$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: oKof4ns10CsNYcifMNG8EnyxzZyS6/tGiz2xp2k1VVo= Subject key identifier: 89:EF:74:14:DB:FB:CB:07:79:D8:93:3D:32:F5:79:8C:98:68:0E:3A Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01A0D5391F525CC5E248979AC766E1CDA94F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1A93 Signing time: Thu 24 Sep 2026 21:01:25 +0000 Manifest this update: Thu 24 Sep 2026 21:01:25 +0000 Manifest next update: Fri 25 Sep 2026 21:01:25 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: 9zBLbzkIkyKLrZrD0CORq43hCi7gDDh9Q/rqMrI4R8M=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:39:1f:52:5c:c5:e2:48:97:9a:c7:66:e1:cd:a9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Sep 24 21:01:25 2026 GMT Not After : Sep 25 21:01:25 2026 GMT Subject: CN=89ef7414dbfbcb0779d8933d32f5798c98680e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:21:2f:9e:5f:8b:fe:93:66:47:5e:18:85: 0d:c8:df:f5:18:06:90:c3:c5:cc:0f:7f:2a:d3:4b: 13:f9:09:25:34:8f:02:0c:c4:c0:af:46:44:da:e4: a4:dc:62:f2:d8:55:6a:75:9d:e9:b9:5e:c8:e2:cc: c1:4f:68:bd:58:98:9a:48:e5:f2:d1:53:9b:a1:07: 33:14:86:0d:59:eb:8a:d9:84:91:ad:25:77:ee:67: e7:8a:53:58:89:af:2f:62:7f:39:c3:93:15:58:47: 44:ce:3d:d1:5f:fa:5e:79:9e:52:77:b6:94:f8:cf: e1:d2:1d:0d:b6:2c:de:a9:13:8f:2e:b5:aa:40:98: 7c:51:f0:be:58:16:0a:dd:42:34:e0:01:77:61:7c: e5:92:ab:14:64:c5:73:85:bb:2a:9a:c8:73:ec:70: d0:10:17:c4:f0:99:95:6f:28:2b:69:49:6b:6f:31: 55:d8:09:b4:86:14:2c:3a:7f:0b:62:8a:1f:eb:81: 65:9c:c0:3b:06:24:28:b8:32:cf:ae:39:37:2a:9a: 9a:35:5a:63:46:e2:10:0c:77:69:d8:d4:13:bb:4c: ce:81:fb:bb:11:84:fa:40:2b:78:45:d1:81:5f:b7: e4:16:d3:65:c3:b3:04:85:4d:7a:e9:01:04:ef:de: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:74:14:DB:FB:CB:07:79:D8:93:3D:32:F5:79:8C:98:68:0E:3A X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4c:b8:3d:33:ba:1d:6c:71:61:50:6a:62:a3:e1:8c:e8:f6: 0e:15:96:b6:68:77:8e:a0:39:51:5a:f4:3c:8c:ae:5e:38:53: 90:92:41:e1:4b:3a:28:e6:a8:76:2c:e2:0a:05:c0:ff:c5:6e: e4:fa:40:17:79:7a:cc:6d:c4:e6:34:a7:5b:f3:57:ed:98:4f: fc:72:cf:5c:87:a7:18:27:d5:5c:54:b3:e9:89:88:08:6f:bc: c2:6a:9d:68:96:01:30:12:f4:8b:76:c4:99:0e:ae:65:a1:12: 76:0a:f5:38:a1:75:81:f5:a1:f4:89:69:e2:b3:c5:e6:d7:9d: 8c:b1:0f:6b:b4:ca:03:39:bd:25:ae:4f:aa:21:22:d4:0b:66: ff:75:6d:d7:3f:3c:2f:28:0a:03:2c:2c:80:1a:98:f0:a3:33: d6:6b:a4:f1:33:60:b2:0d:91:3b:c2:1f:d2:1b:9c:6b:5f:09: aa:87:25:6a:98:1f:42:92:d3:68:e2:3c:07:fd:68:a1:83:89: 48:50:e3:30:69:e7:95:d5:04:a6:b5:bd:86:1b:27:cf:40:89: 29:d3:87:7e:e1:d6:e7:84:09:87:18:20:d3:6c:59:45:2e:1b: 31:29:b9:62:f1:b3:34:f1:51:41:4c:a1:a4:36:01:e5:1f:68: 0a:5c:13:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVOR9SXMXiSJeax2bhzalPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwOTI0MjEwMTI1WhcNMjYwOTI1MjEwMTI1WjAzMTEwLwYDVQQD Eyg4OWVmNzQxNGRiZmJjYjA3NzlkODkzM2QzMmY1Nzk4Yzk4NjgwZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5khL55fi/6TZkdeGIUNyN/1GAaQ w8XMD38q00sT+QklNI8CDMTAr0ZE2uSk3GLy2FVqdZ3puV7I4szBT2i9WJiaSOXy 0VOboQczFIYNWeuK2YSRrSV37mfnilNYia8vYn85w5MVWEdEzj3RX/peeZ5Sd7aU +M/h0h0NtizeqROPLrWqQJh8UfC+WBYK3UI04AF3YXzlkqsUZMVzhbsqmshz7HDQ EBfE8JmVbygraUlrbzFV2Am0hhQsOn8LYoof64FlnMA7BiQouDLPrjk3KpqaNVpj RuIQDHdp2NQTu0zOgfu7EYT6QCt4RdGBX7fkFtNlw7MEhU166QEE7976rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInvdBTb+8sHediTPTL1eYyYaA46MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEy4PTO6 HWxxYVBqYqPhjOj2DhWWtmh3jqA5UVr0PIyuXjhTkJJB4Us6KOaodiziCgXA/8Vu 5PpAF3l6zG3E5jSnW/NX7ZhP/HLPXIenGCfVXFSz6YmICG+8wmqdaJYBMBL0i3bE mQ6uZaESdgr1OKF1gfWh9Ilp4rPF5tedjLEPa7TKAzm9Ja5PqiEi1Atm/3Vt1z88 LygKAywsgBqY8KMz1muk8TNgsg2RO8If0huca18JqoclapgfQpLTaOI8B/1ooYOJ SFDjMGnnldUEprW9hhsnz0CJKdOHfuHW54QJhxgg02xZRS4bMSm5YvGzNPFRQUyh pDYB5R9oClwTHg== -----END CERTIFICATE-----Generated at Fri Sep 25 00:36:24 2026 by rpki-client