$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json) Hash identifier: tJenOil3n8sHo1ur4vggELm3ukm6GJpJULzPKxlmjf4= Subject key identifier: 0A:81:50:EB:E8:F1:C8:59:19:9F:4F:36:5B:3D:ED:D7:5E:B2:E1:CE Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019FF610985764DDE89514CE07EB3F597646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft Manifest number: 0F40 Signing time: Wed 12 Aug 2026 13:01:50 +0000 Manifest this update: Wed 12 Aug 2026 13:01:50 +0000 Manifest next update: Thu 13 Aug 2026 13:01:50 +0000 Files and hashes: 1: 6r51rXoAPdmeC4K_yqp03Vb9g2s.roa (hash: RjWH0Hn9t48ZQGZWWRbFWYn9A7hmaM+wOLDLBMuGRRM=) 2: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (hash: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE=) 3: JIYMhbkOeO0pSNEOVGJBAbuW6Z4.roa (hash: GY8WDYpP9OTbPtH0RoRmqRWgz/M7p/6mNp2SWNBriZw=) 4: Rvm5rSSeIZS_AAhhScN4O4hKgEc.roa (hash: 5B1/cH7ZyFaYXNObYZVOWqpCnjLnry0zv0tSLtmdFIQ=) 5: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: /t+XI8OeEwXlBKe3qLFSXv38FeeUU/obFiVQaUQe6Ls=) 6: ezdEdcWRJCsgcDn_h_vHY5ql2OA.roa (hash: 62UG+xnKYTXQWzqTXe9v4fS1uJsLYXFYJa2n8Hu7umU=) 7: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (hash: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA=) 8: lIdtUehaGCJPCuTw8q6Ms9KSHtA.roa (hash: G3jTm9EGu0sPhX18qNKUm9+l3y1AFX35FfUBguFPA5Q=) 9: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (hash: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI=) 10: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (hash: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4=) 11: uVcuCHAgJMvLilrNVzFPzeXMYK4.roa (hash: 2E2U/fKjjkBxH4j8wm0zVVc215zNEeJmiD5ZpLV3U4s=) 12: vsCZ2TBkaoNhvlC0arKZFM8P5mY.roa (hash: zCBUM9PNE9L017aRi2l6ubnhCBO8JS5nhLKiRqWwM3Q=) 13: xpt0HIVNnP6wwzCkcZxkEEiEL1E.roa (hash: tAiBXx46rm8ar35MpM6gRUaZTr8igFfjS9OcQ5DIxV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f6:10:98:57:64:dd:e8:95:14:ce:07:eb:3f:59:76:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Aug 12 13:01:50 2026 GMT Not After : Aug 13 13:01:50 2026 GMT Subject: CN=0a8150ebe8f1c859199f4f365b3dedd75eb2e1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:04:6b:84:3c:fb:d7:65:60:db:be:ec:7f: 15:21:f2:4f:de:1a:b8:18:d0:cf:f9:13:60:63:ab: 2c:45:35:34:51:f0:a5:cc:fa:63:c7:f6:ce:2e:fe: b4:0c:04:28:d5:a7:99:73:43:94:41:b2:a5:93:79: 80:c4:2c:06:07:e5:b0:be:ea:ea:c3:75:be:16:a0: fc:ff:df:70:1a:f4:8b:00:c0:ea:0a:a0:3b:88:87: 6b:b1:94:c3:2c:2b:00:c4:7b:50:ab:25:3e:63:e2: 33:ab:ac:dc:39:78:4b:18:c5:d4:e4:a8:47:ab:c9: 3c:24:b7:f2:69:05:49:b2:c8:48:08:fb:71:8c:37: