$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: +0V1CdPi4o7OgC1zbUQxuotz9PCbbeaKPXC/XTkqRno= Subject key identifier: 2F:A1:1F:89:43:15:86:3C:80:E8:E3:C5:3A:4E:C2:72:9D:CB:2E:01 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0199FBEBB3FA407B7443C9D7007E8591C645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1700 Signing time: Sun 19 Oct 2025 10:02:32 +0000 Manifest this update: Sun 19 Oct 2025 10:02:32 +0000 Manifest next update: Mon 20 Oct 2025 10:02:32 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: mquEv8ynkBGiztsuc+mVSx6WQ8va0OXtQzgg25iSetc=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:b3:fa:40:7b:74:43:c9:d7:00:7e:85:91:c6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Oct 19 10:02:32 2025 GMT Not After : Oct 20 10:02:32 2025 GMT Subject: CN=2fa11f894315863c80e8e3c53a4ec2729dcb2e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:69:db:22:aa:aa:53:ad:f5:73:23:5c:c7: 6c:b4:cd:5c:e7:52:44:80:80:52:3c:4c:be:7a:46: f8:70:08:14:97:ee:40:f7:1e:84:6b:6c:ef:4d:ea: c1:d9:7a:a3:7a:a6:87:b8:cb:05:93:fd:23:5b:64: 1e:12:5d:06:a1:ef:aa:d8:62:57:e3:0b:dc:af:dc: 79:42:24:16:c5:8a:07:af:e4:fa:55:44:f5:0a:98: 80:aa:58:4a:1d:7c:59:c7:1c:9a:57:5b:5c:b8:75: 74:0e:b5:f9:e0:e2:06:b1:24:28:e7:bc:09:5a:8a: e5:a6:45:0f:65:ee:06:1e:a3:7c:26:f3:41:e1:62: 0d:3c:ed:00:29:55:e6:77:c1:7d:c8:4b:40:d2:52: 74:1c:4f:84:db:1e:c6:5c:7e:72:e3:7d:fd:5e:52: 64:1e:96:74:d9:11:bd:5e:37:41:f9:55:9f:ce:53: 6a:ee:49:0e:97:89:84:b0:af:99:2f:af:7b:96:78: 9e:5f:e7:43:24:be:93:d0:db:99:8b:20:4a:03:16: b9:9c:50:76:e4:6e:c6:2f:7d:62:42:ba:7f:98:90: 99:13:25:de:1f:10:93:33:dc:c6:33:d3:79:93:02: 65:55:b6:e7:86:52:6f:e7:f6:72:47:a9:33:ab:56: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A1:1F:89:43:15:86:3C:80:E8:E3:C5:3A:4E:C2:72:9D:CB:2E:01 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0f:b7:10:7d:93:ec:d4:35:d0:4a:03:65:cc:d5:f1:12:ab: 45:8f:66:d2:37:dd:a3:dd:0e:25:1b:57:e7:52:70:b1:0c:c3: 17:7b:99:88:10:46:5d:fa:b6:e6:82:95:27:1a:50:2d:cf:7e: c7:31:a9:2a:ec:15:d5:35:99:b0:28:a9:a7:fd:1b:6b:61:01: 4b:9a:56:24:b3:8f:50:cc:d4:f6:b3:f5:65:ec:f1:9a:39:4a: 0b:3c:73:de:63:ab:72:12:ed:ed:37:8a:e8:89:ca:7a:d7:dc: 50:28:90:43:4c:8b:4c:f9:44:32:98:7c:31:da:5a:a5:30:c3: 09:14:93:ed:36:1f:4c:ac:7f:0f:f4:4a:6d:7c:aa:cf:74:d2: bf:23:53:24:0d:60:fc:8a:3e:48:62:d6:2e:47:49:27:fa:67: 16:f8:c8:63:29:f8:d2:5f:02:e1:7b:d2:32:88:fd:f7:ce:d4: f5:4f:44:3c:79:a8:18:2c:81:ef:ad:e3:6b:9a:e2:6e:3c:74: aa:23:50:96:03:79:9b:a6:13:a9:c2:5f:6e:b4:3f:dd:2f:cd: 65:0c:2b:f8:8b:ac:57:ef:08:ca:85:29:11:a4:0b:90:af:d2: a2:3f:e0:24:5b:08:76:36:da:3b:f5:ef:fc:8b:3e:13:cb:ff: 21:e6:35:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn767P6QHt0Q8nXAH6FkcZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD EygyZmExMWY4OTQzMTU4NjNjODBlOGUzYzUzYTRlYzI3MjlkY2IyZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPlp2yKqqlOt9XMjXMdstM1c51JE gIBSPEy+ekb4cAgUl+5A9x6Ea2zvTerB2XqjeqaHuMsFk/0jW2QeEl0Goe+q2GJX 4wvcr9x5QiQWxYoHr+T6VUT1CpiAqlhKHXxZxxyaV1tcuHV0DrX54OIGsSQo57wJ WorlpkUPZe4GHqN8JvNB4WINPO0AKVXmd8F9yEtA0lJ0HE+E2x7GXH5y4339XlJk HpZ02RG9XjdB+VWfzlNq7kkOl4mEsK+ZL697lnieX+dDJL6T0NuZiyBKAxa5nFB2 5G7GL31iQrp/mJCZEyXeHxCTM9zGM9N5kwJlVbbnhlJv5/ZyR6kzq1aASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+hH4lDFYY8gOjjxTpOwnKdyy4BMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA+3EH2T 7NQ10EoDZczV8RKrRY9m0jfdo90OJRtX51JwsQzDF3uZiBBGXfq25oKVJxpQLc9+ xzGpKuwV1TWZsCipp/0ba2EBS5pWJLOPUMzU9rP1ZezxmjlKCzxz3mOrchLt7TeK 6InKetfcUCiQQ0yLTPlEMph8MdpapTDDCRST7TYfTKx/D/RKbXyqz3TSvyNTJA1g /Io+SGLWLkdJJ/pnFvjIYyn40l8C4XvSMoj9987U9U9EPHmoGCyB763ja5ribjx0 qiNQlgN5m6YTqcJfbrQ/3S/NZQwr+IusV+8IyoUpEaQLkK/Soj/gJFsIdjbaO/Xv /Is+E8v/IeY1Zg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:20:18 2025 by rpki-client