$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: U9T6KaNEyzzhWH07YAhz76OxXum5GDQPkQ0p7/Euv+0= Subject key identifier: D1:7B:03:1B:CB:37:7F:36:09:30:C7:71:98:34:C5:C3:BF:4E:5A:43 Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 019A51196659CDF6397AA809C2EDCC0C60A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0D6D Signing time: Tue 04 Nov 2025 23:00:10 +0000 Manifest this update: Tue 04 Nov 2025 23:00:10 +0000 Manifest next update: Wed 05 Nov 2025 23:00:10 +0000 Files and hashes: 1: 0NsblolZdhQf6HryGcB18n8J9N4.roa (hash: u77IJyYZcK7YzbDTrAdipNzKO31d/DqdTktE+euJndQ=) 2: 1-O5PDCUIluNLwvL9ckZlTCiic5k.roa (hash: qhMDH/EIRf4uY8j8ZGgtmM3x6fh4+mOzTAkLJHzFbx0=) 3: 3LvafaHdOiY4sxoLX_gmBxqLmUE.roa (hash: 24ccmV+MNSGljhh423pCK03UEmX0iXEO3FcUYbtEFlg=) 4: 4l2IuTNstzGjNpiJFAwrychEOYw.roa (hash: m0X4eBCPHrx7Zmyz1UFRgVdtWA6FSM4O8cwU3fWGGhY=) 5: 8436f674G4X05xvwP0C936HzFw0.roa (hash: /J2oQYZ85KVDepCFbXpCbYaa0Oj460ejjf1xNXGW4Z8=) 6: 8ddhy9tWwbdT6YuDfe5AyBAl9Co.roa (hash: pZrOoiqX4rIC6PbaxG1zUT8RGSfoW+lq0tcfCxkDkAQ=) 7: EseDT4XrBGBs5m1XMkQxdKL6DRM.roa (hash: DF5lG0tUF3zWwo6hq2iPtURspUXksF6gXOa2o6MwSeg=) 8: IpV-26RSBCyAkVzi7Inj30YgLcM.roa (hash: ivn8CGpeMH35yLdwrBkCj0ryi6QOV70S64s8vxb45yQ=) 9: QkhJmR64J_fio_ZcoWDCOqbBN24.roa (hash: OYz2fnh0LE0HbS2bx5pxQ3mdkMMJfDH5810V+9CjEvw=) 10: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 11: T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa (hash: td8rBwHJnN+UP91bKfMfmPAq5aMPIDcnHWXi4WyoQek=) 12: VQ11w3hpyPj64iBdjBQvh3H40IY.roa (hash: PEPluvvkxQgJfKGG6MItpXtdaPRghraDjvwTXv4cWlU=) 13: VxDCjm6wjynMra5WGkzJGoCPrhs.roa (hash: 6jDW1q/fW7zMLlE0XVbr19PIoHkbmzCNYkeTGYpRMW4=) 14: XuxgvLAd05qq4hqx4c_u4WYR7dY.roa (hash: zkLSNkHMYRl5bJ5dZozHFmcx3BcVtlFo0wC7SXYmwLQ=) 15: iTJFlrSsWbholkyOYEXXgVs3FiY.roa (hash: Jl4uUb/G3mQj8xIpDsHAVqtzDEj+sUXfj7G+zwRxdNk=) 16: jwC74-F5iREL188mldERk81FXug.roa (hash: ddYPoTatj6nI/eSrzriO9qo6/69S19UgdJCWsEfW64k=) 17: nPembSTO0FXvbw8zcrfb1ZNsGHs.roa (hash: eFcHKopiqLAXcwkADSpifmFlMBENxHJyplWhREP1i08=) 18: rop6Si-gvflJGlaMTGjDBpHpYYI.roa (hash: Vieoxx0CWOeDqKFomK10FvV28nAZrZf1I36QMg8NMrc=) 19: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: Xwcw1TIYQvsauiJBkd/JGv5TFyPiQcPrOFlwxRNLboE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:19:66:59:cd:f6:39:7a:a8:09:c2:ed:cc:0c:60:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: Nov 4 23:00:10 2025 GMT Not After : Nov 5 23:00:10 2025 GMT Subject: CN=d17b031bcb377f360930c7719834c5c3bf4e5a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:6c:cd:68:75:b4:3d:af:b5:34:59:17:92: 7d:24:a8:60:4e:4d:95:1b:bd:1b:a1:72:5e:4b:f0: aa:0c:d4:10:ac:92:b6:ae:d0:a1:45:4f:8a:3c:7b: ba:d5:31:a2:42:23:76:31:cc:c0:ab:26:76:94:e8: 