$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: QeX9WTQv8YSQ/shuHc2kBKYjU0yqZKLtUYpAy+AF9lA= Subject key identifier: 9D:03:08:8A:6E:CA:14:89:33:71:24:1E:CD:EA:1E:DE:4E:38:5C:88 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019A00A376EFB591B836D3E83D89544A6E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1707 Signing time: Mon 20 Oct 2025 08:01:43 +0000 Manifest this update: Mon 20 Oct 2025 08:01:43 +0000 Manifest next update: Tue 21 Oct 2025 08:01:43 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: OQmRrUosEShmG68NmIDgQ9S9diA8HBpDlo895ylI0ig=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 08:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:a3:76:ef:b5:91:b8:36:d3:e8:3d:89:54:4a:6e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Oct 20 08:01:43 2025 GMT Not After : Oct 21 08:01:43 2025 GMT Subject: CN=9d03088a6eca14893371241ecdea1ede4e385c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:1b:da:7f:f3:05:c4:25:2e:2b:34:0f:b2: 9d:57:6e:88:3d:15:89:cc:bf:09:a6:42:9b:38:c1: ef:f7:62:5a:93:09:2f:e6:f7:7a:10:77:ce:02:91: 80:75:42:92:85:c0:f2:3f:22:82:ee:32:9e:e5:d6: e5:ac:ad:94:36:39:4b:5a:ed:c9:ae:ba:8e:1b:dc: 6e:d6:b9:44:8b:73:1b:e7:d8:fa:1a:17:48:19:82: 7d:9a:2d:8c:f0:2a:c4:3f:be:e4:c9:9c:78:0e:5b: a2:a8:41:c1:ac:e2:7d:c6:57:f0:02:f6:0b:65:3b: 2c:47:e0:c4:c9:12:c1:b1:ae:77:aa:d3:17:5d:9d: b5:5e:d3:a8:1c:f3:48:a3:59:10:20:bb:b6:13:93: aa:10:70:2a:6d:4e:67:66:88:04:8e:0f:64:e4:3a: f4:0b:89:c6:57:11:07:12:73:40:3e:78:b1:45:85: 8f:67:31:88:b9:85:ff:09:d0:0b:35:99:bd:7a:83: 1e:15:3d:0e:b3:e9:ae:b4:d5:62:5a:14:52:10:bb: 20:f9:83:d5:70:d8:0b:71:72:12:d2:d9:de:b4:22: 68:57:ed:76:04:c5:26:42:97:29:ba:14:76:d2:a0: 8f:27:c7:09:57:9c:bf:ac:bf:78:72:3b:e0:c2:ae: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:08:8A:6E:CA:14:89:33:71:24:1E:CD:EA:1E:DE:4E:38:5C:88 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6c:98:08:71:72:7a:0f:5a:29:ef:b9:34:fe:23:14:0c:64: 17:ec:6e:76:e4:09:03:26:05:7a:60:6b:32:e7:80:a4:90:bf: 8b:64:de:e3:af:3d:f3:c1:2d:76:99:c3:7a:a8:c8:37:18:71: af:38:df:3b:7b:36:9a:aa:a9:e7:d4:d7:9d:26:d0:c8:34:3f: b5:05:0c:eb:d4:21:31:0a:51:40:10:df:ba:fc:46:65:20:24: ea:e6:0d:12:94:3b:bd:0e:09:97:ff:6c:d9:6e:af:8e:b9:75: 1d:26:6a:5a:ac:65:40:ff:e5:f7:4b:72:44:a9:83:dc:cd:06: 00:5e:32:33:90:de:e6:8e:5c:82:b0:c6:1c:a5:b5:54:6d:32: 2a:4c:e9:d6:b0:47:1a:91:47:b5:a1:ec:5c:97:e2:6b:a9:c2: 6c:41:7a:9c:13:45:19:29:f7:00:dd:ce:d3:6b:8f:c6:62:ce: 5d:8a:e0:ea:d9:71:e8:be:a8:92:a1:da:5c:c8:20:5e:5d:28: c2:d2:0a:ff:62:dc:c5:9a:fc:d4:e5:65:d7:56:89:0f:33:23: 9b:50:de:ad:fd:eb:84:85:4f:82:9f:82:0d:60:7c:cd:f1:5d: 60:7f:05:bd:0b:4d:f3:1a:4d:d7:71:b7:88:12:c3:65:9d:30: 11:b3:e3:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAo3bvtZG4NtPoPYlUSm5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUxMDIwMDgwMTQzWhcNMjUxMDIxMDgwMTQzWjAzMTEwLwYDVQQD Eyg5ZDAzMDg4YTZlY2ExNDg5MzM3MTI0MWVjZGVhMWVkZTRlMzg1Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydUb2n/zBcQlLis0D7KdV26IPRWJ zL8JpkKbOMHv92Jakwkv5vd6EHfOApGAdUKShcDyPyKC7jKe5dblrK2UNjlLWu3J rrqOG9xu1rlEi3Mb59j6GhdIGYJ9mi2M8CrEP77kyZx4DluiqEHBrOJ9xlfwAvYL ZTssR+DEyRLBsa53qtMXXZ21XtOoHPNIo1kQILu2E5OqEHAqbU5nZogEjg9k5Dr0 C4nGVxEHEnNAPnixRYWPZzGIuYX/CdALNZm9eoMeFT0Os+mutNViWhRSELsg+YPV cNgLcXIS0tnetCJoV+12BMUmQpcpuhR20qCPJ8cJV5y/rL94cjvgwq4eAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0DCIpuyhSJM3EkHs3qHt5OOFyIMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmyYCHFy eg9aKe+5NP4jFAxkF+xuduQJAyYFemBrMueApJC/i2Te468988EtdpnDeqjINxhx rzjfO3s2mqqp59TXnSbQyDQ/tQUM69QhMQpRQBDfuvxGZSAk6uYNEpQ7vQ4Jl/9s 2W6vjrl1HSZqWqxlQP/l90tyRKmD3M0GAF4yM5De5o5cgrDGHKW1VG0yKkzp1rBH GpFHtaHsXJfia6nCbEF6nBNFGSn3AN3O02uPxmLOXYrg6tlx6L6okqHaXMggXl0o wtIK/2LcxZr81OVl11aJDzMjm1Derf3rhIVPgp+CDWB8zfFdYH8FvQtN8xpN13G3 iBLDZZ0wEbPjaw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:52:20 2025 by rpki-client