$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: kl8nnQqCkKVtz6aSI7rIjb9Nr4hvnP0z8akk3Q5CAXk= Subject key identifier: 8D:46:80:A4:5F:06:DA:76:E4:8D:94:BE:3C:42:BA:28:2A:AF:54:BF Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019E9B4DE3501C78562DEA59A3F385FA2239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 196B Signing time: Sat 06 Jun 2026 05:00:33 +0000 Manifest this update: Sat 06 Jun 2026 05:00:33 +0000 Manifest next update: Sun 07 Jun 2026 05:00:33 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: oNuP9BeRGcC4bJPy6amiMqrfv6e31xEp3EzwoFp4f0s=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9b:4d:e3:50:1c:78:56:2d:ea:59:a3:f3:85:fa:22:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jun 6 05:00:33 2026 GMT Not After : Jun 7 05:00:33 2026 GMT Subject: CN=8d4680a45f06da76e48d94be3c42ba282aaf54bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:bb:32:6f:17:0e:57:a4:9a:db:84:c7:22: 6f:91:0d:95:d0:ff:94:46:01:39:38:27:5d:c4:a8: 53:2f:ea:77:e4:37:05:59:49:75:ae:02:91:d4:a3: 49:42:ab:f7:c3:ca:4f:46:ec:e5:0b:8c:ed:ae:b5: 3d:06:21:0d:ca:94:6b:fb:57:c6:81:b5:e9:75:b1: 0f:77:69:37:53:41:57:18:bb:25:24:81:3f:09:9d: c7:50:56:ea:64:c2:d9:62:42:24:8e:01:0b:e6:17: 9f:32:b5:5e:5d:5e:31:7b:1f:67:31:c5:58:25:0a: c1:ee:f2:64:53:3b:fb:c0:19:ab:53:71:1c:6c:07: b4:a4:32:01:b5:4d:cd:15:f3:e2:23:aa:ae:0e:29: cf:82:29:9f:99:ed:c0:a2:c1:d7:fb:16:da:d1:cf: f9:9f:e9:c6:1f:63:8e:e2:15:5e:ca:c3:38:a8:38: 52:2e:93:df:a0:08:fc:42:4a:cd:da:5f:12:8a:9a: a5:ee:ad:9e:06:10:35:d5:93:5d:30:5e:1d:29:c0: ee:03:b3:5d:1f:98:a0:4d:c5:a7:21:70:a0:0a:08: 39:68:2e:1f:3a:cb:f5:fd:53:7d:9a:41:ee:62:2f: ef:4b:e9:d5:93:5f:29:f2:34:df:4e:f4:0f:35:a8: 42:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:80:A4:5F:06:DA:76:E4:8D:94:BE:3C:42:BA:28:2A:AF:54:BF X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:fb:3c:18:a5:ab:e4:5d:1f:18:db:85:71:27:f1:c9:92:c1: 10:d3:7e:4f:64:bd:0a:94:e7:4f:2c:a1:35:65:91:df:15:6d: a9:e4:ab:2f:5f:01:7e:3d:78:23:5e:e4:d5:19:31:9c:54:37: d5:8e:36:4c:85:4a:3e:35:b8:05:6e:22:c7:fa:5d:45:82:eb: 80:66:1d:cb:54:b1:c5:3f:30:2b:15:70:e0:9c:4d:cf:51:fd: 62:32:5f:c1:5a:8a:40:85:c1:6b:5b:01:7b:60:e2:70:75:5a: ca:dc:80:39:41:9b:d4:35:24:85:39:70:3c:5e:9c:aa:6f:fb: 0c:69:e7:71:2d:bc:ab:60:0c:c8:80:56:96:9a:14:e2:8e:d7: 1c:cd:f0:1a:21:af:9a:cb:fc:57:dc:a4:02:a0:05:78:ce:bf: e6:f8:fc:9d:65:1f:1b:ee:3f:a1:17:4a:03:60:0e:3d:79:b2: 5e:89:c0:a2:e2:57:b8:d5:01:76:2e:ff:c0:1a:17:62:44:01: 64:8b:13:e1:52:85:4a:f2:2a:35:5c:0b:0e:06:79:e6:70:02: 00:f2:3b:e3:c0:09:3a:af:b8:d7:23:b3:f4:de:cd:75:4a:05: a4:be:0a:45:d4:c9:f9:15:1d:78:b2:1e:15:97:86:dd:15:c3: a5:51:ff:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6bTeNQHHhWLepZo/OF+iI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNjA2MDUwMDMzWhcNMjYwNjA3MDUwMDMzWjAzMTEwLwYDVQQD Eyg4ZDQ2ODBhNDVmMDZkYTc2ZTQ4ZDk0YmUzYzQyYmEyODJhYWY1NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm67Mm8XDlekmtuExyJvkQ2V0P+U RgE5OCddxKhTL+p35DcFWUl1rgKR1KNJQqv3w8pPRuzlC4ztrrU9BiENypRr+1fG gbXpdbEPd2k3U0FXGLslJIE/CZ3HUFbqZMLZYkIkjgEL5hefMrVeXV4xex9nMcVY JQrB7vJkUzv7wBmrU3EcbAe0pDIBtU3NFfPiI6quDinPgimfme3AosHX+xba0c/5 n+nGH2OO4hVeysM4qDhSLpPfoAj8QkrN2l8Sipql7q2eBhA11ZNdMF4dKcDuA7Nd H5igTcWnIXCgCgg5aC4fOsv1/VN9mkHuYi/vS+nVk18p8jTfTvQPNahCbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1GgKRfBtp25I2UvjxCuigqr1S/MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfs8GKWr 5F0fGNuFcSfxyZLBENN+T2S9CpTnTyyhNWWR3xVtqeSrL18Bfj14I17k1RkxnFQ3 1Y42TIVKPjW4BW4ix/pdRYLrgGYdy1SxxT8wKxVw4JxNz1H9YjJfwVqKQIXBa1sB e2DicHVaytyAOUGb1DUkhTlwPF6cqm/7DGnncS28q2AMyIBWlpoU4o7XHM3wGiGv msv8V9ykAqAFeM6/5vj8nWUfG+4/oRdKA2AOPXmyXonAouJXuNUBdi7/wBoXYkQB ZIsT4VKFSvIqNVwLDgZ55nACAPI748AJOq+41yOz9N7NdUoFpL4KRdTJ+RUdeLIe FZeG3RXDpVH/Dg== -----END CERTIFICATE-----Generated at Sat Jun 6 12:09:11 2026 by rpki-client