$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: G2yDVTncoOgEHokTMwyX6D2dizvJkfF4DY1xyhMkN2A= Subject key identifier: 08:25:40:EF:8C:C7:DA:A1:B3:25:D2:6C:84:51:17:B6:44:B6:50:2F Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0199FD349411C24DD03EB8D86498686B099D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1703 Signing time: Sun 19 Oct 2025 16:01:45 +0000 Manifest this update: Sun 19 Oct 2025 16:01:45 +0000 Manifest next update: Mon 20 Oct 2025 16:01:45 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: vNevB1xF-PoTwPfY-Z2XsIwL7H8.roa (hash: vt4+GN3bRBOdbYFvvPoZYOFbNH+Yt+zM3zx61HscKi0=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: 9U7IKSe0avObk9ry1+Wh95G8IBUDp9kR3zXHCKq0W1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:94:11:c2:4d:d0:3e:b8:d8:64:98:68:6b:09:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Oct 19 16:01:45 2025 GMT Not After : Oct 20 16:01:45 2025 GMT Subject: CN=082540ef8cc7daa1b325d26c845117b644b6502f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:c4:21:46:f2:c9:a3:a6:85:15:d9:17:b3: 3e:a0:58:b9:97:cf:e8:c7:d8:6a:87:c4:38:d2:a3: 0c:f0:02:27:4c:03:e1:5d:25:62:b7:de:66:78:8a: 54:62:5b:6a:32:d6:bd:08:cb:a8:35:f0:9d:5c:3f: b3:0d:80:1b:49:27:e6:0e:3c:af:01:d6:74:51:a0: ef:a5:58:2d:66:4a:0a:c1:78:e9:9b:11:a1:8d:b5: c0:5d:24:04:84:97:f9:9b:9f:22:52:e6:22:87:96: 16:12:52:ee:8d:b2:49:de:37:9a:e1:7f:86:bd:2f: d4:66:19:5f:76:16:d3:96:94:85:00:c4:6b:0a:55: 85:97:da:8d:66:d9:da:98:94:3e:8e:64:9b:6e:a5: 50:52:ed:37:59:e6:87:73:b1:00:49:fe:3c:e2:e2: b7:3c:d7:82:33:d9:cc:57:71:a3:41:51:87:54:aa: b1:47:14:a4:f8:d9:4a:93:3a:3f:c3:9f:35:b4:8a: e9:80:4b:a5:a1:4a:63:8b:f7:1a:b4:3a:57:91:b1: 95:e3:3d:3d:55:a9:6c:9c:42:ba:9e:ad:f5:09:99: 28:a7:da:01:eb:35:9e:51:9c:fa:b3:bb:db:34:05: fc:39:0a:0d:ab:af:0e:48:25:c8:0b:e2:ad:bf:4d: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:40:EF:8C:C7:DA:A1:B3:25:D2:6C:84:51:17:B6:44:B6:50:2F X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bd:f2:fe:97:c8:48:06:83:d7:de:93:c8:5d:71:6b:69:e4: 31:83:54:8c:24:af:4a:18:44:fe:df:37:9b:f4:e4:4f:36:e8: 11:f7:3f:67:dd:a7:0d:23:11:a0:64:09:39:03:6a:37:80:f2: 15:3e:b2:97:96:fd:7c:21:05:2c:49:50:bd:75:c8:d4:e7:77: 7c:e7:42:c4:46:12:4c:eb:d1:39:3c:fa:db:8e:38:4e:cf:b8: b9:c3:ab:4a:f1:d2:01:aa:53:a5:a3:07:f5:be:0e:15:49:c2: e0:78:35:ec:fd:de:e4:67:f8:b0:79:a7:33:23:dc:25:e7:99: fc:4a:7a:29:d5:dd:6b:3a:d9:45:94:71:0c:a4:6c:82:51:b1: 87:d3:a1:e1:e7:14:34:a8:5f:7b:3e:1c:37:05:8c:67:11:6b: fb:a9:a3:63:24:07:6c:f5:9f:ee:04:55:14:03:21:15:02:54: 79:a2:1e:87:34:8d:64:ea:85:a7:d2:a9:d7:d8:1e:c2:35:fc: b1:ed:d3:2d:87:b4:b6:ec:29:b8:55:a6:16:6d:f6:35:f1:2c: 3c:e7:f5:51:ce:ab:44:0b:14:1a:8c:f9:cf:9e:ba:51:4f:cb: 7e:d6:cc:f7:43:f7:e1:cd:c3:24:fc:50:ab:18:81:34:26:0d: 51:3f:62:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NJQRwk3QPrjYZJhoawmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUxMDE5MTYwMTQ1WhcNMjUxMDIwMTYwMTQ1WjAzMTEwLwYDVQQD EygwODI1NDBlZjhjYzdkYWExYjMyNWQyNmM4NDUxMTdiNjQ0YjY1MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMrEIUbyyaOmhRXZF7M+oFi5l8/o x9hqh8Q40qMM8AInTAPhXSVit95meIpUYltqMta9CMuoNfCdXD+zDYAbSSfmDjyv AdZ0UaDvpVgtZkoKwXjpmxGhjbXAXSQEhJf5m58iUuYih5YWElLujbJJ3jea4X+G vS/UZhlfdhbTlpSFAMRrClWFl9qNZtnamJQ+jmSbbqVQUu03WeaHc7EASf484uK3 PNeCM9nMV3GjQVGHVKqxRxSk+NlKkzo/w581tIrpgEuloUpji/catDpXkbGV4z09 ValsnEK6nq31CZkop9oB6zWeUZz6s7vbNAX8OQoNq68OSCXIC+Ktv02NewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAglQO+Mx9qhsyXSbIRRF7ZEtlAvMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr3y/pfI SAaD196TyF1xa2nkMYNUjCSvShhE/t83m/TkTzboEfc/Z92nDSMRoGQJOQNqN4Dy FT6yl5b9fCEFLElQvXXI1Od3fOdCxEYSTOvROTz62444Ts+4ucOrSvHSAapTpaMH 9b4OFUnC4Hg17P3e5Gf4sHmnMyPcJeeZ/Ep6KdXdazrZRZRxDKRsglGxh9Oh4ecU NKhfez4cNwWMZxFr+6mjYyQHbPWf7gRVFAMhFQJUeaIehzSNZOqFp9Kp19gewjX8 se3TLYe0tuwpuFWmFm32NfEsPOf1Uc6rRAsUGoz5z566UU/LftbM90P34c3DJPxQ qxiBNCYNUT9iFg== -----END CERTIFICATE-----Generated at Sun Oct 19 23:03:22 2025 by rpki-client