$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: TxsJEpDVuYk0txsSt0v21bg/f9ROVOG84WsKjHkB1x4= Subject key identifier: 31:A1:C0:EA:20:DC:E5:90:EB:E8:EB:D3:B5:85:62:E6:E0:89:2E:84 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 01A08B319B53F85ED790801F0B5D0ACB33A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 19B3 Signing time: Thu 10 Sep 2026 12:01:19 +0000 Manifest this update: Thu 10 Sep 2026 12:01:19 +0000 Manifest next update: Fri 11 Sep 2026 12:01:19 +0000 Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=) 2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=) 3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=) 4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: 4VX+O7EMVTC+dUEkxvhxeqhg/MN7bVjidWt5n1s+nN8=) 6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=) 7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=) 8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=) 9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=) 10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=) 11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:31:9b:53:f8:5e:d7:90:80:1f:0b:5d:0a:cb:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Sep 10 12:01:19 2026 GMT Not After : Sep 11 12:01:19 2026 GMT Subject: CN=31a1c0ea20dce590ebe8ebd3b58562e6e0892e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:b9:57:76:ec:66:99:7d:17:cc:b0:a5:ab: 21:e6:ac:63:57:02:99:79:9f:6e:b0:f8:d5:1c:aa: 48:3f:28:95:6f:cf:9c:8f:8b:3e:6d:3f:ef:61:a6: fd:c2:65:f5:1b:b2:17:cc:a9:15:92:68:d9:e5:43: 3a:7a:e6:6e:e2:75:6b:1d:e1:ea:74:99:79:92:f8: 30:26:a8:e3:b1:a7:41:1e:f8:f5:f1:27:29:aa:6f: f3:8f:c1:dc:eb:cb:22:a8:14:88:e3:50:b1:99:c1: 39:02:2f:f7:6f:e4:d4:bc:25:ea:10:b3:cd:48:a7: a2:6c:c2:8f:37:02:41:c8:eb:9d:c7:84:34:63:13: e2:69:77:db:e2:4f:a4:26:39:99:3a:ce:c3:c8:aa: e2:70:b7:19:7d:99:1b:b9:ec:e6:0d:61:73:a6:82: eb:d8:9a:dd:e5:80:36:40:5c:2b:ad:52:aa:61:fb: aa:f3:ba:78:05:8e:52:c8:52:7a:89:5c:fb:43:79: f3:a9:b4:5c:cf:7c:d4:0c:44:e9:fd:f3:07:7e:da: 40:05:46:35:fa:6c:a0:c5:5d:de:90:d7:79:12:67: 88:cc:20:aa:70:82:dc:53:0e:ac:79:5f:31:eb:d5: 92:a2:3a:d3:12:58:bb:cf:78:5e:11:47:c7:6f:f6: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:C0:EA:20:DC:E5:90:EB:E8:EB:D3:B5:85:62:E6:E0:89:2E:84 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d5:f4:cc:00:6f:fe:54:d2:d9:bc:a9:3c:ff:6d:e4:1a:b8: ae:51:9d:a7:64:af:be:c5:b4:ad:d5:cd:f8:e4:03:42:27:44: 24:59:0e:67:21:78:a7:7a:02:3a:50:a5:06:0a:92:91:0e:6e: 47:2e:cf:89:05:bc:a0:e0:a0:a2:fc:51:28:2e:1d:30:97:99: 84:98:96:6e:84:d8:42:86:d9:84:60:8e:c9:00:61:cb:d0:b0: 7a:f1:35:f3:7e:1c:95:b5:fd:fe:d5:27:b8:71:32:99:f6:fe: 6c:21:0c:6b:e0:16:0e:20:6e:b7:52:b9:a2:71:19:27:64:d4: f1:54:14:a3:e4:aa:68:f4:8b:0a:d5:1f:f8:c2:6f:f0:1d:76: f8:19:ea:6b:8c:57:40:be:28:86:2b:7b:4b:e9:bd:16:8f:c1: 95:ed:b4:f8:38:9a:7b:4b:4b:31:84:e2:9a:ab:14:cb:1a:cb: e5:01:1d:6a:15:cb:99:ef:04:37:3f:a7:f9:97:9a:17:cf:d8: cc:da:f0:fc:60:d3:d0:a2:dc:c1:2b:38:57:9f:37:c3:8f:0d: 89:f3:7b:0a:0e:57:3b:6f:86:cd:34:ef:98:55:0f:70:52:93: 99:57:e4:4d:89:c4:45:06:b3:93:43:9d:8d:f9:db:74:8d:38: 1c:63:be:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLMZtT+F7XkIAfC10KyzOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwOTEwMTIwMTE5WhcNMjYwOTExMTIwMTE5WjAzMTEwLwYDVQQD EygzMWExYzBlYTIwZGNlNTkwZWJlOGViZDNiNTg1NjJlNmUwODkyZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBC5V3bsZpl9F8ywpash5qxjVwKZ eZ9usPjVHKpIPyiVb8+cj4s+bT/vYab9wmX1G7IXzKkVkmjZ5UM6euZu4nVrHeHq dJl5kvgwJqjjsadBHvj18Scpqm/zj8Hc68siqBSI41CxmcE5Ai/3b+TUvCXqELPN SKeibMKPNwJByOudx4Q0YxPiaXfb4k+kJjmZOs7DyKricLcZfZkbuezmDWFzpoLr 2Jrd5YA2QFwrrVKqYfuq87p4BY5SyFJ6iVz7Q3nzqbRcz3zUDETp/fMHftpABUY1 +mygxV3ekNd5EmeIzCCqcILcUw6seV8x69WSojrTEli7z3heEUfHb/ZApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGhwOog3OWQ6+jr07WFYubgiS6EMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9X0zABv /lTS2bypPP9t5Bq4rlGdp2SvvsW0rdXN+OQDQidEJFkOZyF4p3oCOlClBgqSkQ5u Ry7PiQW8oOCgovxRKC4dMJeZhJiWboTYQobZhGCOyQBhy9CwevE1834clbX9/tUn uHEymfb+bCEMa+AWDiBut1K5onEZJ2TU8VQUo+SqaPSLCtUf+MJv8B12+Bnqa4xX QL4ohit7S+m9Fo/Ble20+Diae0tLMYTimqsUyxrL5QEdahXLme8ENz+n+ZeaF8/Y zNrw/GDT0KLcwSs4V583w48NifN7Cg5XO2+GzTTvmFUPcFKTmVfkTYnERQazk0Od jfnbdI04HGO+2g== -----END CERTIFICATE-----Generated at Thu Sep 10 19:05:10 2026 by rpki-client