$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: 8UVzA3L9m7DaJEtzat7/DHmR7C6CLl8fwvRk78O7n9Y= Subject key identifier: 80:F3:0B:29:2C:89:C6:15:2B:6D:70:21:28:F7:EE:77:1D:D5:93:06 Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 0199FC215E908DBD7C0080A71DB04A57B106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 1039 Signing time: Sun 19 Oct 2025 11:01:09 +0000 Manifest this update: Sun 19 Oct 2025 11:01:09 +0000 Manifest next update: Mon 20 Oct 2025 11:01:09 +0000 Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=) 2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=) 3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: U1jqHPvfeOjUyJ/ylhffS2ZHfxnuqlt2jqYzc3+H6n0=) 4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=) 5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=) 6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=) 7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=) 8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=) 9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=) 10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:5e:90:8d:bd:7c:00:80:a7:1d:b0:4a:57:b1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Oct 19 11:01:09 2025 GMT Not After : Oct 20 11:01:09 2025 GMT Subject: CN=80f30b292c89c6152b6d702128f7ee771dd59306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:b7:35:8a:10:47:e6:f4:75:29:0e:c4:ed: cb:c6:cf:9c:77:28:26:87:59:9d:a2:b5:c2:ea:9f: 72:d8:6b:6d:02:25:80:32:19:c1:56:6a:15:6d:57: 28:42:f9:26:33:ca:51:2e:e0:eb:ab:8e:26:1d:c7: 8d:40:45:6f:ec:8e:29:bb:15:52:ef:83:15:f0:aa: 09:cd:80:61:61:b8:6f:4c:87:c3:f1:8b:7b:0a:05: 36:a2:58:5c:8f:9e:a2:84:c3:45:70:a9:36:f9:2b: dc:64:85:18:b2:b1:05:6f:90:f4:42:fd:7e:f9:fa: b0:c9:40:f9:07:b0:ab:a8:b1:67:85:b8:e6:30:ee: 5c:32:9c:0d:69:d8:7a:cf:57:e0:14:0a:f8:49:8d: 76:76:d1:b0:7e:76:e0:2d:85:44:aa:ef:72:27:47: d0:22:6a:4f:e5:02:44:ee:7b:23:37:73:46:a3:f7: 11:ae:f6:df:91:95:73:c1:ee:24:38:f4:ad:eb:a9: 1f:09:b6:56:66:1e:ec:9f:44:cc:5a:e9:5c:73:bf: 68:8d:b5:2c:ee:f8:4c:e0:1f:b2:36:de:b5:6b:18: ed:93:90:6c:f1:da:07:91:f1:fd:c6:d8:f6:07:18: 8d:22:a6:5d:01:6e:a4:40:13:44:7f:55:7e:bb:2e: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F3:0B:29:2C:89:C6:15:2B:6D:70:21:28:F7:EE:77:1D:D5:93:06 X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fc:18:9d:2d:64:07:b3:12:38:a2:cf:7b:ff:bd:31:60:ac: d9:b0:76:fe:fb:81:3d:8b:bd:52:fd:7c:94:9a:58:58:fb:44: 40:91:cc:db:b1:5e:f8:b6:fe:f0:a0:11:85:b2:d1:04:48:3c: 62:c0:00:3a:3a:2a:b4:61:62:27:35:d5:d9:1b:03:70:49:84: 7a:ef:30:83:65:04:11:b6:24:b0:a4:a5:0d:a6:58:bc:be:ea: 57:7a:28:75:46:e0:be:bd:d4:0f:aa:1e:20:a0:79:a9:ea:4a: 5f:9a:d9:21:b6:bb:66:9c:20:21:a2:94:e1:da:d6:92:18:bb: e2:5e:94:99:3f:0b:9c:36:76:9d:fb:82:28:09:1b:36:31:00: e0:57:71:62:18:ae:b1:e2:c4:76:99:78:fa:80:03:a9:e4:0b: d0:2c:46:50:46:9c:84:65:c1:74:e8:8f:ae:b8:0e:73:fa:0d: d1:bb:cd:5a:95:c9:d9:aa:e6:e9:95:c4:c0:6a:82:b9:6b:22: d1:64:c4:9d:39:3a:55:e3:12:91:96:8a:42:4b:d1:e2:40:78: 26:de:53:07:54:9a:5e:54:95:e1:55:bb:e7:52:a7:cc:e7:c7: 46:dd:09:8d:fe:04:01:0e:60:56:53:01:62:b6:d1:f3:bf:63: a9:f4:7b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IV6Qjb18AICnHbBKV7EGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjUxMDE5MTEwMTA5WhcNMjUxMDIwMTEwMTA5WjAzMTEwLwYDVQQD Eyg4MGYzMGIyOTJjODljNjE1MmI2ZDcwMjEyOGY3ZWU3NzFkZDU5MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW23NYoQR+b0dSkOxO3Lxs+cdygm h1mdorXC6p9y2GttAiWAMhnBVmoVbVcoQvkmM8pRLuDrq44mHceNQEVv7I4puxVS 74MV8KoJzYBhYbhvTIfD8Yt7CgU2olhcj56ihMNFcKk2+SvcZIUYsrEFb5D0Qv1+ +fqwyUD5B7CrqLFnhbjmMO5cMpwNadh6z1fgFAr4SY12dtGwfnbgLYVEqu9yJ0fQ ImpP5QJE7nsjN3NGo/cRrvbfkZVzwe4kOPSt66kfCbZWZh7sn0TMWulcc79ojbUs 7vhM4B+yNt61axjtk5Bs8doHkfH9xtj2BxiNIqZdAW6kQBNEf1V+uy6FGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDzCyksicYVK21wISj37ncd1ZMGMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfwYnS1k B7MSOKLPe/+9MWCs2bB2/vuBPYu9Uv18lJpYWPtEQJHM27Fe+Lb+8KARhbLRBEg8 YsAAOjoqtGFiJzXV2RsDcEmEeu8wg2UEEbYksKSlDaZYvL7qV3oodUbgvr3UD6oe IKB5qepKX5rZIba7ZpwgIaKU4drWkhi74l6UmT8LnDZ2nfuCKAkbNjEA4FdxYhiu seLEdpl4+oADqeQL0CxGUEachGXBdOiPrrgOc/oN0bvNWpXJ2arm6ZXEwGqCuWsi 0WTEnTk6VeMSkZaKQkvR4kB4Jt5TB1SaXlSV4VW751KnzOfHRt0Jjf4EAQ5gVlMB YrbR879jqfR7aw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:28:11 2025 by rpki-client