$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: bjtwN1LFhtqsuR0ZCNwVNi4dC3XFgBKnPOa+CVOH5xg= Subject key identifier: B6:AC:54:10:11:2F:70:7A:BC:38:BC:20:E8:15:80:3C:1B:6C:6B:B7 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019D26964EECB1F1302284AB8675157DFE41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 18AA Signing time: Wed 25 Mar 2026 20:01:17 +0000 Manifest this update: Wed 25 Mar 2026 20:01:17 +0000 Manifest next update: Thu 26 Mar 2026 20:01:17 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: ubiBHknUcKOGKlPcxFMf2xhbK/2S0tcdF1yvVR5YjCU=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:4e:ec:b1:f1:30:22:84:ab:86:75:15:7d:fe:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Mar 25 20:01:17 2026 GMT Not After : Mar 26 20:01:17 2026 GMT Subject: CN=b6ac5410112f707abc38bc20e815803c1b6c6bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:6f:62:41:c3:94:94:e0:87:db:a1:46:ec: 7c:49:bd:8d:53:8a:f5:f6:b6:b9:47:c0:7e:f8:45: 50:be:e3:40:df:83:84:76:d7:91:47:0b:00:0c:0f: 32:35:9b:40:c8:c5:80:8e:29:6d:4c:45:79:94:8b: a8:26:f7:11:29:c5:89:a5:89:fc:ef:ed:b7:37:9d: 94:85:c5:f1:53:e0:a7:7b:0e:b1:66:dd:2a:0d:4c: 63:be:a6:2e:60:5d:95:e4:ce:d8:01:35:7f:81:7c: f8:3e:1d:ca:03:99:72:9a:f6:07:73:6f:fc:0b:cb: 9a:85:46:87:d6:f7:3c:10:41:ed:42:be:9f:e5:1a: c8:e3:22:36:e5:57:4f:0b:99:20:e4:40:72:e7:9d: c8:4c:ed:81:60:bb:68:e6:1e:a3:86:aa:2a:08:b9: ac:a7:e0:02:f2:93:9f:61:e3:8d:72:fc:c5:0d:6d: e2:c8:9b:3a:28:b5:a3:88:01:f5:16:38:7f:e0:b5: 60:4c:bc:af:1c:b1:f5:9a:e6:40:c2:00:34:52:a0: 48:11:51:33:45:30:4f:e7:eb:a0:38:66:73:7b:46: f6:60:8a:48:b3:20:c4:0c:eb:56:1e:18:9b:db:15: 74:14:19:ba:da:31:7e:4c:a8:01:04:0d:b8:92:4b: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AC:54:10:11:2F:70:7A:BC:38:BC:20:E8:15:80:3C:1B:6C:6B:B7 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1a:d6:02:aa:2f:56:54:0a:81:4f:25:e7:53:cf:14:33:89: ca:52:f7:a0:57:15:2a:ef:97:d0:63:ff:2f:88:b4:82:26:a7: fd:4b:91:c7:e8:49:08:77:9d:79:47:1b:15:82:97:c1:c2:54: a5:52:e0:61:a2:c9:68:05:d1:d7:6c:dd:7d:7f:45:d5:18:04: 0b:e0:e8:06:fd:be:3c:66:b0:89:bb:b3:41:79:47:c5:d2:aa: 43:59:d7:d5:4f:fd:c1:e7:1f:a0:bd:de:a2:7d:f6:b3:5c:7c: 04:90:0b:0c:20:4d:48:78:f0:64:6b:31:42:e5:5e:d9:67:fb: 52:01:be:55:f9:8c:3b:d3:51:0f:42:0a:75:14:6e:d0:0b:ab: 62:de:d5:37:54:3f:9b:cf:27:8a:a3:ca:63:20:e2:bf:6e:a4: c2:53:90:9a:ad:6d:ed:ac:92:2f:c4:f5:2e:e0:02:55:ce:46: a5:11:f3:96:4b:5b:4d:5d:da:2a:6c:d3:56:76:17:86:8f:7c: 75:f4:da:38:57:45:2f:d8:12:02:fb:db:61:e0:06:db:21:fe: d5:8e:a9:e9:cd:02:ea:26:d4:06:8d:11:17:95:6c:91:e6:3d: 69:ff:f4:52:c4:4c:ce:06:29:e9:c5:4d:05:53:af:0a:e8:26: 75:78:b9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mlk7ssfEwIoSrhnUVff5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMzI1MjAwMTE3WhcNMjYwMzI2MjAwMTE3WjAzMTEwLwYDVQQD EyhiNmFjNTQxMDExMmY3MDdhYmMzOGJjMjBlODE1ODAzYzFiNmM2YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC1vYkHDlJTgh9uhRux8Sb2NU4r1 9ra5R8B++EVQvuNA34OEdteRRwsADA8yNZtAyMWAjiltTEV5lIuoJvcRKcWJpYn8 7+23N52UhcXxU+Cnew6xZt0qDUxjvqYuYF2V5M7YATV/gXz4Ph3KA5lymvYHc2/8 C8uahUaH1vc8EEHtQr6f5RrI4yI25VdPC5kg5EBy553ITO2BYLto5h6jhqoqCLms p+AC8pOfYeONcvzFDW3iyJs6KLWjiAH1Fjh/4LVgTLyvHLH1muZAwgA0UqBIEVEz RTBP5+ugOGZze0b2YIpIsyDEDOtWHhib2xV0FBm62jF+TKgBBA24kksbrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLasVBARL3B6vDi8IOgVgDwbbGu3MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxrWAqov VlQKgU8l51PPFDOJylL3oFcVKu+X0GP/L4i0gian/UuRx+hJCHedeUcbFYKXwcJU pVLgYaLJaAXR12zdfX9F1RgEC+DoBv2+PGawibuzQXlHxdKqQ1nX1U/9wecfoL3e on32s1x8BJALDCBNSHjwZGsxQuVe2Wf7UgG+VfmMO9NRD0IKdRRu0AurYt7VN1Q/ m88niqPKYyDiv26kwlOQmq1t7aySL8T1LuACVc5GpRHzlktbTV3aKmzTVnYXho98 dfTaOFdFL9gSAvvbYeAG2yH+1Y6p6c0C6ibUBo0RF5VskeY9af/0UsRMzgYp6cVN BVOvCugmdXi5rA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:56:35 2026 by rpki-client