$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json) Hash identifier: oqSBLb/+f0sNWoklU9SYsEkNMXO8aLkzdD/AExrpKeo= Subject key identifier: 93:9C:EF:43:E2:62:C1:C7:E4:D3:74:0A:2C:7D:9B:CD:74:BB:10:B8 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 0199FC8F95E33CB7B4CC8C345D2E38CAF4AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft Manifest number: 08BC Signing time: Sun 19 Oct 2025 13:01:32 +0000 Manifest this update: Sun 19 Oct 2025 13:01:32 +0000 Manifest next update: Mon 20 Oct 2025 13:01:32 +0000 Files and hashes: 1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=) 2: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=) 3: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=) 4: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=) 5: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=) 6: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=) 7: PUFVgG5XTEBa1FkmtV4ycOrJNR8.roa (hash: N9/tccWzTiDJqufWom2nX/Wb/C0jzwpdRD1YBVzLJfM=) 8: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=) 9: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=) 10: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: ssksT1w/r/Wak0sBn5+/DDAHXhwwRAn7ZRtNds5eXe4=) 11: WpFV-sOVbVK6x6mNC8RkKz1GUiY.roa (hash: UxCznUOsDVY4T4Zkfr108cWCuFQbwtO/CUb0BjHDFUI=) 12: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=) 13: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (hash: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=) 14: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=) 15: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=) 16: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=) 17: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=) 18: nTLrnsLe5pfeZdn2nN3avyrKvR8.roa (hash: PYUn70hC1UKNiPtYZXRm5ik4trcOE5BeJZLN9btWaTY=) 19: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=) 20: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=) 21: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=) 22: sSrTDL6nguTxbh69Ill43irJGLE.roa (hash: e1S86JgpzImCBy74Z+DZRrxSrSDLIoWOZKxkg3oykGM=) 23: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=) 24: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (hash: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=) 25: zbLb6V2msPLlJ2wj3a08eMqWNX8.roa (hash: rsMnMJGficXOTixQcjNnqlofIjEsJ0amK5sDmhVfoBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:95:e3:3c:b7:b4:cc:8c:34:5d:2e:38:ca:f4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Oct 19 13:01:32 2025 GMT Not After : Oct 20 13:01:32 2025 GMT Subject: CN=939cef43e262c1c7e4d3740a2c7d9bcd74bb10b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:2f:6a:85:19:ec:1e:5d:16:28:1e:d3:40: 96:80:0f:9f:84:30:d1:3d:0a:88:94:c1:37:6e:51: 0a:98:b0:8c:f9:8f:d5:58:b7:4b:92:49:21:23:0a: