$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: 63uOjM6G2mYLw+9+vTWYEvHdcHA3vIgKMvhnrMaHIww= Subject key identifier: 4D:95:E0:35:DA:81:1D:8A:3F:E5:4E:19:5E:F9:B3:63:6C:6D:40:20 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019A01EBE9E6BE81262226E7946705FFF5F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 170E Signing time: Mon 20 Oct 2025 14:00:29 +0000 Manifest this update: Mon 20 Oct 2025 14:00:29 +0000 Manifest next update: Tue 21 Oct 2025 14:00:29 +0000 Files and hashes: 1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=) 2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=) 3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=) 4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=) 5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=) 6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=) 7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=) 8: WpLLn3RjoLbyjipUUgV3MfV5sX8.roa (hash: PYHwQtVcmnqDQtX16D1WqJb0WgKnZrAZ19ITOPvDgZc=) 9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=) 10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=) 11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=) 12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=) 13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=) 14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=) 15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=) 16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=) 17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: 4MJP7m7YpOZnAzCQb/tbG1Aug/bBDtRHct/aC81v9oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:eb:e9:e6:be:81:26:22:26:e7:94:67:05:ff:f5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Oct 20 14:00:29 2025 GMT Not After : Oct 21 14:00:29 2025 GMT Subject: CN=4d95e035da811d8a3fe54e195ef9b3636c6d4020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:be:67:7d:23:8d:ba:72:ae:d4:62:0c:55: 7e:64:9e:3e:6c:36:fa:ea:b0:73:c1:1d:16:ee:fb: ec:4b:ec:9b:59:18:62:7f:09:17:57:6f:69:7c:05: 7f:1f:01:e7:9c:6a:f7:43:cb:b1:c8:7c:4c:30:9a: d4:06:ac:e7:69:a3:5e:a5:3c:45:66:a2:83:69:e6: ba:03:6d:9b:b8:cb:81:01:32:ef:42:44:5e:db:b0: be:67:c8:15:d2:fc:65:24:fc:e8:92:fc:be:e0:d7: 87:0f:d6:2b:df:00:8b:f4:b6:f7:bd:ac:0d:3a:82: 12:c4:ef:b0:91:af:47:26:4f:e0:e6:a5:55:05:0c: 10:7c:d7:5a:a9:2b:95:03:b6:b2:25:83:d4:64:43: a3:a9:81:57:95:0f:06:71:79:53:cf:45:45:8f:39: ae:13:23:d8:af:6f:ec:1e:3e:12:d9:3b:99:c5:06: 49:f7:58:58:ec:a4:05:d3:2e:23:f1:08:ab:cb:c8: 34:24:ab:0e:1e:79:ee:15:04:da:63:6d:71:75:0f: 51:66:0a:1c:e3:73:34:f4:f3:5d:bf:8b:f8:d6:18: 90:b4:2c:32:19:9e:26:b8:83:b5:08:ac:01:3b:92: ce:79:f3:00:da:e0:60:6c:ae:fe:f1:f5:01:24:65: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:95:E0:35:DA:81:1D:8A:3F:E5:4E:19:5E:F9:B3:63:6C:6D:40:20 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:95:d3:95:6a:df:a4:d1:dc:e4:a5:10:a7:cc:98:54:7c:4c: 0d:e3:a5:25:3e:5a:a2:c0:5f:e1:71:87:05:1c:57:f9:45:87: a9:27:13:b6:aa:5c:32:2e:34:c7:35:83:2b:c0:9c:54:14:55: 7d:de:d5:49:ce:68:7f:bc:06:64:3f:fd:ad:07:8c:0d:24:1a: 77:a8:7f:fc:0d:fe:a6:27:39:f1:8f:9e:81:79:89:28:b2:fd: 05:11:55:47:dc:c8:24:76:2a:a6:cf:e8:d7:d0:ae:66:85:da: 54:50:58:ab:5e:38:d9:0d:8b:20:19:e7:d8:c8:bf:45:c9:41: d8:7e:4d:63:d4:21:91:a7:55:8b:14:ae:bf:e1:c0:78:fa:3c: 43:56:56:dd:b9:4d:a2:9d:4c:67:01:e4:25:0f:be:e3:ca:43: 20:e4:bb:5b:4f:e2:2f:03:c0:29:6a:aa:1c:1a:e1:ab:d0:5b: 87:0f:8d:76:25:9f:d3:e7:b1:86:ca:ca:81:f5:8c:36:43:5c: 49:e0:f9:16:62:8e:f0:93:89:a9:31:c6:39:c3:89:2f:67:89: 0e:60:26:09:f6:ef:6b:1c:3c:d2:dd:9a:38:98:bc:f5:fc:36: 6d:55:d1:1b:2b:37:02:0d:0a:e8:91:b0:f6:de:58:75:8b:bd: 6a:f7:5e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoB6+nmvoEmIibnlGcF//X3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjUxMDIwMTQwMDI5WhcNMjUxMDIxMTQwMDI5WjAzMTEwLwYDVQQD Eyg0ZDk1ZTAzNWRhODExZDhhM2ZlNTRlMTk1ZWY5YjM2MzZjNmQ0MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oK+Z30jjbpyrtRiDFV+ZJ4+bDb6 6rBzwR0W7vvsS+ybWRhifwkXV29pfAV/HwHnnGr3Q8uxyHxMMJrUBqznaaNepTxF ZqKDaea6A22buMuBATLvQkRe27C+Z8gV0vxlJPzokvy+4NeHD9Yr3wCL9Lb3vawN OoISxO+wka9HJk/g5qVVBQwQfNdaqSuVA7ayJYPUZEOjqYFXlQ8GcXlTz0VFjzmu EyPYr2/sHj4S2TuZxQZJ91hY7KQF0y4j8Qiry8g0JKsOHnnuFQTaY21xdQ9RZgoc 43M09PNdv4v41hiQtCwyGZ4muIO1CKwBO5LOefMA2uBgbK7+8fUBJGW12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2V4DXagR2KP+VOGV75s2NsbUAgMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5XTlWrf pNHc5KUQp8yYVHxMDeOlJT5aosBf4XGHBRxX+UWHqScTtqpcMi40xzWDK8CcVBRV fd7VSc5of7wGZD/9rQeMDSQad6h//A3+pic58Y+egXmJKLL9BRFVR9zIJHYqps/o 19CuZoXaVFBYq1442Q2LIBnn2Mi/RclB2H5NY9QhkadVixSuv+HAePo8Q1ZW3blN op1MZwHkJQ++48pDIOS7W0/iLwPAKWqqHBrhq9Bbhw+NdiWf0+exhsrKgfWMNkNc SeD5FmKO8JOJqTHGOcOJL2eJDmAmCfbvaxw80t2aOJi89fw2bVXRGys3Ag0K6JGw 9t5YdYu9avdelA== -----END CERTIFICATE-----Generated at Tue Oct 21 00:51:57 2025 by rpki-client