$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json) Hash identifier: ayeleDSdHo0WKiNZpErRpnldt/LDKqTT6H1jjAtUnH8= Subject key identifier: 8B:E1:BC:BC:63:3D:D6:4F:B3:4E:E3:82:ED:E2:0B:6A:E0:F7:87:DF Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019A04485896C30CFE0A7C2E0E497CE8350E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft Manifest number: 08C0 Signing time: Tue 21 Oct 2025 01:00:41 +0000 Manifest this update: Tue 21 Oct 2025 01:00:41 +0000 Manifest next update: Wed 22 Oct 2025 01:00:41 +0000 Files and hashes: 1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=) 2: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=) 3: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=) 4: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=) 5: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=) 6: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=) 7: PUFVgG5XTEBa1FkmtV4ycOrJNR8.roa (hash: N9/tccWzTiDJqufWom2nX/Wb/C0jzwpdRD1YBVzLJfM=) 8: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=) 9: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=) 10: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: JFYmugJPdN4DUhapIRxZatGgBd5IyRCZmE6puGOn4zA=) 11: WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa (hash: UxCznUOsDVY4T4Zkfr108cWCuFQbwtO/CUb0BjHDFUI=) 12: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=) 13: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (hash: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=) 14: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=) 15: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=) 16: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=) 17: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=) 18: nTLrnsLe5pfeZdn2nN3avyrKvR8.roa (hash: PYUn70hC1UKNiPtYZXRm5ik4trcOE5BeJZLN9btWaTY=) 19: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=) 20: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=) 21: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=) 22: sSrTDL6nguTxbh69Ill43irJGLE.roa (hash: e1S86JgpzImCBy74Z+DZRrxSrSDLIoWOZKxkg3oykGM=) 23: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=) 24: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (hash: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=) 25: zbLb6V2msPLlJ2wj3a08eMqWNX8.roa (hash: rsMnMJGficXOTixQcjNnqlofIjEsJ0amK5sDmhVfoBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:48:58:96:c3:0c:fe:0a:7c:2e:0e:49:7c:e8:35:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Oct 21 01:00:41 2025 GMT Not After : Oct 22 01:00:41 2025 GMT Subject: CN=8be1bcbc633dd64fb34ee382ede20b6ae0f787df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:66:28:0e:14:16:64:35:60:cf:0f:3b:47: 31:2f:de:da:1c:f9:39:c9:d5:4b:43:a6:f3:bc:29: cb:54:39:84:94:6d:6b:ef:7f:0f:fe:f7:e2:ae:ec: f7:5a:00:8b:d3:9e:5b:f7:3a:86:98:6f:3d:3d:5b: f6:30:6a:96:18:5a:eb:2a:22:90:e3:52:5d:9d:f9: d7:cd:8d:d5:53:73:4f:25:0e:1e:68:67:3b:87:8f: 4a:07:92:3a:01:73:98:68:d6:46:87:00:ee:ba:64: 79:13:d9:3d:53:3b:87:df:57:36:a0:6c:12:20:d4: 19:1b:b5:a6:29:e4:54:a7:d2:85:95:80:ca:94:d2: e1:29:59:39:46:c0:44:63:40:96:37:9b:db:f0:64: 34:12:a6:a8:10:25:32:3e:d0:7f:34:4e:9c:45:09: 20:3c:c3:83:36:a9:7c:93:58:2a:f1:d6:8b:6b:db: 73:fc:66:d5:00:ad:1c:cc:73:d2:5b:e7:fd:bd:ea: da:90:26:f8:9a:c7:9e:ed:79:d8:63:17:6c:2e:03: e8:3e:7a:b0:35:45:3b:4e:b9:6b:fb:6e:87:33:9c: 8d:96:76:7b:3b:11:37:3b:8a:bb:e4:dd:b1:b7:0c: a3:fa:71:6c:a1:5a:d3:72:b0:ad:44:f3:98:a3:3e: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:BC:BC:63:3D:D6:4F:B3:4E:E3:82:ED:E2:0B:6A:E0:F7:87:DF X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:53:3d:c7:35:e8:5c:10:f2:28:23:c9:25:97:a4:7d:6c:43: 0d:57:b0:83:c0:55:82:cd:e0:df:aa:ee:48:df:10:fe:31:34: 74:a9:6b:c7:c7:7d:2b:df:5c:56:b1:ee:b0:01:fe:81:27:85: 4c:62:6c:08:61:ab:6f:60:fa:6d:87:67:ad:c1:7a:87:dd:35: 5e:fc:25:9c:b0:4a:10:90:55:2a:be:d6:d6:cd:5d:ca:92:62: cf:5e:e9:e5:09:ae:a6:a8:80:71:f5:7d:ed:88:3f:7a:2a:41: 9d:3d:92:96:7e:88:ce:67:c0:54:9b:f5:fe:17:7c:df:d8:82: 93:e2:6d:49:cc:cf:12:6d:c9:1e:db:63:6c:a7:23:21:1b:a3: a6:c8:5a:58:93:f2:46:27:f9:d8:1f:77:10:4c:2d:2a:ee:cc: 83:d0:0d:10:2c:a8:76:ed:65:3a:3a:0a:01:50:c4:14:e0:42: 86:d6:a5:0a:2c:23:b9:dc:d9:a4:c4:29:96:b9:01:c3:49:9a: b5:c4:16:53:7f:3b:a3:c2:2c:4a:92:8d:b7:53:35:8f:63:fb: 03:1f:a7:35:3f:ac:1f:97:1b:78:29:f2:32:81:e5:30:4b:8c: 19:d0:68:2c:b2:73:91:19:63:8e:ea:f0:fa:03:7f:cc:6a:3f: e0:0f:8a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoESFiWwwz+CnwuDkl86DUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMDIxMDEwMDQxWhcNMjUxMDIyMDEwMDQxWjAzMTEwLwYDVQQD Eyg4YmUxYmNiYzYzM2RkNjRmYjM0ZWUzODJlZGUyMGI2YWUwZjc4N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6RmKA4UFmQ1YM8PO0cxL97aHPk5 ydVLQ6bzvCnLVDmElG1r738P/vfiruz3WgCL055b9zqGmG89PVv2MGqWGFrrKiKQ 41JdnfnXzY3VU3NPJQ4eaGc7h49KB5I6AXOYaNZGhwDuumR5E9k9UzuH31c2oGwS INQZG7WmKeRUp9KFlYDKlNLhKVk5RsBEY0CWN5vb8GQ0EqaoECUyPtB/NE6cRQkg PMODNql8k1gq8daLa9tz/GbVAK0czHPSW+f9verakCb4msee7XnYYxdsLgPoPnqw NUU7Trlr+26HM5yNlnZ7OxE3O4q75N2xtwyj+nFsoVrTcrCtRPOYoz754QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvhvLxjPdZPs07jgu3iC2rg94ffMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVM9xzXo XBDyKCPJJZekfWxDDVewg8BVgs3g36ruSN8Q/jE0dKlrx8d9K99cVrHusAH+gSeF TGJsCGGrb2D6bYdnrcF6h901XvwlnLBKEJBVKr7W1s1dypJiz17p5QmupqiAcfV9 7Yg/eipBnT2Sln6IzmfAVJv1/hd839iCk+JtSczPEm3JHttjbKcjIRujpshaWJPy Rif52B93EEwtKu7Mg9ANECyodu1lOjoKAVDEFOBChtalCiwjudzZpMQplrkBw0ma tcQWU387o8IsSpKNt1M1j2P7Ax+nNT+sH5cbeCnyMoHlMEuMGdBoLLJzkRljjurw +gN/zGo/4A+KZA== -----END CERTIFICATE-----Generated at Tue Oct 21 07:52:10 2025 by rpki-client