$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft File: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json) Hash identifier: 13BeTZ3FDj6sKaaUUYarJTX0k4zCM3izRMlkelG9W9o= Subject key identifier: B4:4C:EC:A0:51:FA:B8:EF:59:FC:1C:EC:D6:9B:BC:0E:BF:2F:AE:90 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019DAD8E152F8F447F1B10C32F58AE78060B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft Manifest number: 0AF1 Signing time: Tue 21 Apr 2026 01:01:03 +0000 Manifest this update: Tue 21 Apr 2026 01:01:03 +0000 Manifest next update: Wed 22 Apr 2026 01:01:03 +0000 Files and hashes: 1: 07FQcpcOx9dIkPfjKLtsF7CxIoA.roa (hash: 06X1mFh23OQI27UHgwFuA+R/te6ohldQDL+yi481fPk=) 2: 1abhrlOuSKnZ708WnL5sdHK1Ie0.roa (hash: /NbpRcPbPMObQ6oF2HglXE8t2NqbPyxSqMDeYEigMy8=) 3: 2LbAvbtaLL4wP6xQBwD33ZwnMco.roa (hash: lDJw37fnJ9K4oAxfTng5pKuQVfPwI4nhJ520WhzMyQE=) 4: 2ersDEYbQtg4l5m9V8r0SieR8Vo.roa (hash: aUuOBsE01fiLcyj9TfP/Qu1NPe+7XiHnxfWsVnOH0VI=) 5: 35g8C0Bqx69WCLMEI0d4eZzXow8.roa (hash: aKHlWChv0cCXRM+u3C5OOeU1egqlZV55eA/cfuE3sp4=) 6: 3FZlUz7uoucCzaZmPG0U58fB6SA.roa (hash: LGcv5ZIogTyxDleJRKQb2SPMT566dCH0f2NqyWLWYyA=) 7: 4RzlaE4IATIyocr-VUzpEUSO7Mo.roa (hash: zDqUG2mBRxI6CuLzFrAEFvPmBc+dGZskWKeVJphaxsI=) 8: 635uudG8DHHGUC5dHB75yyM9dXM.roa (hash: my4GmBqnhavathKgPuGRu/aCUoMVTtb5pDpy5TEfiRo=) 9: FH_80jMPKL9spaQFMKL0FymFhtc.roa (hash: oUYz8P6/ozfIRV+WS+r8nJ+ZAnznPQME4aSk8skvvTg=) 10: OgghXDjyjDqnxRl611PNnUIg8gc.roa (hash: nx8X3I9R1T0jK3t8FirNFx0YohQgACVLB9CPv39jV04=) 11: Sk9ag2YHmKJcp4CwUZ7utaM8xmA.roa (hash: qh4mq4MdyV9B/rSa6KdwSUIcjfbHQUKuH4MZ7aEP/nU=) 12: T1QvCUExSo8qr1TiSPtj6C8JDfo.roa (hash: ddOyimVHprxiShYhUJs1GLZ9yZYCZEn6Fr22m9Sbc8U=) 13: Td6Q3B8QYWs6GUR_gp32a6eWHug.roa (hash: zBRaP9ZgkbMX6gd0XGzpaqMKhyZdrQKl0S84ZR9K3+0=) 14: UwVIBu2jxBDiFJTytgK8RUzy-Cs.roa (hash: ltWrsmWOaH+qQhwZyDVBUFqGoWpky9At3HwYToazYgw=) 15: YIsKwwvCfYeQ3ro-L8t-CuRS2Qo.roa (hash: Az8B8niIcPnTkpmEOwRs6eOUmDJEyD6QYlEEdIYgVnw=) 16: YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa (hash: PWQfhcGH7jngcQ70GlQ11H+FIx0EvbMhWzfDH/DhN10=) 17: ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa (hash: 6J65b1+OVj9EmypCFNsDOLXw55bioisW0DUjoT1yQ8c=) 18: aYMmtg2F_--bVu8hSyKAFciGf7U.roa (hash: CxDcGIhoZfPolf9XmBJFl0rGdo9uyrgJav1ZUiVhwxo=) 19: b4p2jMta42mrYAQW2PDzY71BQxM.roa (hash: vig3XgpsHDlv1ClvCN6nBvia6IqVeDyFq+RR39uBNyk=) 20: ek0kAxmgD_bIdypuN8g651x-9uc.roa (hash: 19NypaHsjpb2/HsDFohPxp20XTcbs4VySqlMRe+Mr8o=) 21: hvdGPqGZACKBGf93rntej67lv54.roa (hash: Zz0VuDlVsJON1ndmUKaTXSvLDIjjSSZLp4ke0HjSjws=) 22: oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa (hash: GJ6aUk4H8magSU3n7bIt4f5oeneg+QR+DzjJ9j+ifeE=) 23: rkni80Or2w2QygXy0RTlNsvlL8E.roa (hash: gMQ3ViXeTKyCOOddnGlJIocGpXYE80FbVoVgkMfQtjU=) 24: tw-WBHaNJZuGE7q9LknpcfdIUzA.roa (hash: 4zJGXt4udsl6SmucJzDYHgeK3Njjb1y+erXlqa1Ud6M=) 25: vt0ElRQTTQDbtawurQTq5naKklI.roa (hash: sTZaSlh1WeFZN4xDhr5tgce7SkNVNhyZN7/S1+Uq2OY=) 26: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: vzYdBITZksCyP01IX2NiIpqj7l4RAGeJ6MyjQ46y/Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Apr 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ad:8e:15:2f:8f:44:7f:1b:10:c3:2f:58:ae:78:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Apr 