$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: vD3XKyUSajANtx08JqFXmWIXzhSKUQz3ddFPF2JH4TQ= Subject key identifier: 49:03:34:C8:C7:AA:16:4D:FF:39:5B:AF:66:75:71:99:1F:9C:5A:9A Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019A50E2CECFF2871E5C830BDD39DC46E3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 1444 Signing time: Tue 04 Nov 2025 22:00:32 +0000 Manifest this update: Tue 04 Nov 2025 22:00:32 +0000 Manifest next update: Wed 05 Nov 2025 22:00:32 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: 9wFFXl1A++qtjD/u7feSHiSN91ZW1+r6fEq60Bp58P0=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:e2:ce:cf:f2:87:1e:5c:83:0b:dd:39:dc:46:e3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Nov 4 22:00:32 2025 GMT Not After : Nov 5 22:00:32 2025 GMT Subject: CN=490334c8c7aa164dff395baf667571991f9c5a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:3e:ad:42:7d:e0:67:f0:ba:92:67:3d:64: de:44:8f:c9:67:86:9e:b2:82:dd:2c:bd:8a:38:29: 92:1f:e3:8f:a5:d7:89:c2:7e:a0:40:02:10:29:15: 19:d8:d7:6d:e1:aa:ef:c0:a7:04:f6:c7:63:42:5f: a7:c0:2c:85:9f:b6:b3:b8:21:0d:0e:dd:ab:25:e4: 20:dd:f9:81:6f:1d:96:8b:1d:40:67:2f:09:1e:d4: ac:f7:ad:85:12:8a:8b:cd:ec:2a:50:ef:71:07:ca: 32:24:e5:8e:5e:35:5c:ee:fb:ac:f5:65:84:30:69: 22:df:f1:4f:15:ec:ce:85:4c:78:af:73:bd:bc:20: 00:f1:c7:e4:83:9d:e0:24:31:47:cf:96:ba:61:19: 6d:5e:67:77:e7:ff:8c:33:46:41:9f:35:fc:9c:3a: 93:c8:b3:ce:f1:63:cd:be:93:47:34:86:b9:9d:db: 61:80:51:50:1d:db:b5:b9:42:c1:75:72:55:6c:fc: 76:7d:3a:92:3f:84:fa:e3:87:e7:f2:be:75:20:a2: b0:1a:ee:6c:8b:a7:99:8d:89:bf:29:98:85:83:3b: ee:b3:70:e6:dd:3e:52:06:64:e1:48:31:20:f6:5c: 6a:6b:9f:39:3b:4f:cc:fc:8e:95:77:4b:bf:95:64: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:03:34:C8:C7:AA:16:4D:FF:39:5B:AF:66:75:71:99:1F:9C:5A:9A X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3e:81:3a:f8:57:81:80:3a:b0:ea:a7:49:6d:5a:26:4c:6c: bf:42:db:3d:31:7d:73:fe:0f:29:6c:0f:e2:b8:df:e2:64:17: 93:f8:ef:ce:e1:47:73:15:1a:3c:7d:c5:76:56:6c:14:80:46: c9:8c:e2:9f:de:41:8e:a8:a1:b1:bc:1e:6a:e7:b8:95:0b:14: 07:5d:a6:cc:41:8a:d5:7e:02:fd:fd:0a:e1:0f:0d:4b:a7:85: 2a:3b:58:cf:38:09:9e:68:5e:a0:97:e9:fb:1e:6f:d2:08:8d: cb:15:24:8f:68:3e:20:4d:d4:2b:b8:aa:80:2e:ca:e5:45:22: 38:c1:22:cb:7d:1d:f9:96:21:8d:ba:55:88:55:d5:18:c3:77: 46:b4:49:d9:15:a6:13:6f:1a:02:d6:45:f3:e4:ed:43:c2:8f: 2f:10:07:03:b2:87:58:1d:08:6b:f1:74:4d:ec:cb:05:9c:d4: 53:33:4f:30:58:94:3a:63:a7:81:37:c5:8b:f9:bf:13:02:7e: 74:24:b5:4a:70:fc:00:49:a3:86:a5:d3:25:78:de:00:37:e8: 55:98:d7:69:07:8e:d3:b1:f0:ec:ae:b9:5d:6d:b4:a1:d5:ab: 4f:30:3b:04:88:c1:d0:b3:2c:0f:1b:60:15:d1:d3:b1:89:a3: 64:01:f5:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQ4s7P8oceXIML3TncRuPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUxMTA0MjIwMDMyWhcNMjUxMTA1MjIwMDMyWjAzMTEwLwYDVQQD Eyg0OTAzMzRjOGM3YWExNjRkZmYzOTViYWY2Njc1NzE5OTFmOWM1YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjks+rUJ94GfwupJnPWTeRI/JZ4ae soLdLL2KOCmSH+OPpdeJwn6gQAIQKRUZ2Ndt4arvwKcE9sdjQl+nwCyFn7azuCEN Dt2rJeQg3fmBbx2Wix1AZy8JHtSs962FEoqLzewqUO9xB8oyJOWOXjVc7vus9WWE MGki3/FPFezOhUx4r3O9vCAA8cfkg53gJDFHz5a6YRltXmd35/+MM0ZBnzX8nDqT yLPO8WPNvpNHNIa5ndthgFFQHdu1uULBdXJVbPx2fTqSP4T644fn8r51IKKwGu5s i6eZjYm/KZiFgzvus3Dm3T5SBmThSDEg9lxqa585O0/M/I6Vd0u/lWSvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkDNMjHqhZN/zlbr2Z1cZkfnFqaMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj6BOvhX gYA6sOqnSW1aJkxsv0LbPTF9c/4PKWwP4rjf4mQXk/jvzuFHcxUaPH3FdlZsFIBG yYzin95Bjqihsbweaue4lQsUB12mzEGK1X4C/f0K4Q8NS6eFKjtYzzgJnmheoJfp +x5v0giNyxUkj2g+IE3UK7iqgC7K5UUiOMEiy30d+ZYhjbpViFXVGMN3RrRJ2RWm E28aAtZF8+TtQ8KPLxAHA7KHWB0Ia/F0TezLBZzUUzNPMFiUOmOngTfFi/m/EwJ+ dCS1SnD8AEmjhqXTJXjeADfoVZjXaQeO07Hw7K65XW20odWrTzA7BIjB0LMsDxtg FdHTsYmjZAH1Og== -----END CERTIFICATE-----Generated at Wed Nov 5 01:55:46 2025 by rpki-client