$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: Gt4sWnaU42cYLBYH6D9heRyU7b45UeUNya/DiFiZ3ZY= Subject key identifier: 41:AB:5A:A8:08:00:0A:19:C6:78:D4:C2:64:AC:AD:A7:DA:D3:1C:2B Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01A06CEFFA12B92CDC052F90860F0FEED0AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1A5D Signing time: Fri 04 Sep 2026 15:01:01 +0000 Manifest this update: Fri 04 Sep 2026 15:01:01 +0000 Manifest next update: Sat 05 Sep 2026 15:01:01 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: HNd4jSy4UGPiWYf3N3FN9XTPNjO0GtgEnenPKTDGNYo=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6c:ef:fa:12:b9:2c:dc:05:2f:90:86:0f:0f:ee:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Sep 4 15:01:01 2026 GMT Not After : Sep 5 15:01:01 2026 GMT Subject: CN=41ab5aa808000a19c678d4c264acada7dad31c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:ff:ae:15:c8:ad:ed:29:70:3a:9e:c2:23: f3:d2:d4:69:d6:43:ae:e1:c6:5b:54:4a:b8:59:64: c8:07:5e:08:94:6d:2f:30:03:0d:ac:bc:f2:dd:67: a3:10:14:51:b0:95:f4:f0:ba:8a:88:35:c2:8d:d2: e1:d3:1c:74:a3:04:0e:c2:86:1f:4b:02:93:fb:d4: b4:25:46:80:f5:ed:a2:6d:14:93:f7:06:b3:06:ac: 93:3d:0d:76:6f:c3:8d:db:c9:87:ae:b0:d2:2a:6c: 84:5e:7f:27:95:cd:a6:0f:17:3f:01:97:34:e0:1e: 5e:df:b0:69:5d:5d:5b:ac:e0:3a:11:05:75:b5:80: 8d:48:94:05:d6:79:87:89:23:d8:f4:09:d1:95:e1: db:78:15:5d:df:84:a1:c8:d2:9e:28:fc:97:dc:04: b0:2a:86:17:20:ee:e8:f8:77:be:23:82:86:bc:74: 61:3b:60:67:55:f3:cc:ce:05:07:9d:a4:6c:52:c1: 8d:96:78:bb:a1:71:54:9a:0f:ce:81:15:6c:cd:cc: d3:01:c7:52:29:b4:33:e4:d9:d1:b3:a6:34:b0:b6: 73:62:c6:83:57:54:67:ef:a5:bb:c8:c0:3d:d0:b1: bd:b6:e3:98:01:99:c0:57:cf:fc:41:91:85:58:26: 17:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:5A:A8:08:00:0A:19:C6:78:D4:C2:64:AC:AD:A7:DA:D3:1C:2B X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1d:63:f1:af:f2:44:b4:fc:46:9c:e5:23:1d:68:5e:da:08: 42:2d:56:6f:4b:17:1f:e0:28:41:95:1f:83:c1:1b:a0:39:f4: df:32:f1:58:df:3f:c9:60:ee:0a:64:1a:47:b6:5f:db:c0:49: ee:83:6e:0b:57:e7:01:5c:51:1c:24:3b:6f:e3:c1:65:0f:c0: 55:72:15:df:37:9a:d6:df:8e:48:7a:20:53:1e:1d:cc:26:1a: 63:0f:a9:da:d2:4b:cb:03:19:68:5e:d8:58:02:28:f6:ef:2a: 09:57:a3:f7:25:da:92:0e:f0:97:9b:0b:19:31:51:ea:f4:2b: 95:e3:cc:4c:98:fc:6f:56:00:a2:9c:05:4c:fa:89:65:46:6f: 2c:8a:e4:a8:3b:69:54:03:2a:de:25:0f:97:e5:81:a2:4c:bb: e7:dc:87:98:45:c4:22:a8:dc:a0:0a:b8:ab:a9:ee:11:4b:08: 36:0e:39:30:5e:38:2c:1d:da:47:a2:14:6d:bf:eb:4d:39:e6: 18:64:e7:3d:19:a3:c6:af:a0:fc:cb:d4:a1:9b:1c:e8:14:ba: e3:e2:7b:c2:3c:3a:89:a0:63:04:e8:37:54:19:01:9b:cf:d6: 51:56:1c:4f:cf:f5:73:bb:30:06:f5:85:77:80:20:d0:6e:52: 22:05:21:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBs7/oSuSzcBS+Qhg8P7tCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwOTA0MTUwMTAxWhcNMjYwOTA1MTUwMTAxWjAzMTEwLwYDVQQD Eyg0MWFiNWFhODA4MDAwYTE5YzY3OGQ0YzI2NGFjYWRhN2RhZDMxYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssr/rhXIre0pcDqewiPz0tRp1kOu 4cZbVEq4WWTIB14IlG0vMAMNrLzy3WejEBRRsJX08LqKiDXCjdLh0xx0owQOwoYf SwKT+9S0JUaA9e2ibRST9wazBqyTPQ12b8ON28mHrrDSKmyEXn8nlc2mDxc/AZc0 4B5e37BpXV1brOA6EQV1tYCNSJQF1nmHiSPY9AnRleHbeBVd34ShyNKeKPyX3ASw KoYXIO7o+He+I4KGvHRhO2BnVfPMzgUHnaRsUsGNlni7oXFUmg/OgRVszczTAcdS KbQz5NnRs6Y0sLZzYsaDV1Rn76W7yMA90LG9tuOYAZnAV8/8QZGFWCYXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGrWqgIAAoZxnjUwmSsrafa0xwrMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx1j8a/y RLT8RpzlIx1oXtoIQi1Wb0sXH+AoQZUfg8EboDn03zLxWN8/yWDuCmQaR7Zf28BJ 7oNuC1fnAVxRHCQ7b+PBZQ/AVXIV3zea1t+OSHogUx4dzCYaYw+p2tJLywMZaF7Y WAIo9u8qCVej9yXakg7wl5sLGTFR6vQrlePMTJj8b1YAopwFTPqJZUZvLIrkqDtp VAMq3iUPl+WBoky759yHmEXEIqjcoAq4q6nuEUsINg45MF44LB3aR6IUbb/rTTnm GGTnPRmjxq+g/MvUoZsc6BS64+J7wjw6iaBjBOg3VBkBm8/WUVYcT8/1c7swBvWF d4Ag0G5SIgUhCA== -----END CERTIFICATE-----Generated at Fri Sep 4 23:25:33 2026 by rpki-client