$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: WE2O/TOkOn5UbLW6X30+HIxadKS00fmep8frRjOoR+w= Subject key identifier: E5:6A:77:53:A1:90:FD:1D:C0:EC:1E:B4:72:C1:81:CE:F5:CD:40:5F Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 01A10C95081FC2F642D46DE115768D47ED22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 19F6 Signing time: Mon 05 Oct 2026 15:00:55 +0000 Manifest this update: Mon 05 Oct 2026 15:00:55 +0000 Manifest next update: Tue 06 Oct 2026 15:00:55 +0000 Files and hashes: 1: 1-fyw95ne31Svt7iUXr8S4pvC9nw.roa (hash: NUmbYoePU7kQqI3Sa68HIIdVbQG9TdhCGQCHhaTXrGA=) 2: 3Fjgb1DclAOHEHkd1ujAyzMU98I.roa (hash: 3vwYNeDQAc78Pa5gcdAqKT6+wjGmOGUKytVaNJTBFTw=) 3: DBVt-Kol8GtKXZhzeMem7n5aqyE.roa (hash: hvHwhp8dN1x+LMxwBZwRZDfpwreuESZg0Faol2vvqxE=) 4: KKBExKXUfwOl6IRwKc1wQVHh4bM.roa (hash: 92/f9xIH6P+vz8MuNOcGvz2PgbDhKT2PNZfoBm0w3Z0=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: 3/PLDwgji+SG6gu7hlZRNB3O0kdN4MkY5iDWggE6JFc=) 6: e_oEkxj5wakUjaTOI_wOqCOK5n8.roa (hash: 20kV4OeToxJk7pR58HISzEGgkBDUp39Pn/wqiBDv3Fk=) 7: gnrzL3jyRlcBtVcsWS9Y5A_BL44.roa (hash: PhKB03egTh15leaOC+yb5z47cf5akEmY1WAfSKLXVsI=) 8: hSges_Ltmi2kLQbfthI0oLK2-Aw.roa (hash: ofUTm9TOC9YCPztyeJkIczU+y1/O6ZlOyL5d83VL7h0=) 9: iYKDQoqHTEgJUCkrGhQOU5NqiFY.roa (hash: vF5FuUkbJ3rccCNOsf7dw5WnBUBYWin8sXakVk1ewfU=) 10: mHEmY2pinSwaTCphGCHN22bgq8k.roa (hash: 9Vu4Z943d+sudfjz+IrLSW/qi7Go6bC6mcneD6nK7Jc=) 11: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (hash: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 14:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:0c:95:08:1f:c2:f6:42:d4:6d:e1:15:76:8d:47:ed:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Oct 5 15:00:55 2026 GMT Not After : Oct 6 15:00:55 2026 GMT Subject: CN=e56a7753a190fd1dc0ec1eb472c181cef5cd405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e1:a3:87:3c:e6:43:c1:ad:13:63:19:00:e7: 73:e8:18:ff:5a:5f:16:24:5f:50:a5:0a:d6:32:b3: 4d:e7:1d:dd:f7:6d:62:92:2b:cd:e6:c5:b5:dd:bf: 3f:ab:b0:cd:f4:1a:cf:eb:88:c5:ab:5b:69:ed:15: b1:96:96:41:28:f9:86:39:c7:5b:49:07:f8:a9:55: c4:ff:20:c8:b5:eb:35:02:4b:66:ef:01:bb:3e:aa: 2d:bd:e9:4b:4b:07:86:59:cc:2b:7e:b3:3f:1d:13: 0b:94:62:ba:b1:87:36:3b:9e:58:58:64:66:8a:10: d6:4c:43:0e:5b:93:b3:b9:76:da:cb:4d:56:3d:d4: 48:fc:cc:0f:78:9b:20:e9:14:f0:d3:a8:47:75:a0: 69:de:4c:5a:59:40:53:87:5a:43:f0:d1:b5:e5:e7: 04:c8:3a:62:8a:19:98:6b:d1:07:11:f0:de:e4:d6: 