$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft File: wolzr_qpk205FGqhNvvLBRua-Z8.mft (raw, json) Hash identifier: tHB9d0y+WY2l/D6ArMaNBe0HuhwkyyDrYvtmWgFTBUE= Subject key identifier: 16:A1:9C:B2:E2:ED:58:A3:B3:78:88:97:16:35:75:95:8E:F3:25:68 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019A72264C0D97EE9AA6CA5201360D40AB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft Manifest number: 0883 Signing time: Tue 11 Nov 2025 09:01:43 +0000 Manifest this update: Tue 11 Nov 2025 09:01:43 +0000 Manifest next update: Wed 12 Nov 2025 09:01:43 +0000 Files and hashes: 1: CgLkc1SkIFf4pj0n2JX7alL00KE.roa (hash: MhOOK2DgwXLBocx/6QarDx4Ly7ohhneMABES0xkWluY=) 2: Ib580J_-DuFQb8u1VEIfvd9TW9w.roa (hash: LW93slSpEAA0H/x1PZsjVdKBOLrQSbjGY+wlbwVtJJY=) 3: O2jmvbfb7zAO9bVXb2l5Cf-GJs8.roa (hash: kLsZ6W0RC6vfo2/gdG7edT6iF0a/93JSKwh9HnjHQuY=) 4: Q7AnG09g2PozGdlVY_smEZGKack.roa (hash: ysxiWuXWS9QlhqjWIfOMiLgYTcf9utS8lXqLWsqqxw4=) 5: ZTmk9xCKE74GLX8SpUbwD0iZMl8.roa (hash: NJNpHFqU3eZdkh0S0In7det3e4nV9b6dbPyoIemJGSM=) 6: npd6gKJKim1KHOcjng1GmwEFA6I.roa (hash: KpUj9mG5FfwttSHfbtQ+ZC5OsG/BaXTGqzrV2frnyhg=) 7: ptgZPu-492g6Q7iwwH9dUoGnT0U.roa (hash: JBJCHA3gJM+JGtkPyX8Ik7rcsfdQeHIxeViefGiKeVw=) 8: qvwTWo8vwE0rz_fPohNW5beAGWI.roa (hash: PNeWcvCSbFurrdLfUjVRTH5U2J/jIYTyYfXbXNGGz5Q=) 9: wolzr_qpk205FGqhNvvLBRua-Z8.crl (hash: jHhJ4LVYHOaSH3tNii412VNTpAVzLHZGzT5Lg2DQ9do=) 10: y0bJ_FWEzre7hb_ba4ehOvpzP2w.roa (hash: kyISy4jMnE41+WEzWQUmi6BzD5u4+OVYr1N4+oQ5Rsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:26:4c:0d:97:ee:9a:a6:ca:52:01:36:0d:40:ab:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Nov 11 09:01:43 2025 GMT Not After : Nov 12 09:01:43 2025 GMT Subject: CN=16a19cb2e2ed58a3b3788897163575958ef32568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:3c:1b:7e:fa:f2:7f:8e:18:01:bc:d4:79: cc:56:92:3b:61:3d:54:98:fb:26:69:ca:4c:e6:34: 1b:ed:6e:0e:f2:f6:97:11:37:d3:d5:5f:2e:7b:d2: a3:89:f8:49:e5:80:5f:81:f3:cc:88:e3:3f:19:c9: 8e:95:b2:44:58:38:c0:bd:33:e3:73:8f:0b:50:90: 45:51:0c:29:22:8c:f8:e5:45:6d:10:3d:fc:32:b1: 35:8c:46:e4:b6:12:d8:36:9b:6b:e4:76:c2:3f:dd: 56:dd:22:1d:9a:0e:a0:9f:4e:8d:fe:01:18:f0:f7: 02:48:d7:7a:dc:56:b5:80:fd:db:1e:fd:e0:46:61: 97:ed:c3:8b:12:ad:86:db:64:58:4d:58:f2:6d:dc: 2c:bd:bf:6e:ad:ab:66:cb:95:7b:1c:40:2d:ae:cd: e9:c8:7e:a6:12:f8:c3:55:7c:ad:95:e8:ab:37:f0: