$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: ZYhS/TeQ9W8mNlR2alep/u9Q0wSTFNHhdKIOfhW25yE= Subject key identifier: 88:55:D6:53:0E:38:E1:A6:92:9C:51:55:2B:A5:47:89:5F:F1:1C:B6 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019A2177539AE43A23D9CD5560B76F2B1B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 16FD Signing time: Sun 26 Oct 2025 17:00:59 +0000 Manifest this update: Sun 26 Oct 2025 17:00:59 +0000 Manifest next update: Mon 27 Oct 2025 17:00:59 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: cSn7pLfX6A6FRTmepFL37OFHGpjO5i0zXN7x1AMzGNw=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:77:53:9a:e4:3a:23:d9:cd:55:60:b7:6f:2b:1b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Oct 26 17:00:59 2025 GMT Not After : Oct 27 17:00:59 2025 GMT Subject: CN=8855d6530e38e1a6929c51552ba547895ff11cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:80:54:c0:6b:ea:55:b5:4b:64:9c:b8:94: 3a:b3:48:71:c8:ef:59:be:e1:65:8e:86:40:a1:a1: 45:c3:fe:e7:11:bb:9f:41:d5:b5:91:40:ef:45:e5: 84:60:9c:18:ac:98:38:4c:69:e9:6d:3d:f8:1c:b9: ad:a7:dc:2e:6e:1a:46:1a:c9:ab:f9:28:51:b4:97: 40:df:ec:96:18:94:6c:c3:26:74:5e:e9:2b:77:8f: 7e:80:3a:fc:63:59:47:0d:bc:73:12:16:67:1c:e5: 92:f7:80:cd:e4:76:aa:7f:57:20:b1:7f:6a:94:08: 1e:fa:56:46:9a:2e:51:82:3a:81:5b:90:cf:08:12: fc:f2:de:67:ca:06:4f:a9:70:75:72:13:bc:0f:19: 19:70:95:ab:27:8b:1a:de:8f:6e:b5:43:31:4c:f5: 42:86:48:be:90:b2:6e:5e:21:89:f0:81:54:1e:2b: 4b:b0:dc:28:85:6f:b9:d5:73:84:21:5b:2b:c0:e0: c6:75:48:12:a0:ae:66:32:f1:c4:50:53:c4:d4:c1: 1c:7e:39:ce:95:37:d1:62:43:20:6d:29:be:f8:3b: 19:7b:59:5c:12:fd:22:d1:d7:48:f5:e7:42:bf:fb: 91:1e:1e:ef:fe:d0:48:12:08:f5:bf:2b:25:1f:fd: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:D6:53:0E:38:E1:A6:92:9C:51:55:2B:A5:47:89:5F:F1:1C:B6 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3b:d4:8c:b0:3b:f8:f0:e9:00:23:43:b7:8c:50:4d:6d:2b: af:fc:c6:f2:a5:ab:da:8a:a7:8b:00:70:94:b2:17:d3:78:4f: b9:73:8e:9a:2f:5b:de:ee:5f:8e:f1:92:97:ce:49:60:d2:53: 3b:7e:1e:ca:0d:e6:37:d5:7d:9f:d8:a9:79:1c:78:42:59:74: a0:04:d3:2c:57:a3:bf:f3:f1:1c:ff:7f:7b:25:8d:21:5d:4c: 43:fc:5e:6d:c5:9d:37:bc:02:00:28:de:28:91:ee:83:a6:35: 81:3f:39:9c:0e:ff:b3:4a:00:2d:84:72:6a:fb:75:07:0d:2b: 2d:c1:1f:27:78:43:21:57:5e:ca:22:a7:81:9b:b9:f0:81:ef: 46:8f:a8:c0:57:a1:d3:34:f2:34:ec:8c:2d:3d:dc:79:f7:9a: 5c:e3:32:bf:13:2d:10:b9:e8:17:42:c7:7f:75:8d:9d:1b:19: ff:2e:c5:3b:34:5f:9a:de:bc:54:19:17:9d:78:d3:9b:d5:a1: fb:3e:04:57:ec:ae:f5:1b:96:a2:0d:d4:ff:85:72:d7:30:7c: d2:6f:d1:6e:0b:10:db:ac:06:91:f5:e6:13:e4:1d:e4:3c:34: 84:4f:eb:a6:4a:a3:20:c6:54:20:33:14:cb:cb:2d:a2:c1:c4: 7c:b8:a0:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohd1Oa5Doj2c1VYLdvKxt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMDI2MTcwMDU5WhcNMjUxMDI3MTcwMDU5WjAzMTEwLwYDVQQD Eyg4ODU1ZDY1MzBlMzhlMWE2OTI5YzUxNTUyYmE1NDc4OTVmZjExY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLaAVMBr6lW1S2ScuJQ6s0hxyO9Z vuFljoZAoaFFw/7nEbufQdW1kUDvReWEYJwYrJg4TGnpbT34HLmtp9wubhpGGsmr +ShRtJdA3+yWGJRswyZ0Xukrd49+gDr8Y1lHDbxzEhZnHOWS94DN5Haqf1cgsX9q lAge+lZGmi5RgjqBW5DPCBL88t5nygZPqXB1chO8DxkZcJWrJ4sa3o9utUMxTPVC hki+kLJuXiGJ8IFUHitLsNwohW+51XOEIVsrwODGdUgSoK5mMvHEUFPE1MEcfjnO lTfRYkMgbSm++DsZe1lcEv0i0ddI9edCv/uRHh7v/tBIEgj1vyslH/2TwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhV1lMOOOGmkpxRVSulR4lf8Ry2MB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzvUjLA7 +PDpACNDt4xQTW0rr/zG8qWr2oqniwBwlLIX03hPuXOOmi9b3u5fjvGSl85JYNJT O34eyg3mN9V9n9ipeRx4Qll0oATTLFejv/PxHP9/eyWNIV1MQ/xebcWdN7wCACje KJHug6Y1gT85nA7/s0oALYRyavt1Bw0rLcEfJ3hDIVdeyiKngZu58IHvRo+owFeh 0zTyNOyMLT3cefeaXOMyvxMtELnoF0LHf3WNnRsZ/y7FOzRfmt68VBkXnXjTm9Wh +z4EV+yu9RuWog3U/4Vy1zB80m/RbgsQ26wGkfXmE+Qd5Dw0hE/rpkqjIMZUIDMU y8stosHEfLigaA== -----END CERTIFICATE-----Generated at Mon Oct 27 01:46:10 2025 by rpki-client