$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: vly/Q/c7ayyQIaMxl3g9MZSm05sP56IrigOMOiiETJw= Subject key identifier: 15:62:FB:5F:97:3F:83:C8:F8:25:08:3A:C3:34:E2:E9:20:25:1A:FD Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 019A5307CB3003863737312E1632D18F01E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0D6E Signing time: Wed 05 Nov 2025 08:00:10 +0000 Manifest this update: Wed 05 Nov 2025 08:00:10 +0000 Manifest next update: Thu 06 Nov 2025 08:00:10 +0000 Files and hashes: 1: 0NsblolZdhQf6HryGcB18n8J9N4.roa (hash: u77IJyYZcK7YzbDTrAdipNzKO31d/DqdTktE+euJndQ=) 2: 1-O5PDCUIluNLwvL9ckZlTCiic5k.roa (hash: qhMDH/EIRf4uY8j8ZGgtmM3x6fh4+mOzTAkLJHzFbx0=) 3: 3LvafaHdOiY4sxoLX_gmBxqLmUE.roa (hash: 24ccmV+MNSGljhh423pCK03UEmX0iXEO3FcUYbtEFlg=) 4: 4l2IuTNstzGjNpiJFAwrychEOYw.roa (hash: m0X4eBCPHrx7Zmyz1UFRgVdtWA6FSM4O8cwU3fWGGhY=) 5: 8436f674G4X05xvwP0C936HzFw0.roa (hash: /J2oQYZ85KVDepCFbXpCbYaa0Oj460ejjf1xNXGW4Z8=) 6: 8ddhy9tWwbdT6YuDfe5AyBAl9Co.roa (hash: pZrOoiqX4rIC6PbaxG1zUT8RGSfoW+lq0tcfCxkDkAQ=) 7: EseDT4XrBGBs5m1XMkQxdKL6DRM.roa (hash: DF5lG0tUF3zWwo6hq2iPtURspUXksF6gXOa2o6MwSeg=) 8: IpV-26RSBCyAkVzi7Inj30YgLcM.roa (hash: ivn8CGpeMH35yLdwrBkCj0ryi6QOV70S64s8vxb45yQ=) 9: QkhJmR64J_fio_ZcoWDCOqbBN24.roa (hash: OYz2fnh0LE0HbS2bx5pxQ3mdkMMJfDH5810V+9CjEvw=) 10: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 11: T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa (hash: td8rBwHJnN+UP91bKfMfmPAq5aMPIDcnHWXi4WyoQek=) 12: VQ11w3hpyPj64iBdjBQvh3H40IY.roa (hash: PEPluvvkxQgJfKGG6MItpXtdaPRghraDjvwTXv4cWlU=) 13: VxDCjm6wjynMra5WGkzJGoCPrhs.roa (hash: 6jDW1q/fW7zMLlE0XVbr19PIoHkbmzCNYkeTGYpRMW4=) 14: XuxgvLAd05qq4hqx4c_u4WYR7dY.roa (hash: zkLSNkHMYRl5bJ5dZozHFmcx3BcVtlFo0wC7SXYmwLQ=) 15: iTJFlrSsWbholkyOYEXXgVs3FiY.roa (hash: Jl4uUb/G3mQj8xIpDsHAVqtzDEj+sUXfj7G+zwRxdNk=) 16: jwC74-F5iREL188mldERk81FXug.roa (hash: ddYPoTatj6nI/eSrzriO9qo6/69S19UgdJCWsEfW64k=) 17: nPembSTO0FXvbw8zcrfb1ZNsGHs.roa (hash: eFcHKopiqLAXcwkADSpifmFlMBENxHJyplWhREP1i08=) 18: rop6Si-gvflJGlaMTGjDBpHpYYI.roa (hash: Vieoxx0CWOeDqKFomK10FvV28nAZrZf1I36QMg8NMrc=) 19: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: vipVmr4BWXN8KnO84z1GdtJN8O2Ps75DN5lCQceAeUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:07:cb:30:03:86:37:37:31:2e:16:32:d1:8f:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: Nov 5 08:00:10 2025 GMT Not After : Nov 6 08:00:10 2025 GMT Subject: CN=1562fb5f973f83c8f825083ac334e2e920251afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:59:cd:df:e9:d6:e6:1f:2b:4c:3f:e8:5b: f0:76:1f:ac:be:9a:7a:f0:01:b4:d7:a8:56:46:39: ae:73:c7:d4:07:2d:76:91:38:3d:97:48:84:fe:41: 6b:ef:83:ab:5f:ed:75:b1:56:97:43:3e:67:ff:ee: a3:8f:3e:96:d8:66:46:5e:c2:3f:78:b1:98:f9:cb: 