcMWFydigIAE.roa (hash: uojR24E1qs72oxVJvoIC5cuU67AWyV57CVyY3tIitjE=) 3: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (hash: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=) 4: G7Gj-wNHQ4f1McLnqLZ1qzcaJ3Q.roa (hash: a3cjYcM4+KPGd8Ub1jI8tlRifmfOnBjLF0b8hwTZjiw=) 5: GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa (hash: 5W1UPJlc7q2qwrOgo4Cf0M5PPMa5x9YyDkf7wVYVJbA=) 6: OUUAGwuhS9k0RLk2OQ2YMgWfJ9k.roa (hash: I6UnjrAhwxJpksTNqd8b4yrJQsgKAZ6ux+daYCpTF24=) 7: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (hash: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=) 8: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: Q6/I0BBFwLLeBZD9hrDbRQbtzxFry1H7IOWbFBMdLAg=) 9: WIdSsyCX57O0jLNkXtjrP1vhXSg.roa (hash: g0ccLEN+zmZYzIcNucOxzQOSHm/WBMyRcfAkc8Yy9KQ=) 10: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (hash: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=) 11: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (hash: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=) 12: e6h_e1l_GBB-YTi9wxz8vLZyCdg.roa (hash: wioIGHuZ359Ftozmd9jj5SGM0AdzlgpJU2wqq65dW5I=) 13: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (hash: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=) 14: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (hash: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=) 15: rJdcZqP-lJoa1smKmnWsYCRCK9Y.roa (hash: gaIqLEjbkC4D7YhxxNohAh6KVdcatllzPsumpn8s2kw=) 16: vknM6fMpp7RjN6aHY9yLoL3YFH0.roa (hash: VxtTG9zbKa2nS2uWhWDmKWt2+1JAT32lgl+0T5kZvMY=) 17: z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa (hash: 8BfW7FciBTdc5C8JJIsZRSk+vhvQyrnM6thA6ZIMSXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:a1:1d:b2:5b:94:c7:7b:c0:a1:02:5c:75:17:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Nov 4 20:00:11 2025 GMT Not After : Nov 5 20:00:11 2025 GMT Subject: CN=28dd565572acf74b012ce44c058a471499c86abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:ff:9d:d8:69:ad:52:58:0f:d0:85:31:26: 8a:c4:e0:a0:a4:dc:91:a6:67:0c:ec:a6:9f:0c:7a: c0:c1:71:1c:c0:a0:30:61:e9:95:54:51:54:3c:26: ef:2b:cc:aa:0d:d8:0b:71:e9:31:7b:53:a7:f4:9f: 78:95:22:e3:d0:e9:f2:f4:d3:97:18:87:24:10:ef: 51:f5:9c:9e:5a:49:ef:bf:8a:a9:cf:0c:b5:0c:f5: 83:e1:fd:d6:7c:1c:2d:60:be:0a:31:c2:4e:06:2a: f4:28:90:91:70:9b:79:60:df:6b:40:1a:70:d2:be: 18:21:a3:07:13:9d:9c:81:43:36:56:4b:2d:4d:f0: 59:4d:c4:19:56:81:3a:b3:4b:4b:08:67:65:85:91: e7:a5:55:8b:e0:63:2b:55:90:f6:cb:13:13:28:a0: 