60:c8:91:60:39:cd:a4:26:f1:bc:de:48:70:ca:7c: 02:38:17:5c:2a:41:db:20:43:4c:62:14:b9:7d:08: 5f:9b:ea:d2:19:cf:68:0d:79:e7:d9:10:fa:ed:8d: 45:69:89:29:13:97:b9:ef:ef:07:16:d9:c5:5d:dd: 0c:38:18:67:dc:51:a4:3d:7c:98:ac:32:7a:af:24: 20:f3:9f:8b:cf:91:fc:f4:9b:8b:63:f1:d4:50:40: 26:38:61:4c:71:b6:f7:43:d5:82:f5:68:d0:68:7a: 26:62:59:78:21:ec:46:03:9d:9b:ba:a6:df:28:f1: df:ea:a1:66:32:26:07:83:36:9e:14:d3:b7:2c:3b: 31:e9:a6:f3:cb:54:45:5f:e5:9b:c5:f1:e4:8f:d7: 00:2f:0e:82:20:24:d4:87:c7:44:e6:49:46:a6:3b: 54:8c:74:b3:46:a6:24:e6:ef:b5:7d:6a:f3:12:d3: 01:88:5a:d3:f2:29:c1:50:a3:4b:93:50:d8:02:6b: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:03:1B:CB:37:7F:36:09:30:C7:71:98:34:C5:C3:BF:4E:5A:43 X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:6c:e9:08:6c:c5:30:0e:b3:71:0f:3e:11:75:0d:a4:a9:aa: 67:a0:71:78:f9:57:50:4b:17:27:bd:a4:c4:eb:f4:61:fa:63: 4b:f1:2a:f9:11:ed:f3:f0:a0:c1:1b:59:e5:bf:9b:1c:12:f8: 42:ac:8d:99:68:3f:6c:61:df:09:34:d0:a3:a5:e4:02:bb:8c: 40:32:5f:d7:41:a7:56:92:25:50:cd:8d:b8:8c:9d:b4:5e:60: fa:47:18:60:f1:1e:9f:b3:74:bf:ac:33:39:8a:28:17:6e:7c: d5:c6:e3:3e:2e:c7:c4:3c:8a:d0:c8:38:d1:ca:4d:81:4c:b9: 3c:e5:57:b4:95:0d:d2:01:77:4b:25:67:1c:71:12:31:29:9c: 9b:15:71:91:75:57:32:c5:4e:6a:db:29:cc:ef:82:00:94:1d: a4:aa:44:8f:f3:2d:5f:d7:5f:1c:ce:80:e7:5f:1f:19:61:31: b1:76:2f:a9:2c:7d:5c:4d:4f:fa:34:45:30:4f:2d:41:95:3c: d7:66:ae:ed:13:da:10:c7:91:ad:55:fe:cd:80:8b:c3:e4:8b: 23:38:20:24:21:87:1c:6a:d6:46:07:b0:0c:b1:8a:f2:37:9f: 03:32:05:2d:54:5c:9b:9b:0f:a2:85:c7:09:ba:24:31:25:a8: 8a:07:ea:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRGWZZzfY5eqgJwu3MDGCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUxMTA0MjMwMDEwWhcNMjUxMTA1MjMwMDEwWjAzMTEwLwYDVQQD EyhkMTdiMDMxYmNiMzc3ZjM2MDkzMGM3NzE5ODM0YzVjM2JmNGU1YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUdszWh1tD2vtTRZF5J9JKhgTk2V G70boXJeS/CqDNQQrJK2rtChRU+KPHu61TGiQiN2MczAqyZ2lOhgyJFgOc2kJvG8 3khwynwCOBdcKkHbIENMYhS5fQhfm+rSGc9oDXnn2RD67Y1FaYkpE5e57+8HFtnF Xd0MOBhn3FGkPXyYrDJ6ryQg85+Lz5H89JuLY/HUUEAmOGFMcbb3Q9WC9WjQaHom Yll4IexGA52buqbfKPHf6qFmMiYHgzaeFNO3LDsx6abzy1RFX+WbxfHkj9cALw6C ICTUh8dE5klGpjtUjHSzRqYk5u+1fWrzEtMBiFrT8inBUKNLk1DYAmtjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF7AxvLN382CTDHcZg0xcO/TlpDMB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2zpCGzF MA6zcQ8+EXUNpKmqZ6BxePlXUEsXJ72kxOv0YfpjS/Eq+RHt8/CgwRtZ5b+bHBL4 QqyNmWg/bGHfCTTQo6XkAruMQDJf10GnVpIlUM2NuIydtF5g+kcYYPEen7N0v6wz OYooF2581cbjPi7HxDyK0Mg40cpNgUy5POVXtJUN0gF3SyVnHHESMSmcmxVxkXVX MsVOatspzO+CAJQdpKpEj/MtX9dfHM6A518fGWExsXYvqSx9XE1P+jRFME8tQZU8 12au7RPaEMeRrVX+zYCLw+SLIzggJCGHHGrWRgewDLGK8jefAzIFLVRcm5sPooXH CbokMSWoigfqsg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:32:15 2025 by rpki-client