$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: lkKM+6cxCiGVIJ6zIADopdJKh6djMyihYZ7eczN7AgY= Subject key identifier: 8B:9D:4A:AD:87:58:71:D2:7A:6B:A7:F4:58:18:81:1A:9D:EE:19:97 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019A4E86AABA0317B390C3DA7AACF388727D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0D1F Signing time: Tue 04 Nov 2025 11:00:39 +0000 Manifest this update: Tue 04 Nov 2025 11:00:39 +0000 Manifest next update: Wed 05 Nov 2025 11:00:39 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: o2rq3382azTCgpf7xq77HgPBZ0sZodBumtfbNKKZLLY=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: MPC4WGBwWzUKQ4MIf9vheq3ljf8.roa (hash: X1yT4PQqSCT8h7K1UyGvzdMze10lM3EBcX0jmIp7dhY=) 5: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 6: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 7: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 8: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 9: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 10: e5h93GJcw_yYu-HPlsFYMzfWdiw.roa (hash: oKEC7H50ILmV8ZefC45forraqPebyPkE3IFXMuMi43Y=) 11: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 12: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) 15: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=) 16: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=) 17: ycORncNA45mJd3RcVB4kkVyYyek.roa (hash: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:aa:ba:03:17:b3:90:c3:da:7a:ac:f3:88:72:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Nov 4 11:00:39 2025 GMT Not After : Nov 5 11:00:39 2025 GMT Subject: CN=8b9d4aad875871d27a6ba7f45818811a9dee1997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:d4:76:37:19:62:58:99:bf:36:e0:51:36: bc:76:ab:62:2c:6f:53:66:dc:5c:b5:38:0d:fe:07: ef:32:a5:d7:26:f0:99:a5:cd:50:f2:be:d2:01:b6: b2:25:7f:e1:f7:fa:8b:7f:62:c4:04:d7:d8:06:1c: 6a:63:1c:61:10:79:cc:15:52:82:4a:2c:6e:5b:03: ee:2d:fb:ee:70:6a:4d:b3:e7:65:19:76:75:55:7e: 0b:e1:c0:7d:45:bb:31:14:fb:23:d0:d2:d4:e8:34: 2b:70:57:63:9e:18:ae:bd:41:40:e1:1c:ed:7a:f8: c7:c8:c0:7c:63:c2:1b:75:44:d9:09:40:04:ef:9b: 10:46:ac:9e:3f:ee:c6:20:3b:38:ef:cf:f9:d2:1a: 9e:5f:b7:b4:65:9b:42:1d:96:15:0d:67:78:c5:3a: 45:dd:f9:db:bb:10:3c:2f:95:3f:95:81:ea:3a:71: f6:d5:5e:d9:4b:e5:0e:ab:9c:33:67:54:1a:1f:fd: c6:16:72:4e:17:f2:8f:93:4b:ec:7f:d6:f9:76:91: 30:f3:0e:4b:69:66:d2:ee:90:5a:7a:62:a4:54:e4: a3:9e:7f:5c:ad:7a:cc:3b:0d:81:fb:35:b3:23:15: 48:b3:4c:8a:f6:4a:f3:2a:ee:5c:9e:81:fa:4a:30: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9D:4A:AD:87:58:71:D2:7A:6B:A7:F4:58:18:81:1A:9D:EE:19:97 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:61:60:8f:6b:39:bf:67:2e:2a:79:2a:c3:93:ee:cc:95:16: 99:7e:09:20:7e:25:83:8e:70:31:72:76:f1:21:4f:f7:f2:f0: 01:4f:02:8a:ca:91:5c:b8:1e:98:16:2c:49:7e:12:15:9c:66: 84:47:0c:85:2a:ab:1e:9c:03:4d:4c:e7:e9:df:1f:b9:19:c4: a0:6e:f5:1c:f7:5e:53:1c:39:87:c9:2e:1b:f9:1b:6d:11:b5: e1:5c:30:0c:5d:f3:63:2c:11:bc:dc:12:57:ec:a8:a6:8b:82: 51:cc:27:74:89:b4:8b:75:33:70:cf:c2:63:1d:9f:51:f6:30: 6d:11:b3:83:09:a9:c6:8f:b1:0d:86:02:08:9a:23:03:a8:66: e7:c6:49:fb:fe:09:0c:dc:c0:f0:c7:a4:e7:8c:c3:c9:8f:80: 34:84:42:28:99:b9:6b:fb:5e:d2:ea:af:4a:13:5c:8e:29:f3: bb:e7:ed:71:37:ef:73:51:88:32:24:40:84:bb:d4:b2:3b:8a: 24:51:84:4f:c7:19:cb:d6:b3:17:aa:4a:6a:c7:6c:51:49:46: 3c:36:46:99:c1:e7:9c:16:7c:8d:aa:ca:e5:46:4c:8d:74:4f: 8d:5e:fc:33:99:57:3f:ea:e6:54:2f:e1:b5:eb:93:58:e6:77: 97:10:6e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhqq6AxezkMPaeqzziHJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUxMTA0MTEwMDM5WhcNMjUxMTA1MTEwMDM5WjAzMTEwLwYDVQQD Eyg4YjlkNGFhZDg3NTg3MWQyN2E2YmE3ZjQ1ODE4ODExYTlkZWUxOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVLUdjcZYliZvzbgUTa8dqtiLG9T ZtxctTgN/gfvMqXXJvCZpc1Q8r7SAbayJX/h9/qLf2LEBNfYBhxqYxxhEHnMFVKC SixuWwPuLfvucGpNs+dlGXZ1VX4L4cB9RbsxFPsj0NLU6DQrcFdjnhiuvUFA4Rzt evjHyMB8Y8IbdUTZCUAE75sQRqyeP+7GIDs478/50hqeX7e0ZZtCHZYVDWd4xTpF 3fnbuxA8L5U/lYHqOnH21V7ZS+UOq5wzZ1QaH/3GFnJOF/KPk0vsf9b5dpEw8w5L aWbS7pBaemKkVOSjnn9crXrMOw2B+zWzIxVIs0yK9krzKu5cnoH6SjD//QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIudSq2HWHHSemun9FgYgRqd7hmXMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGFgj2s5 v2cuKnkqw5PuzJUWmX4JIH4lg45wMXJ28SFP9/LwAU8CisqRXLgemBYsSX4SFZxm hEcMhSqrHpwDTUzn6d8fuRnEoG71HPdeUxw5h8kuG/kbbRG14VwwDF3zYywRvNwS V+yopouCUcwndIm0i3UzcM/CYx2fUfYwbRGzgwmpxo+xDYYCCJojA6hm58ZJ+/4J DNzA8Mek54zDyY+ANIRCKJm5a/te0uqvShNcjinzu+ftcTfvc1GIMiRAhLvUsjuK JFGET8cZy9azF6pKasdsUUlGPDZGmcHnnBZ8jarK5UZMjXRPjV78M5lXP+rmVC/h teuTWOZ3lxBu1g== -----END CERTIFICATE-----Generated at Tue Nov 4 14:54:34 2025 by rpki-client