$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 8bqWpbL9QwJfvDxbYztzENKqlcdEzz/pH609ASww34E= Subject key identifier: 14:B8:1B:59:53:8A:39:7B:91:31:C3:E8:DE:44:40:65:E9:75:CE:D2 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019EBE10AC21D68E9397E9B92D85911FB349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 197D Signing time: Fri 12 Jun 2026 23:00:24 +0000 Manifest this update: Fri 12 Jun 2026 23:00:24 +0000 Manifest next update: Sat 13 Jun 2026 23:00:24 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: zzSGtr9eLpLb3aRJkX23d2X7qah+YDGL5X1Nx3yX9KU=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:10:ac:21:d6:8e:93:97:e9:b9:2d:85:91:1f:b3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jun 12 23:00:24 2026 GMT Not After : Jun 13 23:00:24 2026 GMT Subject: CN=14b81b59538a397b9131c3e8de444065e975ced2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:95:a7:06:15:a1:c9:2c:9e:71:c9:34:26: cd:f4:c7:43:f0:c5:27:bd:b7:dc:c9:c8:9b:e6:15: 1c:91:6e:7e:76:28:7a:48:fe:95:ae:62:16:28:b0: 95:c8:a0:73:44:78:4e:75:ba:1d:ee:10:bd:09:c2: ea:33:42:c8:9a:fa:97:6f:9f:82:24:e5:9f:41:42: 31:1b:2d:03:03:21:0e:75:c7:65:af:c0:28:8a:b4: 3c:6c:bd:ec:0e:97:e5:24:1b:9d:71:aa:0d:86:2f: 2d:f1:c3:9e:70:25:fb:b0:35:2b:cb:91:25:fd:71: 72:09:20:cb:65:57:4a:7b:56:36:df:cf:30:5f:1a: 73:9d:9e:52:3a:f2:ee:51:96:e0:7f:f0:93:f1:96: 0c:9c:0c:bb:97:0d:08:f7:11:9d:d7:d1:ca:4d:ad: 7a:b6:f8:63:00:93:97:f3:d8:f5:85:8e:51:65:6d: a9:ee:69:46:89:db:63:80:49:d1:1b:ea:6c:bf:dd: 82:d7:08:0a:46:df:11:b2:6a:13:74:3b:4f:7f:5b: 2f:b4:15:fb:23:a6:51:fe:e8:b2:e2:a0:c6:58:8f: 80:9d:f3:2a:0e:4a:a3:e6:f5:7f:85:96:ce:4f:97: 67:84:59:98:b8:f9:d1:26:f3:c7:4f:80:52:35:32: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B8:1B:59:53:8A:39:7B:91:31:C3:E8:DE:44:40:65:E9:75:CE:D2 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:30:3e:04:1b:69:60:7b:29:cf:19:eb:7b:fb:cd:c2:b3:8e: 95:e5:96:9d:c7:1e:7d:6f:0b:11:21:e6:1a:f9:82:8f:8f:d6: 1c:b8:f7:12:11:e6:dd:26:67:ce:29:17:4d:db:32:d9:36:b0: 11:33:18:60:63:8f:55:2f:79:63:b4:d6:68:4d:d8:90:83:ee: 6a:7e:12:40:22:86:11:67:2b:3e:fa:fa:8b:46:52:05:52:92: e3:ac:50:a7:f1:5e:c6:18:48:15:43:78:d4:fb:a1:02:60:a8: 0a:b0:63:7e:68:b8:08:ba:31:33:d2:95:b1:f8:cd:8a:68:22: e3:ee:3c:52:ec:04:47:28:fd:f3:fd:03:5e:e9:2c:8a:84:8b: 27:c5:6d:6f:34:0b:be:1d:b5:85:8b:e9:fb:29:15:41:a7:2c: 0f:43:45:f3:ec:02:27:e8:1b:65:52:c1:d7:9f:75:6a:f7:7d: ba:1e:16:0c:2d:bf:65:b5:05:ca:5c:9a:3a:48:5e:44:21:d2: 68:a1:47:27:17:3f:78:ba:a9:29:ca:fc:02:4c:5a:07:c8:73: ba:fe:85:f0:77:04:cc:d0:0c:46:a2:81:e3:85:a0:df:67:96: 87:e4:fc:9a:7b:f5:64:9a:9a:a7:43:36:09:79:ac:2b:80:b5: c9:91:2e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+EKwh1o6Tl+m5LYWRH7NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNjEyMjMwMDI0WhcNMjYwNjEzMjMwMDI0WjAzMTEwLwYDVQQD EygxNGI4MWI1OTUzOGEzOTdiOTEzMWMzZThkZTQ0NDA2NWU5NzVjZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cSVpwYVocksnnHJNCbN9MdD8MUn vbfcycib5hUckW5+dih6SP6VrmIWKLCVyKBzRHhOdbod7hC9CcLqM0LImvqXb5+C JOWfQUIxGy0DAyEOdcdlr8AoirQ8bL3sDpflJBudcaoNhi8t8cOecCX7sDUry5El /XFyCSDLZVdKe1Y2388wXxpznZ5SOvLuUZbgf/CT8ZYMnAy7lw0I9xGd19HKTa16 tvhjAJOX89j1hY5RZW2p7mlGidtjgEnRG+psv92C1wgKRt8RsmoTdDtPf1svtBX7 I6ZR/uiy4qDGWI+AnfMqDkqj5vV/hZbOT5dnhFmYuPnRJvPHT4BSNTLiIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS4G1lTijl7kTHD6N5EQGXpdc7SMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTA+BBtp YHspzxnre/vNwrOOleWWnccefW8LESHmGvmCj4/WHLj3EhHm3SZnzikXTdsy2Taw ETMYYGOPVS95Y7TWaE3YkIPuan4SQCKGEWcrPvr6i0ZSBVKS46xQp/FexhhIFUN4 1PuhAmCoCrBjfmi4CLoxM9KVsfjNimgi4+48UuwERyj98/0DXuksioSLJ8VtbzQL vh21hYvp+ykVQacsD0NF8+wCJ+gbZVLB1591avd9uh4WDC2/ZbUFylyaOkheRCHS aKFHJxc/eLqpKcr8AkxaB8hzuv6F8HcEzNAMRqKB44Wg32eWh+T8mnv1ZJqap0M2 CXmsK4C1yZEunA== -----END CERTIFICATE-----Generated at Sat Jun 13 07:21:51 2026 by rpki-client