c1:b3:56:d7:09:0f:35:d8:ae:b8:88:fe:65:2a:59: 27:ae:d6:88:eb:91:4b:d0:f6:e5:c5:e8:60:fc:ae: 04:b1:fa:80:a9:6f:56:9e:ca:21:97:68:ca:b6:dd: 14:50:1d:d3:3f:1b:b6:04:01:5f:99:e4:79:d7:7d: e2:ee:96:6c:6a:09:a3:c9:74:e2:ab:bd:0e:a2:d5: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A1:9C:B2:E2:ED:58:A3:B3:78:88:97:16:35:75:95:8E:F3:25:68 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:10:59:bd:41:f7:b5:ee:5c:20:c8:ae:8d:3a:c9:2d:c4:be: 0f:35:99:0c:f6:42:b1:61:f8:63:69:3c:81:d4:a2:1d:a9:8e: 97:3a:7b:3d:53:07:96:a1:39:6e:57:71:d7:15:96:88:4c:a0: 50:0c:f3:9b:87:7c:06:0f:39:e3:22:fd:6d:44:3a:b8:e2:9b: 81:60:df:77:dd:8e:29:b3:13:75:6a:c4:53:92:e8:af:6b:de: fa:60:22:fa:10:ec:5e:e3:01:e8:15:89:6a:97:e2:1e:81:f7: 50:fc:a4:85:d3:08:3c:c4:17:1a:b6:e4:af:84:0a:91:1e:f4: b0:5b:91:00:46:84:00:e9:17:4c:d3:e2:3d:d4:93:c2:c1:fd: 88:68:e1:4a:32:81:23:a4:d8:d1:ed:14:f9:40:41:67:f2:32: da:07:25:d2:39:63:1f:3c:29:9a:d6:60:e3:05:14:c3:3e:a0: ba:09:81:f5:fe:3f:66:14:2e:58:21:0f:cd:86:5b:83:48:be: 2a:34:1f:b2:7f:29:ba:69:d4:af:cc:b2:18:39:bc:2e:9f:0b: 52:52:5d:1d:ea:b3:ce:74:bd:e0:be:31:05:8e:ef:4c:0c:fd: 1a:c5:69:62:5b:72:58:88:67:a1:1e:7d:db:4f:b1:34:0e:bd: 59:8f:54:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpyJkwNl+6apspSATYNQKthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjUxMTExMDkwMTQzWhcNMjUxMTEyMDkwMTQzWjAzMTEwLwYDVQQD EygxNmExOWNiMmUyZWQ1OGEzYjM3ODg4OTcxNjM1NzU5NThlZjMyNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob88G3768n+OGAG81HnMVpI7YT1U mPsmacpM5jQb7W4O8vaXETfT1V8ue9KjifhJ5YBfgfPMiOM/GcmOlbJEWDjAvTPj c48LUJBFUQwpIoz45UVtED38MrE1jEbkthLYNptr5HbCP91W3SIdmg6gn06N/gEY 8PcCSNd63Fa1gP3bHv3gRmGX7cOLEq2G22RYTVjybdwsvb9uratmy5V7HEAtrs3p yH6mEvjDVXytleirN/DBs1bXCQ812K64iP5lKlknrtaI65FL0Pblxehg/K4EsfqA qW9Wnsohl2jKtt0UUB3TPxu2BAFfmeR5133i7pZsagmjyXTiq70OotXKIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBahnLLi7Vijs3iIlxY1dZWO8yVoMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxBZvUH3 te5cIMiujTrJLcS+DzWZDPZCsWH4Y2k8gdSiHamOlzp7PVMHlqE5bldx1xWWiEyg UAzzm4d8Bg854yL9bUQ6uOKbgWDfd92OKbMTdWrEU5Lor2ve+mAi+hDsXuMB6BWJ apfiHoH3UPykhdMIPMQXGrbkr4QKkR70sFuRAEaEAOkXTNPiPdSTwsH9iGjhSjKB I6TY0e0U+UBBZ/Iy2gcl0jljHzwpmtZg4wUUwz6gugmB9f4/ZhQuWCEPzYZbg0i+ KjQfsn8pumnUr8yyGDm8Lp8LUlJdHeqzznS94L4xBY7vTAz9GsVpYltyWIhnoR59 20+xNA69WY9Ucw== -----END CERTIFICATE-----Generated at Tue Nov 11 11:32:40 2025 by rpki-client