$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: k/GVDiinLqpXOdvIgdit41R3jhbUSxVRpnz14p2toqA= Subject key identifier: 6F:12:D6:9B:50:35:38:AA:2E:85:5E:45:6D:F3:BD:A5:BE:2C:5D:0A Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 0198345E12ECD13060CA3A78F23A52526500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 11F8 Signing time: Tue 22 Jul 2025 23:00:37 +0000 Manifest this update: Tue 22 Jul 2025 23:00:37 +0000 Manifest next update: Wed 23 Jul 2025 23:00:37 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: LLRklzMANb8D1sXwBsYElLK2aGPox11ABGFRSsmzTHo=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:5e:12:ec:d1:30:60:ca:3a:78:f2:3a:52:52:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jul 22 23:00:37 2025 GMT Not After : Jul 23 23:00:37 2025 GMT Subject: CN=6f12d69b503538aa2e855e456df3bda5be2c5d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:69:ce:fe:11:1d:69:9e:5a:b4:70:1a:8f: 58:03:22:f7:48:8a:04:75:c6:df:2d:d5:70:ee:95: 17:c8:a1:94:e1:d6:da:83:ce:19:35:a7:c6:89:43: 36:2f:63:c6:fc:00:c8:57:4a:a0:77:5d:85:8f:3d: d4:41:33:ba:79:a7:49:99:25:c8:f6:a7:21:2f:5c: 33:b0:0a:0f:65:59:e8:3f:32:df:ac:6f:4f:5a:ce: 9a:f7:07:e3:74:79:0c:15:46:a9:64:55:40:d3:9e: bc:52:5d:3e:e6:a6:c5:85:df:62:1c:57:fd:94:ad: 91:43:58:be:d3:1d:af:20:fb:01:9c:ba:09:c5:f3: 5e:04:19:f4:83:18:f0:a5:3a:c4:83:94:bc:4d:62: a7:44:34:ef:6b:63:b3:a0:9c:e1:e9:42:ba:d8:8c: 7c:1f:c4:bc:19:64:88:fe:4c:06:b9:e0:f9:8e:01: 65:e3:60:ce:1f:73:ba:f9:49:29:32:08:88:27:9f: 1e:7f:c8:2d:94:a8:fa:e6:d8:00:4f:96:22:55:d1: e7:3d:fc:3a:66:f1:02:4e:36:5e:79:b5:dd:ff:c6: a8:8d:63:c3:23:5f:fa:29:6b:c5:bc:27:d3:51:1f: 04:48:ab:83:39:10:d7:a6:ae:83:71:e1:dc:14:a5: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:D6:9B:50:35:38:AA:2E:85:5E:45:6D:F3:BD:A5:BE:2C:5D:0A X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:11:8d:2e:c1:b5:80:b6:ef:13:ae:48:58:c0:00:ec:f1:42: 2c:a9:a7:bf:db:02:31:0f:d3:33:85:93:05:a0:3d:50:2e:89: 6a:b7:cf:fa:1a:df:97:6b:3c:28:9e:85:a4:b5:34:2a:8a:64: 90:be:d1:93:6f:e0:96:33:82:01:3f:38:31:24:b5:3b:0e:11: 92:18:61:34:6b:38:35:4e:6e:76:63:f6:91:db:23:76:65:b1: 16:20:ff:59:b2:e6:53:00:31:7e:40:69:49:4e:51:9c:1e:67: c5:e7:4a:78:c1:1a:97:a6:a6:b9:b1:c0:95:36:af:6a:ba:d2: af:85:de:8b:38:5e:e7:79:cf:65:b7:8f:45:6d:a4:27:a2:43: 1f:82:7b:66:d7:8d:d7:20:09:f0:26:21:d9:49:a6:9c:ca:50: 47:32:8a:ed:1a:bf:36:c2:5c:17:db:61:3d:ef:0f:b2:5f:29: 1e:b3:a9:a7:fa:d4:22:2c:a4:48:44:e2:b8:64:04:46:30:aa: d2:1b:36:eb:59:90:0b:06:d5:3d:37:6c:06:2d:af:f6:06:0c: 49:f8:37:83:e4:09:0c:8f:d2:8c:0c:89:3d:21:5c:4a:b2:74: 52:31:d7:88:5b:60:7e:dd:41:94:10:07:d4:74:df:07:b6:cd: 67:af:24:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0XhLs0TBgyjp48jpSUmUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNzIyMjMwMDM3WhcNMjUwNzIzMjMwMDM3WjAzMTEwLwYDVQQD Eyg2ZjEyZDY5YjUwMzUzOGFhMmU4NTVlNDU2ZGYzYmRhNWJlMmM1ZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S1pzv4RHWmeWrRwGo9YAyL3SIoE dcbfLdVw7pUXyKGU4dbag84ZNafGiUM2L2PG/ADIV0qgd12Fjz3UQTO6eadJmSXI 9qchL1wzsAoPZVnoPzLfrG9PWs6a9wfjdHkMFUapZFVA0568Ul0+5qbFhd9iHFf9 lK2RQ1i+0x2vIPsBnLoJxfNeBBn0gxjwpTrEg5S8TWKnRDTva2OzoJzh6UK62Ix8 H8S8GWSI/kwGueD5jgFl42DOH3O6+UkpMgiIJ58ef8gtlKj65tgAT5YiVdHnPfw6 ZvECTjZeebXd/8aojWPDI1/6KWvFvCfTUR8ESKuDORDXpq6DceHcFKWJrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8S1ptQNTiqLoVeRW3zvaW+LF0KMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxGNLsG1 gLbvE65IWMAA7PFCLKmnv9sCMQ/TM4WTBaA9UC6JarfP+hrfl2s8KJ6FpLU0Kopk kL7Rk2/gljOCAT84MSS1Ow4RkhhhNGs4NU5udmP2kdsjdmWxFiD/WbLmUwAxfkBp SU5RnB5nxedKeMEal6amubHAlTavarrSr4Xeizhe53nPZbePRW2kJ6JDH4J7ZteN 1yAJ8CYh2UmmnMpQRzKK7Rq/NsJcF9thPe8Psl8pHrOpp/rUIiykSETiuGQERjCq 0hs261mQCwbVPTdsBi2v9gYMSfg3g+QJDI/SjAyJPSFcSrJ0UjHXiFtgft1BlBAH 1HTfB7bNZ68kvg== -----END CERTIFICATE-----Generated at Wed Jul 23 02:06:18 2025 by rpki-client