86:5c:a1:2e:49:1d:be:41:84:d4:61:d8:de:d0:14: 23:08:0a:fb:ef:a7:02:ba:50:cd:7f:0b:42:15:36: 6e:b6:36:31:e0:7a:11:5b:c1:1f:bf:64:4e:6b:1a: fa:8f:ec:d3:b3:5e:c7:d4:a7:e3:b6:c5:da:63:ee: 9c:8e:fe:e4:a4:36:05:65:72:e2:49:c2:4c:c5:af: 04:af:6d:34:7d:ae:ef:be:4f:79:72:a6:f2:dd:e8: 49:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:56:55:72:AC:F7:4B:01:2C:E4:4C:05:8A:47:14:99:C8:6A:BD X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a4:18:62:9b:d6:d8:3c:21:9c:8c:14:dc:d9:7b:de:9d:ed: df:49:b3:b6:7d:d5:cd:a2:31:50:88:34:78:5d:c5:33:21:c7: 85:bf:d8:af:3e:fa:f9:32:79:fc:c1:c7:73:84:35:52:05:ac: 32:06:cc:e2:89:84:2c:8d:5b:41:c5:4f:81:97:3c:00:5c:06: dd:35:6d:ac:a5:42:29:58:a9:90:d3:bd:19:54:bb:57:5b:66: 99:64:36:99:47:0c:bd:20:11:72:5a:34:5f:0b:34:f0:1d:50: aa:7f:ce:51:c2:c0:1f:99:42:0f:47:6f:d6:0d:2c:88:d5:cf: 39:dc:d3:3a:e1:ee:8c:e8:7b:e4:3d:19:41:40:20:51:ac:84: ca:a2:ce:9a:53:06:2d:8e:c8:7d:34:6d:4b:d2:e6:c4:a0:13: 58:e6:0f:e9:c1:9b:92:ed:69:f5:0f:9a:f3:ee:63:15:f9:48: 76:02:25:64:84:54:9b:13:50:a3:f1:97:89:da:25:58:14:93: d0:96:bb:95:0e:30:f7:21:96:eb:0f:fb:3e:7b:a7:93:e9:11: cb:48:79:42:18:bc:14:11:c6:42:ce:01:66:4c:e4:b5:39:af: 3e:72:49:a3:56:d8:51:83:92:85:a8:07:3a:82:23:0c:d2:f9: 0d:91:a3:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdKEdsluUx3vAoQJcdRd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjUxMTA0MjAwMDExWhcNMjUxMTA1MjAwMDExWjAzMTEwLwYDVQQD EygyOGRkNTY1NTcyYWNmNzRiMDEyY2U0NGMwNThhNDcxNDk5Yzg2YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOX/ndhprVJYD9CFMSaKxOCgpNyR pmcM7KafDHrAwXEcwKAwYemVVFFUPCbvK8yqDdgLcekxe1On9J94lSLj0Ony9NOX GIckEO9R9ZyeWknvv4qpzwy1DPWD4f3WfBwtYL4KMcJOBir0KJCRcJt5YN9rQBpw 0r4YIaMHE52cgUM2VkstTfBZTcQZVoE6s0tLCGdlhZHnpVWL4GMrVZD2yxMTKKCG XKEuSR2+QYTUYdje0BQjCAr776cCulDNfwtCFTZutjYx4HoRW8Efv2ROaxr6j+zT s17H1KfjtsXaY+6cjv7kpDYFZXLiScJMxa8Er200fa7vvk95cqby3ehJeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjdVlVyrPdLASzkTAWKRxSZyGq9MB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6QYYpvW 2DwhnIwU3Nl73p3t30mztn3VzaIxUIg0eF3FMyHHhb/Yrz76+TJ5/MHHc4Q1UgWs MgbM4omELI1bQcVPgZc8AFwG3TVtrKVCKVipkNO9GVS7V1tmmWQ2mUcMvSARclo0 Xws08B1Qqn/OUcLAH5lCD0dv1g0siNXPOdzTOuHujOh75D0ZQUAgUayEyqLOmlMG LY7IfTRtS9LmxKATWOYP6cGbku1p9Q+a8+5jFflIdgIlZIRUmxNQo/GXidolWBST 0Ja7lQ4w9yGW6w/7Pnunk+kRy0h5Qhi8FBHGQs4BZkzktTmvPnJJo1bYUYOShagH OoIjDNL5DZGjSA== -----END CERTIFICATE-----Generated at Wed Nov 5 00:01:34 2025 by rpki-client