$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: p42nBv33pYHJVeDhIAMXVuvWnfPttVTy6/e2xTUCahA= Subject key identifier: 2F:04:27:67:10:F5:66:A6:D6:4A:B1:D9:32:20:DD:D7:BA:4F:C2:D3 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019A24AEF5F2A12F617BFFCB9952A628B257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 1421 Signing time: Mon 27 Oct 2025 08:00:37 +0000 Manifest this update: Mon 27 Oct 2025 08:00:37 +0000 Manifest next update: Tue 28 Oct 2025 08:00:37 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: lKNjBVGfuhw/Npg7EiL6ycTrDxJ716H8Re5Co0fhl08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:ae:f5:f2:a1:2f:61:7b:ff:cb:99:52:a6:28:b2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Oct 27 08:00:37 2025 GMT Not After : Oct 28 08:00:37 2025 GMT Subject: CN=2f04276710f566a6d64ab1d93220ddd7ba4fc2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8c:ad:b8:af:ea:f7:d2:1c:14:62:69:09:b2: 17:28:61:22:23:f4:2f:b6:d1:2d:bd:0a:8b:c5:ec: c2:c3:e6:ea:aa:65:25:1b:51:8b:8a:9c:f3:9c:c9: bb:bc:44:aa:d9:ba:43:c5:93:7b:90:23:e0:f2:29: 51:d8:b5:06:68:bb:ef:e2:16:b7:1d:ee:19:78:7f: 7f:c8:eb:69:73:ff:2b:15:ca:50:58:47:bd:6f:3a: 07:7a:57:62:d2:f5:11:1d:56:e2:3c:4f:26:83:d3: de:b5:49:62:16:73:0e:44:91:e7:0e:3d:6f:cf:8d: 80:23:2a:da:2c:33:c9:d2:c7:cd:b9:6f:19:c2:b7: ab:2b:78:8b:bc:60:9a:28:f1:ae:c3:b6:92:9f:d9: bb:0a:12:61:42:a0:f4:08:d0:6a:ce:99:bb:6e:83: db:99:bd:3f:2c:e4:36:b6:7f:0b:93:66:bf:f9:64: 91:22:15:71:67:c9:7d:e8:03:f2:db:30:9e:6b:96: a6:68:c8:3c:ab:bd:f7:5f:b8:4c:8e:f3:bb:cc:4b: 45:dc:a3:f1:b1:26:f1:5d:c3:fa:a8:e0:91:a5:e6: c6:b2:8c:e9:e3:36:b5:54:d2:7b:a8:95:6e:41:53: f1:3f:ec:b0:8f:8f:c5:b6:5f:55:d3:1f:f0:98:9f: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:04:27:67:10:F5:66:A6:D6:4A:B1:D9:32:20:DD:D7:BA:4F:C2:D3 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:60:72:fe:49:ef:a2:28:50:75:f9:f0:63:25:4c:98:59:87: dd:8a:e1:1f:67:77:5a:98:4e:30:8d:6c:1c:f7:66:a0:70:da: 01:85:3d:ee:3e:c9:14:ef:b8:67:7c:cb:42:56:ad:1a:23:9a: ff:d8:94:2a:f2:db:81:a2:78:20:11:ca:68:3e:76:f6:42:4b: b7:97:5f:65:0e:13:d8:97:41:2f:4f:5e:a7:9c:cc:1b:d3:c9: 65:b3:4d:b9:bf:76:ca:b2:5c:e8:22:b9:39:1d:91:22:d4:e7: a7:98:e3:5a:95:f4:c9:fa:e3:75:9a:d0:f7:23:4e:4e:51:62: 18:72:39:f0:db:89:a2:7a:de:04:a9:ea:4f:90:61:6b:99:d9: 54:3f:5b:54:a9:7d:94:f9:ab:63:8b:93:91:ac:3b:d5:d4:78: d9:2f:4e:96:54:7f:4d:5a:9e:17:14:ed:18:5d:4a:99:2c:bd: 32:c2:08:33:ce:f5:32:4b:c7:13:af:14:f7:5f:cc:c0:c3:ab: 52:14:5d:58:64:95:1f:f1:ac:ba:84:a8:7c:57:36:c1:87:33: 80:6d:15:a2:61:c5:90:d5:5a:21:49:13:97:04:5e:ec:7b:20: 35:df:4a:b7:bf:76:f1:b7:d4:42:9f:41:b9:c9:c6:61:4e:41: 84:38:70:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZokrvXyoS9he//LmVKmKLJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMDI3MDgwMDM3WhcNMjUxMDI4MDgwMDM3WjAzMTEwLwYDVQQD EygyZjA0Mjc2NzEwZjU2NmE2ZDY0YWIxZDkzMjIwZGRkN2JhNGZjMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/IytuK/q99IcFGJpCbIXKGEiI/Qv ttEtvQqLxezCw+bqqmUlG1GLipzznMm7vESq2bpDxZN7kCPg8ilR2LUGaLvv4ha3 He4ZeH9/yOtpc/8rFcpQWEe9bzoHeldi0vURHVbiPE8mg9PetUliFnMORJHnDj1v z42AIyraLDPJ0sfNuW8ZwrerK3iLvGCaKPGuw7aSn9m7ChJhQqD0CNBqzpm7boPb mb0/LOQ2tn8Lk2a/+WSRIhVxZ8l96APy2zCea5amaMg8q733X7hMjvO7zEtF3KPx sSbxXcP6qOCRpebGsozp4za1VNJ7qJVuQVPxP+ywj4/Ftl9V0x/wmJ9P4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8EJ2cQ9Wam1kqx2TIg3de6T8LTMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmBy/knv oihQdfnwYyVMmFmH3YrhH2d3WphOMI1sHPdmoHDaAYU97j7JFO+4Z3zLQlatGiOa /9iUKvLbgaJ4IBHKaD529kJLt5dfZQ4T2JdBL09ep5zMG9PJZbNNub92yrJc6CK5 OR2RItTnp5jjWpX0yfrjdZrQ9yNOTlFiGHI58NuJonreBKnqT5Bha5nZVD9bVKl9 lPmrY4uTkaw71dR42S9OllR/TVqeFxTtGF1KmSy9MsIIM871MkvHE68U91/MwMOr UhRdWGSVH/GsuoSofFc2wYczgG0VomHFkNVaIUkTlwRe7HsgNd9Kt7928bfUQp9B ucnGYU5BhDhwOQ== -----END CERTIFICATE-----Generated at Mon Oct 27 15:05:13 2025 by rpki-client