$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: PBmdtcENequAaVUte+NGaHMQaFfhCsLQUHRmY6b/K6g= Subject key identifier: E8:2D:29:66:46:68:AA:E0:D8:5A:7D:74:6E:BF:F4:78:F1:39:A9:90 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 0199FCC6CA98E38C2BE8C2EF657569B5EE03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 164D Signing time: Sun 19 Oct 2025 14:01:50 +0000 Manifest this update: Sun 19 Oct 2025 14:01:50 +0000 Manifest next update: Mon 20 Oct 2025 14:01:50 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 4: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: NsE+YAy8U9hPOawGHm64Yv72Ulae+VMNR/eDQuPdxn0=) 6: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 7: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 8: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 9: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 10: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 11: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:ca:98:e3:8c:2b:e8:c2:ef:65:75:69:b5:ee:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Oct 19 14:01:50 2025 GMT Not After : Oct 20 14:01:50 2025 GMT Subject: CN=e82d29664668aae0d85a7d746ebff478f139a990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:18:e1:f0:1f:ef:77:1d:63:da:5f:86:08: f7:92:7d:c8:dc:ba:cd:95:be:ba:75:58:07:95:d7: 15:63:7f:91:2b:fa:53:fd:43:c2:dd:03:a2:62:c1: 48:f9:f7:40:3a:9f:09:34:db:4b:e0:9c:c3:ea:20: 4c:48:ba:ee:9c:f9:be:6a:a7:0c:4f:0b:c6:1d:42: af:7d:6c:6b:33:5b:06:7f:b5:dd:fd:f6:d2:13:3d: 0f:03:ad:78:5a:a9:0e:94:97:78:7d:81:05:d2:75: 3a:be:91:9b:e4:66:0f:d3:55:fb:3c:2a:2a:32:54: ce:a7:32:da:cb:21:13:ef:7c:4c:15:8d:85:8b:fe: 81:01:86:47:ab:12:0b:8e:db:6e:58:16:f7:05:ae: a5:ac:9f:cb:1a:b3:01:7d:fa:5c:cf:d4:b9:f0:75: 38:13:5f:49:80:cf:ce:d6:98:98:c2:da:21:ab:db: 8a:78:2b:c6:a5:30:21:eb:16:bd:cc:60:04:a9:f0: 58:95:3b:be:e5:87:e5:9c:68:83:45:31:56:7e:2a: 86:87:97:04:be:b9:86:6b:0c:62:f0:26:46:a9:5f: 52:ad:5a:27:64:77:9c:e6:1d:75:63:8f:81:5c:1c: d5:5d:b6:75:09:3d:0c:ab:6c:74:88:80:7c:8e:43: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2D:29:66:46:68:AA:E0:D8:5A:7D:74:6E:BF:F4:78:F1:39:A9:90 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e5:ad:42:e7:a3:95:c0:bc:3a:75:72:c0:01:e3:ba:88:40: 50:15:02:7b:ae:ef:33:96:ad:ed:58:d5:e7:47:91:7c:08:f5: da:8e:1a:a1:31:ea:fc:43:45:8b:fe:97:be:31:4b:36:27:bf: 9d:43:31:38:d9:35:c7:cb:52:95:ea:2d:87:ec:9d:ab:c9:0c: 63:94:52:56:b3:51:40:a5:57:c5:87:7d:9a:32:1c:fe:f3:40: 5f:d8:c1:52:ea:c1:b7:f7:ba:98:2e:c6:63:4f:12:b9:7c:21: 94:28:4c:eb:71:8f:b8:e0:6c:2f:3f:1b:d7:66:ce:a0:97:41: 8b:85:64:92:2d:cc:e8:56:45:a3:75:ae:e2:ff:bf:e9:0a:77: 29:08:06:4f:54:b4:be:18:0c:87:87:07:25:92:7d:fd:13:d5: 91:f6:e9:03:bd:af:b5:6c:4c:a9:01:49:4b:85:b1:68:0a:94: 3b:3b:a7:32:ba:94:ff:9c:5b:2b:3d:cc:00:af:31:2f:d9:b7: cc:23:02:86:62:43:2f:21:df:48:14:91:12:19:4f:21:e9:db: 93:ae:2b:51:a7:f8:47:ca:38:7e:cf:97:bc:30:0d:7c:e6:f1: 62:6c:9a:84:1e:52:e5:10:15:e5:fa:d2:e4:cd:52:eb:41:98: cf:41:f7:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xsqY44wr6MLvZXVpte4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMDE5MTQwMTUwWhcNMjUxMDIwMTQwMTUwWjAzMTEwLwYDVQQD EyhlODJkMjk2NjQ2NjhhYWUwZDg1YTdkNzQ2ZWJmZjQ3OGYxMzlhOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/oY4fAf73cdY9pfhgj3kn3I3LrN lb66dVgHldcVY3+RK/pT/UPC3QOiYsFI+fdAOp8JNNtL4JzD6iBMSLrunPm+aqcM TwvGHUKvfWxrM1sGf7Xd/fbSEz0PA614WqkOlJd4fYEF0nU6vpGb5GYP01X7PCoq MlTOpzLayyET73xMFY2Fi/6BAYZHqxILjttuWBb3Ba6lrJ/LGrMBffpcz9S58HU4 E19JgM/O1piYwtohq9uKeCvGpTAh6xa9zGAEqfBYlTu+5YflnGiDRTFWfiqGh5cE vrmGawxi8CZGqV9SrVonZHec5h11Y4+BXBzVXbZ1CT0Mq2x0iIB8jkNyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgtKWZGaKrg2Fp9dG6/9HjxOamQMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuWtQuej lcC8OnVywAHjuohAUBUCe67vM5at7VjV50eRfAj12o4aoTHq/ENFi/6XvjFLNie/ nUMxONk1x8tSleoth+ydq8kMY5RSVrNRQKVXxYd9mjIc/vNAX9jBUurBt/e6mC7G Y08SuXwhlChM63GPuOBsLz8b12bOoJdBi4Vkki3M6FZFo3Wu4v+/6Qp3KQgGT1S0 vhgMh4cHJZJ9/RPVkfbpA72vtWxMqQFJS4WxaAqUOzunMrqU/5xbKz3MAK8xL9m3 zCMChmJDLyHfSBSREhlPIenbk64rUaf4R8o4fs+XvDANfObxYmyahB5S5RAV5frS 5M1S60GYz0H30g== -----END CERTIFICATE-----Generated at Sun Oct 19 17:39:31 2025 by rpki-client