21 01:01:03 2026 GMT Not After : Apr 22 01:01:03 2026 GMT Subject: CN=b44ceca051fab8ef59fc1cecd69bbc0ebf2fae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:5e:62:ca:10:eb:0f:dd:a2:d4:ca:b5:60: 2b:f6:05:5a:e1:59:6f:da:b9:4e:6a:a5:64:69:3d: 40:b8:89:3d:40:b2:ca:f8:d0:ac:19:57:c4:7e:31: 30:c5:ef:5b:b7:ac:b6:db:2a:61:25:e4:3c:7a:63: 64:dd:54:1d:73:19:d1:fa:7b:88:29:ce:18:a8:e5: 00:9f:85:65:ba:7e:ae:6f:83:94:2f:90:ca:2f:9a: 41:56:37:b5:8c:e8:46:0e:75:1e:b5:ba:ed:97:f2: 99:f4:bc:c9:98:18:40:7f:0c:ab:95:f1:a4:5b:aa: 9d:cc:24:1c:43:49:5f:33:4f:5a:3f:52:82:51:b5: 2d:68:be:0b:90:93:d1:43:c6:93:4f:5b:3c:76:cc: 16:c9:e1:af:10:fb:54:1c:e6:8b:9e:56:9e:89:28: df:33:68:64:20:81:3a:40:05:e7:01:19:55:31:e2: df:40:e8:45:50:11:27:6d:0a:d4:7d:38:ee:7f:97: 90:69:f3:99:d9:fe:a2:3d:bf:3b:f7:d8:6d:56:7b: 4f:c0:c1:9b:3a:62:0d:fd:a3:23:ea:62:0b:2e:73: ec:b1:72:12:fc:66:0e:a0:bd:8d:1c:53:01:61:d3: 2f:a6:17:c2:df:52:9b:71:f4:f6:48:78:fa:61:56: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4C:EC:A0:51:FA:B8:EF:59:FC:1C:EC:D6:9B:BC:0E:BF:2F:AE:90 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:38:ea:8a:93:ac:44:79:70:75:aa:a9:95:33:7a:b0:9c:e3: fb:f9:b6:b4:8f:39:e7:25:cd:7b:a0:19:9a:22:b7:db:94:40: 3b:49:4b:67:1b:75:4c:69:38:b4:d3:8c:9f:c4:77:bc:f4:b7: 03:f7:07:72:00:c4:27:b0:70:8b:4c:cf:20:2f:50:5b:02:3f: ac:ee:3a:ce:f9:32:89:3b:72:49:e1:94:65:11:ab:41:8f:54: 02:98:d1:ea:d1:1a:a0:6f:91:ee:c1:c3:11:47:29:bd:f3:6d: 79:46:03:fd:12:9f:bf:55:93:65:03:21:c6:30:ec:f8:b8:f8: b0:59:fe:2c:79:7b:de:d7:43:a9:81:ad:30:f9:de:5c:f0:b5: 14:5d:80:78:7a:56:f6:aa:47:c7:50:50:a5:a3:02:57:de:fe: cb:2d:82:04:c8:f1:fc:85:40:aa:61:60:9f:25:0f:dd:b2:63: 56:50:f5:b5:94:9e:c7:2b:7f:9d:a7:d8:e9:0e:0f:3a:df:85: 3c:10:39:70:a0:c0:aa:50:24:e7:97:0e:69:cb:bf:04:e8:5b: e6:68:df:54:2c:2f:e4:62:cb:a7:82:a5:c8:f7:45:b0:6e:f3: f1:80:65:94:d9:3a:2a:24:cd:12:1d:d6:0b:d9:2b:8b:5b:5d: cf:3d:ea:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2tjhUvj0R/GxDDL1iueAYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwNDIxMDEwMTAzWhcNMjYwNDIyMDEwMTAzWjAzMTEwLwYDVQQD EyhiNDRjZWNhMDUxZmFiOGVmNTlmYzFjZWNkNjliYmMwZWJmMmZhZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrxeYsoQ6w/dotTKtWAr9gVa4Vlv 2rlOaqVkaT1AuIk9QLLK+NCsGVfEfjEwxe9bt6y22yphJeQ8emNk3VQdcxnR+nuI Kc4YqOUAn4Vlun6ub4OUL5DKL5pBVje1jOhGDnUetbrtl/KZ9LzJmBhAfwyrlfGk W6qdzCQcQ0lfM09aP1KCUbUtaL4LkJPRQ8aTT1s8dswWyeGvEPtUHOaLnlaeiSjf M2hkIIE6QAXnARlVMeLfQOhFUBEnbQrUfTjuf5eQafOZ2f6iPb8799htVntPwMGb OmIN/aMj6mILLnPssXIS/GYOoL2NHFMBYdMvphfC31KbcfT2SHj6YVZQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRM7KBR+rjvWfwc7NabvA6/L66QMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDjqipOs RHlwdaqplTN6sJzj+/m2tI855yXNe6AZmiK325RAO0lLZxt1TGk4tNOMn8R3vPS3 A/cHcgDEJ7Bwi0zPIC9QWwI/rO46zvkyiTtySeGUZRGrQY9UApjR6tEaoG+R7sHD EUcpvfNteUYD/RKfv1WTZQMhxjDs+Lj4sFn+LHl73tdDqYGtMPneXPC1FF2AeHpW 9qpHx1BQpaMCV97+yy2CBMjx/IVAqmFgnyUP3bJjVlD1tZSexyt/nafY6Q4POt+F PBA5cKDAqlAk55cOacu/BOhb5mjfVCwv5GLLp4KlyPdFsG7z8YBllNk6KiTNEh3W C9kri1tdzz3qOA== -----END CERTIFICATE-----Generated at Tue Apr 21 08:24:14 2026 by rpki-client