$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: DXPJbGfl88KrXvlcift6YYHcn1UgDMi39hj9jFKEjko= Subject key identifier: 8E:EC:A0:89:64:22:16:5A:08:F7:26:93:5E:07:BE:49:85:56:88:76 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019E1E354AC6F0449B3C8196A3B6E27E8630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 1631 Signing time: Tue 12 May 2026 22:01:09 +0000 Manifest this update: Tue 12 May 2026 22:01:09 +0000 Manifest next update: Wed 13 May 2026 22:01:09 +0000 Files and hashes: 1: CNbyub_ywtPJGqzP5UZEA0DNtXg.roa (hash: 9XO75azpd4xnA1Fcmx7YElMcl6h2AUZai5Sul1ZnzbI=) 2: MK0PJN0MMreFyMgjGNJVCcP1kio.roa (hash: /0jr4evlMMVaJu7NGHDu4KX/gcucZOxed/cQrWReq7A=) 3: Sc45OK_ODFvPX6AE8nSZ5FbJFlU.roa (hash: gPl/EfQBajKnpdkX9+XCHslwBpwrlTf6l+4BLwHTF4A=) 4: _U9BGLEG7vRfktFO8xi21MAtt54.roa (hash: hjEgCWQMFqUs25rtyBx/grzy2AflNXODIi2nt6p8P6I=) 5: dJi6YZs9u5yGuAWQeA9vl6v1pS4.roa (hash: TJ07Erx1ucmbk+mY6rmvN19iMh+szM0QGGm7xsqrDio=) 6: odaxqgyA-464XPpTnAMVsq1gFQQ.roa (hash: l1a1cObbS9L/mSITEi5cj0NI70j4hT2KUAatMVyc5Wc=) 7: pnPhFyOQR-Ty5FxTDJWIViYOAg0.roa (hash: 6baTF2h+tI9HWRnEgIpahEHZAePaskQeBXXklNj5/lA=) 8: s4lzZoz4TOfaTfA5UYeDZq8ur3s.roa (hash: KyjAil5KpYj/3CPJ9ff7WFWwWdPxYX9NKnWKTA8EtMA=) 9: uh-5s87WlZuWxJttfnAOxsNuAX0.roa (hash: UMgBRSmBBTiRT9lOOBu/YU9ZoLQXuPHxz04QjDjJfyg=) 10: vqV-YMbeGG5ZOz3NRgFA2jG8or0.roa (hash: iwFpWruBzEZJPWkyeXovTBxFrumsa94FJvSmEvJk/vY=) 11: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 0A+tpT+EwwN9iyAwB70DWy8IRur5xss4xT5YKg7weYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:4a:c6:f0:44:9b:3c:81:96:a3:b6:e2:7e:86:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: May 12 22:01:09 2026 GMT Not After : May 13 22:01:09 2026 GMT Subject: CN=8eeca0896422165a08f726935e07be4985568876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:08:eb:33:e4:0e:30:f8:29:9f:ab:d6:37: 96:07:9c:5a:36:41:1d:27:75:c9:14:e9:c9:01:72: 4b:fc:87:fd:24:6e:9a:31:d0:16:81:6d:0e:de:82: 77:29:90:a7:ec:71:91:b8:75:22:6c:32:39:21:b4: 66:5d:73:72:63:4f:e3:f2:2c:db:f1:ea:e3:c8:d4: 3a:f3:d5:02:cf:d5:d3:8b:32:d9:b9:33:72:ee:ef: a8:0a:2e:fb:9c:5a:17:77:0f:2f:5c:4e:6a:5a:81: a2:59:31:2b:e7:60:a6:71:75:69:50:15:82:2c:b1: 68:96:33:12:52:aa:12:fc:58:61:71:3a:d9:e3:e9: e4:97:09:45:4b:16:fd:0c:5d:63:b7:42:da:06:00: 15:9a:6e:fa:2c:e4:34:8d:05:06:8b:f4:e1:bc:a1: de:69:b5:0f:34:32:13:ed:64:c1:71:89:c1:74:f7: 