$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: jlcfUa9FlJgAN6stEhsZleKXHLjOFeMxVUrB6sk5q1Y= Subject key identifier: CA:1B:70:3E:5D:A5:24:EA:D1:D9:9B:8E:4C:C2:E4:C4:E1:82:59:D7 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019DD01A2E1F3469BBE0A5A940B8C4F3D9BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 1849 Signing time: Mon 27 Apr 2026 18:01:09 +0000 Manifest this update: Mon 27 Apr 2026 18:01:09 +0000 Manifest next update: Tue 28 Apr 2026 18:01:09 +0000 Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=) 2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=) 3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=) 4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: j2/WdyvpL+EkUwv0cVzMNbJP0g9dV3TBiO0RN6eRq3I=) 6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=) 7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=) 8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=) 9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=) 10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=) 11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:1a:2e:1f:34:69:bb:e0:a5:a9:40:b8:c4:f3:d9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Apr 27 18:01:09 2026 GMT Not After : Apr 28 18:01:09 2026 GMT Subject: CN=ca1b703e5da524ead1d99b8e4cc2e4c4e18259d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:74:a0:96:05:1a:19:a3:fc:a0:7f:3b:17: 47:ec:81:51:78:38:54:05:e6:86:8a:ef:65:65:9e: 62:df:a9:8a:e5:5a:d1:17:16:66:1d:c6:df:2a:eb: d6:dc:24:60:f7:d2:0d:42:a1:10:12:85:8b:0e:fb: 96:fd:b0:4e:8a:14:a7:63:b6:cc:07:bb:86:d7:70: 0f:1e:8e:c6:9c:70:e2:ff:12:53:99:42:c3:d8:5e: fd:70:77:a5:fd:2d:60:38:e6:c1:d6:9a:ab:b0:b7: b7:20:6a:ae:2d:c4:bb:66:17:f5:73:e2:a2:02:f0: 31:7c:57:74:a6:04:61:61:e4:1e:b0:19:f1:39:11: 63:9d:a7:c3:78:73:61:76:ca:a2:3e:30:5d:19:f9: 31:c4:a3:01:23:49:5b:2f:f0:90:39:d0:8c:94:ef: 5c:8f:c3:ae:7f:2a:60:e1:66:94:cd:ff:08:80:a0: 6b:2d:11:aa:48:ce:42:2c:22:ee:d1:d6:d7:55:b3: 99:19:0d:31:5f:d6:47:2d:7d:26:3c:4a:57:74:c8: b7:6d:cb:8c:d9:a8:04:21:e1:3c:c4:33:23:f6:82: 88:d3:0e:ac:16:31:ef:62:a5:8b:4a:a8:93:1f:4c: 92:3b:d8:e0:f6:57:1d:1d:f1:53:d2:40:0f:5f:3b: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1B:70:3E:5D:A5:24:EA:D1:D9:9B:8E:4C:C2:E4:C4:E1:82:59:D7 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:5b:0e:e2:38:b4:fe:e6:c5:f4:f2:da:07:10:1a:74:76:e1: 98:25:b6:61:ec:0c:58:59:93:08:9d:c2:47:be:7f:28:b8:2e: ef:02:a7:3a:1a:c5:23:80:52:46:89:75:ec:ff:4c:57:30:2a: 13:29:60:03:a2:0e:2c:c0:d7:36:bd:0e:c1:f7:69:03:42:e9: f9:ba:f0:57:c2:59:e4:4c:cb:7d:83:bc:59:d3:ed:fe:3c:cc: 1b:c5:e3:10:f7:32:18:df:a9:7e:bb:ac:52:c5:ad:66:3b:58: 0f:c0:a8:08:00:2e:16:d5:d2:42:f6:78:83:11:21:80:11:22: 6f:7c:da:f1:9a:f7:43:51:18:83:ca:cf:49:91:df:d0:5a:7f: d5:76:0b:08:96:d5:9e:44:47:11:a4:aa:f3:19:7d:c2:e5:f8: 0a:32:0b:56:bc:6b:00:59:66:8f:5a:fc:62:70:94:21:71:fc: 53:86:d3:3b:65:71:40:6e:77:1b:86:22:56:eb:a3:4b:05:42: 34:45:41:41:79:d4:72:dd:f2:6e:1d:ea:c4:e7:25:bb:fe:8d: 99:06:f5:1c:2b:17:fc:86:d2:8e:f0:46:84:57:cd:01:6e:0e: da:22:7b:97:d2:c7:8c:99:fe:7e:58:48:c1:d6:77:89:61:1b: 57:ef:30:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3QGi4fNGm74KWpQLjE89m7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwNDI3MTgwMTA5WhcNMjYwNDI4MTgwMTA5WjAzMTEwLwYDVQQD EyhjYTFiNzAzZTVkYTUyNGVhZDFkOTliOGU0Y2MyZTRjNGUxODI1OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJ0oJYFGhmj/KB/OxdH7IFReDhU BeaGiu9lZZ5i36mK5VrRFxZmHcbfKuvW3CRg99INQqEQEoWLDvuW/bBOihSnY7bM B7uG13APHo7GnHDi/xJTmULD2F79cHel/S1gOObB1pqrsLe3IGquLcS7Zhf1c+Ki AvAxfFd0pgRhYeQesBnxORFjnafDeHNhdsqiPjBdGfkxxKMBI0lbL/CQOdCMlO9c j8Oufypg4WaUzf8IgKBrLRGqSM5CLCLu0dbXVbOZGQ0xX9ZHLX0mPEpXdMi3bcuM 2agEIeE8xDMj9oKI0w6sFjHvYqWLSqiTH0ySO9jg9lcdHfFT0kAPXzvuIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMobcD5dpSTq0dmbjkzC5MThglnXMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0FsO4ji0 /ubF9PLaBxAadHbhmCW2YewMWFmTCJ3CR75/KLgu7wKnOhrFI4BSRol17P9MVzAq EylgA6IOLMDXNr0OwfdpA0Lp+brwV8JZ5EzLfYO8WdPt/jzMG8XjEPcyGN+pfrus UsWtZjtYD8CoCAAuFtXSQvZ4gxEhgBEib3za8Zr3Q1EYg8rPSZHf0Fp/1XYLCJbV nkRHEaSq8xl9wuX4CjILVrxrAFlmj1r8YnCUIXH8U4bTO2VxQG53G4YiVuujSwVC NEVBQXnUct3ybh3qxOclu/6NmQb1HCsX/IbSjvBGhFfNAW4O2iJ7l9LHjJn+flhI wdZ3iWEbV+8w9Q== -----END CERTIFICATE-----Generated at Mon Apr 27 20:13:24 2026 by rpki-client