$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: OpZwcHU156QbrMgm5ImTQNbmeZa9woqyZi7dle4gfXY= Subject key identifier: 44:95:98:15:DE:BC:33:F7:67:28:F9:9F:A8:A3:5B:57:0D:13:5E:C7 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019DA41CA054373423C75AB4340336540F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 18EB Signing time: Sun 19 Apr 2026 05:00:32 +0000 Manifest this update: Sun 19 Apr 2026 05:00:32 +0000 Manifest next update: Mon 20 Apr 2026 05:00:32 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: qjrfhSbgHrJDu19TVTQEZd4lknOBpROTdC2r0folph4=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:1c:a0:54:37:34:23:c7:5a:b4:34:03:36:54:0f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Apr 19 05:00:32 2026 GMT Not After : Apr 20 05:00:32 2026 GMT Subject: CN=44959815debc33f76728f99fa8a35b570d135ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7b:ad:a6:2f:07:32:26:bb:d8:e6:d3:8c:a0: 93:75:9e:26:d1:00:e7:82:2a:18:7e:ec:6b:c6:46: 9b:70:48:09:80:62:df:cf:fd:05:ad:0e:f7:fc:d7: b0:88:21:19:a3:8f:84:e5:fb:f5:60:b5:aa:28:7a: f7:09:8f:44:ee:b9:dc:37:88:d8:b5:e1:66:cb:d0: aa:4c:b4:73:84:fc:73:32:b3:51:48:c8:90:d6:ff: 72:83:09:b3:93:32:61:c8:f4:a1:79:eb:17:dd:d0: fa:40:0e:d0:c8:8a:58:9f:9a:be:ac:15:dd:14:00: b0:4c:74:59:8e:14:4e:15:c2:d0:eb:47:81:ea:f7: 51:c3:06:87:61:09:0d:15:59:cc:07:4b:a6:64:03: 6c:07:e8:ab:d1:f9:2a:29:ae:a0:75:9c:e4:1f:7b: 03:b3:fd:e4:4b:9b:29:0e:d4:55:78:68:13:19:f8: 1a:33:f4:1e:ef:c8:63:52:16:e0:ec:be:b5:84:a0: 47:8d:d2:de:cd:71:63:45:a7:4c:78:bd:e7:38:f1: 58:92:0b:c3:f2:06:28:51:f7:fd:92:0d:d0:56:b3: 69:df:15:8c:76:97:c8:ec:74:44:2d:eb:24:22:9c: 02:ce:c9:a5:fe:30:cc:36:26:5a:3f:36:bd:e8:f4: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:98:15:DE:BC:33:F7:67:28:F9:9F:A8:A3:5B:57:0D:13:5E:C7 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:03:f1:e7:f6:49:d9:a1:c7:82:80:ce:64:f4:bd:70:b1:fa: 6d:c2:50:73:fc:a8:6e:7d:9f:e5:ae:00:86:39:30:45:57:81: cd:c3:ea:4b:8c:4b:19:98:b8:60:7c:1c:04:12:ad:52:b7:18: e0:41:dc:a1:5e:e4:0c:0e:51:d1:78:48:e0:11:7f:60:29:f2: dd:bc:d3:a2:77:9b:06:39:2b:ce:21:37:69:3d:8a:1a:ec:b6: 74:89:9e:dc:62:53:4e:c2:f4:fa:d3:61:91:97:fe:d4:34:91: 46:fc:0b:12:c3:9f:0c:e6:93:8b:ef:4d:fc:0d:7a:93:0b:4f: 4d:c7:1f:86:d3:b2:81:19:8b:55:87:44:f2:8a:7c:be:f5:ab: 18:84:33:69:d8:7c:54:ac:6d:b9:50:37:98:7b:9f:85:82:d8: fb:39:da:29:98:8d:2b:8a:fb:44:a8:e5:09:37:17:cc:a7:c7: 11:13:1e:ff:b7:e3:3d:36:2d:e3:1f:16:dd:74:42:fd:b1:cd: 27:5e:96:f8:bf:84:ca:e5:9e:a9:43:c2:17:04:4d:a8:c0:87: f8:e4:e6:0d:17:b9:f3:64:06:77:f2:2e:1d:8a:0f:a5:58:c8: 3d:62:8e:b4:60:bf:8d:6b:f7:02:71:a6:ce:d8:bf:87:8b:13: b6:0c:dc:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kHKBUNzQjx1q0NAM2VA+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNDE5MDUwMDMyWhcNMjYwNDIwMDUwMDMyWjAzMTEwLwYDVQQD Eyg0NDk1OTgxNWRlYmMzM2Y3NjcyOGY5OWZhOGEzNWI1NzBkMTM1ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHutpi8HMia72ObTjKCTdZ4m0QDn gioYfuxrxkabcEgJgGLfz/0FrQ73/NewiCEZo4+E5fv1YLWqKHr3CY9E7rncN4jY teFmy9CqTLRzhPxzMrNRSMiQ1v9ygwmzkzJhyPSheesX3dD6QA7QyIpYn5q+rBXd FACwTHRZjhROFcLQ60eB6vdRwwaHYQkNFVnMB0umZANsB+ir0fkqKa6gdZzkH3sD s/3kS5spDtRVeGgTGfgaM/Qe78hjUhbg7L61hKBHjdLezXFjRadMeL3nOPFYkgvD 8gYoUff9kg3QVrNp3xWMdpfI7HRELeskIpwCzsml/jDMNiZaPza96PRlMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESVmBXevDP3Zyj5n6ijW1cNE17HMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgPx5/ZJ 2aHHgoDOZPS9cLH6bcJQc/yobn2f5a4AhjkwRVeBzcPqS4xLGZi4YHwcBBKtUrcY 4EHcoV7kDA5R0XhI4BF/YCny3bzTonebBjkrziE3aT2KGuy2dIme3GJTTsL0+tNh kZf+1DSRRvwLEsOfDOaTi+9N/A16kwtPTccfhtOygRmLVYdE8op8vvWrGIQzadh8 VKxtuVA3mHufhYLY+znaKZiNK4r7RKjlCTcXzKfHERMe/7fjPTYt4x8W3XRC/bHN J16W+L+EyuWeqUPCFwRNqMCH+OTmDRe582QGd/IuHYoPpVjIPWKOtGC/jWv3AnGm zti/h4sTtgzcyQ== -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:09 2026 by rpki-client