$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: NtDrFY2fhMIxKIHbZdtx97GHlJcpynNCLi/P7dL0v70= Subject key identifier: 42:16:C1:E0:70:E4:17:A9:52:BC:A8:4C:D0:D1:BB:28:31:73:35:34 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 0197C64A7E772C715F3DF01650B3313D3E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 11BF Signing time: Tue 01 Jul 2025 14:01:00 +0000 Manifest this update: Tue 01 Jul 2025 14:01:00 +0000 Manifest next update: Wed 02 Jul 2025 14:01:00 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: HqTkTyCmITJYtQvVra0TKcTJr0kuippAzE5zzxVtq04=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c6:4a:7e:77:2c:71:5f:3d:f0:16:50:b3:31:3d:3e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jul 1 14:01:00 2025 GMT Not After : Jul 2 14:01:00 2025 GMT Subject: CN=4216c1e070e417a952bca84cd0d1bb2831733534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:04:3d:77:d9:02:47:db:97:a0:f7:88:d8: 03:ae:ad:8b:01:46:fc:37:39:34:66:91:a3:73:59: 89:52:e3:79:48:4f:b8:ae:44:d6:bf:7d:30:1f:29: 6b:2f:4d:ca:fa:cf:f8:68:6b:ed:42:9e:d2:6b:da: a5:24:df:f4:8e:6b:51:35:cb:2d:20:3d:f6:6e:d9: 17:e1:2a:ec:8f:81:68:a0:d7:de:c1:7d:c8:70:99: 06:3c:a3:2c:11:1b:78:a4:66:88:8b:ef:b5:ef:09: cc:fe:72:bc:cb:8c:dc:52:7a:76:59:46:eb:ce:27: bb:74:e4:5c:a6:90:a1:59:90:13:ed:20:e6:ac:d2: df:07:2d:c6:6b:cf:78:a0:38:28:93:68:ac:e5:44: 77:d6:31:ce:34:b3:4d:2d:ed:7c:23:62:d8:ae:a6: 5a:2e:5b:ea:f9:a0:7d:cc:98:bf:94:10:95:54:5e: fd:14:51:f4:d4:86:8d:a9:7b:5c:50:be:4e:98:b8: e5:02:e1:98:22:7c:0d:14:34:cc:01:9c:88:2e:05: 1d:f6:83:d4:16:8b:f8:50:99:1e:08:05:00:c3:0c: f8:cf:a1:ad:6d:5c:84:70:90:b8:ac:e7:de:48:93: 15:c7:0e:27:85:bc:cd:30:5a:b8:6d:a0:6a:0b:0d: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:16:C1:E0:70:E4:17:A9:52:BC:A8:4C:D0:D1:BB:28:31:73:35:34 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fb:d0:73:28:58:06:0e:0c:57:26:22:6e:18:11:63:11:0a: 61:96:40:8d:69:86:65:a4:63:b1:c5:8c:54:13:f9:56:2c:d8: 69:8d:2d:a4:10:a4:a7:f2:ad:01:b0:a9:df:87:11:34:f3:38: fb:72:65:4b:56:b8:15:01:41:12:fe:07:71:49:21:72:df:57: 4b:16:66:bc:6a:88:13:da:81:9d:a8:a0:4f:40:b5:7d:88:a1: 8b:af:da:0d:a0:1a:15:78:0f:be:97:fa:d8:ba:ad:1a:a9:d8: 5e:0e:cf:0c:b2:a7:ac:cd:c6:e8:8a:e0:b7:af:8c:c1:8f:95: ee:bb:70:17:c7:0e:08:0c:f0:b7:8b:72:0a:d7:02:bc:f9:6f: d9:f6:5e:77:12:4c:a5:48:f9:1e:4a:b8:9b:39:de:c2:3d:67: cc:5e:4a:61:2b:80:5d:43:3e:89:f8:8c:52:04:71:9d:5d:ed: de:e6:24:9d:a2:69:9e:aa:2a:d6:45:a5:2a:fb:c0:94:1f:83: 82:bb:0a:4d:b8:ae:c5:c1:9f:7a:07:76:5d:74:b1:5f:90:6b: f6:58:12:ac:fb:ab:cd:b6:6a:c2:93:a5:c9:f8:ee:e2:8d:63: a1:74:a9:f2:f1:20:64:0c:51:ae:e3:d9:18:26:61:f0:e4:b9: 54:a5:19:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfGSn53LHFfPfAWULMxPT4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNzAxMTQwMTAwWhcNMjUwNzAyMTQwMTAwWjAzMTEwLwYDVQQD Eyg0MjE2YzFlMDcwZTQxN2E5NTJiY2E4NGNkMGQxYmIyODMxNzMzNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKoEPXfZAkfbl6D3iNgDrq2LAUb8 Nzk0ZpGjc1mJUuN5SE+4rkTWv30wHylrL03K+s/4aGvtQp7Sa9qlJN/0jmtRNcst ID32btkX4Srsj4FooNfewX3IcJkGPKMsERt4pGaIi++17wnM/nK8y4zcUnp2WUbr zie7dORcppChWZAT7SDmrNLfBy3Ga894oDgok2is5UR31jHONLNNLe18I2LYrqZa Llvq+aB9zJi/lBCVVF79FFH01IaNqXtcUL5OmLjlAuGYInwNFDTMAZyILgUd9oPU Fov4UJkeCAUAwwz4z6GtbVyEcJC4rOfeSJMVxw4nhbzNMFq4baBqCw1IlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIWweBw5BepUryoTNDRuygxczU0MB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifvQcyhY Bg4MVyYibhgRYxEKYZZAjWmGZaRjscWMVBP5VizYaY0tpBCkp/KtAbCp34cRNPM4 +3JlS1a4FQFBEv4HcUkhct9XSxZmvGqIE9qBnaigT0C1fYihi6/aDaAaFXgPvpf6 2LqtGqnYXg7PDLKnrM3G6Irgt6+MwY+V7rtwF8cOCAzwt4tyCtcCvPlv2fZedxJM pUj5Hkq4mznewj1nzF5KYSuAXUM+ifiMUgRxnV3t3uYknaJpnqoq1kWlKvvAlB+D grsKTbiuxcGfegd2XXSxX5Br9lgSrPurzbZqwpOlyfju4o1joXSp8vEgZAxRruPZ GCZh8OS5VKUZrA== -----END CERTIFICATE-----Generated at Tue Jul 1 21:20:51 2025 by rpki-client