$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: zwkfCnt00TjWkWqEcUVDUD1gQtuvMWXCOIOUz3AeAZs= Subject key identifier: 45:9C:76:2D:0B:04:70:6A:F6:21:2E:18:EB:BD:BD:D0:B4:4A:C4:42 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 0199FD6AE412E8756D63FA75691FFF53663E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 17E0 Signing time: Sun 19 Oct 2025 17:01:04 +0000 Manifest this update: Sun 19 Oct 2025 17:01:04 +0000 Manifest next update: Mon 20 Oct 2025 17:01:04 +0000 Files and hashes: 1: 31WGNidSandr9euyp3MWEMrhhgA.roa (hash: x8vN4oWKPx+2cHAvBJjaBV1Li/LtuBIrATot66gBDS8=) 2: 671gBYW6ETXc3uLLcMWFydigIAE.roa (hash: uojR24E1qs72oxVJvoIC5cuU67AWyV57CVyY3tIitjE=) 3: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (hash: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=) 4: G7Gj-wNHQ4f1McLnqLZ1qzcaJ3Q.roa (hash: a3cjYcM4+KPGd8Ub1jI8tlRifmfOnBjLF0b8hwTZjiw=) 5: GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa (hash: 5W1UPJlc7q2qwrOgo4Cf0M5PPMa5x9YyDkf7wVYVJbA=) 6: OUUAGwuhS9k0RLk2OQ2YMgWfJ9k.roa (hash: I6UnjrAhwxJpksTNqd8b4yrJQsgKAZ6ux+daYCpTF24=) 7: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (hash: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=) 8: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: fQRJGcXQaEEC0QPyPmIqim8hjq0jZt7x/z0uBUtl1rs=) 9: WIdSsyCX57O0jLNkXtjrP1vhXSg.roa (hash: g0ccLEN+zmZYzIcNucOxzQOSHm/WBMyRcfAkc8Yy9KQ=) 10: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (hash: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=) 11: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (hash: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=) 12: e6h_e1l_GBB-YTi9wxz8vLZyCdg.roa (hash: wioIGHuZ359Ftozmd9jj5SGM0AdzlgpJU2wqq65dW5I=) 13: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (hash: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=) 14: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (hash: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=) 15: rJdcZqP-lJoa1smKmnWsYCRCK9Y.roa (hash: gaIqLEjbkC4D7YhxxNohAh6KVdcatllzPsumpn8s2kw=) 16: vknM6fMpp7RjN6aHY9yLoL3YFH0.roa (hash: VxtTG9zbKa2nS2uWhWDmKWt2+1JAT32lgl+0T5kZvMY=) 17: z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa (hash: 8BfW7FciBTdc5C8JJIsZRSk+vhvQyrnM6thA6ZIMSXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6a:e4:12:e8:75:6d:63:fa:75:69:1f:ff:53:66:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Oct 19 17:01:04 2025 GMT Not After : Oct 20 17:01:04 2025 GMT Subject: CN=459c762d0b04706af6212e18ebbdbdd0b44ac442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:83:4e:41:ea:9a:68:22:4e:39:54:61:82: a5:11:6f:01:0f:7c:70:ae:7a:c1:c2:a1:4e:3a:6e: 53:0e:f0:f0:94:4e:9e:57:bf:42:96:45:71:cb:4b: 0a:54:ee:64:ab:10:c0:b9:68:26:74:59:01:ce:6e: ca:62:bc:18:4b:cf:0f:3e:06:8b:b8:74:32:de:f0: 1c:f1:a3:4f:1c:f4:fa:29:4d:20:14:96:dc:4f:2b: 96:f1:47:a7:62:c0:dd:e0:f8:94:fa:57:52:76:04: 9b:3e:be:a9:f2:bc:76:d4:a8:83:ff:58:5d:bd:c4: fd:39:ca:24:10:cf:95:18:7a:87:5d:7c:dc:4a:47: 5d:87:e9:b5:a2:ac:ea:2f:6c:59:1a:d7:4e:1e:fb: 8b:73:86:53:e0:e3:36:5b:15:9c:5a:c7:60:a0:16: c6:3d:04:7f:3c:b8:e4:e6:a5:71:a5:a9:ef:3d:f7: d0:9c:fd:5d:fd:1c:7a:20:92:21:25:9b:68:c8:60: 4f:99:50:c3:06:f1:99:70:68:95:dd:c5:9b:97:89: 95:25:56:0f:54:20:4b:8a:f8:6a:4f:dd:8e:39:95: 22:8b:fb:68:22:24:03:d0:c4:2e:85:12:4b:7c:a6: 1d:08:2a:bb:93:a1:78:c6:b5:30:74:61:d0:be:b3: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9C:76:2D:0B:04:70:6A:F6:21:2E:18:EB:BD:BD:D0:B4:4A:C4:42 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:46:85:5b:ad:1a:06:90:fe:79:17:c2:9b:6a:e8:a5:66:96: 5b:ce:f2:07:7c:83:14:21:37:c0:ef:e9:84:7b:00:91:46:39: 7e:78:61:e1:33:d4:79:6d:65:14:9d:f7:43:90:03:3e:6e:d6: 15:f8:04:9e:23:c1:bf:eb:a2:33:74:25:50:2e:21:17:7f:18: d4:11:4b:1e:f6:29:5a:b6:df:1c:dc:e8:85:67:d1:98:19:df: 71:7e:e6:52:b3:66:a9:05:0c:4b:f3:f0:ea:15:8f:d2:06:d1: 7e:9b:d5:22:89:b0:22:cc:1f:8e:62:8e:44:5a:64:31:9b:aa: 09:16:c9:93:8f:7a:e1:86:7f:e2:a3:d7:2a:d5:a4:8a:6e:80: 07:a6:97:be:4a:27:21:13:85:45:92:68:9f:a5:4c:99:e3:c3: d7:d6:ab:e9:d5:af:93:17:d4:b2:b4:2b:81:d7:76:ff:d4:0f: de:28:c7:70:e3:b3:6a:c7:54:37:b3:01:2f:b6:59:bc:70:73: e4:3c:c8:cc:1c:5a:af:f2:80:53:3d:7c:df:8a:fc:02:0d:0e: 34:79:10:3b:ba:06:21:ef:a1:56:4f:42:28:93:81:d9:23:5e: 25:da:df:1a:94:c2:40:b1:c9:d0:90:23:d6:cb:6f:6f:88:89: 48:9d:03:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9auQS6HVtY/p1aR//U2Y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjUxMDE5MTcwMTA0WhcNMjUxMDIwMTcwMTA0WjAzMTEwLwYDVQQD Eyg0NTljNzYyZDBiMDQ3MDZhZjYyMTJlMThlYmJkYmRkMGI0NGFjNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyiDTkHqmmgiTjlUYYKlEW8BD3xw rnrBwqFOOm5TDvDwlE6eV79ClkVxy0sKVO5kqxDAuWgmdFkBzm7KYrwYS88PPgaL uHQy3vAc8aNPHPT6KU0gFJbcTyuW8UenYsDd4PiU+ldSdgSbPr6p8rx21KiD/1hd vcT9OcokEM+VGHqHXXzcSkddh+m1oqzqL2xZGtdOHvuLc4ZT4OM2WxWcWsdgoBbG PQR/PLjk5qVxpanvPffQnP1d/Rx6IJIhJZtoyGBPmVDDBvGZcGiV3cWbl4mVJVYP VCBLivhqT92OOZUii/toIiQD0MQuhRJLfKYdCCq7k6F4xrUwdGHQvrOnjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWcdi0LBHBq9iEuGOu9vdC0SsRCMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckaFW60a BpD+eRfCm2ropWaWW87yB3yDFCE3wO/phHsAkUY5fnhh4TPUeW1lFJ33Q5ADPm7W FfgEniPBv+uiM3QlUC4hF38Y1BFLHvYpWrbfHNzohWfRmBnfcX7mUrNmqQUMS/Pw 6hWP0gbRfpvVIomwIswfjmKORFpkMZuqCRbJk4964YZ/4qPXKtWkim6AB6aXvkon IROFRZJon6VMmePD19ar6dWvkxfUsrQrgdd2/9QP3ijHcOOzasdUN7MBL7ZZvHBz 5DzIzBxar/KAUz1834r8Ag0ONHkQO7oGIe+hVk9CKJOB2SNeJdrfGpTCQLHJ0JAj 1stvb4iJSJ0Dhg== -----END CERTIFICATE-----Generated at Mon Oct 20 02:46:01 2025 by rpki-client