b2:a2:43:e0:9a:a2:e7:b8:66:79:d6:6e:58:99:78: 97:1c:26:08:21:d9:d3:95:44:47:30:ca:5f:07:99: 19:57:df:b0:68:a3:a3:b5:e6:73:97:ad:4e:bf:ce: f3:86:7a:5f:ee:12:38:c8:1a:46:d9:71:7f:fb:09: b6:ea:3d:6f:c6:99:31:85:8a:fd:6a:1c:ea:7d:53: 82:a1:2c:c8:35:0f:dd:08:be:ad:e7:18:ea:6e:cc: 90:22:6e:ed:9b:bb:d3:e1:61:fc:6e:d8:17:80:fb: 64:1d:7e:2a:2b:74:7f:05:dd:a1:49:68:76:b5:70: b2:22:57:b6:6b:0d:79:26:64:d4:e6:b2:29:df:7e: 29:cf:3d:a3:97:05:be:14:82:5a:9a:eb:18:c4:dd: 5a:95:aa:26:7e:be:ae:ce:a8:02:66:a0:55:98:db: b5:b8:ce:94:30:e8:0d:53:c2:cf:01:46:28:af:0a: be:4e:19:26:7c:a2:a5:ee:02:79:9e:82:74:ad:4e: 0d:64:21:86:2e:d9:08:fb:49:d3:dc:23:9a:61:5e: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:EF:43:E2:62:C1:C7:E4:D3:74:0A:2C:7D:9B:CD:74:BB:10:B8 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8a:d9:3c:72:34:56:ff:a9:e0:50:94:c6:6d:19:d0:30:3c: 58:b0:7f:fe:88:04:3b:94:17:0b:90:44:fd:c2:3a:4f:cd:62: 74:b8:13:98:d9:dd:55:73:ac:29:10:39:0d:42:96:97:a7:4b: 8e:7b:53:3d:81:25:da:2c:39:ff:4b:dd:7c:9c:4d:30:76:72: 5b:ba:d7:95:e3:da:4d:1a:9f:0d:ab:9f:06:66:a8:e2:8c:f3: 11:a2:10:71:20:20:61:eb:e2:64:9f:c8:9d:4a:0b:29:e6:31: 98:4b:41:2a:64:b7:99:86:e4:7b:91:89:67:9c:b5:22:44:c0: 14:8c:53:fc:f6:38:28:47:a4:3d:94:c4:46:3f:0e:86:33:1d: 86:65:ab:ce:ba:ee:09:0a:ae:6e:d7:b4:ff:58:b1:8a:77:b7: e0:a7:58:4e:55:18:10:2f:77:06:47:91:06:2a:61:91:b6:f4: 9a:24:e1:80:17:79:46:ae:af:7c:70:cd:a6:4f:0d:03:9f:a4: bc:1d:7e:ff:89:8c:76:9a:33:2b:45:38:50:43:08:bb:ab:c0: 9b:13:f6:44:1e:61:98:af:fa:a6:3b:72:c2:e9:42:38:01:e2: cd:81:33:b3:7a:59:f4:ef:a3:2c:80:cf:11:23:0f:64:59:a9: 35:76:5b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j5XjPLe0zIw0XS44yvSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD Eyg5MzljZWY0M2UyNjJjMWM3ZTRkMzc0MGEyYzdkOWJjZDc0YmIxMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+8vaoUZ7B5dFige00CWgA+fhDDR PQqIlME3blEKmLCM+Y/VWLdLkkkhIwqyokPgmqLnuGZ51m5YmXiXHCYIIdnTlURH MMpfB5kZV9+waKOjteZzl61Ov87zhnpf7hI4yBpG2XF/+wm26j1vxpkxhYr9ahzq fVOCoSzINQ/dCL6t5xjqbsyQIm7tm7vT4WH8btgXgPtkHX4qK3R/Bd2hSWh2tXCy Ile2aw15JmTU5rIp334pzz2jlwW+FIJamusYxN1alaomfr6uzqgCZqBVmNu1uM6U MOgNU8LPAUYorwq+ThkmfKKl7gJ5noJ0rU4NZCGGLtkI+0nT3COaYV5KUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOc70PiYsHH5NN0Cix9m810uxC4MB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYrZPHI0 Vv+p4FCUxm0Z0DA8WLB//ogEO5QXC5BE/cI6T81idLgTmNndVXOsKRA5DUKWl6dL jntTPYEl2iw5/0vdfJxNMHZyW7rXlePaTRqfDaufBmao4ozzEaIQcSAgYeviZJ/I nUoLKeYxmEtBKmS3mYbke5GJZ5y1IkTAFIxT/PY4KEekPZTERj8OhjMdhmWrzrru CQqubte0/1ixine34KdYTlUYEC93BkeRBiphkbb0miThgBd5Rq6vfHDNpk8NA5+k vB1+/4mMdpozK0U4UEMIu6vAmxP2RB5hmK/6pjtywulCOAHizYEzs3pZ9O+jLIDP ESMPZFmpNXZbow== -----END CERTIFICATE-----Generated at Sun Oct 19 18:40:53 2025 by rpki-client