$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: AvmOO9/RXmyln48hjpbO1YUw9BSRQqMJa4YFZhMFnq4= Subject key identifier: 83:6A:B3:8B:A0:3B:AB:A2:1B:AE:83:E9:33:01:19:3D:6C:F4:CE:59 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019D9A07408251AFEAC35C25731586ADD004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 182D Signing time: Fri 17 Apr 2026 06:00:59 +0000 Manifest this update: Fri 17 Apr 2026 06:00:59 +0000 Manifest next update: Sat 18 Apr 2026 06:00:59 +0000 Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=) 2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=) 3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=) 4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: ZF6Qc/uKMhnRuMve0Nu3LeepAsY6caVx9ZhY6QKqfoY=) 6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=) 7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=) 8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=) 9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=) 10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=) 11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:40:82:51:af:ea:c3:5c:25:73:15:86:ad:d0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Apr 17 06:00:59 2026 GMT Not After : Apr 18 06:00:59 2026 GMT Subject: CN=836ab38ba03baba21bae83e93301193d6cf4ce59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:92:a2:f7:5d:ad:52:0c:fe:22:19:b2:fd:55: 0c:a7:a7:65:22:6b:97:d1:e8:f1:a8:1e:d3:07:05: 5e:7d:8b:9f:1c:77:3a:90:52:cc:b5:84:69:80:80: e0:a7:73:02:1c:4a:1f:5f:71:a5:5a:dd:94:9d:0b: 61:61:44:30:79:76:92:53:c7:d1:90:4c:93:d2:16: 0e:4f:08:c9:f6:5a:0f:ed:ef:c5:4b:4d:e7:0e:78: 88:94:7d:8c:ce:41:27:7d:96:93:b4:0a:36:d8:09: 9a:92:ea:67:74:11:32:68:34:4a:cc:5d:a0:da:1a: dd:f2:21:a2:53:89:4a:07:ad:36:70:12:84:c4:3e: a1:05:31:ad:89:1e:02:18:7e:6b:9c:7e:ab:9e:0d: e3:c5:bc:cf:c5:03:6e:34:2d:43:d7:3a:fd:2c:84: 76:4c:d6:aa:6d:e5:f9:51:e0:12:fc:30:1c:c1:3b: 32:b1:4e:fe:6a:2c:82:e8:a6:73:03:c1:0d:02:97: 55:7c:1f:35:d6:78:ab:c3:02:18:47:01:e8:8e:1a: 6f:63:a7:6d:84:46:fd:91:f3:3c:23:55:7a:5a:44: 76:7a:8d:12:a2:dd:9d:b1:a7:62:2b:c8:99:ed:55: 6d:3d:2a:6a:2e:82:6e:d3:4a:a3:ac:26:66:37:fb: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:B3:8B:A0:3B:AB:A2:1B:AE:83:E9:33:01:19:3D:6C:F4:CE:59 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6c:c9:ba:f5:5c:5d:84:5a:0d:36:7a:8f:83:d2:3f:42:ce: 40:dc:b1:f7:20:b8:70:8e:ff:ee:dd:99:e2:e4:aa:af:a7:a2: c8:3a:c4:de:c8:ee:50:75:af:ed:67:8b:b6:a2:ff:1f:22:c5: 35:18:15:a2:d7:6b:ce:03:b4:09:49:87:43:00:f4:1a:7b:74: b0:83:50:1b:53:60:d2:44:7b:96:32:0a:f4:bc:1a:5a:fd:e9: 1a:42:50:83:9a:f8:99:70:0e:3f:fc:9b:f6:81:f6:d3:38:f4: b2:ec:21:49:9d:b2:9f:3f:e0:00:b4:88:f0:a8:87:53:db:ec: 2a:77:6a:8c:6b:9e:64:45:69:41:0f:73:9a:4a:3c:c5:a7:5a: 5b:5d:a9:95:d9:d1:9c:e1:22:76:5b:0b:20:41:d9:03:d9:aa: 88:c1:c6:f0:b6:5a:a4:2e:d3:6a:07:24:49:9a:a1:4b:98:85: 95:ae:77:96:e0:13:07:c6:0b:86:00:49:db:8e:cb:76:9e:dd: 8c:a5:bb:a9:81:43:40:d8:81:69:81:84:2d:3f:05:44:6e:6a: 51:38:1b:2c:ed:f3:32:9d:07:65:09:98:3c:ee:0b:7b:8e:29: b9:94:9c:8d:57:2b:ab:41:d7:7e:48:4b:c6:83:f2:32:9f:71: ca:29:ed:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aB0CCUa/qw1wlcxWGrdAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwNDE3MDYwMDU5WhcNMjYwNDE4MDYwMDU5WjAzMTEwLwYDVQQD Eyg4MzZhYjM4YmEwM2JhYmEyMWJhZTgzZTkzMzAxMTkzZDZjZjRjZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZKi912tUgz+Ihmy/VUMp6dlImuX 0ejxqB7TBwVefYufHHc6kFLMtYRpgIDgp3MCHEofX3GlWt2UnQthYUQweXaSU8fR kEyT0hYOTwjJ9loP7e/FS03nDniIlH2MzkEnfZaTtAo22AmakupndBEyaDRKzF2g 2hrd8iGiU4lKB602cBKExD6hBTGtiR4CGH5rnH6rng3jxbzPxQNuNC1D1zr9LIR2 TNaqbeX5UeAS/DAcwTsysU7+aiyC6KZzA8ENApdVfB811nirwwIYRwHojhpvY6dt hEb9kfM8I1V6WkR2eo0Sot2dsadiK8iZ7VVtPSpqLoJu00qjrCZmN/uhgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINqs4ugO6uiG66D6TMBGT1s9M5ZMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGzJuvVc XYRaDTZ6j4PSP0LOQNyx9yC4cI7/7t2Z4uSqr6eiyDrE3sjuUHWv7WeLtqL/HyLF NRgVotdrzgO0CUmHQwD0Gnt0sINQG1Ng0kR7ljIK9LwaWv3pGkJQg5r4mXAOP/yb 9oH20zj0suwhSZ2ynz/gALSI8KiHU9vsKndqjGueZEVpQQ9zmko8xadaW12pldnR nOEidlsLIEHZA9mqiMHG8LZapC7TagckSZqhS5iFla53luATB8YLhgBJ247Ldp7d jKW7qYFDQNiBaYGELT8FRG5qUTgbLO3zMp0HZQmYPO4Le44puZScjVcrq0HXfkhL xoPyMp9xyintmg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:40:35 2026 by rpki-client