$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 4IDYpTqLqSMeVQnFsPBDYa9T1yTPBYpvIGmHeNJXCpw= Subject key identifier: 7A:05:94:1A:AF:97:81:83:63:54:6A:C1:B2:AF:22:13:AF:07:0F:EE Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019A06DAFC6D6F27EF106A9937865226302B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1708 Signing time: Tue 21 Oct 2025 13:00:05 +0000 Manifest this update: Tue 21 Oct 2025 13:00:05 +0000 Manifest next update: Wed 22 Oct 2025 13:00:05 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: vNevB1xF-PoTwPfY-Z2XsIwL7H8.roa (hash: vt4+GN3bRBOdbYFvvPoZYOFbNH+Yt+zM3zx61HscKi0=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: yDDwVUrSjwhuLaH2PBLuLrwmrY2zluhiuRbaDxneOuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:da:fc:6d:6f:27:ef:10:6a:99:37:86:52:26:30:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Oct 21 13:00:05 2025 GMT Not After : Oct 22 13:00:05 2025 GMT Subject: CN=7a05941aaf97818363546ac1b2af2213af070fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:6a:cc:14:9e:8f:f0:53:0f:77:59:17:2a: f3:54:14:b4:ec:30:11:a3:ea:1b:04:f6:c7:8f:0d: 49:14:fb:57:4c:3c:67:68:dc:c3:02:11:c3:47:ef: f4:4a:b4:55:20:71:13:d7:ce:11:d3:c2:80:04:72: 49:72:a5:58:e4:7c:67:c8:49:ff:de:f1:2d:7f:4f: d6:a2:66:6d:07:fd:81:47:6b:75:9a:4c:5f:29:86: 0d:1c:c5:59:90:7f:82:32:2b:2d:2e:ea:73:39:b1: 2a:db:0b:db:bf:e6:2d:f3:88:4c:09:07:72:89:10: 55:0d:73:2f:7e:6f:9e:21:6b:f3:ce:68:e1:dc:a1: 68:45:e7:3d:32:a9:cf:55:7a:dd:34:65:8b:2a:52: 0d:36:17:ac:59:00:2f:31:c0:dd:e8:03:d6:7e:95: ad:76:54:c3:0b:50:9c:99:83:31:26:64:07:32:48: 4c:27:b8:08:4e:d9:b0:10:5c:62:66:7a:aa:65:4e: 7f:c7:ba:58:0f:ae:f4:76:9b:41:09:a8:62:17:52: d2:74:c0:94:bf:fb:32:27:7c:17:c4:c1:2e:0e:2e: e5:62:69:61:4e:e4:b4:83:a6:28:20:e6:bd:49:91: c0:be:20:76:88:d0:a9:ca:30:77:a7:65:8e:d1:4b: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:05:94:1A:AF:97:81:83:63:54:6A:C1:B2:AF:22:13:AF:07:0F:EE X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bc:5e:2a:85:22:81:bf:28:08:2b:94:11:5a:da:2d:7c:3b: 4c:7f:e6:b2:23:f2:73:65:9a:e2:b4:d7:30:a4:df:95:75:68: 57:9e:cb:c2:b1:bb:8c:eb:e9:33:8d:df:a1:e9:1e:69:6b:ec: a6:7f:a3:b3:01:b9:2b:4a:b0:b4:cb:b3:8f:dd:14:af:fa:d8: b9:03:1e:14:6e:3a:70:b3:7f:a9:7c:12:48:3a:4e:b7:d1:86: 05:d6:c8:8c:f9:9d:9f:9a:7b:d1:40:c8:e0:46:c3:df:70:16: 6f:da:a0:5a:c2:f8:a9:a8:f2:ad:b0:7e:6a:a9:bc:ba:62:5d: a7:a9:d4:47:29:97:19:ca:1b:11:a4:c5:6e:f3:81:a0:ef:64: 4c:33:08:1d:55:57:cc:2f:d4:fd:f7:4e:0f:0c:0a:b2:ff:b9: 85:84:f7:5e:e6:82:8e:5f:53:8c:eb:a4:a5:62:60:95:40:d1: 1a:5d:90:d5:9c:c9:23:f4:fe:32:60:23:a2:35:fa:9a:92:dd: b4:77:9e:04:37:fb:11:50:b1:d8:3e:97:56:f9:6f:a2:da:a8: 21:1f:db:e1:cd:77:fd:5f:b5:e6:21:53:e3:8d:f0:de:4b:b0: f4:3f:bd:b5:a6:b9:24:74:ad:ea:d2:fa:4b:16:e1:57:d2:8e: dc:a6:c0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG2vxtbyfvEGqZN4ZSJjArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUxMDIxMTMwMDA1WhcNMjUxMDIyMTMwMDA1WjAzMTEwLwYDVQQD Eyg3YTA1OTQxYWFmOTc4MTgzNjM1NDZhYzFiMmFmMjIxM2FmMDcwZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs11qzBSej/BTD3dZFyrzVBS07DAR o+obBPbHjw1JFPtXTDxnaNzDAhHDR+/0SrRVIHET184R08KABHJJcqVY5HxnyEn/ 3vEtf0/WomZtB/2BR2t1mkxfKYYNHMVZkH+CMistLupzObEq2wvbv+Yt84hMCQdy iRBVDXMvfm+eIWvzzmjh3KFoRec9MqnPVXrdNGWLKlINNhesWQAvMcDd6APWfpWt dlTDC1CcmYMxJmQHMkhMJ7gITtmwEFxiZnqqZU5/x7pYD670dptBCahiF1LSdMCU v/syJ3wXxMEuDi7lYmlhTuS0g6YoIOa9SZHAviB2iNCpyjB3p2WO0Ut9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoFlBqvl4GDY1RqwbKvIhOvBw/uMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrxeKoUi gb8oCCuUEVraLXw7TH/msiPyc2Wa4rTXMKTflXVoV57LwrG7jOvpM43foekeaWvs pn+jswG5K0qwtMuzj90Ur/rYuQMeFG46cLN/qXwSSDpOt9GGBdbIjPmdn5p70UDI 4EbD33AWb9qgWsL4qajyrbB+aqm8umJdp6nURymXGcobEaTFbvOBoO9kTDMIHVVX zC/U/fdODwwKsv+5hYT3XuaCjl9TjOukpWJglUDRGl2Q1ZzJI/T+MmAjojX6mpLd tHeeBDf7EVCx2D6XVvlvotqoIR/b4c13/V+15iFT443w3kuw9D+9taa5JHSt6tL6 SxbhV9KO3KbAdw== -----END CERTIFICATE-----Generated at Tue Oct 21 21:01:40 2025 by rpki-client