36:bf:f4:a8:6b:c9:7b:53:55:15:cc:f9:4f:ec:ca: 81:ff:10:c4:e8:09:c5:3d:1e:63:67:91:ff:8e:6d: 13:a4:1b:c7:d7:52:a4:a9:7c:b0:62:40:1c:d4:ff: 21:e5:1c:ef:5f:6e:1b:54:68:a9:db:c0:e8:b3:f1: ae:f3:f3:74:70:1b:86:51:98:92:45:86:98:c5:e8: 4e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:77:53:A1:90:FD:1D:C0:EC:1E:B4:72:C1:81:CE:F5:CD:40:5F X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:58:66:0d:54:76:bc:13:d9:15:25:c1:33:14:d2:86:50:77: 3b:5b:5b:e4:8d:63:d9:d7:6b:88:67:76:98:8f:06:78:ff:4d: 5d:88:cd:b0:a6:98:c0:22:b0:00:f6:55:65:c7:9a:5f:9f:ec: 90:a4:48:3b:d5:25:64:39:8d:03:5d:3c:d4:84:28:b2:e9:89: 34:7a:7e:37:33:32:5c:93:92:74:23:97:06:71:18:c7:64:db: 76:ba:33:da:e4:6f:1e:c9:8e:9c:15:53:5d:a6:ca:13:a6:57: e1:b0:6d:65:d3:50:91:0c:62:19:ce:73:b4:c9:d5:b1:99:20: ce:8d:f7:20:8a:17:b0:37:3f:d9:84:b7:94:6b:fd:09:08:1a: 6b:82:07:c4:e5:d8:14:92:e5:7d:69:8d:40:85:b2:7b:c5:26: 5b:5a:9c:03:83:3f:92:47:01:c8:c3:2f:e6:e9:95:97:e7:ef: 15:30:79:f2:ce:17:69:44:9b:81:ce:cf:8e:6e:14:8b:46:90: 8e:7a:50:a7:43:75:1f:51:e9:11:5b:32:59:a0:0a:69:95:85: 87:70:7d:ae:42:ce:3e:f5:1e:47:74:86:d3:5b:01:7c:b5:33: 7c:6f:07:d2:0e:f0:50:b2:ec:36:c4:fd:5e:0e:c2:c3:7c:0f: 46:05:a2:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEMlQgfwvZC1G3hFXaNR+0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYxMDA1MTUwMDU1WhcNMjYxMDA2MTUwMDU1WjAzMTEwLwYDVQQD EyhlNTZhNzc1M2ExOTBmZDFkYzBlYzFlYjQ3MmMxODFjZWY1Y2Q0MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uGjhzzmQ8GtE2MZAOdz6Bj/Wl8W JF9QpQrWMrNN5x3d921ikivN5sW13b8/q7DN9BrP64jFq1tp7RWxlpZBKPmGOcdb SQf4qVXE/yDItes1Aktm7wG7PqotvelLSweGWcwrfrM/HRMLlGK6sYc2O55YWGRm ihDWTEMOW5OzuXbay01WPdRI/MwPeJsg6RTw06hHdaBp3kxaWUBTh1pD8NG15ecE yDpiihmYa9EHEfDe5NY2v/Soa8l7U1UVzPlP7MqB/xDE6AnFPR5jZ5H/jm0TpBvH 11KkqXywYkAc1P8h5RzvX24bVGip28Dos/Gu8/N0cBuGUZiSRYaYxehORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVqd1OhkP0dwOwetHLBgc71zUBfMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVhmDVR2 vBPZFSXBMxTShlB3O1tb5I1j2ddriGd2mI8GeP9NXYjNsKaYwCKwAPZVZceaX5/s kKRIO9UlZDmNA1081IQosumJNHp+NzMyXJOSdCOXBnEYx2Tbdroz2uRvHsmOnBVT XabKE6ZX4bBtZdNQkQxiGc5ztMnVsZkgzo33IIoXsDc/2YS3lGv9CQgaa4IHxOXY FJLlfWmNQIWye8UmW1qcA4M/kkcByMMv5umVl+fvFTB58s4XaUSbgc7Pjm4Ui0aQ jnpQp0N1H1HpEVsyWaAKaZWFh3B9rkLOPvUeR3SG01sBfLUzfG8H0g7wULLsNsT9 Xg7Cw3wPRgWiUQ== -----END CERTIFICATE-----Generated at Mon Oct 5 22:52:14 2026 by rpki-client