$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: P5oBqHC80gcH8O7MsOufeovjrq2gdPe1jWrbveJCV5o= Subject key identifier: BF:E3:1A:71:7E:19:A6:49:1F:57:99:B3:0C:79:96:5A:2E:88:EB:1B Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019E1D905EE08598C3B52AEA0CFA2086773E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 150D Signing time: Tue 12 May 2026 19:01:00 +0000 Manifest this update: Tue 12 May 2026 19:01:00 +0000 Manifest next update: Wed 13 May 2026 19:01:00 +0000 Files and hashes: 1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=) 2: 6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa (hash: v/QGU12lL7jXnFdRXhuFEp2CT8RQFfRo1Ne+cIb2yis=) 3: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=) 4: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=) 5: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=) 6: ROfnr-yW-JBi8THaR14ceYEf5UU.roa (hash: OKDpfOdHzWNWGSjSI9fchvAxY4jaCD6LSkpW8oCJUZ4=) 7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: mvaIxjUxHHTljGvOpfMfumTUMAuhYtPH/+V/emA5gpM=) 8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=) 9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=) 10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=) 11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=) 12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:5e:e0:85:98:c3:b5:2a:ea:0c:fa:20:86:77:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: May 12 19:01:00 2026 GMT Not After : May 13 19:01:00 2026 GMT Subject: CN=bfe31a717e19a6491f5799b30c79965a2e88eb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:ed:85:d3:d5:b1:90:c1:8e:b4:24:b1:2a: 29:62:f4:2f:d8:fe:b3:2a:7f:86:52:45:b5:92:21: 28:42:4b:6b:0a:28:6c:bc:88:68:c4:59:a2:3a:41: fb:a1:bf:02:fa:6b:a9:ec:4f:f2:b9:d5:72:0f:29: c1:53:42:4b:97:4d:01:94:5a:35:03:a7:dd:5a:51: a2:70:9e:5d:73:5a:d1:30:79:36:4a:9d:d7:2f:e3: 81:88:60:02:60:93:14:84:ee:e9:25:78:21:e0:0b: 9d:c7:5b:ba:b7:20:62:4b:7a:4c:83:e0:63:e9:a1: 6e:1e:c1:15:d4:8a:ae:3a:f3:34:c1:63:32:49:b8: 02:b2:63:37:87:4a:48:76:4c:82:35:58:9a:aa:06: 4a:0b:b3:f2:b8:75:a9:1c:0b:7f:11:c7:59:e2:a0: 4e:ff:8c:36:22:8d:0a:ac:0e:8d:6a:f5:09:33:70: 64:fb:e3:26:1b:54:85:d9:92:7e:5e:ef:36:72:41: 09:0c:38:ef:b7:66:39:5d:37:e7:0f:16:3a:04:83: e5:65:f6:e5:d9:5f:49:08:cd:05:e5:d2:4b:94:5a: fb:5c:c5:08:49:92:5d:33:b3:e7:90:77:8d:88:51: 9e:18:f4:87:04:17:89:06:23:66:e2:15:5d:14:a1: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:1A:71:7E:19:A6:49:1F:57:99:B3:0C:79:96:5A:2E:88:EB:1B X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:67:91:7a:68:f0:cd:45:f1:e9:a5:c5:2e:40:28:4b:9c:c2: bc:04:92:7e:3d:ca:bd:26:1e:ca:7a:70:94:85:18:18:f1:23: 7d:d9:5f:89:dd:38:30:bd:e7:2d:4f:6c:9f:bd:f5:ad:5f:31: 11:e4:f7:a3:7a:ea:57:48:a9:d0:d9:2f:39:21:cf:db:dc:e6: e5:a1:5f:37:4d:89:94:de:ad:65:fc:aa:10:b3:db:76:53:6b: a1:8c:ce:50:b1:e7:1b:37:d0:4b:cc:2f:a9:46:ba:67:b6:23: ef:bb:15:bc:d6:c0:74:ce:aa:02:b9:77:21:b5:4e:c6:a9:0e: 3d:28:68:a1:4a:9a:5c:81:6a:19:93:00:83:60:02:d8:29:fb: 32:27:6e:1b:0b:67:73:f9:fc:70:41:39:51:fe:18:f0:01:d1: f8:8c:05:1f:d5:ea:e2:b7:72:c9:fa:4a:d0:a4:9b:c4:53:ef: 44:ea:8e:87:9c:4c:56:8f:a7:cd:d9:f7:1b:a7:cc:ba:b5:f5: 2c:18:e6:7c:bd:a5:f9:45:b0:c9:27:80:cd:9f:49:9c:25:6e: 6a:88:fe:da:b9:be:72:3d:b2:2e:44:f5:df:fe:f8:d7:12:58: f1:e3:ef:3a:be:35:20:5c:9e:61:c8:25:c8:ba:b8:fc:de:9f: d1:79:a5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkF7ghZjDtSrqDPoghnc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwNTEyMTkwMTAwWhcNMjYwNTEzMTkwMTAwWjAzMTEwLwYDVQQD EyhiZmUzMWE3MTdlMTlhNjQ5MWY1Nzk5YjMwYzc5OTY1YTJlODhlYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7vthdPVsZDBjrQksSopYvQv2P6z Kn+GUkW1kiEoQktrCihsvIhoxFmiOkH7ob8C+mup7E/yudVyDynBU0JLl00BlFo1 A6fdWlGicJ5dc1rRMHk2Sp3XL+OBiGACYJMUhO7pJXgh4Audx1u6tyBiS3pMg+Bj 6aFuHsEV1IquOvM0wWMySbgCsmM3h0pIdkyCNViaqgZKC7PyuHWpHAt/EcdZ4qBO /4w2Io0KrA6NavUJM3Bk++MmG1SF2ZJ+Xu82ckEJDDjvt2Y5XTfnDxY6BIPlZfbl 2V9JCM0F5dJLlFr7XMUISZJdM7PnkHeNiFGeGPSHBBeJBiNm4hVdFKHKgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/jGnF+GaZJH1eZswx5llouiOsbMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2eRemjw zUXx6aXFLkAoS5zCvASSfj3KvSYeynpwlIUYGPEjfdlfid04ML3nLU9sn731rV8x EeT3o3rqV0ip0NkvOSHP29zm5aFfN02JlN6tZfyqELPbdlNroYzOULHnGzfQS8wv qUa6Z7Yj77sVvNbAdM6qArl3IbVOxqkOPShooUqaXIFqGZMAg2AC2Cn7MiduGwtn c/n8cEE5Uf4Y8AHR+IwFH9Xq4rdyyfpK0KSbxFPvROqOh5xMVo+nzdn3G6fMurX1 LBjmfL2l+UWwySeAzZ9JnCVuaoj+2rm+cj2yLkT13/741xJY8ePvOr41IFyeYcgl yLq4/N6f0XmlEA== -----END CERTIFICATE-----Generated at Wed May 13 01:24:08 2026 by rpki-client