$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: B7rqp+6BQyJKlM5BTFZYhf21OkUOWbAZIb2gupI8tIo= Subject key identifier: 79:2B:79:F0:28:75:4B:31:11:8D:70:00:73:54:39:ED:D1:DA:5C:B5 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019FA9E296F6ECA11F0469DD78BCEB49D27E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 19F8 Signing time: Tue 28 Jul 2026 18:00:27 +0000 Manifest this update: Tue 28 Jul 2026 18:00:27 +0000 Manifest next update: Wed 29 Jul 2026 18:00:27 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: hmuaSueTkYK/ZAxjR3uBVRV9lPteuMXrW2NGFPLhfAY=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:96:f6:ec:a1:1f:04:69:dd:78:bc:eb:49:d2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jul 28 18:00:27 2026 GMT Not After : Jul 29 18:00:27 2026 GMT Subject: CN=792b79f028754b31118d7000735439edd1da5cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:31:3b:08:1c:f2:57:0a:5a:c6:27:45:1a: 01:03:f7:f3:1c:8f:52:0f:e3:9a:3d:83:da:c9:96: 9f:fc:07:22:78:83:6e:ae:20:e1:5b:e1:c7:1f:9f: bc:32:d4:63:7d:f5:4e:a8:b0:dc:13:98:fb:6f:76: a3:01:07:0d:ff:c0:c2:9b:d3:e6:2f:47:94:71:c5: 5b:1b:40:f8:4e:38:26:ae:f1:18:4c:5e:f0:a7:85: 93:62:19:b1:93:59:a8:e2:f4:97:a0:3c:f4:4e:35: 0f:55:f5:57:b3:31:46:e2:f9:47:c3:46:54:80:a8: 09:ea:7e:79:26:22:1c:05:28:7b:89:ab:64:a1:b2: c3:c4:7d:9f:ee:83:23:41:8a:ed:7c:46:a6:e8:d8: 60:f4:37:f4:65:68:50:31:f0:40:a2:25:cc:69:77: 09:fd:6c:50:4b:9e:66:80:92:ee:f2:78:5e:55:56: 46:be:d3:59:c1:9c:8b:90:60:52:76:a1:6c:99:8b: 7c:db:b6:68:44:3a:57:9b:83:e9:19:c5:f7:e5:d6: ad:a0:73:66:cc:9f:78:a3:09:8c:ca:4d:4f:a9:a6: 39:f7:16:2f:4b:80:2d:8e:ff:2e:4c:f2:f5:8e:4f: e0:85:1c:b0:c5:b9:20:67:54:db:8a:c6:f6:5e:ae: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2B:79:F0:28:75:4B:31:11:8D:70:00:73:54:39:ED:D1:DA:5C:B5 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c7:80:b2:bd:e7:94:fe:79:06:4e:f4:7b:67:ac:4e:45:7c: 77:66:82:34:a0:d0:7d:71:23:53:c4:d4:9b:60:73:e9:d1:17: ad:e3:d0:09:a3:bf:b2:70:33:8f:b7:c6:70:81:58:73:2e:0e: 0c:4c:01:f2:1d:f5:67:1b:61:71:ff:97:73:1f:5e:b1:c0:15: e2:72:fc:4f:08:db:c6:c3:33:8f:26:35:cd:7d:11:38:e3:00: db:72:8f:42:c2:eb:bb:1d:f8:ee:65:10:20:59:fc:5c:0e:a8: bf:25:1e:9c:ed:35:dc:54:5e:77:06:17:a6:2e:89:48:51:c0: d8:ca:ce:48:a5:64:e0:45:e0:a8:bc:e2:8b:e0:1b:f1:6d:56: 86:a0:c7:b4:6c:86:37:b8:a7:8d:11:92:d6:b9:0f:ee:68:32: db:1b:73:f6:9a:c1:7a:2f:44:2f:ac:e6:46:ce:fa:17:57:5a: 09:d4:df:fc:ab:7d:7a:cf:57:5e:9d:d5:a0:e6:65:a7:49:c5: 04:78:1d:bb:9e:47:ce:2b:10:37:a2:51:60:2e:c6:4e:f4:11: 1f:c7:0a:17:c6:b3:48:29:16:ec:ce:47:61:42:50:a1:a8:d1: 56:85:99:0b:12:c1:c9:74:02:ab:7f:9f:47:68:8b:c4:2c:42: b6:44:c8:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4pb27KEfBGndeLzrSdJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNzI4MTgwMDI3WhcNMjYwNzI5MTgwMDI3WjAzMTEwLwYDVQQD Eyg3OTJiNzlmMDI4NzU0YjMxMTE4ZDcwMDA3MzU0MzllZGQxZGE1Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/UxOwgc8lcKWsYnRRoBA/fzHI9S D+OaPYPayZaf/AcieINuriDhW+HHH5+8MtRjffVOqLDcE5j7b3ajAQcN/8DCm9Pm L0eUccVbG0D4TjgmrvEYTF7wp4WTYhmxk1mo4vSXoDz0TjUPVfVXszFG4vlHw0ZU gKgJ6n55JiIcBSh7iatkobLDxH2f7oMjQYrtfEam6Nhg9Df0ZWhQMfBAoiXMaXcJ /WxQS55mgJLu8nheVVZGvtNZwZyLkGBSdqFsmYt827ZoRDpXm4PpGcX35datoHNm zJ94owmMyk1PqaY59xYvS4Atjv8uTPL1jk/ghRywxbkgZ1Tbisb2Xq6i8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkrefAodUsxEY1wAHNUOe3R2ly1MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8eAsr3n lP55Bk70e2esTkV8d2aCNKDQfXEjU8TUm2Bz6dEXrePQCaO/snAzj7fGcIFYcy4O DEwB8h31Zxthcf+Xcx9escAV4nL8TwjbxsMzjyY1zX0ROOMA23KPQsLrux347mUQ IFn8XA6ovyUenO013FRedwYXpi6JSFHA2MrOSKVk4EXgqLzii+Ab8W1WhqDHtGyG N7injRGS1rkP7mgy2xtz9prBei9EL6zmRs76F1daCdTf/Kt9es9XXp3VoOZlp0nF BHgdu55HzisQN6JRYC7GTvQRH8cKF8azSCkW7M5HYUJQoajRVoWZCxLByXQCq3+f R2iLxCxCtkTI3Q== -----END CERTIFICATE-----Generated at Tue Jul 28 22:00:22 2026 by rpki-client