$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: gVovAH0fH+ROjC51wnNjeDdiS0jZcqOl8IblZvFQVVw= Subject key identifier: 56:80:90:83:D5:87:14:2E:75:41:E8:DA:99:D6:B6:40:F4:92:24:15 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019CAAFD54BC6F24B6C2CFD0ECA62DEE358B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 186A Signing time: Sun 01 Mar 2026 20:00:54 +0000 Manifest this update: Sun 01 Mar 2026 20:00:54 +0000 Manifest next update: Mon 02 Mar 2026 20:00:54 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: Qm/nCuAy83PRRjp1WtFOV78tvCYM77C8FrY0BXD0C+k=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:54:bc:6f:24:b6:c2:cf:d0:ec:a6:2d:ee:35:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Mar 1 20:00:54 2026 GMT Not After : Mar 2 20:00:54 2026 GMT Subject: CN=56809083d587142e7541e8da99d6b640f4922415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:2d:c6:8f:d7:9a:ed:88:5a:9e:95:d4:29: 3a:8f:5e:f3:bb:06:86:ed:45:dd:e0:cb:e6:56:cd: f3:60:0d:64:4e:d2:5c:56:bc:dd:bd:26:3c:36:54: 95:e3:94:5b:b2:26:ef:30:92:37:8a:db:e4:d4:9c: aa:d8:76:29:3f:bf:d3:3d:80:fc:f1:5b:74:51:b8: 34:b6:3d:4f:da:6c:c6:31:1a:63:dc:38:bc:d8:60: 08:57:dc:b3:82:26:0a:16:53:a4:37:f5:d0:04:36: bb:3a:7d:f7:9f:94:eb:56:9e:17:6f:15:03:cc:76: d2:9c:c8:25:dc:66:6b:7f:0b:70:c7:71:a1:e9:8b: de:04:16:65:27:16:97:a7:31:a9:02:bd:44:9b:57: e4:56:91:7f:d2:ae:02:a8:10:47:c6:4a:77:f2:01: e0:ce:c0:3d:ff:72:04:7c:02:4e:4d:eb:16:7b:7d: b5:ce:b3:c0:cb:0f:d8:2d:3a:da:04:7f:3d:02:f3: 9f:55:41:51:ee:c2:e9:68:47:1e:93:76:ca:08:09: ec:39:c3:1f:a6:7a:ba:b5:e9:f4:38:aa:43:3e:c0: 16:01:32:c6:4c:07:b1:9d:f4:b6:5a:55:5c:74:13: ef:0f:3d:86:ee:e6:fc:2a:6c:c9:a6:8b:1a:94:3e: 31:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:80:90:83:D5:87:14:2E:75:41:E8:DA:99:D6:B6:40:F4:92:24:15 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:b0:06:11:b4:bf:f2:c5:db:7e:bc:83:ef:8e:7d:8f:48: fc:c3:63:9d:59:51:7d:48:39:ae:2e:85:a7:89:9e:4b:02:43: ab:2a:cf:a5:bc:7c:5f:22:5a:98:6d:ee:69:ac:f6:8d:63:18: dd:f4:ac:36:ac:64:04:56:a1:fa:66:75:99:95:d6:bd:b4:48: aa:a1:5b:39:59:11:19:51:6a:19:28:fb:ba:e5:2e:37:93:e4: 6b:18:42:2e:ed:86:b1:45:a1:31:d7:35:d6:34:33:10:00:ab: 90:2d:a5:26:2c:ab:4d:c0:62:56:e8:22:62:29:00:a8:81:02: e0:1a:e6:f1:dc:a1:04:46:1e:fb:4b:94:38:0e:b8:2f:05:67: 35:af:cf:f8:a0:ce:15:eb:97:b7:47:9c:d4:d0:26:b4:c5:69: d5:9d:d6:bb:d3:08:57:7c:32:90:9d:ca:62:76:1a:09:ba:3d: 94:5a:c1:21:21:81:4f:63:15:8f:3f:2b:90:fa:c0:69:73:25: a3:00:be:97:4e:ce:91:29:95:1e:13:ad:ce:32:57:2e:52:2d: 18:49:6e:86:60:5c:d2:04:f3:77:2b:99:31:87:da:04:cc:15: ef:6c:24:78:a9:8f:cc:12:30:91:31:be:97:f6:64:3c:81:78: 79:af:8d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/VS8byS2ws/Q7KYt7jWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMzAxMjAwMDU0WhcNMjYwMzAyMjAwMDU0WjAzMTEwLwYDVQQD Eyg1NjgwOTA4M2Q1ODcxNDJlNzU0MWU4ZGE5OWQ2YjY0MGY0OTIyNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKUtxo/Xmu2IWp6V1Ck6j17zuwaG 7UXd4MvmVs3zYA1kTtJcVrzdvSY8NlSV45RbsibvMJI3itvk1Jyq2HYpP7/TPYD8 8Vt0Ubg0tj1P2mzGMRpj3Di82GAIV9yzgiYKFlOkN/XQBDa7On33n5TrVp4XbxUD zHbSnMgl3GZrfwtwx3Gh6YveBBZlJxaXpzGpAr1Em1fkVpF/0q4CqBBHxkp38gHg zsA9/3IEfAJOTesWe321zrPAyw/YLTraBH89AvOfVUFR7sLpaEcek3bKCAnsOcMf pnq6ten0OKpDPsAWATLGTAexnfS2WlVcdBPvDz2G7ub8KmzJposalD4xgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaAkIPVhxQudUHo2pnWtkD0kiQVMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcKwBhG0 v/LF2368g++OfY9I/MNjnVlRfUg5ri6Fp4meSwJDqyrPpbx8XyJamG3uaaz2jWMY 3fSsNqxkBFah+mZ1mZXWvbRIqqFbOVkRGVFqGSj7uuUuN5PkaxhCLu2GsUWhMdc1 1jQzEACrkC2lJiyrTcBiVugiYikAqIEC4Brm8dyhBEYe+0uUOA64LwVnNa/P+KDO FeuXt0ec1NAmtMVp1Z3Wu9MIV3wykJ3KYnYaCbo9lFrBISGBT2MVjz8rkPrAaXMl owC+l07OkSmVHhOtzjJXLlItGEluhmBc0gTzdyuZMYfaBMwV72wkeKmPzBIwkTG+ l/ZkPIF4ea+N9w== -----END CERTIFICATE-----Generated at Sun Mar 1 23:45:05 2026 by rpki-client