$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: 1r9geBRsiU3IsM7/35IvI1dF9ByX1OuD3zor2j3YDig= Subject key identifier: 87:62:1A:CE:06:21:1C:FB:1C:8C:A5:0E:ED:CC:AA:2A:A9:96:82:32 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019A53365F570B9B126F988D02934964A0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 1810 Signing time: Wed 05 Nov 2025 08:51:03 +0000 Manifest this update: Wed 05 Nov 2025 08:51:03 +0000 Manifest next update: Thu 06 Nov 2025 08:51:03 +0000 Files and hashes: 1: 31WGNidSandr9euyp3MWEMrhhgA.roa (hash: x8vN4oWKPx+2cHAvBJjaBV1Li/LtuBIrATot66gBDS8=) 2: 671gBYW6ETXc3uLLcMWFydigIAE.roa (hash: uojR24E1qs72oxVJvoIC5cuU67AWyV57CVyY3tIitjE=) 3: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (hash: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=) 4: BqP1D1MTayuyl6fnms2fcBgesf4.roa (hash: dYd+DJ2FY+lz4/blcm5DcV9UVMdwinMoVFhVD2PWLiw=) 5: G7Gj-wNHQ4f1McLnqLZ1qzcaJ3Q.roa (hash: a3cjYcM4+KPGd8Ub1jI8tlRifmfOnBjLF0b8hwTZjiw=) 6: GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa (hash: 5W1UPJlc7q2qwrOgo4Cf0M5PPMa5x9YyDkf7wVYVJbA=) 7: H8hUfmp0Rp_5t0obeSaHAj3_Ae0.roa (hash: +drtbFGc+LhY1Ww8ZA+sIR1uc2DfJU01Gqnyn4iWE+U=) 8: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (hash: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=) 9: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: 6De4RW5czDP3tWUCvjA1F94DwFjLkmZuiRXatJceOW0=) 10: WIdSsyCX57O0jLNkXtjrP1vhXSg.roa (hash: g0ccLEN+zmZYzIcNucOxzQOSHm/WBMyRcfAkc8Yy9KQ=) 11: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (hash: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=) 12: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (hash: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=) 13: e6h_e1l_GBB-YTi9wxz8vLZyCdg.roa (hash: wioIGHuZ359Ftozmd9jj5SGM0AdzlgpJU2wqq65dW5I=) 14: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (hash: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=) 15: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (hash: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=) 16: vknM6fMpp7RjN6aHY9yLoL3YFH0.roa (hash: VxtTG9zbKa2nS2uWhWDmKWt2+1JAT32lgl+0T5kZvMY=) 17: z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa (hash: 8BfW7FciBTdc5C8JJIsZRSk+vhvQyrnM6thA6ZIMSXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:36:5f:57:0b:9b:12:6f:98:8d:02:93:49:64:a0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Nov 5 08:51:03 2025 GMT Not After : Nov 6 08:51:03 2025 GMT Subject: CN=87621ace06211cfb1c8ca50eedccaa2aa9968232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:9d:09:f4:c4:e4:e0:14:ab:cd:ce:14:15: 3b:8c:1f:7e:0c:2b:7b:af:ef:bb:ba:53:ff:52:71: 3c:84:3c:f5:68:fc:cd:e5:f3:d5:22:ab:d2:c2:ac: 4d:4f:34:c3:70:41:1b:0a:44:41:88:95:0e:a5:03: 