98:2e:75:a4:44:d6:ad:6b:b8:e2:6e:b7:3e:40:7b: 31:18:86:07:0f:e2:63:b0:3d:19:5c:87:72:14:a5: 93:a5:b6:68:91:ed:5d:78:34:6a:58:8c:5b:00:56: 98:e4:80:4c:bb:dc:b4:b5:02:89:f8:9b:bf:58:a6: 0a:5e:6e:e4:50:0c:7f:fc:bb:0c:8e:4e:67:65:66: 20:5d:80:e4:d5:e4:ad:e7:81:85:73:b8:01:2a:3c: 22:fb:53:9c:14:75:94:25:8a:84:8a:9e:ee:56:42: bd:07:e0:ec:ab:32:5e:d7:38:5e:f7:67:a4:82:43: 45:f9:28:e5:e0:1c:6b:cc:ce:e3:b1:50:89:11:d3: 06:61:32:1d:cc:af:66:e5:29:f4:b9:4f:90:62:e6: 42:4c:e7:0b:f7:55:08:c0:e9:14:46:13:0b:7f:0f: 17:46:66:bb:24:58:cd:f8:16:a1:a6:d7:ff:80:d8: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:62:FB:5F:97:3F:83:C8:F8:25:08:3A:C3:34:E2:E9:20:25:1A:FD X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:98:29:27:fb:24:47:5a:9f:89:c9:a0:eb:43:4c:f5:79:8a: c4:8a:10:26:14:79:79:8d:18:2e:6e:bd:1d:bb:97:b6:48:b2: b0:6f:5a:82:83:bc:7c:37:d8:77:fa:64:1a:0e:f1:e8:48:51: 74:2b:de:44:b1:cc:95:c9:40:d2:cd:22:2a:de:5e:d3:69:95: 9c:d7:8e:e4:fc:d5:60:12:fe:77:6f:04:6e:3d:08:6d:33:e1: 20:ca:75:c4:37:f3:08:ee:53:95:4d:11:25:e4:b2:43:fb:81: 9c:bb:32:4e:e4:f5:49:df:84:c5:ce:3a:fd:d9:df:3e:0c:57: 8b:32:98:d8:fc:cd:89:d9:c4:c2:3e:2f:81:73:34:7e:62:3c: bc:5e:f2:61:de:e6:b7:e0:38:5f:21:74:21:2b:ad:96:be:ce: fd:91:86:c8:18:1b:14:18:16:da:bc:e8:a0:e0:73:b1:c7:47: d7:85:51:55:37:8a:66:7d:8f:84:73:54:d6:46:9b:70:8e:26: e7:3d:27:29:bd:c8:57:c4:b0:38:aa:21:cf:91:34:57:c4:8e: 7f:cf:9b:52:84:b5:b2:f1:1f:93:1b:78:70:53:d7:50:5d:3b: e5:cc:05:73:2a:16:69:c9:65:80:0d:b3:0d:4e:d1:f2:6b:2b: 9c:65:a4:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTB8swA4Y3NzEuFjLRjwHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUxMTA1MDgwMDEwWhcNMjUxMTA2MDgwMDEwWjAzMTEwLwYDVQQD EygxNTYyZmI1Zjk3M2Y4M2M4ZjgyNTA4M2FjMzM0ZTJlOTIwMjUxYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQlZzd/p1uYfK0w/6Fvwdh+svpp6 8AG016hWRjmuc8fUBy12kTg9l0iE/kFr74OrX+11sVaXQz5n/+6jjz6W2GZGXsI/ eLGY+cuYLnWkRNata7jibrc+QHsxGIYHD+JjsD0ZXIdyFKWTpbZoke1deDRqWIxb AFaY5IBMu9y0tQKJ+Ju/WKYKXm7kUAx//LsMjk5nZWYgXYDk1eSt54GFc7gBKjwi +1OcFHWUJYqEip7uVkK9B+DsqzJe1zhe92ekgkNF+Sjl4BxrzM7jsVCJEdMGYTId zK9m5Sn0uU+QYuZCTOcL91UIwOkURhMLfw8XRma7JFjN+Bahptf/gNiDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVi+1+XP4PI+CUIOsM04ukgJRr9MB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZgpJ/sk R1qficmg60NM9XmKxIoQJhR5eY0YLm69HbuXtkiysG9agoO8fDfYd/pkGg7x6EhR dCveRLHMlclA0s0iKt5e02mVnNeO5PzVYBL+d28Ebj0IbTPhIMp1xDfzCO5TlU0R JeSyQ/uBnLsyTuT1Sd+Exc46/dnfPgxXizKY2PzNidnEwj4vgXM0fmI8vF7yYd7m t+A4XyF0ISutlr7O/ZGGyBgbFBgW2rzooOBzscdH14VRVTeKZn2PhHNU1kabcI4m 5z0nKb3IV8SwOKohz5E0V8SOf8+bUoS1svEfkxt4cFPXUF075cwFcyoWacllgA2z DU7R8msrnGWkvg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:43 2025 by rpki-client