$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: Wo2QzBuoXam3Fdd8r9BURyBo80GlHDPc73QHZ8DnKzU= Subject key identifier: FE:CC:59:67:B8:8D:93:DD:CF:B0:37:B4:AD:77:AE:8B:2E:8F:57:E3 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 0197466737A575CEE989B3C3D30B9EF7433A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 117C Signing time: Fri 06 Jun 2025 18:00:58 +0000 Manifest this update: Fri 06 Jun 2025 18:00:58 +0000 Manifest next update: Sat 07 Jun 2025 18:00:58 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 8: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 9: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: nujqdc9mBVi/UwxacmA2X5cV3NJPbGJDeE39V7XfyFQ=) 10: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 11: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 12: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 13: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) 14: vxIQauwrKYzhLqpR5ts19_s3Gik.roa (hash: EKZXt/kpQu59j0wMTCR+uQUX4jQn6+dN2RIU5r3Do0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:67:37:a5:75:ce:e9:89:b3:c3:d3:0b:9e:f7:43:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jun 6 18:00:58 2025 GMT Not After : Jun 7 18:00:58 2025 GMT Subject: CN=fecc5967b88d93ddcfb037b4ad77ae8b2e8f57e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:35:15:d8:58:97:97:77:10:4d:0f:7f:19: cd:7a:b0:71:23:c4:7a:0c:06:ad:3f:93:5e:30:29: 0f:a3:9f:9e:c1:e5:45:f4:2b:63:b4:e8:58:82:69: 12:68:dc:02:01:15:e8:84:69:5f:43:50:5a:14:53: 7e:f6:2b:a0:3b:b7:76:67:68:29:27:62:e3:96:76: 1c:ce:ad:83:88:a2:71:68:f6:71:4d:b3:cd:2b:24: 39:78:3a:48:45:19:4a:55:9a:2c:74:f8:c0:54:18: 9b:4f:72:9f:1b:76:b3:a3:ce:08:de:d8:e8:e4:d6: ba:b5:b3:c2:2c:cf:c6:c6:b5:e2:4f:b7:53:bd:ed: 4e:ef:f9:62:7c:b3:c1:ff:14:8a:02:98:25:20:e6: ac:d6:41:c9:c7:e4:65:37:8c:cc:f0:2c:84:7c:0a: ca:68:6f:c2:00:ae:11:9b:cb:75:27:4b:03:2b:f1: ca:0b:ae:b5:3c:68:5f:f1:5d:73:53:99:b3:b2:b4: 84:e2:e6:49:08:01:f6:35:18:48:5e:d5:f4:50:ad: c4:ee:25:44:e2:18:55:ce:3c:15:cb:7b:03:d3:ee: 07:51:72:d8:55:64:2f:a2:4d:25:18:cd:63:5a:ca: f7:3a:35:06:78:9d:7b:8a:65:60:28:8d:c7:f3:80: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:59:67:B8:8D:93:DD:CF:B0:37:B4:AD:77:AE:8B:2E:8F:57:E3 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:aa:66:c4:93:d3:c7:a2:0d:a4:6a:52:04:21:44:be:a5: b6:f6:0c:a3:18:d9:f5:74:36:fc:40:12:ce:99:9f:6e:c7:90: 19:4c:0d:62:aa:d9:95:1f:43:30:01:d7:24:d6:88:3b:38:53: 91:8a:e1:2d:bd:5e:42:9e:94:e0:98:43:51:f3:9e:29:db:5c: 02:29:95:00:cc:2d:dc:a1:ab:87:58:48:2b:ce:a7:88:c2:94: df:b1:6e:2b:a7:c9:76:8d:7c:66:68:81:d6:af:14:26:ee:7d: 7d:d5:2e:f4:bf:e0:33:7b:02:07:da:0b:c7:ab:24:69:57:5a: 26:94:55:d1:b1:ee:68:d3:60:d2:a1:2a:f3:47:95:0f:08:74: 19:de:c6:d0:be:10:79:c2:7b:87:dc:13:3d:31:c5:f2:fb:f4: 08:f2:54:fd:94:1a:7c:88:9c:bb:92:d5:e3:ec:b2:e3:21:47: 15:d0:e2:61:ff:df:9d:6e:9f:c7:7d:34:d3:76:bd:30:00:80: fd:eb:32:1c:5a:d7:d8:d5:2c:cb:7d:d0:0d:26:3d:23:06:b8: 2a:5c:22:8d:b1:43:6a:96:3a:3f:7a:1c:22:ee:52:7f:92:0e: 6e:81:6e:aa:e0:c9:cd:02:73:a8:e6:0e:ec:d8:e0:f0:f8:bb: e3:7a:fa:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGZzeldc7pibPD0wue90M6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNjA2MTgwMDU4WhcNMjUwNjA3MTgwMDU4WjAzMTEwLwYDVQQD EyhmZWNjNTk2N2I4OGQ5M2RkY2ZiMDM3YjRhZDc3YWU4YjJlOGY1N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgY1FdhYl5d3EE0PfxnNerBxI8R6 DAatP5NeMCkPo5+eweVF9CtjtOhYgmkSaNwCARXohGlfQ1BaFFN+9iugO7d2Z2gp J2LjlnYczq2DiKJxaPZxTbPNKyQ5eDpIRRlKVZosdPjAVBibT3KfG3azo84I3tjo 5Na6tbPCLM/GxrXiT7dTve1O7/lifLPB/xSKApglIOas1kHJx+RlN4zM8CyEfArK aG/CAK4Rm8t1J0sDK/HKC661PGhf8V1zU5mzsrSE4uZJCAH2NRhIXtX0UK3E7iVE 4hhVzjwVy3sD0+4HUXLYVWQvok0lGM1jWsr3OjUGeJ17imVgKI3H84AQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7MWWe4jZPdz7A3tK13rosuj1fjMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUKqZsST 08eiDaRqUgQhRL6ltvYMoxjZ9XQ2/EASzpmfbseQGUwNYqrZlR9DMAHXJNaIOzhT kYrhLb1eQp6U4JhDUfOeKdtcAimVAMwt3KGrh1hIK86niMKU37FuK6fJdo18ZmiB 1q8UJu59fdUu9L/gM3sCB9oLx6skaVdaJpRV0bHuaNNg0qEq80eVDwh0Gd7G0L4Q ecJ7h9wTPTHF8vv0CPJU/ZQafIicu5LV4+yy4yFHFdDiYf/fnW6fx30003a9MACA /esyHFrX2NUsy33QDSY9Iwa4KlwijbFDapY6P3ocIu5Sf5IOboFuquDJzQJzqOYO 7Njg8Pi743r6wg== -----END CERTIFICATE-----Generated at Sat Jun 7 03:39:09 2025 by rpki-client