$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: R9gCrZzs5ZkA2KBllZ1boTcnUHxexarg+OlJLbxjN7M= Subject key identifier: 4F:D0:89:38:91:7C:CB:64:F1:7A:D8:EB:E9:69:9E:7C:0E:5D:BD:5B Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019E1DC74FBCD21673E671F8BB6D038AA446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 192A Signing time: Tue 12 May 2026 20:01:01 +0000 Manifest this update: Tue 12 May 2026 20:01:01 +0000 Manifest next update: Wed 13 May 2026 20:01:01 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: xQ9XMCQMU1qLZjqgyImo+P7wguPQZJR+iWWl9rAaQpg=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:4f:bc:d2:16:73:e6:71:f8:bb:6d:03:8a:a4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: May 12 20:01:01 2026 GMT Not After : May 13 20:01:01 2026 GMT Subject: CN=4fd08938917ccb64f17ad8ebe9699e7c0e5dbd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:fb:0e:91:d1:96:b0:ef:d4:08:5f:9b:33: b7:0d:0d:e9:96:40:a5:4a:8d:41:b2:7a:50:14:92: b6:16:18:fb:2d:e8:72:3b:71:bf:c8:9c:0c:ca:13: 70:23:12:57:8c:24:17:f7:f3:f6:c5:de:fe:e3:02: 0c:cf:87:49:45:be:bd:59:ee:b0:fb:84:fb:58:b4: d5:21:74:7f:b0:2f:b0:92:86:0b:f3:3e:f5:bf:12: f0:7e:bf:3b:07:a2:2a:09:ac:87:d9:4a:8e:f6:a7: 6d:88:a5:be:42:c1:f7:cf:d5:72:ec:9a:ae:74:9f: f7:f5:17:48:11:ae:ce:8e:1b:e0:94:42:03:b2:75: 2d:58:46:fa:38:39:aa:76:12:fa:0a:e6:1c:f7:7d: 6e:b5:41:14:8b:45:39:94:b1:6c:df:64:05:ff:42: a1:a5:7a:12:11:d7:fd:bb:c0:8f:58:50:e2:34:28: eb:8a:b8:45:9a:86:cc:5c:9e:1d:f3:2b:14:19:46: 5c:4d:21:d5:1f:cd:b0:84:bf:02:cf:54:9a:c2:8b: 26:87:d3:48:80:69:21:76:0a:29:d3:85:a9:f3:da: 8a:e6:6b:2d:7d:59:3f:ef:b4:b5:6c:96:27:4a:dd: 2b:99:81:3c:1f:05:88:19:b3:12:57:bb:d6:69:f4: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D0:89:38:91:7C:CB:64:F1:7A:D8:EB:E9:69:9E:7C:0E:5D:BD:5B X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:ef:20:52:ed:0f:36:43:d3:f3:ba:9d:e4:81:5a:1e:3d: 40:21:a6:37:a6:12:fc:50:93:cb:d1:2e:da:e9:d6:d2:37:7e: c0:8f:9b:f9:68:ee:b1:89:a0:5e:07:00:35:ee:2e:89:c2:0c: 6f:8d:84:15:25:59:fc:9c:79:62:f9:61:4f:8a:ba:41:00:08: a5:03:23:1a:e3:b8:82:4c:48:69:76:a0:f2:12:05:14:52:86: e7:1b:5d:87:1d:a8:e6:26:7a:c8:0c:f6:27:37:59:b9:15:52: 90:34:1a:fc:a5:06:6a:13:47:a2:01:2b:4f:10:bd:2e:0e:3e: 47:df:25:80:1c:c5:18:3a:c2:f7:b1:71:13:30:56:fe:d3:70: c5:36:f6:f1:89:8f:0b:22:cc:71:d1:b4:96:b4:c7:a4:56:ef: 91:21:b6:c5:71:d2:88:75:cd:18:34:79:1c:61:f1:e1:27:e9: f1:65:11:9e:4a:8a:0d:77:8f:5d:b3:e2:32:cf:b6:c8:bf:c9: 75:59:b8:a7:38:65:46:48:a1:73:7e:29:88:e7:06:00:2a:3e: dc:91:ac:8c:18:ac:85:64:9f:30:af:0f:ff:bb:75:cd:f0:56: d1:88:c3:08:05:d0:ee:25:41:b9:99:5b:f5:b9:0e:7d:b6:eb: a9:de:fd:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx0+80hZz5nH4u20DiqRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwNTEyMjAwMTAxWhcNMjYwNTEzMjAwMTAxWjAzMTEwLwYDVQQD Eyg0ZmQwODkzODkxN2NjYjY0ZjE3YWQ4ZWJlOTY5OWU3YzBlNWRiZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGj7DpHRlrDv1AhfmzO3DQ3plkCl So1BsnpQFJK2Fhj7LehyO3G/yJwMyhNwIxJXjCQX9/P2xd7+4wIMz4dJRb69We6w +4T7WLTVIXR/sC+wkoYL8z71vxLwfr87B6IqCayH2UqO9qdtiKW+QsH3z9Vy7Jqu dJ/39RdIEa7OjhvglEIDsnUtWEb6ODmqdhL6CuYc931utUEUi0U5lLFs32QF/0Kh pXoSEdf9u8CPWFDiNCjrirhFmobMXJ4d8ysUGUZcTSHVH82whL8Cz1Sawosmh9NI gGkhdgop04Wp89qK5mstfVk/77S1bJYnSt0rmYE8HwWIGbMSV7vWafSDpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/QiTiRfMtk8XrY6+lpnnwOXb1bMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzHvIFLt DzZD0/O6neSBWh49QCGmN6YS/FCTy9Eu2unW0jd+wI+b+WjusYmgXgcANe4uicIM b42EFSVZ/Jx5YvlhT4q6QQAIpQMjGuO4gkxIaXag8hIFFFKG5xtdhx2o5iZ6yAz2 JzdZuRVSkDQa/KUGahNHogErTxC9Lg4+R98lgBzFGDrC97FxEzBW/tNwxTb28YmP CyLMcdG0lrTHpFbvkSG2xXHSiHXNGDR5HGHx4Sfp8WURnkqKDXePXbPiMs+2yL/J dVm4pzhlRkihc34piOcGACo+3JGsjBishWSfMK8P/7t1zfBW0YjDCAXQ7iVBuZlb 9bkOfbbrqd79mQ== -----END CERTIFICATE-----Generated at Wed May 13 05:31:45 2026 by rpki-client