$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: Ft0DnTGmfWunUUIaABVvDvOasjAwhDVafLQmOCFGiaU= Subject key identifier: 10:73:E9:A3:9D:F4:53:95:CB:43:25:AB:83:94:E1:22:3B:20:9A:AD Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 0198D6CD549F08C1D573C7DB064417090FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 124D Signing time: Sat 23 Aug 2025 12:00:37 +0000 Manifest this update: Sat 23 Aug 2025 12:00:37 +0000 Manifest next update: Sun 24 Aug 2025 12:00:37 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 5: HbYDEFlZH7LD42OnPOAQQmKHUfc.roa (hash: vBdu0OdgmlTRXVZa12/HttnkqdKOT5zC8OuTp+UGqvA=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: oeCVilss2hLcJdJpdh4KeUoOv880hfFlQgivCiko0nE=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:cd:54:9f:08:c1:d5:73:c7:db:06:44:17:09:0f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Aug 23 12:00:37 2025 GMT Not After : Aug 24 12:00:37 2025 GMT Subject: CN=1073e9a39df45395cb4325ab8394e1223b209aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:8e:9a:a2:76:03:02:78:e8:f6:6b:4b:68: 44:06:94:f4:71:fc:d4:f0:3a:cf:38:af:7d:04:cf: 99:61:b5:85:66:23:29:dc:be:53:f1:20:4a:76:56: 0d:9d:f0:f5:88:3d:23:2f:a4:bd:aa:75:cc:60:a1: 3d:95:cc:92:7a:37:e5:d4:dd:d8:59:d0:88:56:e7: a2:a4:b9:c5:8e:47:00:9b:88:2b:ed:98:31:ac:61: bd:61:cd:15:3f:98:e9:8a:0c:96:cb:1b:05:45:43: b8:13:d0:fe:a0:4e:a2:a4:d0:a0:ef:54:ef:33:25: 25:a2:24:37:08:e0:83:5b:bf:74:42:b0:4d:e2:18: ce:c4:39:67:3d:7c:fa:a2:88:47:02:20:f9:f6:84: 3f:a9:60:f2:2a:00:fd:9b:7c:1a:a8:70:63:cf:20: 35:6a:f7:1e:e5:b5:0b:ac:69:6c:07:24:4f:d7:8b: 23:45:d6:b0:b7:8c:c8:40:e7:66:1a:b4:95:be:6f: 56:f8:f1:10:30:44:c4:95:6c:e3:8e:3c:83:94:c8: a7:6a:1e:ca:08:75:fa:95:c8:59:ae:da:e4:1c:75: 3c:30:0b:61:f2:c3:d6:f3:aa:02:a9:89:b3:a5:23: 16:97:2c:b4:2a:32:cc:39:b9:4a:06:28:54:7b:74: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:73:E9:A3:9D:F4:53:95:CB:43:25:AB:83:94:E1:22:3B:20:9A:AD X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e4:0b:9d:ed:72:c3:e7:ab:90:24:a2:09:32:14:1a:99:ce: 38:07:68:db:19:54:08:55:80:04:f3:49:29:e6:eb:1e:bc:29: 44:04:fc:e6:29:f5:96:47:61:0e:ac:5b:a3:80:19:a0:88:8b: 97:41:a8:0c:52:7e:5d:74:1e:3d:48:e6:b9:d9:a9:12:0e:e1: 44:28:0f:01:0d:3d:dc:2f:49:bd:a9:47:07:30:f2:84:ef:6e: 9a:a1:c6:a9:c8:c6:97:6b:d4:29:3a:3b:38:6c:ed:a1:7c:c2: 90:60:dc:34:55:79:16:cf:04:09:3a:61:8c:f4:41:66:bf:1b: 9c:11:36:98:06:f8:85:31:a8:09:f4:45:28:99:ef:45:29:c4: 43:89:70:d6:99:86:64:9b:e4:e7:52:54:9a:8d:28:8a:aa:a8: 03:84:e7:79:df:db:b4:94:df:63:49:cf:bf:b4:e5:5c:28:d3: a2:ca:ab:cb:34:24:25:13:df:52:d1:9c:09:1e:d8:f0:b7:46: d7:f7:44:27:4e:d4:82:f1:d3:46:ad:cd:32:88:93:b4:fa:89: 69:66:80:5e:98:93:1b:0a:77:79:90:4e:a2:39:bb:c9:fc:f8: 23:d4:18:ff:1d:a2:13:69:8c:24:f3:26:85:d3:52:25:c7:7b: 6e:ea:db:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzVSfCMHVc8fbBkQXCQ/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwODIzMTIwMDM3WhcNMjUwODI0MTIwMDM3WjAzMTEwLwYDVQQD EygxMDczZTlhMzlkZjQ1Mzk1Y2I0MzI1YWI4Mzk0ZTEyMjNiMjA5YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjKOmqJ2AwJ46PZrS2hEBpT0cfzU 8DrPOK99BM+ZYbWFZiMp3L5T8SBKdlYNnfD1iD0jL6S9qnXMYKE9lcySejfl1N3Y WdCIVueipLnFjkcAm4gr7ZgxrGG9Yc0VP5jpigyWyxsFRUO4E9D+oE6ipNCg71Tv MyUloiQ3COCDW790QrBN4hjOxDlnPXz6oohHAiD59oQ/qWDyKgD9m3waqHBjzyA1 avce5bULrGlsByRP14sjRdawt4zIQOdmGrSVvm9W+PEQMETElWzjjjyDlMinah7K CHX6lchZrtrkHHU8MAth8sPW86oCqYmzpSMWlyy0KjLMOblKBihUe3SX6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBz6aOd9FOVy0Mlq4OU4SI7IJqtMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOQLne1y w+erkCSiCTIUGpnOOAdo2xlUCFWABPNJKebrHrwpRAT85in1lkdhDqxbo4AZoIiL l0GoDFJ+XXQePUjmudmpEg7hRCgPAQ093C9JvalHBzDyhO9umqHGqcjGl2vUKTo7 OGztoXzCkGDcNFV5Fs8ECTphjPRBZr8bnBE2mAb4hTGoCfRFKJnvRSnEQ4lw1pmG ZJvk51JUmo0oiqqoA4Tned/btJTfY0nPv7TlXCjTosqryzQkJRPfUtGcCR7Y8LdG 1/dEJ07UgvHTRq3NMoiTtPqJaWaAXpiTGwp3eZBOojm7yfz4I9QY/x2iE2mMJPMm hdNSJcd7burbEw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:00 2025 by rpki-client