$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json) Hash identifier: 6OubVxV1gW3A9VlTXYdb/y/fMxZVaSOsOieHWkwtKjw= Subject key identifier: 07:96:0A:AA:32:11:AA:EB:BC:95:8F:CE:0F:41:77:08:B9:7E:47:DB Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019A4F995D91A792985776B0FFDCE166C3CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft Manifest number: 08E7 Signing time: Tue 04 Nov 2025 16:00:42 +0000 Manifest this update: Tue 04 Nov 2025 16:00:42 +0000 Manifest next update: Wed 05 Nov 2025 16:00:42 +0000 Files and hashes: 1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=) 2: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=) 3: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=) 4: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=) 5: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=) 6: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=) 7: PUFVgG5XTEBa1FkmtV4ycOrJNR8.roa (hash: N9/tccWzTiDJqufWom2nX/Wb/C0jzwpdRD1YBVzLJfM=) 8: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=) 9: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=) 10: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: 2eFQJE3ADI5nVE01eGc/Dq6Iqs3iWmLUgDWRJSyXaQs=) 11: WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa (hash: UxCznUOsDVY4T4Zkfr108cWCuFQbwtO/CUb0BjHDFUI=) 12: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=) 13: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (hash: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=) 14: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=) 15: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=) 16: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=) 17: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=) 18: nTLrnsLe5pfeZdn2nN3avyrKvR8.roa (hash: PYUn70hC1UKNiPtYZXRm5ik4trcOE5BeJZLN9btWaTY=) 19: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=) 20: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=) 21: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=) 22: sSrTDL6nguTxbh69Ill43irJGLE.roa (hash: e1S86JgpzImCBy74Z+DZRrxSrSDLIoWOZKxkg3oykGM=) 23: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=) 24: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (hash: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=) 25: zbLb6V2msPLlJ2wj3a08eMqWNX8.roa (hash: rsMnMJGficXOTixQcjNnqlofIjEsJ0amK5sDmhVfoBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:5d:91:a7:92:98:57:76:b0:ff:dc:e1:66:c3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Nov 4 16:00:42 2025 GMT Not After : Nov 5 16:00:42 2025 GMT Subject: CN=07960aaa3211aaebbc958fce0f417708b97e47db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:d4:49:8a:33:d6:94:12:7e:96:fe:8f:b2: 1c:ad:54:7c:69:d8:70:2a:6e:89:fa:c0:4f:0e:9d: cc:7f:b1:8c:af:ee:12:e5:65:9c:be:01:22:90:5f: 