$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: 12Rff4nQnos9pONVY52bUcwXpiuO49Yf87hMSoS/ies= Subject key identifier: 93:FD:43:C2:71:17:AC:7F:7B:77:FE:E3:AB:DF:75:6D:69:05:8E:D5 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019A1E07E470F09BCECF9CD45A24398C0412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1727 Signing time: Sun 26 Oct 2025 01:00:24 +0000 Manifest this update: Sun 26 Oct 2025 01:00:24 +0000 Manifest next update: Mon 27 Oct 2025 01:00:24 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 3: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 4: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 5: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 6: OqXfy-Q1bdsEnEbZtL_in1Ei8ak.roa (hash: kwdPjpP3NAZNRK4NuGOs/2X0xBDpRpF2eCHAXZDYRSI=) 7: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 8: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: YoSBE+EDlEFtRHKB7LmKvH2bjoLuRq31ZrC+QwVZu1Q=) 10: XoEgN8Rzf-_O70nBq2ov0ajUPeY.roa (hash: Uqsa+8GNjpiZZotqp2+P9cchtd9l85RTnq9RE86H8w8=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:07:e4:70:f0:9b:ce:cf:9c:d4:5a:24:39:8c:04:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Oct 26 01:00:24 2025 GMT Not After : Oct 27 01:00:24 2025 GMT Subject: CN=93fd43c27117ac7f7b77fee3abdf756d69058ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:88:a4:b3:96:db:ac:e7:1a:a7:15:6a:cb: f6:ce:99:ca:0c:2f:80:7f:16:ec:23:2b:31:60:8e: c3:41:5c:9a:73:43:51:56:8c:84:23:76:f2:b5:f7: 64:da:3a:6c:28:0c:7e:b8:a0:1a:29:22:10:3c:04: c7:c6:54:c0:34:f9:99:85:93:32:13:03:84:9e:f9: 68:c7:5d:72:b7:4d:20:bd:6d:a8:8e:57:ec:79:6b: c5:76:d7:52:4d:7d:5f:ce:ab:45:99:a1:c8:d8:45: 4c:a8:ed:00:d5:ef:1a:96:b4:93:93:9f:b7:3e:40: 75:71:30:32:b1:3a:35:de:28:7f:a2:76:78:6b:eb: 8b:b0:6c:40:2a:38:d8:03:35:98:d6:c2:74:d6:8d: 09:8e:d1:95:e3:21:bd:68:6b:98:b4:0f:5b:2f:ab: a3:dd:ee:03:34:62:27:68:07:86:e4:23:bb:10:45: 56:18:51:3f:af:63:9c:c2:56:5d:ab:72:af:93:83: 2e:9d:ba:f1:67:21:e8:6d:57:82:27:cf:47:aa:e5: 3d:c8:7a:95:17:f2:57:7a:f1:55:ba:fc:9d:70:fd: a3:94:6a:45:93:08:c1:91:e6:72:82:f1:7f:0d:ec: 59:37:cd:a2:96:bc:23:a8:01:6b:79:e0:3b:7a:ce: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FD:43:C2:71:17:AC:7F:7B:77:FE:E3:AB:DF:75:6D:69:05:8E:D5 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e4:2f:f8:11:17:3a:bf:69:0e:ba:5e:e2:34:be:df:d7:09: 7d:32:e8:d2:3d:52:a9:92:90:94:f9:56:4e:88:62:10:02:af: 71:cb:07:3d:a6:1c:0b:67:bc:23:86:cf:bf:35:d9:9d:5f:67: da:15:0e:9d:53:c2:37:4e:da:62:46:f9:0a:c3:1d:72:57:f4: 90:88:f1:63:c8:ff:0b:3d:90:fe:19:e3:a6:81:65:5d:b3:19: 5d:62:47:bc:8e:d0:a7:f8:69:da:0f:11:92:0e:31:10:0e:b0: ea:12:3c:bc:2e:0a:38:24:f2:3b:57:3e:35:60:cf:ad:3d:04: 5f:e1:34:2a:c0:44:91:98:40:e8:e8:e7:87:69:39:14:dc:63: ce:83:9b:4b:9f:88:3c:28:9e:46:0d:2a:01:3f:0a:2b:e2:b2: 3b:3c:ea:3e:a2:b0:fb:f9:11:af:86:c5:b3:aa:b6:49:6e:0f: af:af:ce:d2:5d:7b:54:d7:b8:0b:17:8c:be:83:fc:33:4c:77: 2a:26:aa:b1:f3:55:1f:24:9e:66:4a:65:62:9f:ef:64:6f:81: 6d:79:ff:a5:9d:9b:ec:74:f7:c8:94:94:87:9b:ad:a4:5f:6a: bc:40:b8:63:44:5a:2e:e4:a5:b4:d8:10:76:90:16:6f:2a:9d: c7:d9:e1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoeB+Rw8JvOz5zUWiQ5jAQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUxMDI2MDEwMDI0WhcNMjUxMDI3MDEwMDI0WjAzMTEwLwYDVQQD Eyg5M2ZkNDNjMjcxMTdhYzdmN2I3N2ZlZTNhYmRmNzU2ZDY5MDU4ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokCIpLOW26znGqcVasv2zpnKDC+A fxbsIysxYI7DQVyac0NRVoyEI3bytfdk2jpsKAx+uKAaKSIQPATHxlTANPmZhZMy EwOEnvlox11yt00gvW2ojlfseWvFdtdSTX1fzqtFmaHI2EVMqO0A1e8alrSTk5+3 PkB1cTAysTo13ih/onZ4a+uLsGxAKjjYAzWY1sJ01o0JjtGV4yG9aGuYtA9bL6uj 3e4DNGInaAeG5CO7EEVWGFE/r2OcwlZdq3Kvk4MunbrxZyHobVeCJ89HquU9yHqV F/JXevFVuvydcP2jlGpFkwjBkeZygvF/DexZN82ilrwjqAFreeA7es7DNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP9Q8JxF6x/e3f+46vfdW1pBY7VMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+Qv+BEX Or9pDrpe4jS+39cJfTLo0j1SqZKQlPlWTohiEAKvccsHPaYcC2e8I4bPvzXZnV9n 2hUOnVPCN07aYkb5CsMdclf0kIjxY8j/Cz2Q/hnjpoFlXbMZXWJHvI7Qp/hp2g8R kg4xEA6w6hI8vC4KOCTyO1c+NWDPrT0EX+E0KsBEkZhA6Ojnh2k5FNxjzoObS5+I PCieRg0qAT8KK+KyOzzqPqKw+/kRr4bFs6q2SW4Pr6/O0l17VNe4CxeMvoP8M0x3 KiaqsfNVHySeZkplYp/vZG+BbXn/pZ2b7HT3yJSUh5utpF9qvEC4Y0RaLuSltNgQ dpAWbyqdx9nh6A== -----END CERTIFICATE-----Generated at Sun Oct 26 06:36:37 2025 by rpki-client