$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: JzXok33Vpk407nWBC8fZAG+AlsuNS0MZXNFKZTlxzn8= Subject key identifier: 10:C1:B3:F7:7C:A7:D3:7D:85:1F:4B:32:11:19:BA:E7:FF:AE:DD:C9 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019A1AD10132820851DBB2369B978002984A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1710 Signing time: Sat 25 Oct 2025 10:01:36 +0000 Manifest this update: Sat 25 Oct 2025 10:01:36 +0000 Manifest next update: Sun 26 Oct 2025 10:01:36 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: 0+aVlypoRYRhuaNVDiTfWYgNLrLcQtj+K8hWe3qyXEI=) 2: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 3: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 5: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=) 6: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=) 7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 8: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=) 9: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=) 10: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=) 13: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=) 14: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=) 15: ji_T031R5JpC7beRNkBxDFafiVw.roa (hash: 1TeYXNj1EDP13nwTEBI09Lq7/ivNqTb2BlS99x0i2Hs=) 16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1a:d1:01:32:82:08:51:db:b2:36:9b:97:80:02:98:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Oct 25 10:01:36 2025 GMT Not After : Oct 26 10:01:36 2025 GMT Subject: CN=10c1b3f77ca7d37d851f4b321119bae7ffaeddc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:8e:93:cf:51:d6:17:31:03:bd:7f:87:1b: 00:2a:4e:ea:b3:9a:0b:df:91:62:c2:ad:e2:3b:9b: 4d:d4:7b:ee:42:2e:ee:e2:16:aa:00:61:5f:6e:3f: a4:94:e4:31:60:cd:a1:8a:a4:19:89:24:af:7e:f4: 78:ec:dd:c7:40:f5:24:bb:3d:dc:92:29:69:5b:ad: 3b:cf:7c:cb:84:bc:14:4a:fd:ef:6f:a0:e9:39:29: d4:80:d3:01:e2:b2:6e:f1:b4:cd:ca:cb:e6:8b:8d: 8e:24:e5:5f:7e:af:c2:a9:98:7b:30:3e:75:ff:bc: 65:a7:cd:6b:be:2a:ec:d4:52:ef:68:5e:6c:ca:de: 1c:3a:de:76:7a:a5:93:30:0d:62:86:8b:11:a8:04: 48:49:d0:71:37:7d:39:cf:72:ce:34:77:22:6e:98: 07:e4:01:eb:93:3d:8c:a8:bf:0c:d1:30:98:bf:41: 81:ef:b2:ce:d6:15:ba:bd:6c:d5:b8:64:d4:9d:5a: c3:9b:b5:88:68:4e:0a:df:f1:df:74:68:37:a0:70: 68:eb:65:60:11:92:54:06:f0:87:07:e6:59:ca:a5: 5b:c0:f9:5d:57:f3:0b:d5:b0:53:e0:6c:c2:4a:48: 15:95:de:51:ac:ee:21:13:8d:a1:dc:70:a1:06:59: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C1:B3:F7:7C:A7:D3:7D:85:1F:4B:32:11:19:BA:E7:FF:AE:DD:C9 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b5:f4:76:d8:06:65:52:1c:90:96:9e:89:1f:bf:14:f6:0c: 36:6e:75:84:ef:23:db:dc:64:e1:a0:24:3b:4a:d0:b8:ac:06: 7f:30:9c:b5:48:48:ef:15:d3:ae:2f:e4:e4:9a:ae:16:38:c6: 43:6c:4e:05:2a:57:11:3f:e2:c0:dc:3e:dd:d1:5d:ae:de:60: 2c:f1:56:37:47:be:08:8a:85:46:b0:7d:07:ee:1b:37:e6:51: ca:fb:65:a6:50:c8:30:bc:9d:c4:41:a9:fe:64:a3:b0:d7:f6: 59:3a:20:13:60:e6:2d:57:60:6d:33:7c:0b:cf:a9:ee:e7:47: 52:e7:ee:23:cb:27:fb:fd:2a:8c:3d:c2:8e:27:36:dd:49:3d: 23:98:20:f1:3c:3e:4a:50:57:7e:1e:dc:5c:bb:57:49:94:90: de:3a:14:b7:a1:2d:d8:6e:aa:10:e9:4f:f5:57:27:52:b8:db: 7f:88:9a:f2:b8:6c:b2:d3:da:e8:36:77:b7:bf:e1:4a:0a:7a: 66:5e:bb:aa:fc:2b:0e:7f:7c:83:40:38:ba:60:21:bb:bc:62: 5a:d7:0a:85:4d:2a:8a:00:42:a3:f4:fd:88:63:12:67:6b:80: 25:cd:61:25:88:c2:50:e8:18:a7:69:da:86:dc:1b:d4:39:65: a5:02:fe:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoa0QEygghR27I2m5eAAphKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMDI1MTAwMTM2WhcNMjUxMDI2MTAwMTM2WjAzMTEwLwYDVQQD EygxMGMxYjNmNzdjYTdkMzdkODUxZjRiMzIxMTE5YmFlN2ZmYWVkZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76Ok89R1hcxA71/hxsAKk7qs5oL 35Fiwq3iO5tN1HvuQi7u4haqAGFfbj+klOQxYM2hiqQZiSSvfvR47N3HQPUkuz3c kilpW607z3zLhLwUSv3vb6DpOSnUgNMB4rJu8bTNysvmi42OJOVffq/CqZh7MD51 /7xlp81rvirs1FLvaF5syt4cOt52eqWTMA1ihosRqARISdBxN305z3LONHcibpgH 5AHrkz2MqL8M0TCYv0GB77LO1hW6vWzVuGTUnVrDm7WIaE4K3/HfdGg3oHBo62Vg EZJUBvCHB+ZZyqVbwPldV/ML1bBT4GzCSkgVld5RrO4hE42h3HChBllJGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDBs/d8p9N9hR9LMhEZuuf/rt3JMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7X0dtgG ZVIckJaeiR+/FPYMNm51hO8j29xk4aAkO0rQuKwGfzCctUhI7xXTri/k5JquFjjG Q2xOBSpXET/iwNw+3dFdrt5gLPFWN0e+CIqFRrB9B+4bN+ZRyvtlplDIMLydxEGp /mSjsNf2WTogE2DmLVdgbTN8C8+p7udHUufuI8sn+/0qjD3Cjic23Uk9I5gg8Tw+ SlBXfh7cXLtXSZSQ3joUt6Et2G6qEOlP9VcnUrjbf4ia8rhsstPa6DZ3t7/hSgp6 Zl67qvwrDn98g0A4umAhu7xiWtcKhU0qigBCo/T9iGMSZ2uAJc1hJYjCUOgYp2na htwb1DllpQL+MA== -----END CERTIFICATE-----Generated at Sat Oct 25 11:26:42 2025 by rpki-client