0f:40:1e:db:93:f0:f8:a9:33:e4:7d:13:cd:b6:d6: 37:a1:64:ff:0a:46:77:66:a1:9c:b4:42:18:63:6e: a9:f4:9a:74:24:a6:bf:00:1b:19:17:fa:7d:20:c7: 62:26:23:ad:9c:ee:aa:29:8e:32:a1:1d:04:99:5f: 61:3d:b6:6d:57:e1:32:b0:67:28:8c:b3:62:49:5f: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:A0:89:64:22:16:5A:08:F7:26:93:5E:07:BE:49:85:56:88:76 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9c:0f:3b:1b:f4:a7:0e:1e:09:5a:63:68:0f:03:a4:80:5a: 27:be:a4:2b:d2:fe:97:6f:0f:47:c0:59:b1:2a:25:a3:8c:aa: b7:e0:0e:4d:75:12:d6:dc:2d:3a:06:94:a6:7e:58:cb:b1:c5: 88:77:09:74:6c:93:d6:c1:2c:a7:da:cb:28:6f:ae:2a:fc:09: c3:3a:1c:38:61:d1:63:47:3b:ba:78:13:c4:6b:7d:f0:ff:c9: 57:1c:25:cc:0c:cf:b5:a3:7b:02:13:c6:2e:5c:25:5b:c5:3f: 25:aa:8a:30:ca:31:54:90:80:39:85:fb:9c:ee:df:f5:92:0c: 26:e7:ec:50:51:a9:7d:00:3f:c8:74:87:a6:cc:e9:f0:ca:c6: 2b:5b:92:41:37:0a:9e:58:72:30:d5:63:f3:a0:71:b0:89:70: 8d:78:17:56:39:4f:d6:96:34:78:eb:b7:d4:91:93:5c:df:f8: 12:38:42:77:8a:51:b9:03:57:1d:7a:b5:46:2e:4a:ea:bd:fc: ec:78:40:6b:ec:45:ac:71:1e:50:4f:1b:5b:08:cb:59:af:1a: 8a:83:55:d8:bb:39:f6:ee:38:42:0d:d2:40:91:8d:ab:bf:5e: a1:3b:a0:c6:8e:c5:5e:71:a5:3c:dd:d2:48:ac:30:29:7c:40: dd:33:8c:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNUrG8ESbPIGWo7bifoYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjYwNTEyMjIwMTA5WhcNMjYwNTEzMjIwMTA5WjAzMTEwLwYDVQQD Eyg4ZWVjYTA4OTY0MjIxNjVhMDhmNzI2OTM1ZTA3YmU0OTg1NTY4ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2oI6zPkDjD4KZ+r1jeWB5xaNkEd J3XJFOnJAXJL/If9JG6aMdAWgW0O3oJ3KZCn7HGRuHUibDI5IbRmXXNyY0/j8izb 8erjyNQ689UCz9XTizLZuTNy7u+oCi77nFoXdw8vXE5qWoGiWTEr52CmcXVpUBWC LLFoljMSUqoS/FhhcTrZ4+nklwlFSxb9DF1jt0LaBgAVmm76LOQ0jQUGi/ThvKHe abUPNDIT7WTBcYnBdPcPQB7bk/D4qTPkfRPNttY3oWT/CkZ3ZqGctEIYY26p9Jp0 JKa/ABsZF/p9IMdiJiOtnO6qKY4yoR0EmV9hPbZtV+EysGcojLNiSV937QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7soIlkIhZaCPcmk14HvkmFVoh2MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZwPOxv0 pw4eCVpjaA8DpIBaJ76kK9L+l28PR8BZsSolo4yqt+AOTXUS1twtOgaUpn5Yy7HF iHcJdGyT1sEsp9rLKG+uKvwJwzocOGHRY0c7ungTxGt98P/JVxwlzAzPtaN7AhPG LlwlW8U/JaqKMMoxVJCAOYX7nO7f9ZIMJufsUFGpfQA/yHSHpszp8MrGK1uSQTcK nlhyMNVj86BxsIlwjXgXVjlP1pY0eOu31JGTXN/4EjhCd4pRuQNXHXq1Ri5K6r38 7HhAa+xFrHEeUE8bWwjLWa8aioNV2Ls59u44Qg3SQJGNq79eoTugxo7FXnGlPN3S SKwwKXxA3TOMvQ== -----END CERTIFICATE-----Generated at Wed May 13 04:55:25 2026 by rpki-client