$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json) Hash identifier: 3pCvkv9YVQA/2aJGSd6Q5Tb2gEy2sLUrr0Ng3/Zdf9w= Subject key identifier: 64:AA:62:34:48:59:A8:A8:09:6C:4B:2C:CD:1C:9A:AA:C6:97:1B:23 Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 0199FF22D72C3BF6B645467510D2E4C5F935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft Manifest number: 140E Signing time: Mon 20 Oct 2025 01:01:37 +0000 Manifest this update: Mon 20 Oct 2025 01:01:37 +0000 Manifest next update: Tue 21 Oct 2025 01:01:37 +0000 Files and hashes: 1: 0T4kYsm4csSjL8VboPiv6-n-j0A.roa (hash: aDj2+cGm+6rFRblQlBX3W4oDpuhRvKm1wzGVwZCxKxo=) 2: 0kdqhMgoXMqa2bGg6WCouazRWoA.roa (hash: m8tqnKE1kxATVgNxV4xo3K5SETCSivJyawzzyZu0T8M=) 3: Bdn1DcMJLsTBh2Q12ScTlfextfA.roa (hash: 5aLKJErELEuvOisnhFo7YC5MNb/X65d9eCU26oCY0QQ=) 4: CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa (hash: IuDgpmoqQyZe/QgfNMc3PyivvmiOvLYcwJyNp9apwNQ=) 5: Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa (hash: 62kAAv2Hh6q7YMgpvoYSR/SU5a88o0FYbuA/sB0zQYU=) 6: MgxF_7heYMD80wktONtKXy_JUjw.roa (hash: VSasJsU9l5n4BfJqqcCZXt2bux9xLXSz0Hlw9ESwmwY=) 7: P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa (hash: eKfLN+GcqqNwEJXEtNi5qdZ/kBOqEtfUu7tt1fh/R9c=) 8: VkosI65EihkcngTWaTJkG6-9m2I.roa (hash: fX35nzHhBNIcEWDRVnVwrt3ML71QDkHBtpojCYaD+w8=) 9: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: RzsAYWyu3PQdJ+WLkV/jBiQHUursEpLYcS3GpfEun6k=) 10: m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa (hash: bXlmxzbFdTP+0jnQtSP1HnYWBUd9rItj9AvW7vkRDls=) 11: pgAR_DhucAVso-7iUGVc2v72k-k.roa (hash: 9hxBN+TWA9N4uVVJ3lzI0bLTHIAllmoH+jSnFMWRgCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:22:d7:2c:3b:f6:b6:45:46:75:10:d2:e4:c5:f9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Oct 20 01:01:37 2025 GMT Not After : Oct 21 01:01:37 2025 GMT Subject: CN=64aa62344859a8a8096c4b2ccd1c9aaac6971b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:ac:ca:90:ac:d2:6b:60:f8:d3:be:92:d8: 74:a4:66:4b:72:14:27:57:f8:82:aa:84:0d:03:d9: ee:14:79:6f:f5:b9:17:ea:f9:5b:d7:89:a3:ce:69: 42:d7:7d:01:e3:57:60:1f:ca:ce:79:c4:84:34:d4: f2:c4:08:bf:01:a2:15:8e:e6:9a:e7:4b:cc:67:e4: df:67:91:5e:33:63:04:94:f9:0f:79:50:f1:97:a0: 2a:bb:0c:a7:da:48:77:88:37:f9:1e:8f:19:c4:70: ab:99:96:72:cd:a2:d9:43:7e:74:eb:e1:84:10:59: a2:b6:a6:d5:22:7f:60:24:01:a4:e8:e8:c2:47:37: 53:ed:ac:be:76:04:d1:4c:2d:61:03:a0:81:64:65: 85:08:7f:25:40:55:b9:38:0f:98:61:7e:78:cf:b6: 