$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: WbEViH/UDJ6DYDYbUinDieuqDel4TfsDzdbbthNRK0o= Subject key identifier: 08:F1:65:8C:1A:AB:71:12:A6:C5:1E:4A:29:17:8E:96:8A:60:CD:B3 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 01983FF429FD7873B152FC936BD7BDBF30C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 11FE Signing time: Fri 25 Jul 2025 05:00:22 +0000 Manifest this update: Fri 25 Jul 2025 05:00:22 +0000 Manifest next update: Sat 26 Jul 2025 05:00:22 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: tIjRtn5Vu3+9yg6EDgEs9n8bCxxdgCw55gJcX/UnH8Q=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3f:f4:29:fd:78:73:b1:52:fc:93:6b:d7:bd:bf:30:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jul 25 05:00:22 2025 GMT Not After : Jul 26 05:00:22 2025 GMT Subject: CN=08f1658c1aab7112a6c51e4a29178e968a60cdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:16:8a:40:6e:3c:22:b1:21:ce:01:96:29:05: 17:b8:49:08:42:60:71:59:ea:10:fc:83:75:e3:f5: 41:11:c8:f0:88:b4:f7:23:a9:2c:7d:1a:e1:79:7c: df:ae:0e:64:50:d9:5e:4f:62:2a:35:59:4d:e6:3a: 51:4b:60:61:1c:65:6e:0f:a4:59:ec:a5:4e:98:20: 12:0d:3a:41:07:56:c1:0b:e5:c0:4e:34:8d:66:32: 9e:32:c7:c1:cb:89:79:e1:f4:17:02:08:dc:b9:46: 30:32:36:02:b3:08:85:02:db:31:9c:63:8e:55:e3: 05:8b:ef:e7:1c:c0:21:ed:d5:5f:a5:fc:6e:85:7f: 96:c1:67:22:a3:44:01:94:2e:9d:0a:aa:02:ad:a9: 44:ff:8d:6e:be:07:10:82:1c:b4:ec:91:72:c1:72: 5f:99:fa:9b:74:7f:42:45:b3:44:38:36:ae:28:dd: 59:e4:00:c7:34:0c:6a:bd:f8:72:63:a3:c2:c9:04: 24:36:1e:33:47:de:9c:9a:11:17:58:91:d4:2d:a8: 04:92:87:1b:1a:83:4a:ad:2b:08:c9:c3:e1:12:0f: e1:a1:9e:2c:60:d2:98:47:18:85:2e:84:7d:06:99: 8b:41:8b:7c:12:f3:60:de:eb:1c:d7:4d:3f:64:40: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:65:8C:1A:AB:71:12:A6:C5:1E:4A:29:17:8E:96:8A:60:CD:B3 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f2:97:b2:70:f9:78:a9:9c:f2:16:02:35:8d:3d:1e:09:78: 45:fe:49:21:f6:12:9a:c3:40:d2:c7:94:ae:1d:01:ee:07:0e: e4:38:4e:6f:d0:d5:a3:35:7d:00:a6:8b:4b:80:25:72:ff:9f: b5:3d:75:9f:3b:fb:f1:04:22:13:69:25:95:b3:3a:ee:8f:1a: a4:84:06:e9:86:a4:1d:51:e3:6f:dd:2b:da:96:9d:50:f1:41: 0a:f4:5c:7f:28:b8:c6:5f:8e:ea:8c:a7:68:a1:d2:31:89:fe: f0:2a:16:74:b1:f6:00:a6:ef:26:73:78:21:8e:a6:f5:d2:d3: 96:f4:43:b1:f8:7a:27:17:27:c8:50:dd:9e:32:f3:4d:f6:46: 67:71:c6:7a:35:64:ac:e9:9d:0d:40:d4:ed:32:97:51:c3:34: 9f:99:e7:3c:b8:2c:01:d2:e2:03:65:65:0c:84:ae:b6:a6:61: e6:e8:54:6d:15:73:78:70:ee:ef:3d:9c:03:b7:d2:1e:50:3e: 0f:dc:f2:18:74:c0:0b:f5:77:22:a3:a4:16:cc:e9:1d:8b:82: 6a:ad:cb:2d:9a:aa:29:31:f7:bb:5f:d6:7a:cd:ba:a2:15:f8: aa:ed:30:2a:d3:f1:32:38:55:f4:dc:50:19:b6:10:0b:a6:e6: a5:15:27:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg/9Cn9eHOxUvyTa9e9vzDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNzI1MDUwMDIyWhcNMjUwNzI2MDUwMDIyWjAzMTEwLwYDVQQD EygwOGYxNjU4YzFhYWI3MTEyYTZjNTFlNGEyOTE3OGU5NjhhNjBjZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RaKQG48IrEhzgGWKQUXuEkIQmBx WeoQ/IN14/VBEcjwiLT3I6ksfRrheXzfrg5kUNleT2IqNVlN5jpRS2BhHGVuD6RZ 7KVOmCASDTpBB1bBC+XATjSNZjKeMsfBy4l54fQXAgjcuUYwMjYCswiFAtsxnGOO VeMFi+/nHMAh7dVfpfxuhX+WwWcio0QBlC6dCqoCralE/41uvgcQghy07JFywXJf mfqbdH9CRbNEODauKN1Z5ADHNAxqvfhyY6PCyQQkNh4zR96cmhEXWJHULagEkocb GoNKrSsIycPhEg/hoZ4sYNKYRxiFLoR9BpmLQYt8EvNg3usc100/ZEDwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjxZYwaq3ESpsUeSikXjpaKYM2zMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/KXsnD5 eKmc8hYCNY09Hgl4Rf5JIfYSmsNA0seUrh0B7gcO5DhOb9DVozV9AKaLS4Alcv+f tT11nzv78QQiE2kllbM67o8apIQG6YakHVHjb90r2padUPFBCvRcfyi4xl+O6oyn aKHSMYn+8CoWdLH2AKbvJnN4IY6m9dLTlvRDsfh6JxcnyFDdnjLzTfZGZ3HGejVk rOmdDUDU7TKXUcM0n5nnPLgsAdLiA2VlDISutqZh5uhUbRVzeHDu7z2cA7fSHlA+ D9zyGHTAC/V3IqOkFszpHYuCaq3LLZqqKTH3u1/Wes26ohX4qu0wKtPxMjhV9NxQ GbYQC6bmpRUnpA== -----END CERTIFICATE-----Generated at Fri Jul 25 07:00:48 2025 by rpki-client