$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 4H64pEWIht/x56jZNBz0lw/teT/GYUR4GCKXslgakEY= Subject key identifier: BB:C5:42:34:06:C3:C8:83:2C:98:4C:C9:84:4F:EA:19:88:D8:D9:AD Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019CC7F4D2377A7C0FFA4EEF864222B40358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1879 Signing time: Sat 07 Mar 2026 11:00:36 +0000 Manifest this update: Sat 07 Mar 2026 11:00:36 +0000 Manifest next update: Sun 08 Mar 2026 11:00:36 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: QFj20pdLtPd43Y5MeIMfpsxH0P8EOcmp4ViTE4m5ZG0=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 10:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c7:f4:d2:37:7a:7c:0f:fa:4e:ef:86:42:22:b4:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Mar 7 11:00:36 2026 GMT Not After : Mar 8 11:00:36 2026 GMT Subject: CN=bbc5423406c3c8832c984cc9844fea1988d8d9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:1b:39:71:74:78:c1:18:f2:e4:49:34:9d: ad:e5:e5:56:6d:28:47:e8:44:27:ae:bb:3a:ce:1c: 74:79:1c:60:6d:a3:06:da:55:4e:90:cf:33:be:c7: 7d:f6:a5:e5:6c:99:87:7d:62:7d:cf:c3:e2:e8:17: d6:a7:ec:5e:7a:91:4a:ee:60:91:4e:e8:c1:b0:24: d0:0f:e7:d9:58:e1:fb:8b:ec:cd:42:41:0e:3b:9d: 30:b8:a4:76:e7:9a:3d:24:ff:cf:fb:62:91:89:a4: 96:b5:b8:8f:b5:7a:ca:3e:55:eb:9a:f9:5d:06:4b: a0:65:32:f9:61:e1:05:43:bb:81:1d:3f:39:fb:5f: 40:f7:be:39:46:d3:71:b6:f0:ae:77:4e:0a:b3:58: c2:39:0b:77:0a:9a:69:56:1f:fe:4d:9a:e2:4b:10: 07:5f:a9:0c:f5:47:b2:15:62:6b:c2:0c:60:8e:2c: ca:56:1e:24:2f:27:cb:b9:15:0e:23:6b:38:52:f6: d8:88:ef:11:b9:7b:b6:8c:8a:4d:16:f2:fe:f7:40: 0a:80:c0:62:0c:01:cf:bf:6d:12:31:78:7a:36:37: 90:63:7f:52:30:07:64:09:5f:36:63:5d:c7:c0:3e: a1:fe:c5:df:df:0c:ec:f0:6e:88:2e:37:92:bd:51: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:42:34:06:C3:C8:83:2C:98:4C:C9:84:4F:EA:19:88:D8:D9:AD X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:cc:7f:6b:f6:bd:81:04:67:b6:6f:5c:78:e5:e2:6d:f0:65: 4a:30:bd:e2:fc:7e:a9:98:78:84:bc:c8:71:52:ca:b1:a9:7e: 33:b6:11:d2:a7:5b:4b:aa:57:a3:92:05:a6:38:47:ce:09:74: e2:e1:71:21:a7:5b:04:dd:a1:75:94:b9:b2:92:b1:b9:28:94: b8:eb:96:4b:f9:dd:62:ad:02:d4:9e:e2:a0:c8:f5:27:68:79: 95:93:1f:d6:22:0c:17:f4:03:82:e6:c2:f2:cc:fc:27:40:80: 9b:d6:8d:02:61:e6:98:d7:13:ff:22:21:05:07:85:dc:3b:dc: 2b:e3:96:45:25:0b:f1:f4:46:24:ac:32:7e:d6:ca:92:29:05: 9d:44:d4:d2:f4:3a:44:e9:3a:a5:c4:c4:70:51:d2:9c:8b:93: 42:8c:ed:1c:a6:2b:b4:23:0e:c6:28:34:c4:87:7f:b0:76:80: e1:26:ae:83:eb:89:b4:49:27:8a:58:4d:59:31:8d:90:d7:23: ea:9f:4f:bd:da:77:e2:a0:a5:1d:14:f7:d4:7e:34:de:5e:ce: 45:e3:57:43:89:7e:11:8e:c3:f8:b5:6a:e0:6b:d7:69:55:f8: 39:0c:33:a9:e4:5c:e2:a5:b3:0c:62:19:f0:3b:c5:da:6e:d2: a5:34:0a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzH9NI3enwP+k7vhkIitANYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMzA3MTEwMDM2WhcNMjYwMzA4MTEwMDM2WjAzMTEwLwYDVQQD EyhiYmM1NDIzNDA2YzNjODgzMmM5ODRjYzk4NDRmZWExOTg4ZDhkOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtAbOXF0eMEY8uRJNJ2t5eVWbShH 6EQnrrs6zhx0eRxgbaMG2lVOkM8zvsd99qXlbJmHfWJ9z8Pi6BfWp+xeepFK7mCR TujBsCTQD+fZWOH7i+zNQkEOO50wuKR255o9JP/P+2KRiaSWtbiPtXrKPlXrmvld BkugZTL5YeEFQ7uBHT85+19A9745RtNxtvCud04Ks1jCOQt3CpppVh/+TZriSxAH X6kM9UeyFWJrwgxgjizKVh4kLyfLuRUOI2s4UvbYiO8RuXu2jIpNFvL+90AKgMBi DAHPv20SMXh6NjeQY39SMAdkCV82Y13HwD6h/sXf3wzs8G6ILjeSvVFnBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvFQjQGw8iDLJhMyYRP6hmI2NmtMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsx/a/a9 gQRntm9ceOXibfBlSjC94vx+qZh4hLzIcVLKsal+M7YR0qdbS6pXo5IFpjhHzgl0 4uFxIadbBN2hdZS5spKxuSiUuOuWS/ndYq0C1J7ioMj1J2h5lZMf1iIMF/QDgubC 8sz8J0CAm9aNAmHmmNcT/yIhBQeF3DvcK+OWRSUL8fRGJKwyftbKkikFnUTU0vQ6 ROk6pcTEcFHSnIuTQoztHKYrtCMOxig0xId/sHaA4Saug+uJtEknilhNWTGNkNcj 6p9Pvdp34qClHRT31H403l7OReNXQ4l+EY7D+LVq4GvXaVX4OQwzqeRc4qWzDGIZ 8DvF2m7SpTQK7g== -----END CERTIFICATE-----Generated at Sat Mar 7 20:48:38 2026 by rpki-client