$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: Pvryl9fMmKKY991KCSBLYSqu7FhICir2m2oh8VetS0U= Subject key identifier: A5:8E:EE:37:61:E5:C7:32:A9:BD:21:71:A6:93:A7:DF:9F:E1:96:99 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 0199FDD8EF6D227334AC959D0B0F4285D67C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1701 Signing time: Sun 19 Oct 2025 19:01:16 +0000 Manifest this update: Sun 19 Oct 2025 19:01:16 +0000 Manifest next update: Mon 20 Oct 2025 19:01:16 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: MFl65Tk3dyQdHjc8XL4NFjkWb8+ph/rvTTQWJZ/PURQ=) 2: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 3: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 4: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 5: IRIHNrcEmYA9SiekVnQCGeb5qt8.roa (hash: tBfDnKuitVX0twdrJtQnmeN3GmNpiKza4WKEqcGuDCg=) 6: KOQt4Fdw-Mbd2H2laDLh-QtpT_A.roa (hash: E+ao0zcz+gKQCFRR+32WIwFe4k6aZm0mJuIHZG8OTjY=) 7: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 8: O2u9sNM2VsxkrEw4_x5dbnD4cmI.roa (hash: z4M4rzCbwDQczsVkru5nQYgRim30go1bSOu9yN0yWpY=) 9: QY62O1TbJcgHTlDdMSnc5EOOsWo.roa (hash: WrjFSmIFme7bbVEpsR+eNDIdWK8cfKHxqLCWL8lKVwU=) 10: ZEaWX4vp4W7zRNcPf0TP02hgItQ.roa (hash: sJ0gPMef931rqzhVp0zgr8podzklf3D6mI15/1mXqB8=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: _yn-31rADEG7zTcXfVb92NptH0Q.roa (hash: Tyq49fvsXK4jK1l1SC866Zxd+HFpg8YBsLVC4Nlc/M8=) 13: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (hash: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=) 14: dcdUaVsbK9eNo1r-m0RN5v4IuI0.roa (hash: 16XY+REBNBY9vjc35N7Gk6wmQpGirjvhIjfgeZGXyFo=) 15: ji_T031R5JpC7beRNkBxDFafiVw.roa (hash: 1TeYXNj1EDP13nwTEBI09Lq7/ivNqTb2BlS99x0i2Hs=) 16: vjKyioN5ZLUQGqbv0hjh-k7ZHnI.roa (hash: rxK/AqCNmTQ7FTdlF/qR+joUKZx1vJKUfba0dd+y2Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d8:ef:6d:22:73:34:ac:95:9d:0b:0f:42:85:d6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Oct 19 19:01:16 2025 GMT Not After : Oct 20 19:01:16 2025 GMT Subject: CN=a58eee3761e5c732a9bd2171a693a7df9fe19699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:63:eb:8b:1c:05:8b:07:eb:9a:e2:e2:21: ad:66:e8:64:ab:01:60:1f:9f:28:fb:27:8d:b3:d5: a9:2e:9f:38:36:3d:94:f2:1f:4d:81:b1:a5:be:a5: c1:71:ee:09:6f:e6:5a:76:af:8f:1e:57:22:02:46: b3:55:e6:a9:33:07:24:c1:7d:7f:af:63:da:1a:21: bb:78:dd:d2:e0:e9:b4:75:26:95:90:db:42:62:44: c7:fc:d0:c1:f4:30:34:07:07:d3:09:63:39:80:8a: e7:37:83:38:89:7f:e0:6c:77:f2:54:e3:8f:79:ee: bb:5c:68:35:22:3b:b6:67:77:11:6e:5d:29:89:1d: 