$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: MQr4Zm9So5VTYM2YZ7sTlv44/2LBh7Z7H9cdY48Ln8Q= Subject key identifier: DC:5D:99:87:C7:48:8B:71:99:5F:50:8A:25:9D:B8:3D:E4:D5:DA:5B Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019A4E4F8D97AFD606570D0F392FE8821869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1740 Signing time: Tue 04 Nov 2025 10:00:27 +0000 Manifest this update: Tue 04 Nov 2025 10:00:27 +0000 Manifest next update: Wed 05 Nov 2025 10:00:27 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 3: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 4: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 5: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 6: OqXfy-Q1bdsEnEbZtL_in1Ei8ak.roa (hash: kwdPjpP3NAZNRK4NuGOs/2X0xBDpRpF2eCHAXZDYRSI=) 7: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 8: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: LmDq+BF79Yt9uSxxIFRZiI9Vyb+xi8ix5buORaREvVc=) 10: XoEgN8Rzf-_O70nBq2ov0ajUPeY.roa (hash: Uqsa+8GNjpiZZotqp2+P9cchtd9l85RTnq9RE86H8w8=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:8d:97:af:d6:06:57:0d:0f:39:2f:e8:82:18:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Nov 4 10:00:27 2025 GMT Not After : Nov 5 10:00:27 2025 GMT Subject: CN=dc5d9987c7488b71995f508a259db83de4d5da5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:66:24:f0:f0:96:67:0d:0a:fa:e1:d9:96: d0:8d:e1:bf:91:0f:b1:e5:16:5a:e6:fc:85:87:9c: 79:8f:64:40:bc:4e:6c:47:1f:c5:cf:3e:5c:c2:23: eb:96:9f:16:21:01:4e:b5:d8:a6:c2:8e:fd:18:99: 65:1f:c0:2c:71:77:70:bf:5c:64:58:45:b8:72:3c: e9:2b:84:f1:e0:67:13:39:73:24:7a:47:85:d7:82: 8a:0b:73:72:7c:c4:27:57:a8:48:8e:19:77:12:c1: 7f:1b:c4:44:24:35:de:2b:9b:d8:9e:a0:98:bc:28: 92:54:24:e7:ce:2a:5d:48:de:c3:9e:4b:d4:72:24: e9:6c:25:aa:0e:db:5f:e6:3e:f5:6d:f9:18:ea:81: 43:67:6b:ec:b6:ed:e1:b0:96:d3:18:cb:4e:b4:38: 6f:81:2f:1f:0d:93:83:af:c8:c1:49:e1:4b:14:9b: bd:c0:5d:16:b5:43:d3:ea:a5:50:f0:5a:5d:3d:df: 8e:d9:25:bb:3e:11:d7:cf:3a:c1:d8:00:69:e0:fc: 9d:ca:69:db:17:52:c7:ee:ff:e6:16:b8:62:c6:b7: 9c:50:ba:2d:e8:d0:42:fb:97:e8:62:2a:2c:71:d7: 24:e1:8e:73:0f:ec:99:0a:d8:cb:df:d3:b9:d6:d1: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5D:99:87:C7:48:8B:71:99:5F:50:8A:25:9D:B8:3D:E4:D5:DA:5B X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:37:55:3e:46:8d:93:d6:01:bf:d4:c9:23:bf:21:68:f5:f3: 9f:18:2d:f3:bc:4d:db:47:b0:dd:ff:c9:52:c3:ee:32:51:d7: 1e:e0:8f:b3:82:88:1e:57:af:e5:64:97:b0:46:0f:fb:a2:e7: a7:3f:89:b3:b9:53:20:1f:ad:aa:55:54:a2:8b:57:dd:01:91: 90:b8:4e:aa:1b:a3:d6:48:13:50:58:79:11:53:b9:5b:20:81: ec:c0:c6:7e:90:46:b1:aa:5b:9b:21:b2:5d:a0:a7:2b:08:6f: 68:d7:9e:bf:c9:10:9c:61:3f:6f:db:2b:fb:af:d4:21:75:b8: 22:e5:41:c7:98:d4:f8:da:3c:e8:2a:d7:8d:b8:f2:5c:fd:a7: 4e:01:e9:59:fa:5c:ea:c2:5d:7b:31:34:c9:b7:42:69:72:0f: 44:46:e1:bd:8e:e6:1e:48:15:b5:7a:ae:9e:06:51:fc:9d:1e: 4c:af:98:b3:95:5b:eb:d6:86:7a:76:0e:87:1a:ac:30:f0:06: fb:c7:97:d8:f1:03:2a:09:27:21:a6:98:b1:99:8e:29:e7:96: fe:b8:b0:f6:99:78:85:06:bb:e2:bd:56:00:9b:68:58:89:d6: d6:eb:ef:90:7e:c5:09:53:cc:8e:6b:d3:f2:67:27:3d:2b:d6: 34:9d:91:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT42Xr9YGVw0POS/oghhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUxMTA0MTAwMDI3WhcNMjUxMTA1MTAwMDI3WjAzMTEwLwYDVQQD EyhkYzVkOTk4N2M3NDg4YjcxOTk1ZjUwOGEyNTlkYjgzZGU0ZDVkYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWpmJPDwlmcNCvrh2ZbQjeG/kQ+x 5RZa5vyFh5x5j2RAvE5sRx/Fzz5cwiPrlp8WIQFOtdimwo79GJllH8AscXdwv1xk WEW4cjzpK4Tx4GcTOXMkekeF14KKC3NyfMQnV6hIjhl3EsF/G8REJDXeK5vYnqCY vCiSVCTnzipdSN7DnkvUciTpbCWqDttf5j71bfkY6oFDZ2vstu3hsJbTGMtOtDhv gS8fDZODr8jBSeFLFJu9wF0WtUPT6qVQ8FpdPd+O2SW7PhHXzzrB2ABp4Pydymnb F1LH7v/mFrhixrecULot6NBC+5foYioscdck4Y5zD+yZCtjL39O51tFpbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxdmYfHSItxmV9QiiWduD3k1dpbMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjdVPkaN k9YBv9TJI78haPXznxgt87xN20ew3f/JUsPuMlHXHuCPs4KIHlev5WSXsEYP+6Ln pz+Js7lTIB+tqlVUootX3QGRkLhOqhuj1kgTUFh5EVO5WyCB7MDGfpBGsapbmyGy XaCnKwhvaNeev8kQnGE/b9sr+6/UIXW4IuVBx5jU+No86CrXjbjyXP2nTgHpWfpc 6sJdezE0ybdCaXIPREbhvY7mHkgVtXqungZR/J0eTK+Ys5Vb69aGenYOhxqsMPAG +8eX2PEDKgknIaaYsZmOKeeW/riw9pl4hQa74r1WAJtoWInW1uvvkH7FCVPMjmvT 8mcnPSvWNJ2RkA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:42:11 2025 by rpki-client