$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: x8hoIa+kXeO0sNke4ZmacmE/H5SWwFuL8NtaqC4HdI4= Subject key identifier: C4:77:A1:44:39:10:26:60:74:88:EF:26:F1:33:C7:74:B1:62:B9:F6 Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 0199FEEBF2A14D5779008638097481462593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0D40 Signing time: Mon 20 Oct 2025 00:01:39 +0000 Manifest this update: Mon 20 Oct 2025 00:01:39 +0000 Manifest next update: Tue 21 Oct 2025 00:01:39 +0000 Files and hashes: 1: 1-O5PDCUIluNLwvL9ckZlTCiic5k.roa (hash: qhMDH/EIRf4uY8j8ZGgtmM3x6fh4+mOzTAkLJHzFbx0=) 2: 3LvafaHdOiY4sxoLX_gmBxqLmUE.roa (hash: 24ccmV+MNSGljhh423pCK03UEmX0iXEO3FcUYbtEFlg=) 3: 4l2IuTNstzGjNpiJFAwrychEOYw.roa (hash: m0X4eBCPHrx7Zmyz1UFRgVdtWA6FSM4O8cwU3fWGGhY=) 4: 8436f674G4X05xvwP0C936HzFw0.roa (hash: /J2oQYZ85KVDepCFbXpCbYaa0Oj460ejjf1xNXGW4Z8=) 5: 8ddhy9tWwbdT6YuDfe5AyBAl9Co.roa (hash: pZrOoiqX4rIC6PbaxG1zUT8RGSfoW+lq0tcfCxkDkAQ=) 6: ER6oQtEXqP_62NwtBzB64kGBFm8.roa (hash: a6eBV83coWmtEFcR5p1CrcxpJU5DJ/NA6zQjNaGxlPU=) 7: EseDT4XrBGBs5m1XMkQxdKL6DRM.roa (hash: DF5lG0tUF3zWwo6hq2iPtURspUXksF6gXOa2o6MwSeg=) 8: IpV-26RSBCyAkVzi7Inj30YgLcM.roa (hash: ivn8CGpeMH35yLdwrBkCj0ryi6QOV70S64s8vxb45yQ=) 9: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 10: T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa (hash: td8rBwHJnN+UP91bKfMfmPAq5aMPIDcnHWXi4WyoQek=) 11: VQ11w3hpyPj64iBdjBQvh3H40IY.roa (hash: PEPluvvkxQgJfKGG6MItpXtdaPRghraDjvwTXv4cWlU=) 12: VxDCjm6wjynMra5WGkzJGoCPrhs.roa (hash: 6jDW1q/fW7zMLlE0XVbr19PIoHkbmzCNYkeTGYpRMW4=) 13: XuxgvLAd05qq4hqx4c_u4WYR7dY.roa (hash: zkLSNkHMYRl5bJ5dZozHFmcx3BcVtlFo0wC7SXYmwLQ=) 14: gZwoW0uAXZK4DX_Wy3nMqlSOvCI.roa (hash: ZCTQvCKBuIo0GGFQA8KHz6JcfL7b6NLo0kaXAGgZn00=) 15: iTJFlrSsWbholkyOYEXXgVs3FiY.roa (hash: Jl4uUb/G3mQj8xIpDsHAVqtzDEj+sUXfj7G+zwRxdNk=) 16: jwC74-F5iREL188mldERk81FXug.roa (hash: ddYPoTatj6nI/eSrzriO9qo6/69S19UgdJCWsEfW64k=) 17: nPembSTO0FXvbw8zcrfb1ZNsGHs.roa (hash: eFcHKopiqLAXcwkADSpifmFlMBENxHJyplWhREP1i08=) 18: rop6Si-gvflJGlaMTGjDBpHpYYI.roa (hash: Vieoxx0CWOeDqKFomK10FvV28nAZrZf1I36QMg8NMrc=) 19: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: T/T4MiLXJqjQRZLH9rXbY0pMxovjQuOgHFnBm3elIgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:f2:a1:4d:57:79:00:86:38:09:74:81:46:25:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: Oct 20 00:01:39 2025 GMT Not After : Oct 21 00:01:39 2025 GMT Subject: CN=c477a144391026607488ef26f133c774b162b9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:4b:a6:29:fc:94:88:32:9d:fc:30:6d:2c: df:e8:98:44:3d:6d:f5:96:ff:c0:02:a7:8e:45:6c: ee:c6:0b:ef:04:88:d4:09:69:cf:f7:3b:aa:0e:b7: 32:c7:93:48:33:1b:ad:c5:38:33:ad:12:7c:ec:57: b0:f4:84:8c:ca:21:93:14:60:ce:de:ba:98:8a:c0: