$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: YbVYF4Vbh3eFyMLswIQCWNajpRlZqnDrmqMVAoIUuDs= Subject key identifier: 33:FE:DE:BC:0F:11:22:91:9E:DF:4A:95:90:31:E4:71:D6:47:B9:A4 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019A1D2C55D3C3D92FA14277BC5A38E753C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0BA1 Signing time: Sat 25 Oct 2025 21:00:36 +0000 Manifest this update: Sat 25 Oct 2025 21:00:36 +0000 Manifest next update: Sun 26 Oct 2025 21:00:36 +0000 Files and hashes: 1: 3O-D3rX4CFCdAkLP-WafPBWg7LI.roa (hash: ZjKqIVEFVR9cfjOaAvV16cE3fi3JRCek3PrT1Bdh+pE=) 2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: DZ65zZXL2SiPKJfYKjE59wrULHdneY5vALSa/nfL//s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:2c:55:d3:c3:d9:2f:a1:42:77:bc:5a:38:e7:53:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Oct 25 21:00:36 2025 GMT Not After : Oct 26 21:00:36 2025 GMT Subject: CN=33fedebc0f1122919edf4a959031e471d647b9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:31:2a:c8:43:d5:b5:ea:50:df:2a:22:48:53: 8f:68:f0:17:2b:80:a8:ae:55:49:1e:4d:a6:cb:d3: a0:fb:fb:ff:fc:ea:92:cd:47:a9:53:ae:13:af:bd: 50:18:d2:a7:a3:88:59:b8:99:25:1a:f5:06:22:b5: ae:cc:90:8f:f3:d9:90:ce:37:be:4a:30:b7:11:da: a5:a9:97:45:51:6b:47:a7:fd:ed:5d:10:eb:89:a8: 95:1c:b0:1d:b3:a4:e0:ac:f0:29:f2:30:40:9f:16: 51:8c:ce:b2:51:f8:9d:17:8a:1f:b6:9e:58:e0:92: 76:30:e2:18:6c:1a:04:c3:71:4f:58:72:4d:51:a8: 9f:ad:44:0d:32:ac:3d:34:23:b7:18:8f:2e:ca:bf: 73:11:ec:9d:b1:48:49:4e:cc:8d:0e:8e:bc:60:bb: e8:16:c4:13:c9:4e:73:eb:a8:03:3e:69:8b:a4:62: 59:ef:0e:76:ef:fb:64:e8:c9:03:4c:39:28:ec:0a: 7f:fc:08:8b:f5:b9:24:c2:90:be:45:83:28:af:1a: 23:12:03:61:ea:69:3e:c0:be:ea:6a:86:46:8a:84: d9:66:2e:68:92:31:e1:96:a1:10:2a:b2:0e:78:5a: 4c:68:3e:63:a3:2a:9e:3d:94:1a:e2:41:d5:d3:40: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:DE:BC:0F:11:22:91:9E:DF:4A:95:90:31:E4:71:D6:47:B9:A4 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0f:36:15:00:12:4f:e6:ae:25:00:7c:0d:f0:71:19:43:3d: ed:27:16:1c:d5:f9:ed:6a:34:f5:7b:8c:0a:6d:ef:99:8d:41: 9e:9b:4b:00:62:9d:75:65:5e:74:cc:dc:ba:fa:d6:86:9b:30: 44:97:ba:97:2b:70:56:90:72:8c:e7:ac:32:25:7f:88:b2:87: e3:97:65:1e:07:4a:eb:90:10:dc:4a:5d:44:b6:ac:df:f4:f4: 1e:a6:75:9d:10:ca:62:27:73:c9:34:49:94:ab:a7:50:2c:7e: a0:58:5d:5e:fd:59:69:1e:ea:00:64:e4:81:89:68:e9:85:d7: f5:f2:c9:30:5e:82:79:ab:09:eb:d7:9e:e5:26:82:3b:f5:2a: 03:3c:f8:4a:4e:db:18:4b:24:e7:7a:9b:2a:13:58:98:e5:1c: 31:73:ac:d2:00:8a:04:88:bc:71:ef:40:5c:09:e7:7e:3c:1e: 8c:5a:48:d7:bc:8b:57:93:36:85:0e:4a:f2:5b:7f:5a:46:a6: 5f:35:15:ac:bb:d2:92:78:f1:69:a6:3c:cf:e6:39:b8:ac:49: f5:07:ad:74:8c:8e:13:b7:9d:11:64:dc:ce:10:a4:b2:47:eb: db:40:dd:a2:b5:c6:4e:cd:a5:44:3c:48:f0:ee:8d:fc:6b:02: b4:68:84:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodLFXTw9kvoUJ3vFo451PFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUxMDI1MjEwMDM2WhcNMjUxMDI2MjEwMDM2WjAzMTEwLwYDVQQD EygzM2ZlZGViYzBmMTEyMjkxOWVkZjRhOTU5MDMxZTQ3MWQ2NDdiOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TEqyEPVtepQ3yoiSFOPaPAXK4Co rlVJHk2my9Og+/v//OqSzUepU64Tr71QGNKno4hZuJklGvUGIrWuzJCP89mQzje+ SjC3EdqlqZdFUWtHp/3tXRDriaiVHLAds6TgrPAp8jBAnxZRjM6yUfidF4oftp5Y 4JJ2MOIYbBoEw3FPWHJNUaifrUQNMqw9NCO3GI8uyr9zEeydsUhJTsyNDo68YLvo FsQTyU5z66gDPmmLpGJZ7w527/tk6MkDTDko7Ap//AiL9bkkwpC+RYMorxojEgNh 6mk+wL7qaoZGioTZZi5okjHhlqEQKrIOeFpMaD5joyqePZQa4kHV00CzLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP+3rwPESKRnt9KlZAx5HHWR7mkMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA82FQAS T+auJQB8DfBxGUM97ScWHNX57Wo09XuMCm3vmY1BnptLAGKddWVedMzcuvrWhpsw RJe6lytwVpByjOesMiV/iLKH45dlHgdK65AQ3EpdRLas3/T0HqZ1nRDKYidzyTRJ lKunUCx+oFhdXv1ZaR7qAGTkgYlo6YXX9fLJMF6CeasJ69ee5SaCO/UqAzz4Sk7b GEsk53qbKhNYmOUcMXOs0gCKBIi8ce9AXAnnfjwejFpI17yLV5M2hQ5K8lt/Wkam XzUVrLvSknjxaaY8z+Y5uKxJ9QetdIyOE7edEWTczhCkskfr20DdorXGTs2lRDxI 8O6N/GsCtGiErA== -----END CERTIFICATE-----Generated at Sun Oct 26 03:15:01 2025 by rpki-client