$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json) Hash identifier: szvira/z+PoUTjVkwXomcqSfMBLxxoy5wZ6ODZWThsQ= Subject key identifier: 08:98:49:F4:63:C6:C5:DE:CC:BA:38:BD:87:55:33:73:81:73:EE:03 Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Certificate serial: 019FA0E045D18CF439A4DF1D295BDC09F293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft Manifest number: 19D3 Signing time: Mon 27 Jul 2026 00:01:20 +0000 Manifest this update: Mon 27 Jul 2026 00:01:20 +0000 Manifest next update: Tue 28 Jul 2026 00:01:20 +0000 Files and hashes: 1: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=) 2: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=) 3: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=) 4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: D+xNCF+RnQhe3DU2pV42nUIF0P3CEYnMJ5jdZI1r4yA=) 5: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=) 6: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=) 7: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=) 8: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=) 9: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=) 10: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:e0:45:d1:8c:f4:39:a4:df:1d:29:5b:dc:09:f2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97 Validity Not Before: Jul 27 00:01:20 2026 GMT Not After : Jul 28 00:01:20 2026 GMT Subject: CN=089849f463c6c5deccba38bd875533738173ee03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:e1:4d:4b:28:cb:a0:60:d8:61:c7:7d:5c: 60:69:a6:00:68:13:2d:19:02:4d:dd:9d:f6:fa:eb: 3a:84:3f:5c:97:c6:10:13:3e:e5:cb:c4:22:69:82: 5a:85:2f:d1:fd:fc:3f:24:ae:6d:07:44:80:6f:19: 26:e1:5e:31:42:7c:62:91:34:1e:d2:6d:00:00:47: 9a:21:1f:32:56:3b:b9:ce:fc:7c:d7:f5:02:ed:d7: 74:6d:67:b3:d2:31:82:ff:db:85:b8:9f:77:df:84: 0a:50:7a:61:58:82:09:40:ac:71:33:d8:7e:50:ae: 17:85:66:8c:9d:b3:16:3e:ec:f1:76:5c:52:ff:2c: b3:e7:22:10:0b:f7:2c:3e:98:b0:39:ff:33:81:c2: 44:30:f9:14:bf:de:72:71:36:0d:9b:f8:21:1e:71: b1:37:ec:1b:8e:f1:98:18:4d:28:e6:20:39:42:46: bf:2e:d7:0f:20:a4:4c:d7:90:40:2f:c3:7c:dc:12: a1:d1:6e:97:2d:23:fe:7f:8f:01:91:c5:06:08:ce: cb:1d:cf:6c:ca:36:99:f7:23:e2:7c:bf:e8:05:bf: f4:32:35:bc:d2:6c:e2:e5:61:aa:62:a3:3d:e0:94: 23:42:30:00:6a:fc:65:bb:c6:be:0b:4a:06:58:60: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:49:F4:63:C6:C5:DE:CC:BA:38:BD:87:55:33:73:81:73:EE:03 X509v3 Authority Key Identifier: keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0a:e1:ba:cc:ab:9a:a6:5c:0e:2f:57:79:84:8b:01:7f:f5: 05:06:1b:9d:a6:3f:48:4b:73:dd:26:c8:98:ff:34:9f:66:8a: d1:ef:81:2c:ad:87:70:71:34:ba:fe:57:0c:2c:f1:a8:df:69: 02:50:32:02:f1:73:c8:54:72:79:5f:4c:f5:4f:4d:86:12:18: 86:c9:ac:dd:d7:45:a2:db:b2:76:bc:e9:31:4d:0d:b5:74:1c: 39:72:55:aa:99:62:06:3c:2e:fb:60:9e:58:4a:39:d5:f0:5b: 41:a6:f3:99:ea:0a:8b:8d:62:78:72:3e:b3:39:b5:ef:41:b3: 01:c3:3f:d0:c0:dc:0a:48:e7:bc:09:47:48:ae:1f:53:7e:89: 14:10:7c:f6:d2:32:ed:49:64:b0:8b:17:3f:c5:96:a2:a5:18: ea:7a:1c:b9:d1:ae:c4:be:4b:75:57:ad:11:df:25:2b:70:11: 45:55:fd:0b:1d:0c:d2:c4:a1:88:a3:ec:7a:72:da:3b:13:11: 91:2d:58:14:89:1b:db:c1:11:14:e4:9b:1e:2d:f6:79:1a:cf: 43:69:41:9b:ce:fd:0b:ab:a6:78:27:34:a1:7f:0f:24:e2:7f: c6:2d:a2:72:9c:fd:20:b5:fa:6a:f2:ee:21:c4:63:8f:06:fe: 91:87:97:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+g4EXRjPQ5pN8dKVvcCfKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx MDZkOTcwHhcNMjYwNzI3MDAwMTIwWhcNMjYwNzI4MDAwMTIwWjAzMTEwLwYDVQQD EygwODk4NDlmNDYzYzZjNWRlY2NiYTM4YmQ4NzU1MzM3MzgxNzNlZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rvhTUsoy6Bg2GHHfVxgaaYAaBMt GQJN3Z32+us6hD9cl8YQEz7ly8QiaYJahS/R/fw/JK5tB0SAbxkm4V4xQnxikTQe 0m0AAEeaIR8yVju5zvx81/UC7dd0bWez0jGC/9uFuJ9334QKUHphWIIJQKxxM9h+ UK4XhWaMnbMWPuzxdlxS/yyz5yIQC/csPpiwOf8zgcJEMPkUv95ycTYNm/ghHnGx N+wbjvGYGE0o5iA5Qka/LtcPIKRM15BAL8N83BKh0W6XLSP+f48BkcUGCM7LHc9s yjaZ9yPifL/oBb/0MjW80mzi5WGqYqM94JQjQjAAavxlu8a+C0oGWGAnWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiYSfRjxsXezLo4vYdVM3OBc+4DMB8GA1UdIwQY MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1 LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgrhusyr mqZcDi9XeYSLAX/1BQYbnaY/SEtz3SbImP80n2aK0e+BLK2HcHE0uv5XDCzxqN9p AlAyAvFzyFRyeV9M9U9NhhIYhsms3ddFotuydrzpMU0NtXQcOXJVqpliBjwu+2Ce WEo51fBbQabzmeoKi41ieHI+szm170GzAcM/0MDcCkjnvAlHSK4fU36JFBB89tIy 7UlksIsXP8WWoqUY6nocudGuxL5LdVetEd8lK3ARRVX9Cx0M0sShiKPsenLaOxMR kS1YFIkb28ERFOSbHi32eRrPQ2lBm879C6umeCc0oX8PJOJ/xi2icpz9ILX6avLu IcRjjwb+kYeXZw== -----END CERTIFICATE-----Generated at Mon Jul 27 01:57:32 2026 by rpki-client