$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: JyBmrGbxkaWz44N4d/swMMzuKTiJUB/H79GFe2VoBso= Subject key identifier: AE:47:CB:B6:77:C1:FB:64:45:27:15:40:1B:96:A1:6C:F3:E0:15:A3 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019A1C50BD634A7C35B0A4915A42C23403A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0D04 Signing time: Sat 25 Oct 2025 17:00:44 +0000 Manifest this update: Sat 25 Oct 2025 17:00:44 +0000 Manifest next update: Sun 26 Oct 2025 17:00:44 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: pGLxNYzggiDUXLyEgPqgtU1VlQxyImoDYkBjMSkZbdI=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: MPC4WGBwWzUKQ4MIf9vheq3ljf8.roa (hash: X1yT4PQqSCT8h7K1UyGvzdMze10lM3EBcX0jmIp7dhY=) 5: NAMBInXKPKPqtrO6XK9P-eL20I4.roa (hash: 4fJ+hFJ7pPmJDSjC/D+GIbCN1lrR9IBTNn+OYrdB5vE=) 6: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 7: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 8: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 9: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 10: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 11: e5h93GJcw_yYu-HPlsFYMzfWdiw.roa (hash: oKEC7H50ILmV8ZefC45forraqPebyPkE3IFXMuMi43Y=) 12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) 16: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=) 17: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=) 18: ycORncNA45mJd3RcVB4kkVyYyek.roa (hash: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:50:bd:63:4a:7c:35:b0:a4:91:5a:42:c2:34:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Oct 25 17:00:44 2025 GMT Not After : Oct 26 17:00:44 2025 GMT Subject: CN=ae47cbb677c1fb64452715401b96a16cf3e015a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:e3:b2:c2:d7:3c:8f:9d:0c:1c:da:fb:ef: ac:62:21:b4:12:eb:8e:ca:fb:b6:cf:f3:ac:be:81: bd:c6:59:a3:da:a6:b0:b1:1e:64:b6:e2:82:03:2b: c6:c4:77:dc:1c:2e:31:72:e0:aa:31:b0:c7:9b:41: 74:1a:de:e5:03:50:d0:5b:be:51:8e:cf:dd:74:0c: 6b:e9:ca:dc:97:79:4d:d6:b9:6e:e5:a3:cd:30:89: 70:8b:7f:b5:45:d1:04:46:e4:c2:47:db:1a:4c:90: 8d:30:73:5f:ec:e2:43:f1:74:59:71:22:7c:21:c4: c6:e4:e0:53:62:ad:e4:67:6c:e3:12:35:ef:c7:b6: b0:e3:ef:2c:8d:48:0d:52:55:4e:52:26:63:fc:41: 4f:d9:68:86:cf:e2:f2:e0:39:6b:72:ed:33:31:8e: f6:09:a1:0f:03:00:85:76:2e:f3:da:1c:54:15:39: df:7e:02:c6:af:6b:68:87:69:e9:9c:2a:72:2a:28: c3:a9:bb:3f:95:ca:88:06:0f:09:f5:94:a3:84:22: 56:18:e7:8a:3d:32:20:88:53:22:45:79:2b:b1:1d: 67:21:40:f2:dd:a7:23:ac:8d:67:cb:be:d7:6d:af: 63:70:f1:4e:a6:fb:04:bf:c4:fd:00:b3:5a:62:7f: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:47:CB:B6:77:C1:FB:64:45:27:15:40:1B:96:A1:6C:F3:E0:15:A3 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f3:f4:b0:0e:03:d8:7d:75:3e:11:da:78:69:25:8b:26:9e: 15:75:79:cb:3d:c6:35:6e:d1:b8:d3:67:76:c0:dd:de:3a:f3: d5:42:c8:91:e2:9f:1c:34:d0:95:f4:ac:e2:c0:41:ab:70:57: dd:98:05:26:c3:46:98:28:41:e1:32:73:aa:d2:96:a5:f2:01: 4a:7e:8b:b4:fa:dd:dc:e1:17:77:68:38:79:d7:13:ac:c3:c4: f3:48:38:cf:46:b3:d9:4b:d0:10:38:37:65:f1:07:25:1c:91: 99:f1:88:be:36:7a:48:e5:7c:7c:ef:75:22:0d:40:51:b3:ca: b3:7d:59:8e:c2:8d:22:5d:f4:84:c8:c5:58:fd:36:cd:7d:5c: 3d:e9:a2:fb:60:6e:bf:6d:c0:04:c7:fa:34:82:f1:c4:05:6c: 79:25:95:07:f5:f1:93:78:29:82:f1:38:ce:b5:b1:03:f3:e1: 73:e4:2b:86:fd:ad:7a:e2:ff:2c:40:34:83:19:7b:61:d6:01: 43:8d:b7:4e:24:87:06:fb:e0:ef:01:05:d8:da:93:75:1b:3f: cd:ab:d2:ab:cf:04:75:3e:f0:8d:83:ea:56:93:fb:d6:f5:25: 58:77:61:85:2b:c7:11:45:c0:40:1b:f5:f2:9e:ed:35:d8:a0: 45:c7:3b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocUL1jSnw1sKSRWkLCNAOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUxMDI1MTcwMDQ0WhcNMjUxMDI2MTcwMDQ0WjAzMTEwLwYDVQQD EyhhZTQ3Y2JiNjc3YzFmYjY0NDUyNzE1NDAxYjk2YTE2Y2YzZTAxNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2PjssLXPI+dDBza+++sYiG0EuuO yvu2z/OsvoG9xlmj2qawsR5ktuKCAyvGxHfcHC4xcuCqMbDHm0F0Gt7lA1DQW75R js/ddAxr6crcl3lN1rlu5aPNMIlwi3+1RdEERuTCR9saTJCNMHNf7OJD8XRZcSJ8 IcTG5OBTYq3kZ2zjEjXvx7aw4+8sjUgNUlVOUiZj/EFP2WiGz+Ly4Dlrcu0zMY72 CaEPAwCFdi7z2hxUFTnffgLGr2toh2npnCpyKijDqbs/lcqIBg8J9ZSjhCJWGOeK PTIgiFMiRXkrsR1nIUDy3acjrI1ny77Xba9jcPFOpvsEv8T9ALNaYn/jtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5Hy7Z3wftkRScVQBuWoWzz4BWjMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPP0sA4D 2H11PhHaeGkliyaeFXV5yz3GNW7RuNNndsDd3jrz1ULIkeKfHDTQlfSs4sBBq3BX 3ZgFJsNGmChB4TJzqtKWpfIBSn6LtPrd3OEXd2g4edcTrMPE80g4z0az2UvQEDg3 ZfEHJRyRmfGIvjZ6SOV8fO91Ig1AUbPKs31ZjsKNIl30hMjFWP02zX1cPemi+2Bu v23ABMf6NILxxAVseSWVB/Xxk3gpgvE4zrWxA/Phc+Qrhv2teuL/LEA0gxl7YdYB Q423TiSHBvvg7wEF2NqTdRs/zavSq88EdT7wjYPqVpP71vUlWHdhhSvHEUXAQBv1 8p7tNdigRcc7Tw== -----END CERTIFICATE-----Generated at Sat Oct 25 20:51:24 2025 by rpki-client