d6:27:86:d0:73:de:2e:f0:ab:64:a6:89:9a:d5:eb: 7b:aa:6a:73:9b:0e:93:09:44:0b:f1:25:e1:90:7f: 38:9c:bd:f4:3b:a7:55:58:43:02:d9:21:06:64:51: 25:1c:61:07:95:7c:12:cf:8b:1b:67:14:33:a3:8f: 6d:aa:de:b8:3a:31:b8:a2:35:c7:a0:90:80:ba:53: 87:8d:61:d7:14:06:06:74:96:4f:c2:bc:48:b0:19: 94:8e:67:95:21:bc:50:1a:e3:f6:f0:37:af:b1:e9: 80:c9:c6:ef:c8:41:d6:99:f2:6d:42:03:b9:29:db: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:81:50:EB:E8:F1:C8:59:19:9F:4F:36:5B:3D:ED:D7:5E:B2:E1:CE X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:80:12:7a:10:e1:c8:49:96:9e:96:c2:c6:ba:66:ab:2b:1d: ff:f9:69:45:74:7a:6c:b1:2f:6d:47:58:07:7f:e3:2b:5a:77: d9:a1:ef:23:84:fe:60:7b:fe:d5:85:98:68:15:77:84:fd:84: 9d:dd:fd:be:85:91:ea:53:a4:b6:62:9d:bc:69:ec:3e:ae:e6: 93:0c:ad:fa:d8:4c:69:30:fd:08:95:33:54:5d:1c:45:3c:a7: 11:a1:b2:ac:f5:9c:f9:ab:3b:2f:cf:90:c1:00:30:6a:ff:3a: a8:70:7e:9d:f4:d4:d3:06:31:f7:c3:d5:5d:d0:65:d7:ca:dd: 67:8c:80:a0:3f:9c:5a:27:9d:a8:95:fe:95:db:9c:f9:33:2e: 63:99:3e:38:af:09:87:0a:32:7c:e4:bb:8c:15:7e:26:78:47: 23:5a:82:51:a8:df:e6:7f:94:e9:aa:64:76:f0:d8:a6:7e:07: bf:a9:3f:54:90:6e:e2:18:f2:6b:c1:18:82:5c:33:85:7b:d0: 88:71:b1:48:fa:52:d3:f9:bc:c7:01:09:83:8b:66:7b:44:f9: 59:98:25:a7:af:34:04:b1:6d:48:7f:62:da:13:36:14:17:cd: 70:4d:e1:43:f9:6c:8c:3e:5b:6b:5e:f2:ea:8b:0f:26:7b:3b: 28:62:20:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/2EJhXZN3olRTOB+s/WXZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwODEyMTMwMTUwWhcNMjYwODEzMTMwMTUwWjAzMTEwLwYDVQQD EygwYTgxNTBlYmU4ZjFjODU5MTk5ZjRmMzY1YjNkZWRkNzVlYjJlMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ScEa4Q8+9dlYNu+7H8VIfJP3hq4 GNDP+RNgY6ssRTU0UfClzPpjx/bOLv60DAQo1aeZc0OUQbKlk3mAxCwGB+Wwvurq w3W+FqD8/99wGvSLAMDqCqA7iIdrsZTDLCsAxHtQqyU+Y+Izq6zcOXhLGMXU5KhH q8k8JLfyaQVJsshICPtxjDfWJ4bQc94u8Ktkpoma1et7qmpzmw6TCUQL8SXhkH84 nL30O6dVWEMC2SEGZFElHGEHlXwSz4sbZxQzo49tqt64OjG4ojXHoJCAulOHjWHX FAYGdJZPwrxIsBmUjmeVIbxQGuP28DevsemAycbvyEHWmfJtQgO5KdvPOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqBUOvo8chZGZ9PNls97ddesuHOMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIASehDh yEmWnpbCxrpmqysd//lpRXR6bLEvbUdYB3/jK1p32aHvI4T+YHv+1YWYaBV3hP2E nd39voWR6lOktmKdvGnsPq7mkwyt+thMaTD9CJUzVF0cRTynEaGyrPWc+as7L8+Q wQAwav86qHB+nfTU0wYx98PVXdBl18rdZ4yAoD+cWiedqJX+lduc+TMuY5k+OK8J hwoyfOS7jBV+JnhHI1qCUajf5n+U6apkdvDYpn4Hv6k/VJBu4hjya8EYglwzhXvQ iHGxSPpS0/m8xwEJg4tme0T5WZglp680BLFtSH9i2hM2FBfNcE3hQ/lsjD5ba17y 6osPJns7KGIgdw== -----END CERTIFICATE-----Generated at Wed Aug 12 15:36:17 2026 by rpki-client