$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: 2gdkzuvGEQGNSN0IG8fBVPhYEdWYfcEvTZF5ba8EOig= Subject key identifier: AA:AF:3F:D4:BB:18:C5:75:18:A2:77:FD:5F:AB:F5:6E:21:6D:B6:ED Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019A19BDA599203EC8B4A8FBCA805AFECF15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1714 Signing time: Sat 25 Oct 2025 05:00:50 +0000 Manifest this update: Sat 25 Oct 2025 05:00:50 +0000 Manifest next update: Sun 26 Oct 2025 05:00:50 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: M47+58XbV2qAgF367FV5FWdz+Tp4BsG2oGyPt3JElt8=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:bd:a5:99:20:3e:c8:b4:a8:fb:ca:80:5a:fe:cf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Oct 25 05:00:50 2025 GMT Not After : Oct 26 05:00:50 2025 GMT Subject: CN=aaaf3fd4bb18c57518a277fd5fabf56e216db6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:c3:61:6e:51:91:a6:ae:8c:3a:2a:ef:29: 7e:cc:53:a1:df:27:cf:a5:22:5b:ed:6f:1f:1d:a7: 1a:d0:cb:32:89:fa:03:af:96:b0:58:08:50:cc:d5: ce:b9:7b:d2:84:57:5b:75:83:03:89:61:2a:66:41: e6:1e:e1:d6:73:58:c3:29:bb:a4:66:94:f6:42:a4: f9:8d:a5:b5:16:1d:0e:a6:8a:ea:d6:19:c5:ac:81: 96:42:9e:82:00:f4:bc:e3:08:cd:3b:0e:5a:5b:e9: 98:8b:a8:de:71:a5:93:6f:f0:94:a3:aa:d4:a8:6b: 20:a7:c3:9a:a4:db:4e:ea:62:6b:2b:1e:66:42:bd: 57:c9:fb:f0:06:74:fd:9d:4a:aa:ec:b0:d7:a0:d4: cf:27:cb:50:6b:dd:52:7d:9a:3a:15:49:05:7e:b4: cb:e2:fe:d2:8c:83:0b:9c:37:2a:71:90:d5:e7:23: d0:a7:04:a4:69:37:04:2a:23:c9:ad:a4:83:fd:d0: 1b:2e:bc:69:fb:e3:e0:bb:8d:7e:6c:58:02:3d:54: 6a:4e:24:34:a4:ae:aa:c6:6e:d6:3f:c5:bd:3a:2c: 4f:53:ea:b3:9f:e2:20:34:5c:2c:33:61:01:3a:9f: ef:0d:2d:3b:2b:35:a1:01:b1:4d:b5:ce:ac:1c:f1: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AF:3F:D4:BB:18:C5:75:18:A2:77:FD:5F:AB:F5:6E:21:6D:B6:ED X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:d0:d4:64:0c:82:fc:c2:b2:af:fd:1a:4f:99:5d:5a:1d:45: ae:5b:d4:aa:2a:45:30:6b:93:57:ff:e9:0a:bf:56:a7:e2:19: 6e:dc:11:22:98:4c:9f:7d:cb:1a:be:93:9a:be:f6:85:5d:8e: fe:f2:5a:5e:3e:8e:74:5d:95:46:26:90:a6:2f:aa:bd:d9:7c: dc:44:e7:a6:22:03:11:82:10:55:ff:c7:c0:16:74:7c:4c:c0: fd:05:c7:79:cb:e2:af:3b:28:64:32:cb:cd:52:25:04:da:2a: a3:65:1c:f1:bf:fc:e5:c3:f5:fb:42:4c:35:aa:d3:07:b3:00: d5:93:9f:24:03:80:5d:d0:8f:77:14:48:37:46:69:e5:a2:e3: 32:65:c2:52:96:7a:86:90:d9:3b:06:44:cc:18:28:22:85:56: 6c:9e:ce:39:ea:54:de:a4:b8:3f:17:a0:07:b2:25:1d:c5:f5: d9:58:f9:46:e5:1d:98:57:bb:ba:53:c4:70:77:ee:0d:d4:b8: af:cd:5f:74:17:0f:e7:66:ba:e5:9d:83:48:d6:25:b0:e0:ea: 8a:75:7b:92:ef:fd:37:9d:b7:fb:bd:af:16:4a:3b:01:80:a2: dc:c0:6b:53:24:fa:4f:a6:62:52:5b:b9:1b:76:97:dd:d6:f5: d3:a8:7e:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZvaWZID7ItKj7yoBa/s8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUxMDI1MDUwMDUwWhcNMjUxMDI2MDUwMDUwWjAzMTEwLwYDVQQD EyhhYWFmM2ZkNGJiMThjNTc1MThhMjc3ZmQ1ZmFiZjU2ZTIxNmRiNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6/DYW5RkaaujDoq7yl+zFOh3yfP pSJb7W8fHaca0MsyifoDr5awWAhQzNXOuXvShFdbdYMDiWEqZkHmHuHWc1jDKbuk ZpT2QqT5jaW1Fh0Oporq1hnFrIGWQp6CAPS84wjNOw5aW+mYi6jecaWTb/CUo6rU qGsgp8OapNtO6mJrKx5mQr1XyfvwBnT9nUqq7LDXoNTPJ8tQa91SfZo6FUkFfrTL 4v7SjIMLnDcqcZDV5yPQpwSkaTcEKiPJraSD/dAbLrxp++Pgu41+bFgCPVRqTiQ0 pK6qxm7WP8W9OixPU+qzn+IgNFwsM2EBOp/vDS07KzWhAbFNtc6sHPFbfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqvP9S7GMV1GKJ3/V+r9W4hbbbtMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNDUZAyC /MKyr/0aT5ldWh1FrlvUqipFMGuTV//pCr9Wp+IZbtwRIphMn33LGr6Tmr72hV2O /vJaXj6OdF2VRiaQpi+qvdl83ETnpiIDEYIQVf/HwBZ0fEzA/QXHecvirzsoZDLL zVIlBNoqo2Uc8b/85cP1+0JMNarTB7MA1ZOfJAOAXdCPdxRIN0Zp5aLjMmXCUpZ6 hpDZOwZEzBgoIoVWbJ7OOepU3qS4PxegB7IlHcX12Vj5RuUdmFe7ulPEcHfuDdS4 r81fdBcP52a65Z2DSNYlsODqinV7ku/9N523+72vFko7AYCi3MBrUyT6T6ZiUlu5 G3aX3db106h+yA== -----END CERTIFICATE-----Generated at Sat Oct 25 11:30:49 2025 by rpki-client