$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 2Jj12/5PDjZf8Z5nzw4FoHYdd5n+v6tqpE9pzVBHTsM= Subject key identifier: 5E:D4:26:F2:64:4F:1D:68:34:91:3A:EA:26:79:99:6F:4D:03:E5:27 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019F90C79647EA096007A2D55476672DAE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 19EB Signing time: Thu 23 Jul 2026 21:00:26 +0000 Manifest this update: Thu 23 Jul 2026 21:00:26 +0000 Manifest next update: Fri 24 Jul 2026 21:00:26 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: N7BmrL8fqeAiBPxXewyspPF7lKHK6H+hj9MWOfpT0A0=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:96:47:ea:09:60:07:a2:d5:54:76:67:2d:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jul 23 21:00:26 2026 GMT Not After : Jul 24 21:00:26 2026 GMT Subject: CN=5ed426f2644f1d6834913aea2679996f4d03e527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:62:0f:45:44:38:bb:21:e5:fa:5b:ba:d6: 66:1a:5d:29:d9:be:d7:4a:9d:52:40:84:26:bc:75: 70:d4:bd:fb:74:5b:c1:6d:db:00:2f:3b:2b:72:58: 30:e6:b3:6c:84:fd:32:40:a6:44:85:5c:7a:bd:b2: db:0d:9a:de:cd:79:e1:d2:98:87:d6:f7:94:94:14: 04:88:27:52:03:94:56:55:35:78:de:70:b8:70:77: 37:81:2f:bb:31:c7:c5:f7:39:09:bc:bc:d5:db:ce: 00:a6:d7:13:c3:fb:1e:bc:a0:cd:16:49:75:a2:b1: 92:9c:37:b2:ed:f5:40:38:29:9d:57:ed:05:fe:53: bd:4d:a9:eb:2b:a1:84:11:7d:e5:e1:67:93:72:61: fd:4a:53:9b:63:6c:91:e9:0e:51:86:9d:6f:6e:10: db:f9:0e:9a:43:e1:ff:f6:f5:91:64:d0:de:d7:86: c8:1e:90:37:15:e1:8d:19:76:2c:20:6d:eb:a5:64: 86:72:ca:a7:ae:02:79:b0:ef:42:87:d0:51:1e:75: 87:c4:97:62:b0:08:2c:69:47:17:f7:7c:eb:cd:fc: 58:da:63:ff:0d:eb:a3:2a:a9:7d:5f:56:d6:ec:f8: 1b:3c:e6:e7:14:f2:37:47:8f:10:9f:f9:12:34:76: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D4:26:F2:64:4F:1D:68:34:91:3A:EA:26:79:99:6F:4D:03:E5:27 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c7:86:4a:3f:64:3a:f8:c1:7d:40:0c:11:35:2a:07:d0:27: 8b:dd:b3:b9:f6:86:db:e3:fa:b4:7d:00:18:7b:4b:9c:15:d3: bc:10:a8:3c:c8:0b:83:0e:df:37:31:81:8f:57:52:c0:4a:ea: 3f:4d:cb:70:64:38:71:ac:cd:d6:52:23:67:3c:ff:7d:e6:85: 75:99:7b:91:7f:2e:f5:f9:01:65:7c:13:35:34:0d:67:7b:ed: c0:e2:43:2d:8d:5f:cc:0a:8d:c6:34:46:0e:66:45:00:93:e3: 33:3f:f6:dd:24:6c:a1:1c:72:a6:43:b1:86:8f:5d:30:79:a9: 19:f5:71:45:ee:85:48:f4:9a:dd:4e:f6:58:e4:f5:9e:5b:ba: 8b:59:54:c0:dc:09:6b:1a:ee:d0:33:b9:a2:ad:08:95:98:1f: 28:46:78:c8:7b:3d:2f:55:33:63:4a:55:04:2f:1b:6c:b9:9a: 44:ba:23:b7:e6:e2:b2:ae:e1:78:27:70:df:22:87:7a:3f:dc: bb:8b:71:78:41:c6:ce:c3:b0:b0:87:1c:3f:00:95:82:4d:f0: d4:33:37:3e:bc:5c:17:42:18:6d:65:fc:97:df:58:c5:f4:c8: 28:73:b6:d5:61:e0:43:6d:d1:4c:08:01:f4:e2:e5:b4:32:09: 13:21:ca:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx5ZH6glgB6LVVHZnLa4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNzIzMjEwMDI2WhcNMjYwNzI0MjEwMDI2WjAzMTEwLwYDVQQD Eyg1ZWQ0MjZmMjY0NGYxZDY4MzQ5MTNhZWEyNjc5OTk2ZjRkMDNlNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm89iD0VEOLsh5fpbutZmGl0p2b7X Sp1SQIQmvHVw1L37dFvBbdsALzsrclgw5rNshP0yQKZEhVx6vbLbDZrezXnh0piH 1veUlBQEiCdSA5RWVTV43nC4cHc3gS+7McfF9zkJvLzV284AptcTw/sevKDNFkl1 orGSnDey7fVAOCmdV+0F/lO9TanrK6GEEX3l4WeTcmH9SlObY2yR6Q5Rhp1vbhDb +Q6aQ+H/9vWRZNDe14bIHpA3FeGNGXYsIG3rpWSGcsqnrgJ5sO9Ch9BRHnWHxJdi sAgsaUcX93zrzfxY2mP/DeujKql9X1bW7PgbPObnFPI3R48Qn/kSNHaLqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7UJvJkTx1oNJE66iZ5mW9NA+UnMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMceGSj9k OvjBfUAMETUqB9Ani92zufaG2+P6tH0AGHtLnBXTvBCoPMgLgw7fNzGBj1dSwErq P03LcGQ4cazN1lIjZzz/feaFdZl7kX8u9fkBZXwTNTQNZ3vtwOJDLY1fzAqNxjRG DmZFAJPjMz/23SRsoRxypkOxho9dMHmpGfVxRe6FSPSa3U72WOT1nlu6i1lUwNwJ axru0DO5oq0IlZgfKEZ4yHs9L1UzY0pVBC8bbLmaRLojt+bisq7heCdw3yKHej/c u4txeEHGzsOwsIccPwCVgk3w1DM3PrxcF0IYbWX8l99YxfTIKHO21WHgQ23RTAgB 9OLltDIJEyHKYQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:49 2026 by rpki-client