92:e3:46:82:57:d3:db:3d:5e:0e:7d:e5:68:7e:dd: 6b:94:be:f5:a5:89:57:89:e0:3e:9a:d1:1d:08:18: e0:6d:5f:b8:0c:9e:1a:31:22:83:4b:e2:50:dc:dd: 00:6d:06:5d:6d:aa:86:62:11:4a:a4:86:b9:ae:e0: a1:89:86:04:eb:1b:50:f1:53:a5:e4:b6:35:78:9f: 13:31:87:9b:80:07:44:dd:13:f7:d4:23:06:97:95: f4:d7:09:97:8a:c8:c5:cd:d4:19:32:77:a7:f7:43: 32:f2:52:a6:fa:b6:fa:ab:25:ea:19:18:9e:14:53: 93:4c:06:b1:55:8d:3b:3f:dc:b6:81:11:ca:05:9a: 85:27:59:09:36:69:68:96:8b:48:24:aa:53:a2:e2: 9d:75:e2:9c:07:a7:e3:2f:b7:f8:87:37:92:4e:74: de:39:eb:dc:16:43:3c:50:5c:8a:3a:d5:4b:27:c4: ea:b4:38:a6:48:00:cd:cc:e7:42:07:08:cc:d8:fe: 3c:16:c9:03:54:83:90:8d:1f:dd:38:09:38:03:b5: 90:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:0A:AA:32:11:AA:EB:BC:95:8F:CE:0F:41:77:08:B9:7E:47:DB X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:61:90:32:f5:43:b4:75:99:19:4f:35:75:78:df:28:05:ac: c3:4a:6c:fb:50:a5:76:d9:12:29:50:4a:63:29:30:5e:c6:14: f7:18:6f:c9:a6:5a:ef:81:43:4b:29:ff:cd:05:51:6f:41:9c: 91:52:cc:f2:06:09:5d:f5:92:ee:26:14:e6:a2:54:d1:07:13: ea:fc:ec:f1:4c:c3:11:6b:21:60:3f:da:55:7e:36:6e:2d:ec: 78:65:39:c0:e3:1c:de:89:54:49:5d:07:62:b1:e8:b2:6a:32: 64:b6:36:b1:28:24:46:71:a2:10:8d:b8:d4:b6:42:80:83:e2: b3:82:08:26:46:86:4d:2a:47:e7:3a:68:74:85:80:4b:f4:6d: bc:3c:3a:1b:96:ff:fb:90:0a:a4:f6:ec:36:87:b7:dc:ea:f4: 19:d1:01:ec:aa:a8:4b:0a:08:66:5f:b5:d9:4d:e7:34:9e:2c: e1:84:02:e7:01:08:d5:f6:db:45:fc:07:08:d6:97:90:75:d0: b5:d5:df:09:dd:7b:46:57:b4:ba:1f:f9:8b:db:14:3f:9d:2b: f7:5c:02:a3:e8:9a:c9:29:eb:37:30:67:9f:6a:3a:df:af:61: dd:cc:97:8d:8e:b5:52:53:d3:82:f4:64:7c:38:0b:fd:0c:31: ab:bd:91:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmV2Rp5KYV3aw/9zhZsPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMTA0MTYwMDQyWhcNMjUxMTA1MTYwMDQyWjAzMTEwLwYDVQQD EygwNzk2MGFhYTMyMTFhYWViYmM5NThmY2UwZjQxNzcwOGI5N2U0N2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXrUSYoz1pQSfpb+j7IcrVR8adhw Km6J+sBPDp3Mf7GMr+4S5WWcvgEikF+S40aCV9PbPV4OfeVoft1rlL71pYlXieA+ mtEdCBjgbV+4DJ4aMSKDS+JQ3N0AbQZdbaqGYhFKpIa5ruChiYYE6xtQ8VOl5LY1 eJ8TMYebgAdE3RP31CMGl5X01wmXisjFzdQZMnen90My8lKm+rb6qyXqGRieFFOT TAaxVY07P9y2gRHKBZqFJ1kJNmlolotIJKpTouKddeKcB6fjL7f4hzeSTnTeOevc FkM8UFyKOtVLJ8TqtDimSADNzOdCBwjM2P48FskDVIOQjR/dOAk4A7WQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeWCqoyEarrvJWPzg9Bdwi5fkfbMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2GQMvVD tHWZGU81dXjfKAWsw0ps+1CldtkSKVBKYykwXsYU9xhvyaZa74FDSyn/zQVRb0Gc kVLM8gYJXfWS7iYU5qJU0QcT6vzs8UzDEWshYD/aVX42bi3seGU5wOMc3olUSV0H YrHosmoyZLY2sSgkRnGiEI241LZCgIPis4IIJkaGTSpH5zpodIWAS/RtvDw6G5b/ +5AKpPbsNoe33Or0GdEB7KqoSwoIZl+12U3nNJ4s4YQC5wEI1fbbRfwHCNaXkHXQ tdXfCd17Rle0uh/5i9sUP50r91wCo+iaySnrNzBnn2o6369h3cyXjY61UlPTgvRk fDgL/Qwxq72RGg== -----END CERTIFICATE-----Generated at Tue Nov 4 20:20:41 2025 by rpki-client