a5:cc:19:2e:d1:02:63:67:3c:37:17:7e:ef:0e:56: 15:1c:52:04:cd:25:81:05:cb:79:5a:f3:ec:2e:81: 55:ec:79:ca:82:24:68:99:57:f1:10:43:0c:32:f5: 65:19:97:f4:0a:a7:df:08:51:65:74:fb:fc:33:0d: d5:56:a7:fb:69:96:b6:17:f8:6f:a5:79:e0:c2:be: 67:ab:41:ad:86:c9:15:50:34:b2:59:a4:15:4f:15: 01:37:bc:b7:db:59:33:37:4a:9d:b0:8d:54:88:ab: 12:21:b3:bb:51:d3:f4:66:ce:d8:f3:a8:72:35:1c: 1f:55:41:73:da:7a:2f:49:97:7b:c7:48:b9:93:a2: 3f:34:f8:e2:68:2e:55:cb:50:75:6c:1d:27:72:91: ca:5a:3b:3c:56:be:00:34:60:3f:ea:7b:de:fd:6d: b6:c6:b4:78:f1:e1:cc:3a:b0:71:8c:cd:ea:d1:d7: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:A1:44:39:10:26:60:74:88:EF:26:F1:33:C7:74:B1:62:B9:F6 X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:56:4f:95:26:4f:76:2e:a2:56:b9:7e:e2:6d:8e:c3:0a:e1: a7:7b:b2:d1:18:80:2f:e7:75:f5:02:a2:1a:96:04:db:d8:19: 95:84:41:d4:93:42:5f:14:b8:42:70:df:a2:3c:fe:9d:12:cf: 32:58:a3:62:f8:cb:8f:cf:11:32:cb:be:fe:5e:02:c0:e4:22: 72:49:36:7c:9b:84:f1:53:6f:a6:a9:cd:c9:f8:e4:68:97:ab: 48:89:62:85:52:a3:b0:0a:c0:be:82:5c:53:05:98:63:1d:d3: e8:60:b0:94:c0:ae:48:4d:55:03:9a:44:b8:4e:85:17:08:ce: e6:21:e3:70:29:66:e2:83:56:bb:3a:09:2b:ac:49:09:b7:c5: c0:c3:08:54:b3:e4:25:4d:81:0b:2c:65:86:5a:c2:e6:29:f6: ef:71:87:d2:a6:b0:96:b9:f4:1c:b8:d3:2a:9c:25:cb:51:35: 27:bf:21:82:c8:cc:a6:37:7e:c3:f6:27:7b:09:3c:30:80:3a: 8f:53:65:aa:94:bc:60:26:e6:38:28:5c:ac:d8:f1:1e:3e:44: 6d:02:db:d5:b2:35:c9:4e:58:33:53:3f:66:51:c5:41:63:e4: 6d:97:a5:30:a7:bf:7f:6d:d1:98:dd:6b:2f:6b:a0:9b:d0:01: 3b:c9:04:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+6/KhTVd5AIY4CXSBRiWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUxMDIwMDAwMTM5WhcNMjUxMDIxMDAwMTM5WjAzMTEwLwYDVQQD EyhjNDc3YTE0NDM5MTAyNjYwNzQ4OGVmMjZmMTMzYzc3NGIxNjJiOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGlLpin8lIgynfwwbSzf6JhEPW31 lv/AAqeORWzuxgvvBIjUCWnP9zuqDrcyx5NIMxutxTgzrRJ87Few9ISMyiGTFGDO 3rqYisClzBku0QJjZzw3F37vDlYVHFIEzSWBBct5WvPsLoFV7HnKgiRomVfxEEMM MvVlGZf0CqffCFFldPv8Mw3VVqf7aZa2F/hvpXngwr5nq0GthskVUDSyWaQVTxUB N7y321kzN0qdsI1UiKsSIbO7UdP0Zs7Y86hyNRwfVUFz2novSZd7x0i5k6I/NPji aC5Vy1B1bB0ncpHKWjs8Vr4ANGA/6nve/W22xrR48eHMOrBxjM3q0dezmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR3oUQ5ECZgdIjvJvEzx3SxYrn2MB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0lZPlSZP di6iVrl+4m2Owwrhp3uy0RiAL+d19QKiGpYE29gZlYRB1JNCXxS4QnDfojz+nRLP MlijYvjLj88RMsu+/l4CwOQickk2fJuE8VNvpqnNyfjkaJerSIlihVKjsArAvoJc UwWYYx3T6GCwlMCuSE1VA5pEuE6FFwjO5iHjcClm4oNWuzoJK6xJCbfFwMMIVLPk JU2BCyxlhlrC5in273GH0qawlrn0HLjTKpwly1E1J78hgsjMpjd+w/Ynewk8MIA6 j1NlqpS8YCbmOChcrNjxHj5EbQLb1bI1yU5YM1M/ZlHFQWPkbZelMKe/f23RmN1r L2ugm9ABO8kEPw== -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:17 2025 by rpki-client