$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: jVkR4eq8lZ0x33/iljD+K9qEZYWsk86MQyAOMtC3ffk= Subject key identifier: D3:1B:C9:D9:3E:CE:51:C7:61:13:E8:0C:70:F4:07:E9:DA:33:F2:7A Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 0199FC2178E77CEA4A8F77E32A25A5E309D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 140C Signing time: Sun 19 Oct 2025 11:01:15 +0000 Manifest this update: Sun 19 Oct 2025 11:01:15 +0000 Manifest next update: Mon 20 Oct 2025 11:01:15 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: GKSBLrBu6Q5GrencKUJXMTr1ciTf8FmgURSpMUYRW8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:78:e7:7c:ea:4a:8f:77:e3:2a:25:a5:e3:09:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Oct 19 11:01:15 2025 GMT Not After : Oct 20 11:01:15 2025 GMT Subject: CN=d31bc9d93ece51c76113e80c70f407e9da33f27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:b5:14:58:19:ad:f0:f4:4b:88:dc:7a:29:dc: ce:0e:59:a1:6f:02:08:27:82:d8:99:3b:17:6a:c3: 07:2c:dd:7a:31:a9:29:34:d0:c9:28:0a:4d:a2:72: f8:c8:18:f2:ad:3f:6a:c7:82:c9:2a:58:87:64:a4: 97:2b:34:63:34:b9:25:aa:bd:1d:a0:4d:5c:7c:97: a4:1a:81:1d:cc:f5:77:53:88:22:76:31:a2:45:96: d5:0b:a5:0d:12:d0:35:30:27:58:71:73:f7:80:ae: 02:28:e8:b1:e6:c8:ae:c3:22:a9:dc:de:46:7c:bd: cb:47:a9:d8:67:2f:6d:7a:d3:d6:f6:03:bd:7a:e4: fa:d7:82:2f:8a:28:04:9f:b0:b3:b5:a6:94:b7:23: ee:6b:9f:54:57:50:9b:3d:98:b1:c8:51:01:5b:59: a6:57:9c:54:79:49:49:d4:cf:aa:89:04:50:4c:47: 9c:cd:95:58:84:15:a3:93:11:d0:22:3b:ce:f5:6e: 8b:97:fa:cd:e3:5b:3e:ad:76:62:3d:bd:46:13:89: fb:ca:8c:6b:54:e6:e5:3d:bc:9a:ff:aa:d0:11:07: 7a:2b:3c:d5:52:db:ed:8d:15:95:40:35:39:b5:d8: 31:2f:97:69:c5:a6:b1:aa:30:16:e2:53:fc:ef:95: 17:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1B:C9:D9:3E:CE:51:C7:61:13:E8:0C:70:F4:07:E9:DA:33:F2:7A X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cd:18:32:ad:d7:8d:fc:75:1c:7a:4e:a1:7a:01:9e:6d:f7: f3:c5:6c:35:aa:63:b0:ca:9a:79:fa:a2:91:ed:eb:d0:61:28: 74:8f:f2:c6:03:b3:f7:72:ab:c3:05:1c:69:c7:55:2b:da:f5: 0e:ee:f5:db:dd:b2:80:be:23:cb:99:0d:82:13:6f:bf:b7:43: 54:45:ca:42:db:2e:f3:5b:ed:53:c2:2d:26:8b:9e:e4:a4:6a: b9:be:c9:b9:a8:bd:22:44:5e:e1:d2:3d:bd:7d:1f:4c:49:ec: 8b:7e:fe:ac:bc:0d:4a:0b:c2:8d:32:12:4e:a8:b5:70:c9:f7: d8:3a:c4:e2:b4:44:ba:59:8d:92:5e:41:87:27:b1:90:5d:46: 0d:f2:4f:8e:41:71:2f:6e:4f:23:4b:e6:2f:71:a6:37:fa:c9: 62:f2:59:a9:fb:5c:94:5e:31:4f:c5:37:b9:f4:03:2d:54:14: eb:7e:4f:ee:59:22:33:b5:90:11:34:ae:4b:a4:6d:b9:a4:53: c9:e0:f4:c1:d4:c8:53:bd:6c:6f:2a:d4:ce:a2:1f:b1:c3:d3: e7:fc:87:d8:3d:54:70:b6:25:56:76:b5:d0:85:07:c3:af:e0: 8a:b4:e4:fc:2d:50:29:5c:8c:ad:13:b4:24:27:31:28:d6:f7: 6b:af:09:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IXjnfOpKj3fjKiWl4wnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMDE5MTEwMTE1WhcNMjUxMDIwMTEwMTE1WjAzMTEwLwYDVQQD EyhkMzFiYzlkOTNlY2U1MWM3NjExM2U4MGM3MGY0MDdlOWRhMzNmMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/LUUWBmt8PRLiNx6KdzODlmhbwII J4LYmTsXasMHLN16MakpNNDJKApNonL4yBjyrT9qx4LJKliHZKSXKzRjNLklqr0d oE1cfJekGoEdzPV3U4gidjGiRZbVC6UNEtA1MCdYcXP3gK4CKOix5siuwyKp3N5G fL3LR6nYZy9tetPW9gO9euT614IviigEn7CztaaUtyPua59UV1CbPZixyFEBW1mm V5xUeUlJ1M+qiQRQTEeczZVYhBWjkxHQIjvO9W6Ll/rN41s+rXZiPb1GE4n7yoxr VOblPbya/6rQEQd6KzzVUtvtjRWVQDU5tdgxL5dpxaaxqjAW4lP875UXhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMbydk+zlHHYRPoDHD0B+naM/J6MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa80YMq3X jfx1HHpOoXoBnm3388VsNapjsMqaefqike3r0GEodI/yxgOz93KrwwUcacdVK9r1 Du71292ygL4jy5kNghNvv7dDVEXKQtsu81vtU8ItJoue5KRqub7Juai9IkRe4dI9 vX0fTEnsi37+rLwNSgvCjTISTqi1cMn32DrE4rREulmNkl5BhyexkF1GDfJPjkFx L25PI0vmL3GmN/rJYvJZqftclF4xT8U3ufQDLVQU635P7lkiM7WQETSuS6RtuaRT yeD0wdTIU71sbyrUzqIfscPT5/yH2D1UcLYlVna10IUHw6/girTk/C1QKVyMrRO0 JCcxKNb3a68J6A== -----END CERTIFICATE-----Generated at Sun Oct 19 20:38:14 2025 by rpki-client