$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: vbfGuBe0VzYTZOJN2IRzEWjkuouIlXAiL4GzquWAzsI= Subject key identifier: 5A:CC:C2:1E:99:BA:B4:A1:34:E9:4C:3B:6C:B3:33:AC:E2:F2:0B:21 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01A1DFB9D42CC1F1BD8D4813C018E26C1045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1B1D Signing time: Sun 15 Nov 2026 15:00:59 +0000 Manifest this update: Sun 15 Nov 2026 15:00:59 +0000 Manifest next update: Mon 16 Nov 2026 15:00:59 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: jojxbXnJkIuV8V659NT3CHY8D-A.roa (hash: WdgJ3jfcaFI+UIc6f+cqpxi6WPShgn8WduAGCEF3v4M=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: uTqDOXMBzaUcm3aTFfIkRdJzB_k.roa (hash: OQQ9b7E9+F7d3ieC2uVjPwlaR66C7dIdP4pNorXtk2E=) 12: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 13: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: A9t3b804sXDyq3qaAQ6u4X93OicrNMGeiyQy2GoQVfk=) 14: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:b9:d4:2c:c1:f1:bd:8d:48:13:c0:18:e2:6c:10:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Nov 15 15:00:59 2026 GMT Not After : Nov 16 15:00:59 2026 GMT Subject: CN=5accc21e99bab4a134e94c3b6cb333ace2f20b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:ec:87:0c:24:9d:51:7d:ed:0a:aa:cb:ff: 30:96:3d:3c:3f:24:82:a3:a5:a0:b8:0f:c6:47:fe: 16:fa:d3:c1:6e:d2:aa:46:27:87:f0:51:26:b8:a5: ec:33:09:69:0f:e7:7e:38:80:cc:db:8d:ed:ce:95: 1a:d9:28:3b:37:24:1c:08:33:2e:66:2c:15:7f:b0: 4f:0e:68:79:e3:95:d6:2e:f4:8e:3b:82:82:93:3d: c0:64:32:0b:62:fa:69:be:59:ae:2d:33:ef:14:21: 0b:4c:ab:4d:bd:68:f2:9d:e3:5c:47:2b:96:5f:37: 77:f6:76:12:a7:98:6b:ce:1f:77:ca:22:13:34:96: 9a:6d:28:1c:2b:dc:9a:4a:50:b1:65:87:38:c9:1c: 61:29:45:57:f8:34:21:b1:37:67:af:61:16:f3:11: 09:5a:38:e0:27:b7:4f:6b:55:ea:3a:35:19:d0:99: ad:67:a5:56:92:a1:b0:a6:bd:48:14:24:dc:37:79: 29:20:ca:29:87:96:19:aa:d9:89:9a:83:ec:12:70: 46:1c:4a:0b:b6:70:ca:f6:ea:8a:9f:61:3b:ff:b8: d4:05:3f:32:04:fc:83:fd:25:97:11:c0:81:15:67: 98:a4:3e:5e:d0:97:6a:48:76:f1:00:a7:a1:1f:8a: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CC:C2:1E:99:BA:B4:A1:34:E9:4C:3B:6C:B3:33:AC:E2:F2:0B:21 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:be:d5:2d:d1:64:87:58:5e:71:56:2c:34:d0:96:5f:13:65: b9:ce:48:3a:e7:12:4a:50:92:00:63:f5:ba:3d:08:38:4c:0a: 8e:17:2b:8f:9b:64:8d:0e:81:34:39:6c:ce:00:7b:04:8b:15: 81:d8:18:a2:1d:ff:99:00:32:fa:4d:67:f3:f0:7f:f3:f5:52: 7b:b3:07:41:08:12:01:69:98:83:28:84:36:a4:51:fc:0d:8d: a3:9c:7d:bf:ef:26:1d:1e:4e:3e:22:a8:53:7f:48:30:52:ca: eb:a0:8a:24:68:ee:d3:0d:0a:bb:db:a6:6d:18:46:b5:5f:6f: 61:e4:45:bf:64:9a:43:1e:93:ff:46:ca:58:d3:5d:40:46:22: 89:87:ac:f6:a0:b9:bd:3f:a4:0e:6e:54:56:ef:22:5d:eb:2c: 1e:75:a3:8a:72:3d:af:de:7e:b4:f2:c6:52:9e:f4:0a:3d:f3: e6:d7:8d:97:54:33:59:dc:de:e2:a1:6f:6f:5f:67:7b:9e:55: 52:a7:ff:b8:bf:b0:ac:26:0e:06:77:28:4f:37:56:f1:a3:ce: b0:15:cf:1e:d6:58:c0:84:7e:2b:13:f2:e6:b1:55:1e:06:3b: 36:82:37:1c:b6:61:9e:6a:c3:7e:f1:af:53:ee:17:ff:22:09: be:51:89:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfudQswfG9jUgTwBjibBBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYxMTE1MTUwMDU5WhcNMjYxMTE2MTUwMDU5WjAzMTEwLwYDVQQD Eyg1YWNjYzIxZTk5YmFiNGExMzRlOTRjM2I2Y2IzMzNhY2UyZjIwYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCrshwwknVF97Qqqy/8wlj08PySC o6WguA/GR/4W+tPBbtKqRieH8FEmuKXsMwlpD+d+OIDM243tzpUa2Sg7NyQcCDMu ZiwVf7BPDmh545XWLvSOO4KCkz3AZDILYvppvlmuLTPvFCELTKtNvWjyneNcRyuW Xzd39nYSp5hrzh93yiITNJaabSgcK9yaSlCxZYc4yRxhKUVX+DQhsTdnr2EW8xEJ WjjgJ7dPa1XqOjUZ0JmtZ6VWkqGwpr1IFCTcN3kpIMoph5YZqtmJmoPsEnBGHEoL tnDK9uqKn2E7/7jUBT8yBPyD/SWXEcCBFWeYpD5e0JdqSHbxAKehH4oqbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrMwh6ZurShNOlMO2yzM6zi8gshMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb7VLdFk h1hecVYsNNCWXxNluc5IOucSSlCSAGP1uj0IOEwKjhcrj5tkjQ6BNDlszgB7BIsV gdgYoh3/mQAy+k1n8/B/8/VSe7MHQQgSAWmYgyiENqRR/A2No5x9v+8mHR5OPiKo U39IMFLK66CKJGju0w0Ku9umbRhGtV9vYeRFv2SaQx6T/0bKWNNdQEYiiYes9qC5 vT+kDm5UVu8iXessHnWjinI9r95+tPLGUp70Cj3z5teNl1QzWdze4qFvb19ne55V Uqf/uL+wrCYOBncoTzdW8aPOsBXPHtZYwIR+KxPy5rFVHgY7NoI3HLZhnmrDfvGv U+4X/yIJvlGJCA== -----END CERTIFICATE-----Generated at Sun Nov 15 22:09:54 2026 by rpki-client