$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: k9dtMdsKUwi6H4GoVMlfIaZ4bEdKKwZc6GfJeA+YEb4= Subject key identifier: CE:EE:6C:4A:ED:DF:1B:CC:A2:C0:4D:2C:3F:61:DE:40:69:EF:8B:59 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019A17CF305145EF218EA580CBB5048D2E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 165B Signing time: Fri 24 Oct 2025 20:00:45 +0000 Manifest this update: Fri 24 Oct 2025 20:00:45 +0000 Manifest next update: Sat 25 Oct 2025 20:00:45 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 4: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: H9Neuc5zuwNenFn3Rq0l9xgHF9gu3hNcbIbkDQsCEvY=) 6: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 7: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 8: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 9: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 10: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 11: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:17:cf:30:51:45:ef:21:8e:a5:80:cb:b5:04:8d:2e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Oct 24 20:00:45 2025 GMT Not After : Oct 25 20:00:45 2025 GMT Subject: CN=ceee6c4aeddf1bcca2c04d2c3f61de4069ef8b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:fd:92:80:86:1c:d9:61:71:4b:e2:23:98: b9:59:d4:d3:ef:fe:d7:f6:4a:fb:56:01:8d:16:17: 74:59:d1:26:54:68:29:99:e0:b2:c4:c2:03:43:f1: 5c:03:3b:e1:e0:88:8f:da:e2:cf:dd:3f:da:37:0a: d2:8b:b2:f6:77:2c:37:6f:8e:22:60:6b:de:69:79: c3:99:ed:4d:1a:51:87:77:78:1f:e3:a0:2d:f8:a5: a5:c5:b4:c4:8f:3a:e0:79:97:c8:a1:9e:20:24:88: 40:35:2d:9d:97:f5:a1:27:34:ed:27:7e:7c:35:2d: 40:82:49:2f:b5:0a:3c:c9:08:ca:d4:b5:cd:b5:6c: 9b:aa:d2:5f:26:36:2e:9e:fb:21:fe:24:b1:ca:84: 17:30:92:6c:f3:e4:b4:39:9c:ba:10:40:26:7b:fd: f9:3a:1c:57:ef:0d:2a:1f:aa:78:c5:09:81:23:6f: d7:79:9d:71:86:31:02:9b:22:3a:f9:a7:0d:46:a4: 26:88:a4:23:6b:3f:25:fa:cd:8b:8d:d6:5f:32:f0: 35:5c:f8:f8:ce:03:da:f7:ab:4b:35:84:3a:14:9c: 03:c1:d0:b8:a1:7d:72:a7:3c:fb:81:24:c8:1e:23: 25:05:51:a2:bf:1b:d3:34:67:d8:db:92:4d:c1:20: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:6C:4A:ED:DF:1B:CC:A2:C0:4D:2C:3F:61:DE:40:69:EF:8B:59 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:41:bb:60:5c:84:3f:2d:4b:4e:25:42:26:89:2f:6e:2e:6f: 22:6b:7b:b7:2f:ae:22:1c:55:f7:2d:47:11:dc:64:a3:12:bc: b4:8b:56:78:fd:0b:7c:34:44:02:d9:31:b9:25:d5:7b:6c:a4: bf:a2:45:b8:b9:39:df:76:cd:aa:b5:3f:26:de:64:0b:76:97: 0a:57:1f:87:03:ff:4b:6e:97:39:d4:0d:6b:83:ef:e6:df:dd: aa:e8:0c:f2:ae:ae:da:fe:85:5e:5b:a5:e0:d1:90:c1:83:0a: 59:54:72:30:82:5e:f0:9d:8f:9b:21:09:85:d7:f6:8b:18:8c: 7f:8e:04:52:01:12:c0:2e:4c:fd:4d:08:1f:b2:b3:5d:08:2a: c0:df:22:29:a1:b0:e9:f7:c6:0f:ac:65:34:d5:86:7a:2e:3f: 46:64:47:d0:47:10:94:02:a6:ac:bc:3c:e6:99:18:4e:2d:4a: f5:22:2c:74:a5:70:b2:c6:57:3a:46:b9:a8:95:2e:03:5a:5a: 3d:3a:30:70:62:ab:98:ba:96:71:08:3c:d9:9e:e3:da:ce:ed: 9a:8e:a7:29:5e:f2:84:07:64:4a:ff:04:36:6a:1e:89:35:33: fc:3c:c4:57:a5:a5:d8:53:4a:1e:ec:0d:52:41:35:da:0f:68: 35:73:6d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoXzzBRRe8hjqWAy7UEjS41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMDI0MjAwMDQ1WhcNMjUxMDI1MjAwMDQ1WjAzMTEwLwYDVQQD EyhjZWVlNmM0YWVkZGYxYmNjYTJjMDRkMmMzZjYxZGU0MDY5ZWY4YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/X9koCGHNlhcUviI5i5WdTT7/7X 9kr7VgGNFhd0WdEmVGgpmeCyxMIDQ/FcAzvh4IiP2uLP3T/aNwrSi7L2dyw3b44i YGveaXnDme1NGlGHd3gf46At+KWlxbTEjzrgeZfIoZ4gJIhANS2dl/WhJzTtJ358 NS1AgkkvtQo8yQjK1LXNtWybqtJfJjYunvsh/iSxyoQXMJJs8+S0OZy6EEAme/35 OhxX7w0qH6p4xQmBI2/XeZ1xhjECmyI6+acNRqQmiKQjaz8l+s2LjdZfMvA1XPj4 zgPa96tLNYQ6FJwDwdC4oX1ypzz7gSTIHiMlBVGivxvTNGfY25JNwSDV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7ubErt3xvMosBNLD9h3kBp74tZMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEG7YFyE Py1LTiVCJokvbi5vImt7ty+uIhxV9y1HEdxkoxK8tItWeP0LfDREAtkxuSXVe2yk v6JFuLk533bNqrU/Jt5kC3aXClcfhwP/S26XOdQNa4Pv5t/dqugM8q6u2v6FXlul 4NGQwYMKWVRyMIJe8J2PmyEJhdf2ixiMf44EUgESwC5M/U0IH7KzXQgqwN8iKaGw 6ffGD6xlNNWGei4/RmRH0EcQlAKmrLw85pkYTi1K9SIsdKVwssZXOka5qJUuA1pa PTowcGKrmLqWcQg82Z7j2s7tmo6nKV7yhAdkSv8ENmoeiTUz/DzEV6Wl2FNKHuwN UkE12g9oNXNt5A== -----END CERTIFICATE-----Generated at Sat Oct 25 04:39:22 2025 by rpki-client