$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 8qLJEbKqDifVpE61vY9E+ZDAc4VRJ2TWLF9gL8PyYlc= Subject key identifier: 5E:55:26:36:45:38:43:B9:27:44:FC:60:95:42:7E:80:74:D9:2F:2F Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01A0C1E831EB23747BBA8DC43FCAED9E5F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1A89 Signing time: Mon 21 Sep 2026 03:00:14 +0000 Manifest this update: Mon 21 Sep 2026 03:00:14 +0000 Manifest next update: Tue 22 Sep 2026 03:00:14 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: tAEeOveo1OL3Bdq13jnICungE6TEonfSBxhAw7XFeJ4=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:e8:31:eb:23:74:7b:ba:8d:c4:3f:ca:ed:9e:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Sep 21 03:00:14 2026 GMT Not After : Sep 22 03:00:14 2026 GMT Subject: CN=5e552636453843b92744fc6095427e8074d92f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:38:07:f6:eb:1f:08:43:03:fc:ef:c2:c0: 0c:65:9d:89:2f:9f:b0:41:1c:e9:e4:bb:42:14:ca: e2:34:5b:ba:9a:1e:1e:2e:f0:29:cc:24:61:a3:85: 36:53:27:81:2e:75:0f:74:a2:a4:28:e5:92:06:ac: 45:cd:38:d0:77:48:e9:d6:b5:6b:e3:93:cb:0f:26: 13:20:bc:9f:34:bc:bb:79:02:4c:21:25:85:25:cf: ee:bb:d3:75:26:06:94:78:d9:d3:13:0f:b8:0c:68: d5:95:e2:a4:51:7a:78:85:8b:48:fb:9b:25:81:30: be:29:10:e2:2a:f4:63:36:16:64:e7:40:bf:13:be: b7:43:73:3f:e4:28:ea:63:50:4d:e4:5f:d1:e6:eb: 7d:38:c4:a5:df:bb:6a:5d:16:4e:dd:d9:94:79:8f: 32:15:b8:9d:a7:3e:c1:59:4e:c1:9b:fd:77:4e:2c: d5:c6:4c:c8:bf:56:bb:c8:42:63:e1:6f:66:ac:a3: 31:b0:06:c9:ca:c2:20:e6:06:20:ab:e0:4f:dc:fc: f1:7b:7f:3d:c9:f8:94:6b:8e:fc:92:15:a3:3e:76: 74:74:14:59:f6:24:2a:25:df:28:5d:91:ec:91:0f: 40:d7:7e:37:f4:a4:e7:57:34:da:7b:ab:3b:fd:d7: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:55:26:36:45:38:43:B9:27:44:FC:60:95:42:7E:80:74:D9:2F:2F X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a3:8e:b5:3e:3c:a9:2b:b9:59:82:df:f9:d9:9d:dd:2f:e7: 01:e6:36:3e:bd:14:19:9c:30:75:25:c0:03:03:86:bc:38:6c: 18:b4:94:2c:9f:b0:93:02:01:18:b5:a3:bc:15:ab:88:69:49: 7d:22:02:e2:75:ce:62:16:98:1f:19:15:51:81:1c:40:56:6b: cb:6f:bf:58:36:b8:00:89:41:f6:b8:08:8d:67:31:3c:e1:09: 3d:60:6f:cf:e6:b8:4d:b1:8e:a7:ad:24:d1:1c:0d:b1:da:57: df:c0:aa:54:3c:ce:22:b2:d3:a0:fc:bc:f3:3e:88:8a:f6:fe: b7:61:d7:76:38:6a:35:e3:b0:ac:64:54:33:a9:e5:97:5b:34: 1f:00:c3:68:71:91:50:e8:b2:54:46:12:8d:36:27:a4:fb:b4: 5b:6a:6b:1e:40:d2:83:fb:74:2a:5f:c3:e9:b3:55:ee:58:c0: 64:0b:44:a5:ad:5b:11:b1:82:f0:52:60:97:e1:cd:96:7d:85: c1:b5:fb:2f:2f:23:13:35:97:3a:32:1d:b7:f3:6e:07:cd:57: 6f:93:09:12:99:0d:fd:63:77:6d:9c:e1:b3:c4:06:76:63:42: 5b:dc:12:d2:04:ac:36:bf:41:d2:79:05:26:3a:ec:5f:7e:0c: ad:d0:d7:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDB6DHrI3R7uo3EP8rtnl9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwOTIxMDMwMDE0WhcNMjYwOTIyMDMwMDE0WjAzMTEwLwYDVQQD Eyg1ZTU1MjYzNjQ1Mzg0M2I5Mjc0NGZjNjA5NTQyN2U4MDc0ZDkyZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuw4B/brHwhDA/zvwsAMZZ2JL5+w QRzp5LtCFMriNFu6mh4eLvApzCRho4U2UyeBLnUPdKKkKOWSBqxFzTjQd0jp1rVr 45PLDyYTILyfNLy7eQJMISWFJc/uu9N1JgaUeNnTEw+4DGjVleKkUXp4hYtI+5sl gTC+KRDiKvRjNhZk50C/E763Q3M/5CjqY1BN5F/R5ut9OMSl37tqXRZO3dmUeY8y Fbidpz7BWU7Bm/13TizVxkzIv1a7yEJj4W9mrKMxsAbJysIg5gYgq+BP3Pzxe389 yfiUa478khWjPnZ0dBRZ9iQqJd8oXZHskQ9A13439KTnVzTae6s7/dc+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5VJjZFOEO5J0T8YJVCfoB02S8vMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKOOtT48 qSu5WYLf+dmd3S/nAeY2Pr0UGZwwdSXAAwOGvDhsGLSULJ+wkwIBGLWjvBWriGlJ fSIC4nXOYhaYHxkVUYEcQFZry2+/WDa4AIlB9rgIjWcxPOEJPWBvz+a4TbGOp60k 0RwNsdpX38CqVDzOIrLToPy88z6Iivb+t2HXdjhqNeOwrGRUM6nll1s0HwDDaHGR UOiyVEYSjTYnpPu0W2prHkDSg/t0Kl/D6bNV7ljAZAtEpa1bEbGC8FJgl+HNln2F wbX7Ly8jEzWXOjIdt/NuB81Xb5MJEpkN/WN3bZzhs8QGdmNCW9wS0gSsNr9B0nkF JjrsX34MrdDX5Q== -----END CERTIFICATE-----Generated at Mon Sep 21 10:09:32 2026 by rpki-client