$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: 42fI9CTPl4YoqlVGerBddWAuRvf6prutr/L20nBdkvw= Subject key identifier: 2A:95:C3:7C:3F:F0:B3:09:FA:49:A8:5D:7C:AB:96:86:DA:4B:6F:6F Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 0199FC58B53A1F1EB55E0F5F8B60EEA33F39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0B90 Signing time: Sun 19 Oct 2025 12:01:35 +0000 Manifest this update: Sun 19 Oct 2025 12:01:35 +0000 Manifest next update: Mon 20 Oct 2025 12:01:35 +0000 Files and hashes: 1: 3O-D3rX4CFCdAkLP-WafPBWg7LI.roa (hash: ZjKqIVEFVR9cfjOaAvV16cE3fi3JRCek3PrT1Bdh+pE=) 2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: GqOWHXUrCxtOUY2/sm7YVfrFwhOYxfKDrNO5QVVCrQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:b5:3a:1f:1e:b5:5e:0f:5f:8b:60:ee:a3:3f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Oct 19 12:01:35 2025 GMT Not After : Oct 20 12:01:35 2025 GMT Subject: CN=2a95c37c3ff0b309fa49a85d7cab9686da4b6f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:81:ad:03:fc:fa:46:06:9a:ba:14:b3:cf: cf:e2:47:3b:0d:54:71:6d:2f:fa:dd:8f:1c:62:4f: a8:e1:6b:d5:11:91:2d:ec:79:b9:a7:10:b8:96:86: e2:13:0c:49:8b:23:21:38:5d:b6:04:73:20:7a:da: cb:7d:55:3e:03:d1:e7:b2:35:d3:ee:56:14:87:1c: 02:8a:87:ee:df:2a:42:7b:32:9e:04:c3:46:35:ee: c0:ca:f0:c6:f8:6e:7f:0d:1e:c0:29:1e:34:30:4b: ad:19:cc:56:15:fb:5e:99:83:1f:4e:d5:ee:55:73: 00:fd:01:e9:f4:3f:db:5d:2c:9c:f9:2d:de:6f:b9: dc:6a:e0:82:1c:f0:91:28:4b:8d:4b:43:80:f6:86: 88:22:20:9b:dd:cc:7d:6a:d7:6a:43:3b:2f:b9:9e: f1:c8:a7:bb:78:98:10:88:10:14:80:23:08:d2:17: 79:d1:b5:03:56:6c:84:67:e3:52:5f:24:a8:33:28: 82:7f:fd:4a:97:95:c2:8e:05:93:ab:49:59:a4:ac: 9d:0d:13:72:1d:4a:3e:35:c7:df:92:9f:e4:18:e1: ac:a0:7d:ae:19:a5:af:4a:dd:f3:fe:ad:c5:3a:fd: b0:10:51:52:71:15:64:7e:f3:48:52:e7:c3:ca:8b: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:95:C3:7C:3F:F0:B3:09:FA:49:A8:5D:7C:AB:96:86:DA:4B:6F:6F X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:62:de:e8:da:2c:74:38:f9:fa:fe:13:a8:9c:2a:1a:dd:d3: 37:30:99:cc:fd:d6:3a:ce:29:e7:f0:20:4f:bd:70:9f:89:fd: 43:5b:41:0d:e8:bb:8a:03:7d:02:eb:1e:b6:59:83:63:d0:57: af:23:66:45:87:77:24:b4:5b:ab:dd:ec:85:74:e4:ca:e6:ff: 59:a5:93:bc:25:82:d8:6e:22:56:a2:46:d3:d1:32:30:fe:e3: 0d:cb:07:0e:64:c6:3b:bc:85:27:0c:78:98:14:bb:42:cc:f7: 62:07:fd:e6:0d:c5:fd:09:99:27:c6:81:21:8b:41:ea:97:b1: 45:17:06:e1:bd:fd:89:9d:0e:03:38:aa:b9:7e:70:d5:18:f3: 23:57:db:53:8e:94:f6:17:24:13:0d:ce:be:83:f0:4e:27:a0: ca:28:27:0e:f6:fd:b0:e3:7a:12:e4:cc:70:e4:a1:40:cb:df: 37:a6:11:ae:24:b2:01:1d:ec:ab:94:aa:f9:62:7b:30:4a:01: 24:26:a3:0e:60:b6:f7:2a:f3:0f:98:d1:5e:88:90:01:24:6b: a7:ea:d4:a2:0b:40:99:4f:2f:5a:d3:60:10:fc:be:58:fa:af: f4:8b:42:06:98:ae:67:29:0b:d2:be:ee:8c:02:24:2d:2a:4e: 3e:aa:e3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WLU6Hx61Xg9fi2Duoz85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUxMDE5MTIwMTM1WhcNMjUxMDIwMTIwMTM1WjAzMTEwLwYDVQQD EygyYTk1YzM3YzNmZjBiMzA5ZmE0OWE4NWQ3Y2FiOTY4NmRhNGI2ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ECBrQP8+kYGmroUs8/P4kc7DVRx bS/63Y8cYk+o4WvVEZEt7Hm5pxC4lobiEwxJiyMhOF22BHMgetrLfVU+A9HnsjXT 7lYUhxwCiofu3ypCezKeBMNGNe7AyvDG+G5/DR7AKR40MEutGcxWFftemYMfTtXu VXMA/QHp9D/bXSyc+S3eb7ncauCCHPCRKEuNS0OA9oaIIiCb3cx9atdqQzsvuZ7x yKe7eJgQiBAUgCMI0hd50bUDVmyEZ+NSXySoMyiCf/1Kl5XCjgWTq0lZpKydDRNy HUo+Ncffkp/kGOGsoH2uGaWvSt3z/q3FOv2wEFFScRVkfvNIUufDyovE/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqVw3w/8LMJ+kmoXXyrlobaS29vMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWLe6Nos dDj5+v4TqJwqGt3TNzCZzP3WOs4p5/AgT71wn4n9Q1tBDei7igN9AusetlmDY9BX ryNmRYd3JLRbq93shXTkyub/WaWTvCWC2G4iVqJG09EyMP7jDcsHDmTGO7yFJwx4 mBS7Qsz3Ygf95g3F/QmZJ8aBIYtB6pexRRcG4b39iZ0OAziquX5w1RjzI1fbU46U 9hckEw3OvoPwTiegyignDvb9sON6EuTMcOShQMvfN6YRriSyAR3sq5Sq+WJ7MEoB JCajDmC29yrzD5jRXoiQASRrp+rUogtAmU8vWtNgEPy+WPqv9ItCBpiuZykL0r7u jAIkLSpOPqrjmw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:15:20 2025 by rpki-client