64:3f:b8:63:0e:e9:1a:15:4c:88:bb:1d:77:01:64: 61:ea:d8:cd:3f:a6:3d:e4:d6:ff:4c:e0:84:cb:e5: 28:46:17:4d:e4:59:b7:72:14:79:5d:56:ef:e9:e4: 4c:d4:b5:47:5a:b1:68:69:14:eb:e0:97:36:77:94: 48:f7:77:b5:45:e7:39:2a:78:b4:d7:20:b9:ee:90: e4:5a:13:c0:c3:82:0b:73:ee:d9:b3:46:5e:1a:b2: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AA:62:34:48:59:A8:A8:09:6C:4B:2C:CD:1C:9A:AA:C6:97:1B:23 X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1b:bf:86:45:bc:72:de:cc:fc:3b:42:b2:c5:cc:a1:e5:46: df:3d:e0:98:23:50:ca:76:65:b8:84:bb:ad:ae:0a:e6:fd:f0: b8:19:4f:dc:6b:8b:c9:cd:0a:27:c2:7f:6e:7f:6f:34:49:10: 76:b9:02:ae:50:71:18:10:c2:a4:16:19:eb:a9:98:84:8a:63: 0f:3e:9a:6b:72:ca:d3:c8:26:90:2d:de:79:20:4f:6c:3e:d4: 6c:bf:93:83:af:76:f4:e6:0f:75:33:de:b8:23:5f:54:68:30: 3b:37:16:fb:6f:80:bc:5e:54:e6:79:a0:1f:8f:57:1e:32:e5: d6:74:a2:78:53:c0:ff:f5:87:fd:28:f0:2d:7a:ec:e0:d4:38: 3b:33:6d:2b:17:91:64:df:eb:bc:5a:28:13:84:2c:68:82:61: ae:f4:1d:69:d3:f3:18:a1:db:6c:9c:ab:72:d9:12:61:9e:59: e6:eb:bb:48:71:8b:d2:4e:33:80:3b:0d:69:55:18:ce:66:78: a6:93:54:8e:7f:0d:0a:66:f1:f7:49:2c:57:ff:f5:ed:a4:52: a1:51:70:b7:fe:c5:2a:28:67:29:bb:3e:8d:90:0c:8a:9e:04: 91:38:8a:82:96:56:c7:79:e5:e1:4d:46:b3:37:67:64:4f:e2: 48:d3:d0:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/ItcsO/a2RUZ1ENLkxfk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjUxMDIwMDEwMTM3WhcNMjUxMDIxMDEwMTM3WjAzMTEwLwYDVQQD Eyg2NGFhNjIzNDQ4NTlhOGE4MDk2YzRiMmNjZDFjOWFhYWM2OTcxYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBisypCs0mtg+NO+kth0pGZLchQn V/iCqoQNA9nuFHlv9bkX6vlb14mjzmlC130B41dgH8rOecSENNTyxAi/AaIVjuaa 50vMZ+TfZ5FeM2MElPkPeVDxl6Aquwyn2kh3iDf5Ho8ZxHCrmZZyzaLZQ3506+GE EFmitqbVIn9gJAGk6OjCRzdT7ay+dgTRTC1hA6CBZGWFCH8lQFW5OA+YYX54z7Zk P7hjDukaFUyIux13AWRh6tjNP6Y95Nb/TOCEy+UoRhdN5Fm3chR5XVbv6eRM1LVH WrFoaRTr4Jc2d5RI93e1Rec5Kni01yC57pDkWhPAw4ILc+7Zs0ZeGrLElwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSqYjRIWaioCWxLLM0cmqrGlxsjMB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBu/hkW8 ct7M/DtCssXMoeVG3z3gmCNQynZluIS7ra4K5v3wuBlP3GuLyc0KJ8J/bn9vNEkQ drkCrlBxGBDCpBYZ66mYhIpjDz6aa3LK08gmkC3eeSBPbD7UbL+Tg6929OYPdTPe uCNfVGgwOzcW+2+AvF5U5nmgH49XHjLl1nSieFPA//WH/SjwLXrs4NQ4OzNtKxeR ZN/rvFooE4QsaIJhrvQdadPzGKHbbJyrctkSYZ5Z5uu7SHGL0k4zgDsNaVUYzmZ4 ppNUjn8NCmbx90ksV//17aRSoVFwt/7FKihnKbs+jZAMip4EkTiKgpZWx3nl4U1G szdnZE/iSNPQWA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:15 2025 by rpki-client