$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: HcK8ytHVk5PyGP1SkjuaVPtf4pty7zyB3EmFdoWwQbg= Subject key identifier: E7:F3:7E:7F:30:30:C1:37:AC:56:76:98:E1:42:1F:60:67:6E:13:4C Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 01983A290481C3AB6EBB015A2A0A78CE3532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 11FB Signing time: Thu 24 Jul 2025 02:00:23 +0000 Manifest this update: Thu 24 Jul 2025 02:00:23 +0000 Manifest next update: Fri 25 Jul 2025 02:00:23 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: h8Yv/uglEAONNz7eEweHvmrcROwvWxK+y0TJoCknnZw=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3a:29:04:81:c3:ab:6e:bb:01:5a:2a:0a:78:ce:35:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jul 24 02:00:23 2025 GMT Not After : Jul 25 02:00:23 2025 GMT Subject: CN=e7f37e7f3030c137ac567698e1421f60676e134c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:fb:d0:1f:b1:b1:65:b2:3e:21:02:29:89: ab:09:9a:a6:9d:a2:dd:ab:94:a4:b4:92:b8:f2:90: b5:5e:51:8c:38:58:06:7c:60:45:98:d0:3d:4b:68: f6:e1:1a:a0:47:12:5b:f7:ed:33:0c:49:c9:4d:2c: ac:74:f4:2b:ae:47:79:76:59:b5:86:8c:1c:e6:c0: d8:40:0a:5e:50:a6:b8:57:d9:b2:49:2f:38:84:06: 0b:d8:5a:af:d4:6c:a2:9b:42:ea:99:1a:0b:69:28: de:49:95:38:ee:69:11:da:2e:a4:31:20:f4:fd:ac: 53:25:0d:f8:d2:e1:31:cb:37:62:3f:c8:0d:40:d4: ae:2e:ea:cc:f4:d0:7a:5e:5a:d3:8d:70:6a:b4:56: e7:fb:fb:73:ac:12:bd:f3:cc:1a:29:8c:df:93:62: 5c:e3:70:10:4c:52:ae:07:da:50:8c:34:30:6a:3f: 11:7f:da:b3:75:3f:0f:a6:e2:1b:a8:55:4e:2e:9a: 71:af:25:fc:fb:ae:17:96:f8:34:47:f6:74:aa:be: 19:0d:bd:9f:8c:a6:6d:e3:fd:71:7a:96:d2:c6:d2: f8:a6:cc:0a:fd:1f:52:f9:c5:7c:85:d7:5a:15:32: ef:f4:30:e8:75:47:46:1f:a8:38:e1:e5:fb:f4:7c: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:7E:7F:30:30:C1:37:AC:56:76:98:E1:42:1F:60:67:6E:13:4C X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d7:7c:90:d7:93:af:e4:6d:33:af:46:cd:03:0d:79:1b:d8: 9c:ce:5b:da:e6:54:a1:c8:f1:4a:1f:02:04:14:91:a7:16:0d: ce:86:07:fc:67:b2:7c:83:e8:44:90:60:04:40:a2:ff:16:b0: ad:34:16:f4:5f:62:e8:4e:0d:9a:fa:27:86:3f:6e:6d:f0:f2: d3:2d:ca:24:25:0a:de:8f:70:ef:93:4d:2c:50:4a:d6:f5:4b: 38:07:61:9a:2f:ca:64:48:05:e1:a6:64:59:1e:96:db:fa:75: e5:49:23:86:a1:b5:60:80:19:99:56:ce:01:28:d6:9b:39:18: df:d4:eb:88:50:d0:74:35:5b:d7:38:04:1b:85:22:37:7a:3a: 5b:04:67:c9:87:b4:39:dc:7f:fa:ee:b0:59:0c:3e:b0:20:44: d2:97:6a:4b:69:9b:b7:dd:01:d3:0e:b3:76:d9:6b:27:47:4c: a9:e6:d9:a9:7f:2c:66:f9:1a:ea:f3:bf:70:3d:51:77:5e:33: e0:4c:d6:a9:bc:76:21:b8:3a:a2:12:3e:7b:77:c0:33:0b:30: c8:4b:20:f2:26:a7:4e:75:ee:48:77:10:9e:f2:1e:50:d8:bf: 1a:e7:0c:b3:76:ea:b5:9b:e3:a8:f4:8b:62:ce:97:60:0c:56: f7:fa:a6:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg6KQSBw6tuuwFaKgp4zjUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNzI0MDIwMDIzWhcNMjUwNzI1MDIwMDIzWjAzMTEwLwYDVQQD EyhlN2YzN2U3ZjMwMzBjMTM3YWM1Njc2OThlMTQyMWY2MDY3NmUxMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGH70B+xsWWyPiECKYmrCZqmnaLd q5SktJK48pC1XlGMOFgGfGBFmNA9S2j24RqgRxJb9+0zDEnJTSysdPQrrkd5dlm1 howc5sDYQApeUKa4V9mySS84hAYL2Fqv1Gyim0LqmRoLaSjeSZU47mkR2i6kMSD0 /axTJQ340uExyzdiP8gNQNSuLurM9NB6XlrTjXBqtFbn+/tzrBK988waKYzfk2Jc 43AQTFKuB9pQjDQwaj8Rf9qzdT8PpuIbqFVOLppxryX8+64Xlvg0R/Z0qr4ZDb2f jKZt4/1xepbSxtL4pswK/R9S+cV8hddaFTLv9DDodUdGH6g44eX79HwX6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfzfn8wMME3rFZ2mOFCH2BnbhNMMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNd8kNeT r+RtM69GzQMNeRvYnM5b2uZUocjxSh8CBBSRpxYNzoYH/GeyfIPoRJBgBECi/xaw rTQW9F9i6E4Nmvonhj9ubfDy0y3KJCUK3o9w75NNLFBK1vVLOAdhmi/KZEgF4aZk WR6W2/p15UkjhqG1YIAZmVbOASjWmzkY39TriFDQdDVb1zgEG4UiN3o6WwRnyYe0 Odx/+u6wWQw+sCBE0pdqS2mbt90B0w6zdtlrJ0dMqebZqX8sZvka6vO/cD1Rd14z 4EzWqbx2Ibg6ohI+e3fAMwswyEsg8ianTnXuSHcQnvIeUNi/GucMs3bqtZvjqPSL Ys6XYAxW9/qmdA== -----END CERTIFICATE-----Generated at Thu Jul 24 12:06:42 2025 by rpki-client