$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: eObd5IADcyf5d0tVeDugponuZIrw9YkGJxYmWnZKlU4= Subject key identifier: 4C:02:20:8F:16:42:D8:A3:19:6B:BD:6A:57:59:E5:08:0D:67:52:DA Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019641B10C213A38D15ADBE18AC5B1DCAFE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 10F5 Signing time: Thu 17 Apr 2025 03:00:43 +0000 Manifest this update: Thu 17 Apr 2025 03:00:43 +0000 Manifest next update: Fri 18 Apr 2025 03:00:43 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 8: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 9: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: Ow6TO/mqEVOGWK23UFFY62X6Wq4Mp1gvZB+DO4kC7ls=) 10: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 11: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 12: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 13: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) 14: vxIQauwrKYzhLqpR5ts19_s3Gik.roa (hash: EKZXt/kpQu59j0wMTCR+uQUX4jQn6+dN2RIU5r3Do0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:41:b1:0c:21:3a:38:d1:5a:db:e1:8a:c5:b1:dc:af:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Apr 17 03:00:43 2025 GMT Not After : Apr 18 03:00:43 2025 GMT Subject: CN=4c02208f1642d8a3196bbd6a5759e5080d6752da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:5c:f2:4e:26:3b:47:3e:66:0d:e2:7f:b1: 69:28:b8:87:d7:76:7d:4f:38:e5:33:e4:a9:f6:ba: bb:48:cc:89:fa:6b:94:2a:52:1e:d5:29:8a:0d:50: 75:9b:4e:20:06:ec:49:f0:f7:ce:c1:cf:c1:ae:d0: 14:28:65:c2:58:cd:c4:d0:2f:54:61:ce:4f:03:f1: 10:ff:c5:c4:bf:22:f3:76:a9:01:0e:a0:17:c5:d6: 3c:ba:54:ba:81:9d:3c:8d:b7:9d:7a:bf:85:cc:fe: d2:86:07:86:fa:f9:42:c0:1f:70:8a:a4:d2:f1:d1: 38:76:b4:0f:dd:2f:c6:b0:58:8f:9a:e3:84:83:c8: 58:5a:e4:0f:b0:e6:fd:2d:c0:a4:22:25:02:7c:0b: 8d:69:fa:21:5e:7e:de:ae:09:6c:5c:34:73:49:01: 87:45:aa:2f:06:14:cf:ba:44:9b:d7:38:86:55:d2: 5f:d6:0e:61:ad:d9:82:49:b0:a6:c3:a5:ca:e1:46: 90:80:43:4f:da:19:e2:43:ba:10:d1:ea:e3:80:dc: 03:d0:07:cc:13:68:56:be:e6:a9:18:79:b3:90:1b: 31:07:cc:a1:33:cc:18:c4:82:d7:15:26:56:a5:62: aa:b8:ba:6a:15:5f:70:53:87:3a:52:d0:64:88:6b: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:02:20:8F:16:42:D8:A3:19:6B:BD:6A:57:59:E5:08:0D:67:52:DA X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f6:4d:88:60:f0:48:ef:ee:e8:d1:07:57:49:e5:c9:85:32: 15:b4:fd:e7:3a:bf:67:27:51:8f:70:b2:9b:73:d7:70:93:2c: 29:15:0d:90:c0:2a:de:e3:b5:b0:08:a9:90:53:b2:e8:56:c8: 9a:d2:ec:1d:53:b2:12:fc:cf:f2:12:e8:d8:4d:30:ba:3a:dd: a8:16:00:4d:a2:d5:00:be:7c:6e:bc:a5:db:6b:3f:42:18:e6: 0a:66:60:40:95:7f:77:a3:a8:14:cf:26:d9:f8:a4:74:31:0b: d3:aa:9d:80:cc:a7:06:05:43:54:24:b2:3d:ec:18:e0:6c:35: 5c:6a:82:36:07:6a:14:aa:64:8b:8c:40:5e:03:2a:49:e0:c8: 27:6b:41:1c:fe:02:2a:ea:ec:ce:d2:d9:92:4b:1d:58:45:df: e1:f2:e3:9c:e1:7c:8f:a1:03:35:58:9c:22:99:e8:ee:1e:8b: 73:55:fd:6e:ce:29:50:ce:69:0b:94:ef:66:f7:58:eb:25:eb: 3d:2b:79:57:46:f8:cc:a4:e9:f9:01:84:fd:46:c1:6c:b7:d5: c4:d7:55:b6:11:a6:b5:4f:56:07:51:4f:74:aa:2b:89:86:9a: b2:e0:d8:0e:c2:a7:61:23:5e:05:9f:5e:08:79:ab:8a:f8:bf: 5c:09:51:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZBsQwhOjjRWtvhisWx3K/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNDE3MDMwMDQzWhcNMjUwNDE4MDMwMDQzWjAzMTEwLwYDVQQD Eyg0YzAyMjA4ZjE2NDJkOGEzMTk2YmJkNmE1NzU5ZTUwODBkNjc1MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo91c8k4mO0c+Zg3if7FpKLiH13Z9 TzjlM+Sp9rq7SMyJ+muUKlIe1SmKDVB1m04gBuxJ8PfOwc/BrtAUKGXCWM3E0C9U Yc5PA/EQ/8XEvyLzdqkBDqAXxdY8ulS6gZ08jbeder+FzP7ShgeG+vlCwB9wiqTS 8dE4drQP3S/GsFiPmuOEg8hYWuQPsOb9LcCkIiUCfAuNafohXn7erglsXDRzSQGH RaovBhTPukSb1ziGVdJf1g5hrdmCSbCmw6XK4UaQgENP2hniQ7oQ0erjgNwD0AfM E2hWvuapGHmzkBsxB8yhM8wYxILXFSZWpWKquLpqFV9wU4c6UtBkiGv4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwCII8WQtijGWu9aldZ5QgNZ1LaMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvZNiGDw SO/u6NEHV0nlyYUyFbT95zq/ZydRj3Cym3PXcJMsKRUNkMAq3uO1sAipkFOy6FbI mtLsHVOyEvzP8hLo2E0wujrdqBYATaLVAL58bryl22s/QhjmCmZgQJV/d6OoFM8m 2fikdDEL06qdgMynBgVDVCSyPewY4Gw1XGqCNgdqFKpki4xAXgMqSeDIJ2tBHP4C KursztLZkksdWEXf4fLjnOF8j6EDNVicIpno7h6Lc1X9bs4pUM5pC5TvZvdY6yXr PSt5V0b4zKTp+QGE/UbBbLfVxNdVthGmtU9WB1FPdKoriYaasuDYDsKnYSNeBZ9e CHmrivi/XAlRaA== -----END CERTIFICATE-----Generated at Thu Apr 17 12:55:39 2025 by rpki-client