$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 99UURcJ6QkThZXxSTj9E5gHrYyd2vmQ6Z9NwJJt9h/k= Subject key identifier: 33:9E:BE:80:E9:9B:E9:01:71:CC:68:71:FE:02:9A:B4:5A:77:F3:5E Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019F85314E9D5B66837B388B18A1CA94618D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 19E5 Signing time: Tue 21 Jul 2026 15:00:28 +0000 Manifest this update: Tue 21 Jul 2026 15:00:28 +0000 Manifest next update: Wed 22 Jul 2026 15:00:28 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: 81tos4SeULM32k26lA7Y78/5qf9CfD6VYBLdJYCDUUo=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:31:4e:9d:5b:66:83:7b:38:8b:18:a1:ca:94:61:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jul 21 15:00:28 2026 GMT Not After : Jul 22 15:00:28 2026 GMT Subject: CN=339ebe80e99be90171cc6871fe029ab45a77f35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:e5:9a:d9:c0:6c:b0:cb:e4:a0:61:46:a6: 52:66:39:b9:c1:53:97:57:54:30:d9:25:86:39:12: 8c:35:cd:8b:a3:bd:0c:65:02:e1:1f:4a:b3:de:c2: dc:08:3d:f6:1c:e2:d3:d2:fd:48:05:6a:63:d4:ea: f0:f1:88:80:15:e6:7a:7c:c5:5e:a3:05:f5:16:c6: 76:ff:1b:24:87:0f:5c:79:94:1d:53:fc:f0:80:a8: 4e:1d:93:8e:9f:9d:04:07:bc:d5:e7:65:50:ef:19: 39:8a:a4:ef:13:19:e1:3c:32:de:02:e4:99:c8:b0: cd:f4:6e:b1:f5:d8:8d:9c:8f:b0:4e:1e:e3:51:cc: 89:6e:b0:16:fb:2b:93:9a:a9:e6:26:e1:17:40:a0: 9f:5d:ea:76:a0:a6:3e:53:3a:08:f3:fc:48:58:32: 0c:57:df:a5:7b:31:52:5c:55:29:ba:9f:d3:ff:2c: 7e:82:0f:17:a9:53:cc:a0:46:8c:d6:ad:5b:5c:76: 89:6b:92:73:e6:6b:64:a2:cf:73:3c:fa:3b:fc:05: 17:61:d9:0d:08:0e:fc:99:55:ef:68:97:c7:3d:a5: c4:56:9a:41:5e:7f:08:39:11:6b:39:12:59:8f:22: 2c:16:c2:fd:ae:11:75:96:f8:a2:0c:54:08:a2:c9: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:BE:80:E9:9B:E9:01:71:CC:68:71:FE:02:9A:B4:5A:77:F3:5E X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:44:83:79:62:8c:31:c3:9a:6b:8b:48:fd:32:2b:3f:a3:aa: 69:ee:c8:48:35:a5:c7:38:f3:77:95:7c:06:28:51:3a:9b:83: 94:50:77:6f:ab:c5:7d:4f:ad:cf:82:3f:18:7b:3a:f5:a7:4a: e4:fd:aa:93:04:3f:65:56:5c:ad:29:8b:38:35:d8:7f:6c:42: 31:6a:af:b1:04:d6:d7:b8:ee:98:91:c6:8c:b0:af:7a:38:42: 43:0a:d1:a0:cb:fe:73:50:48:1d:94:4f:9b:a0:f1:e8:bd:74: 60:23:5e:6e:63:38:8f:f0:32:11:d6:5d:13:0b:d0:20:40:38: 36:83:1a:62:ca:e5:fb:b6:98:2e:83:8a:5d:4f:63:6b:fa:f8: d2:d7:9d:16:01:5e:95:e4:9d:f1:a8:c0:b1:49:ef:c5:88:9d: 4a:9b:1f:06:6c:fa:cf:4f:d6:b8:ae:5b:b9:c8:bf:da:71:7b: a2:fb:24:77:aa:21:56:f6:57:80:fa:49:b7:af:c1:b9:bc:da: 4e:ed:47:9f:35:a8:67:08:a9:24:b0:82:6a:3b:14:3d:98:54: 4c:a1:c4:c2:23:b3:6d:58:47:ef:87:90:f7:1e:1f:46:03:b5: 42:8d:67:34:15:27:2a:a5:49:19:36:68:b2:c8:dc:6e:26:9a: e5:78:5d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+FMU6dW2aDeziLGKHKlGGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNzIxMTUwMDI4WhcNMjYwNzIyMTUwMDI4WjAzMTEwLwYDVQQD EygzMzllYmU4MGU5OWJlOTAxNzFjYzY4NzFmZTAyOWFiNDVhNzdmMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8vlmtnAbLDL5KBhRqZSZjm5wVOX V1Qw2SWGORKMNc2Lo70MZQLhH0qz3sLcCD32HOLT0v1IBWpj1Orw8YiAFeZ6fMVe owX1FsZ2/xskhw9ceZQdU/zwgKhOHZOOn50EB7zV52VQ7xk5iqTvExnhPDLeAuSZ yLDN9G6x9diNnI+wTh7jUcyJbrAW+yuTmqnmJuEXQKCfXep2oKY+UzoI8/xIWDIM V9+lezFSXFUpup/T/yx+gg8XqVPMoEaM1q1bXHaJa5Jz5mtkos9zPPo7/AUXYdkN CA78mVXvaJfHPaXEVppBXn8IORFrORJZjyIsFsL9rhF1lviiDFQIosn33wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOevoDpm+kBccxocf4CmrRad/NeMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0SDeWKM McOaa4tI/TIrP6Oqae7ISDWlxzjzd5V8BihROpuDlFB3b6vFfU+tz4I/GHs69adK 5P2qkwQ/ZVZcrSmLODXYf2xCMWqvsQTW17jumJHGjLCvejhCQwrRoMv+c1BIHZRP m6Dx6L10YCNebmM4j/AyEdZdEwvQIEA4NoMaYsrl+7aYLoOKXU9ja/r40tedFgFe leSd8ajAsUnvxYidSpsfBmz6z0/WuK5buci/2nF7ovskd6ohVvZXgPpJt6/Bubza Tu1HnzWoZwipJLCCajsUPZhUTKHEwiOzbVhH74eQ9x4fRgO1Qo1nNBUnKqVJGTZo ssjcbiaa5XhdaQ== -----END CERTIFICATE-----Generated at Tue Jul 21 21:16:50 2026 by rpki-client