$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: j3KbK9aDTfLKHl7g2mJhdgP9qk/smBvwsTei3yzt2x8= Subject key identifier: 1B:42:45:4F:09:2C:F1:2F:3B:11:C1:DE:F7:AB:16:ED:4B:B6:1C:58 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 01992BC6E403E8FB42F9BB480F1419432251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1279 Signing time: Tue 09 Sep 2025 00:01:18 +0000 Manifest this update: Tue 09 Sep 2025 00:01:18 +0000 Manifest next update: Wed 10 Sep 2025 00:01:18 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 5: HbYDEFlZH7LD42OnPOAQQmKHUfc.roa (hash: vBdu0OdgmlTRXVZa12/HttnkqdKOT5zC8OuTp+UGqvA=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: /GnR7696Fu9TFYDEY7pxwa/uOn6CrVOADAyJkmOxlKY=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:c6:e4:03:e8:fb:42:f9:bb:48:0f:14:19:43:22:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Sep 9 00:01:18 2025 GMT Not After : Sep 10 00:01:18 2025 GMT Subject: CN=1b42454f092cf12f3b11c1def7ab16ed4bb61c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:93:7a:75:25:5e:01:c4:4a:a3:20:5b:bd: c3:71:a1:c8:26:db:9b:e0:02:95:1d:df:59:2c:4b: 51:cc:f3:e2:69:4a:5c:f7:ca:62:c2:d4:70:70:f2: c9:41:b5:da:f9:0c:ed:5e:cf:e0:22:78:2f:89:5b: 53:22:c5:2a:1e:b8:0c:70:ee:2f:8b:15:7e:cb:22: 7a:90:ed:a4:d5:1f:74:3c:99:3c:41:51:54:9d:f9: e5:0b:61:6e:cd:6c:dc:ae:ab:c7:43:de:25:86:77: 4d:90:89:78:f2:60:1f:88:03:2d:00:11:35:94:d7: b7:04:7b:25:de:3e:79:88:4d:3b:ce:7f:a8:08:5d: 46:fb:2b:0a:83:99:8c:22:bb:61:41:91:f3:a4:8c: 83:44:9b:e8:d8:a6:be:f6:b6:db:04:32:2e:89:a6: 37:91:5e:b1:eb:2d:10:fb:33:9a:af:02:fb:9c:ad: 21:5b:21:99:5e:76:dd:b8:8f:95:d8:51:13:e2:00: ff:0d:aa:0e:fd:99:1d:d1:87:b7:0b:f2:a9:3f:87: 36:b7:59:11:d1:27:c1:50:3f:98:1d:69:0e:89:e8: 1c:fb:b0:4e:58:f4:2c:84:b8:41:92:e7:4c:b2:f3: ff:4a:0e:f4:25:c0:eb:b0:28:67:a4:07:8f:11:c0: 66:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:42:45:4F:09:2C:F1:2F:3B:11:C1:DE:F7:AB:16:ED:4B:B6:1C:58 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a9:4f:b6:a2:bc:8c:91:96:dd:48:1d:9a:89:76:66:e4:7d: d3:63:86:6b:d9:3a:fd:83:43:1a:86:5e:c0:1e:37:4d:f6:33: 6a:91:0c:20:e3:81:6c:1e:2f:e1:04:4e:c9:85:69:69:52:eb: 35:a4:36:42:8d:c6:d9:b7:b7:da:53:45:00:9a:7b:5b:a1:47: aa:7d:54:fa:71:1e:b4:28:55:e2:59:4c:3f:dc:d4:ed:c8:2a: 12:c7:27:29:85:d7:53:cd:c6:fd:2e:40:85:51:bf:07:e5:4f: b8:f6:ba:10:01:d5:39:84:5e:d9:9c:3f:71:cf:98:7c:93:c2: 94:2e:4c:3a:0a:63:d2:c0:9f:12:1c:62:d0:7f:05:e7:91:36: 4c:83:81:60:23:fb:3d:e5:f8:39:e8:a9:c4:0e:4f:7d:05:73: 12:37:82:ac:54:7f:db:c7:02:6b:83:87:9b:f4:ca:17:29:f9: 65:85:d9:0f:cf:e0:1b:cc:96:db:67:3a:0d:9d:f4:07:29:53: 75:83:54:c5:8a:a1:1b:41:21:6a:90:32:a7:b3:1e:52:b9:19: c5:ae:1b:1d:fd:e0:a9:de:9e:0f:1a:f1:c1:2a:eb:d8:70:d2: 90:4c:98:b7:eb:cd:6e:68:64:f1:3a:f3:b5:66:15:b7:67:f4: 4e:21:2a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkrxuQD6PtC+btIDxQZQyJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwOTA5MDAwMTE4WhcNMjUwOTEwMDAwMTE4WjAzMTEwLwYDVQQD EygxYjQyNDU0ZjA5MmNmMTJmM2IxMWMxZGVmN2FiMTZlZDRiYjYxYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocOTenUlXgHESqMgW73DcaHIJtub 4AKVHd9ZLEtRzPPiaUpc98piwtRwcPLJQbXa+QztXs/gIngviVtTIsUqHrgMcO4v ixV+yyJ6kO2k1R90PJk8QVFUnfnlC2FuzWzcrqvHQ94lhndNkIl48mAfiAMtABE1 lNe3BHsl3j55iE07zn+oCF1G+ysKg5mMIrthQZHzpIyDRJvo2Ka+9rbbBDIuiaY3 kV6x6y0Q+zOarwL7nK0hWyGZXnbduI+V2FET4gD/DaoO/Zkd0Ye3C/KpP4c2t1kR 0SfBUD+YHWkOiegc+7BOWPQshLhBkudMsvP/Sg70JcDrsChnpAePEcBmMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtCRU8JLPEvOxHB3verFu1LthxYMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQalPtqK8 jJGW3Ugdmol2ZuR902OGa9k6/YNDGoZewB43TfYzapEMIOOBbB4v4QROyYVpaVLr NaQ2Qo3G2be32lNFAJp7W6FHqn1U+nEetChV4llMP9zU7cgqEscnKYXXU83G/S5A hVG/B+VPuPa6EAHVOYRe2Zw/cc+YfJPClC5MOgpj0sCfEhxi0H8F55E2TIOBYCP7 PeX4OeipxA5PfQVzEjeCrFR/28cCa4OHm/TKFyn5ZYXZD8/gG8yW22c6DZ30BylT dYNUxYqhG0EhapAyp7MeUrkZxa4bHf3gqd6eDxrxwSrr2HDSkEyYt+vNbmhk8Trz tWYVt2f0TiEqKQ== -----END CERTIFICATE-----Generated at Tue Sep 9 08:54:57 2025 by rpki-client