18:db:36:b8:44:bf:d2:36:c0:7b:b2:14:92:78:29: 82:86:0b:08:c2:d4:ad:e0:d0:c3:03:d7:df:69:aa: 6d:ae:75:bc:04:5a:f2:b5:71:bd:0d:34:49:86:3d: 2b:e6:b0:a1:d0:cd:79:e2:12:56:aa:37:78:25:14: fe:8b:5b:9a:d2:cb:31:ed:20:62:50:3e:78:b7:66: d6:1f:66:70:d6:45:d1:50:9a:4d:df:a1:18:f2:d1: 8d:bd:06:de:91:40:9a:86:f8:e6:72:86:26:53:f4: f4:28:db:be:8d:19:5e:9e:16:5d:8b:f0:38:47:4d: 9b:1e:75:11:78:78:e4:de:a3:87:6f:30:0b:47:b6: a4:72:97:cc:f0:93:69:e6:1a:40:2f:f9:c5:5e:fc: 00:94:60:55:bd:15:8f:8c:28:94:47:64:11:4f:c4: 1e:ca:89:eb:a4:76:c3:20:03:8b:c1:50:20:97:b6: a9:68:ca:89:0f:ca:42:3d:15:1d:bb:57:fa:40:48: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:62:1A:CE:06:21:1C:FB:1C:8C:A5:0E:ED:CC:AA:2A:A9:96:82:32 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f4:b8:30:0e:60:09:37:4b:9d:71:2c:e1:20:22:63:9a:d6: 6e:91:a3:f7:d6:b3:de:42:71:52:6c:f8:8c:85:2a:d1:72:95: 14:e7:23:0c:b0:6e:35:ee:9a:29:d4:ab:ce:40:47:7e:b4:c1: 9f:0b:a5:fb:4b:b6:19:c3:8c:f3:42:a5:60:b0:84:05:69:d4: fe:14:f2:5f:b0:33:43:a3:19:df:bc:df:d8:6a:10:f2:e9:e8: 33:98:dd:5f:7d:d3:c2:8d:10:90:3d:a7:88:df:38:b3:9d:49: 00:fd:5e:da:72:7e:d3:99:9f:cd:53:c4:b0:2a:fb:f9:ad:94: bd:92:6b:fa:7e:e6:62:46:f8:9c:83:bd:a6:b4:bb:b8:0e:7c: 19:f5:99:1e:f8:79:d2:49:96:00:ae:68:3c:96:15:18:68:e0: 5f:a6:5f:60:c3:51:3b:37:b2:81:8d:bf:1b:1d:88:88:bd:0a: 40:cb:a9:a8:fe:3d:fa:93:73:b8:f1:c2:cb:29:b6:40:98:0a: 6b:2d:7a:f4:b1:92:3d:4e:60:cf:42:8d:f5:7a:57:5a:99:7d: 4e:4e:78:f9:b2:e5:15:ed:1c:c4:cf:94:c5:d3:e6:9e:93:7a: 82:60:f6:2d:83:1f:3f:27:0d:a2:9e:12:bd:6a:63:4d:df:29: 79:aa:3a:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTNl9XC5sSb5iNApNJZKDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjUxMTA1MDg1MTAzWhcNMjUxMTA2MDg1MTAzWjAzMTEwLwYDVQQD Eyg4NzYyMWFjZTA2MjExY2ZiMWM4Y2E1MGVlZGNjYWEyYWE5OTY4MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CqdCfTE5OAUq83OFBU7jB9+DCt7 r++7ulP/UnE8hDz1aPzN5fPVIqvSwqxNTzTDcEEbCkRBiJUOpQMY2za4RL/SNsB7 shSSeCmChgsIwtSt4NDDA9ffaaptrnW8BFrytXG9DTRJhj0r5rCh0M154hJWqjd4 JRT+i1ua0ssx7SBiUD54t2bWH2Zw1kXRUJpN36EY8tGNvQbekUCahvjmcoYmU/T0 KNu+jRlenhZdi/A4R02bHnUReHjk3qOHbzALR7akcpfM8JNp5hpAL/nFXvwAlGBV vRWPjCiUR2QRT8QeyonrpHbDIAOLwVAgl7apaMqJD8pCPRUdu1f6QEjx+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdiGs4GIRz7HIylDu3MqiqploIyMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifS4MA5g CTdLnXEs4SAiY5rWbpGj99az3kJxUmz4jIUq0XKVFOcjDLBuNe6aKdSrzkBHfrTB nwul+0u2GcOM80KlYLCEBWnU/hTyX7AzQ6MZ37zf2GoQ8unoM5jdX33Two0QkD2n iN84s51JAP1e2nJ+05mfzVPEsCr7+a2UvZJr+n7mYkb4nIO9prS7uA58GfWZHvh5 0kmWAK5oPJYVGGjgX6ZfYMNROzeygY2/Gx2IiL0KQMupqP49+pNzuPHCyym2QJgK ay169LGSPU5gz0KN9XpXWpl9Tk54+bLlFe0cxM+UxdPmnpN6gmD2LYMfPycNop4S vWpjTd8peao6Og== -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:44 2025 by rpki-client