$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: p5gwuJixKcsBNIUQPDemuPQXKY50Fem6OliUAwqm5mY= Subject key identifier: 87:F6:12:56:C0:21:97:E8:01:80:98:80:0D:F7:26:0B:F6:AB:B2:F1 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 0199FC21A66559C94CCB8E264B75295A4D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 170B Signing time: Sun 19 Oct 2025 11:01:27 +0000 Manifest this update: Sun 19 Oct 2025 11:01:27 +0000 Manifest next update: Mon 20 Oct 2025 11:01:27 +0000 Files and hashes: 1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=) 2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=) 3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=) 4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=) 5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=) 6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=) 7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=) 8: WpLLn3RjoLbyjipUUgV3MfV5sX8.roa (hash: PYHwQtVcmnqDQtX16D1WqJb0WgKnZrAZ19ITOPvDgZc=) 9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=) 10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=) 11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=) 12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=) 13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=) 14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=) 15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=) 16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=) 17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: AH/V2Df49FJNKFuNi1aczk9Y12nM1luwBTewnDpqHd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:a6:65:59:c9:4c:cb:8e:26:4b:75:29:5a:4d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Oct 19 11:01:27 2025 GMT Not After : Oct 20 11:01:27 2025 GMT Subject: CN=87f61256c02197e8018098800df7260bf6abb2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:f8:c0:7a:f3:9c:46:d6:09:ff:60:d6:0a: 07:dd:27:e3:b0:70:87:bc:51:52:f3:eb:b7:a8:2d: 18:8d:ee:fe:45:67:c5:88:f3:63:cb:05:8e:0b:ef: ca:31:1e:fb:5b:30:88:3d:d9:d4:1e:a0:52:ac:4b: ad:6b:82:1f:c9:f2:6d:af:85:f3:9e:4d:2f:20:a1: 6d:47:8e:fa:ab:61:41:66:ed:00:c8:fe:70:5c:32: f2:2b:ef:fa:64:cd:7b:61:13:ae:e9:f7:ab:b6:40: 8a:bd:4e:cc:79:31:be:f4:75:68:4f:1b:fa:9c:4b: fb:19:04:87:dc:fb:09:52:7e:4f:f7:bb:37:8d:96: 8e:05:19:45:ea:ef:b5:6a:3c:85:e5:af:da:06:fa: 97:fb:39:7b:8f:f4:8c:78:e6:5c:c5:46:91:76:98: 2a:9d:16:ee:89:6d:39:77:fe:ed:be:09:01:3f:c9: 9f:07:01:6a:8e:8b:8c:b8:ac:56:36:25:d9:b7:fe: 39:d8:bc:d9:13:cc:cf:43:99:df:4a:04:e3:cd:f3: 2b:01:1a:29:52:b1:5b:b0:fa:d6:3f:1b:ac:05:dd: ed:e1:ba:66:45:39:80:5d:13:a7:17:dc:26:7c:ea: 48:ab:5f:50:1c:38:84:05:7d:4f:6e:40:56:24:90: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:12:56:C0:21:97:E8:01:80:98:80:0D:F7:26:0B:F6:AB:B2:F1 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c7:fb:46:7d:5d:1c:6d:b3:9a:df:37:78:f7:c6:9f:8c:4f: 93:84:49:b9:2b:f4:22:2e:6c:b7:76:2b:5d:7d:a9:95:09:74: 2f:9a:aa:ae:0d:ae:7c:40:19:3a:d3:4a:14:9b:0a:90:3d:18: f9:d2:c2:69:d2:ec:26:20:62:0f:b5:ef:49:7c:50:51:28:95: a5:42:11:d6:8d:3c:fa:15:10:3f:f0:c0:d1:f8:3a:03:ea:a8: 72:d6:89:16:0c:a0:44:47:8b:eb:1b:9f:a0:74:d4:13:47:48: 92:9e:b1:a6:f5:59:02:71:52:11:b4:8c:c1:cf:e7:43:91:a6: 30:69:9b:bc:8a:33:a4:45:7e:66:08:bd:28:13:d2:43:bc:06: ec:ff:e5:c5:50:4b:9f:bb:77:01:d4:55:41:40:8b:b3:34:c1: 8c:a1:b7:d9:e5:73:30:72:5f:aa:47:e4:d6:f2:2c:4c:48:ff: 64:82:ab:d8:48:fc:f8:7f:50:59:9d:62:94:54:e0:d1:b9:c7: 9f:46:39:08:6e:62:c9:82:79:63:ee:e8:33:6d:dd:3c:7f:e4: 7e:5f:28:7c:30:48:fd:f7:68:41:cf:89:0b:ce:fc:74:1c:94: fb:d0:e6:a9:05:10:ab:ab:b1:bd:36:5a:cf:74:1c:42:6b:68: 40:74:76:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IaZlWclMy44mS3UpWk0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjUxMDE5MTEwMTI3WhcNMjUxMDIwMTEwMTI3WjAzMTEwLwYDVQQD Eyg4N2Y2MTI1NmMwMjE5N2U4MDE4MDk4ODAwZGY3MjYwYmY2YWJiMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiX4wHrznEbWCf9g1goH3SfjsHCH vFFS8+u3qC0Yje7+RWfFiPNjywWOC+/KMR77WzCIPdnUHqBSrEuta4IfyfJtr4Xz nk0vIKFtR476q2FBZu0AyP5wXDLyK+/6ZM17YROu6fertkCKvU7MeTG+9HVoTxv6 nEv7GQSH3PsJUn5P97s3jZaOBRlF6u+1ajyF5a/aBvqX+zl7j/SMeOZcxUaRdpgq nRbuiW05d/7tvgkBP8mfBwFqjouMuKxWNiXZt/452LzZE8zPQ5nfSgTjzfMrARop UrFbsPrWPxusBd3t4bpmRTmAXROnF9wmfOpIq19QHDiEBX1PbkBWJJCWlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf2ElbAIZfoAYCYgA33Jgv2q7LxMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsf7Rn1d HG2zmt83ePfGn4xPk4RJuSv0Ii5st3YrXX2plQl0L5qqrg2ufEAZOtNKFJsKkD0Y +dLCadLsJiBiD7XvSXxQUSiVpUIR1o08+hUQP/DA0fg6A+qoctaJFgygREeL6xuf oHTUE0dIkp6xpvVZAnFSEbSMwc/nQ5GmMGmbvIozpEV+Zgi9KBPSQ7wG7P/lxVBL n7t3AdRVQUCLszTBjKG32eVzMHJfqkfk1vIsTEj/ZIKr2Ej8+H9QWZ1ilFTg0bnH n0Y5CG5iyYJ5Y+7oM23dPH/kfl8ofDBI/fdoQc+JC878dByU+9DmqQUQq6uxvTZa z3QcQmtoQHR2Pw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:29:59 2025 by rpki-client