0b:06:3e:31:af:e7:37:ac:e0:00:d6:f0:af:ce:7e: 71:94:c7:5d:57:49:b6:54:3e:e1:c5:d7:5b:91:ae: 54:47:62:1c:21:24:62:1d:60:34:fc:a9:34:d1:05: b9:56:e8:ef:da:78:75:1c:67:ff:00:11:52:a5:f3: e8:c3:82:c9:6e:bc:09:3c:a7:d7:93:d7:bd:ee:6e: 68:12:53:ba:88:95:30:48:ef:7a:30:eb:5e:b4:bc: 2d:68:16:fe:c1:b9:d0:80:7f:d4:57:b2:83:62:af: a7:95:b9:03:b7:d4:13:0b:f1:fd:7f:93:94:67:07: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8E:EE:37:61:E5:C7:32:A9:BD:21:71:A6:93:A7:DF:9F:E1:96:99 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:56:89:55:82:ce:a5:71:90:ce:26:35:23:8b:bf:87:b2:07: e3:12:7d:5a:90:26:b1:12:0b:c1:6d:ae:e7:36:a1:8c:89:79: 4c:e3:5d:1d:50:8c:b2:08:4c:3c:d7:49:7a:29:59:91:21:7c: ee:09:02:8d:c2:f0:70:da:b7:82:33:90:12:ae:d6:4a:07:22: bf:a7:6d:bd:cd:f5:bc:82:7c:89:ae:1c:d3:57:3b:4e:3a:3d: 9f:fd:1a:ad:6b:4f:c2:04:56:50:c5:b3:cd:82:39:17:2e:80: 39:b7:06:30:0b:57:35:b6:f8:b5:4f:86:b8:13:56:55:9c:b1: 7d:aa:15:5d:6e:f4:e0:d0:8c:61:b5:c1:fa:56:7a:37:30:d0: 64:73:7a:6c:7f:8b:1f:0d:a2:45:db:15:74:89:44:35:2e:34: da:55:a9:51:59:c4:67:6a:77:90:6f:4c:98:63:07:c6:74:27: 67:d1:88:09:35:6f:b4:32:8e:77:09:f3:d5:53:0e:79:7c:96: 5c:93:3d:47:cb:71:df:b6:5c:11:98:10:12:51:c0:8c:43:fc: 30:c2:37:8e:56:fd:45:94:71:d0:a7:01:1a:05:4d:b5:2e:23: 0e:0e:e7:40:9e:b5:5e:56:8e:58:4c:73:a4:f0:3b:3a:c0:59: b6:1d:71:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92O9tInM0rJWdCw9ChdZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMDE5MTkwMTE2WhcNMjUxMDIwMTkwMTE2WjAzMTEwLwYDVQQD EyhhNThlZWUzNzYxZTVjNzMyYTliZDIxNzFhNjkzYTdkZjlmZTE5Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvahj64scBYsH65ri4iGtZuhkqwFg H58o+yeNs9WpLp84Nj2U8h9NgbGlvqXBce4Jb+Zadq+PHlciAkazVeapMwckwX1/ r2PaGiG7eN3S4Om0dSaVkNtCYkTH/NDB9DA0BwfTCWM5gIrnN4M4iX/gbHfyVOOP ee67XGg1Iju2Z3cRbl0piR0LBj4xr+c3rOAA1vCvzn5xlMddV0m2VD7hxddbka5U R2IcISRiHWA0/Kk00QW5Vujv2nh1HGf/ABFSpfPow4LJbrwJPKfXk9e97m5oElO6 iJUwSO96MOtetLwtaBb+wbnQgH/UV7KDYq+nlbkDt9QTC/H9f5OUZwdJdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWO7jdh5ccyqb0hcaaTp9+f4ZaZMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlaJVYLO pXGQziY1I4u/h7IH4xJ9WpAmsRILwW2u5zahjIl5TONdHVCMsghMPNdJeilZkSF8 7gkCjcLwcNq3gjOQEq7WSgciv6dtvc31vIJ8ia4c01c7Tjo9n/0arWtPwgRWUMWz zYI5Fy6AObcGMAtXNbb4tU+GuBNWVZyxfaoVXW704NCMYbXB+lZ6NzDQZHN6bH+L Hw2iRdsVdIlENS402lWpUVnEZ2p3kG9MmGMHxnQnZ9GICTVvtDKOdwnz1VMOeXyW XJM9R8tx37ZcEZgQElHAjEP8MMI3jlb9RZRx0KcBGgVNtS4jDg7nQJ61XlaOWExz pPA7OsBZth1xDQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:30:55 2025 by rpki-client