$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: Wb4cs+YCMQd3EWDEU4txD77dtc4q9duRr+PKBHrpZfo= Subject key identifier: 1B:A0:FC:C1:E8:58:B1:3B:39:D7:BF:1D:47:68:06:3D:55:91:87:8A Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019F921126B60E24674891BE9165D28ECACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 15D3 Signing time: Fri 24 Jul 2026 03:00:25 +0000 Manifest this update: Fri 24 Jul 2026 03:00:25 +0000 Manifest next update: Sat 25 Jul 2026 03:00:25 +0000 Files and hashes: 1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=) 2: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=) 3: A5MPDKoB5Fx6Kv5PUN_xFJLUHIM.roa (hash: Vg1LcQNz/XKk+x/pf6T3VfFuldheMFgMWkJ/JA6myNs=) 4: AhxzP9C0Xy3d2S4k2w7Bmpw6rBA.roa (hash: NHQMdNh4Ym+0k0zIiZ+2OzU8E5q7yos10YV7kXoqN9k=) 5: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=) 6: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=) 7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: F1I1VKq7NZaVYJ9Hac9ejvftfH13kYy9F4opBumfs2o=) 8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=) 9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=) 10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=) 11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=) 12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:11:26:b6:0e:24:67:48:91:be:91:65:d2:8e:ca:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jul 24 03:00:25 2026 GMT Not After : Jul 25 03:00:25 2026 GMT Subject: CN=1ba0fcc1e858b13b39d7bf1d4768063d5591878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:22:cf:7b:d2:4d:da:ed:16:59:91:49:07: dc:55:06:b6:b2:48:c6:8c:1e:a3:21:d8:84:5c:ef: c5:8e:fa:7e:72:02:c4:ed:72:22:ba:d0:37:a1:16: e8:a5:4d:28:3a:59:e1:88:61:08:4e:34:5f:0e:64: 91:b8:76:4c:c1:35:ba:7b:41:1a:f5:5e:ec:30:49: 27:c8:c1:76:53:27:c4:96:81:f4:da:76:d7:f6:7c: 05:d8:3f:02:99:b1:08:76:63:b2:7c:1a:74:f5:af: 0a:46:a4:94:b9:66:23:2b:23:4d:04:69:90:fb:7b: 69:3e:65:40:37:c4:2d:d2:33:4f:f0:20:9a:8e:f2: 2a:d0:d7:ca:66:e0:cf:05:ae:d5:98:6c:1c:9d:1b: 37:3a:cd:00:f1:d2:87:d8:23:ba:40:06:fe:3b:85: d9:8d:6e:db:ea:2f:99:d1:47:7d:9f:44:56:76:b1: 00:ae:5a:0c:42:8f:62:55:c3:48:d3:9b:60:ff:72: 42:39:eb:08:1b:95:60:0c:d9:c5:49:c4:6b:ba:e4: 46:46:01:f8:a1:ee:69:99:56:67:b3:11:56:12:d5: 50:9e:07:2f:4b:55:de:78:58:4e:c5:ee:77:fc:c7: ec:36:f1:81:20:8c:61:25:78:e3:9d:04:9d:93:30: 8c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:FC:C1:E8:58:B1:3B:39:D7:BF:1D:47:68:06:3D:55:91:87:8A X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5b:bf:5c:a1:33:0b:1d:59:c6:04:b0:15:42:0a:7a:c8:57: 5d:ce:c9:6f:09:26:93:99:16:20:87:d8:29:c5:ed:45:ec:ce: 85:79:ee:07:a8:dc:b8:41:2f:c8:0f:d2:f0:f0:24:32:68:af: 9f:a0:cc:df:f0:bd:9a:8e:0b:40:48:42:92:78:40:25:80:cf: 9f:51:d3:d2:1c:12:86:b0:b0:ba:23:84:93:d6:9d:f7:fc:50: 4f:5f:a3:55:3b:4c:f7:b0:60:ce:5e:36:81:c8:54:3f:83:17: d6:e2:d4:04:15:e3:dd:e2:93:d0:20:da:f5:2f:5a:a1:66:78: a8:55:32:cc:ad:89:83:20:25:b5:26:c6:f0:62:52:d0:d0:89: 40:ce:6b:3a:74:ec:18:41:35:bd:06:4b:72:7a:35:25:fd:8f: cb:2d:91:f7:93:2c:97:69:66:b3:cd:ed:41:ee:4a:a6:86:20: f4:63:7a:ee:27:41:0c:92:f6:14:af:f4:d0:dd:6f:c1:5f:62: 5d:92:e7:3e:a1:50:fa:a8:85:9d:a3:f4:ca:f8:23:9e:7b:14: 23:1e:05:79:15:23:0c:0f:86:17:1c:96:88:f6:11:69:f5:46: 44:23:92:2f:08:3c:61:9c:f5:fd:16:ca:1d:ad:93:64:5a:f3: 49:be:da:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SESa2DiRnSJG+kWXSjsrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwNzI0MDMwMDI1WhcNMjYwNzI1MDMwMDI1WjAzMTEwLwYDVQQD EygxYmEwZmNjMWU4NThiMTNiMzlkN2JmMWQ0NzY4MDYzZDU1OTE4NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PUiz3vSTdrtFlmRSQfcVQa2skjG jB6jIdiEXO/Fjvp+cgLE7XIiutA3oRbopU0oOlnhiGEITjRfDmSRuHZMwTW6e0Ea 9V7sMEknyMF2UyfEloH02nbX9nwF2D8CmbEIdmOyfBp09a8KRqSUuWYjKyNNBGmQ +3tpPmVAN8Qt0jNP8CCajvIq0NfKZuDPBa7VmGwcnRs3Os0A8dKH2CO6QAb+O4XZ jW7b6i+Z0Ud9n0RWdrEArloMQo9iVcNI05tg/3JCOesIG5VgDNnFScRruuRGRgH4 oe5pmVZnsxFWEtVQngcvS1XeeFhOxe53/MfsNvGBIIxhJXjjnQSdkzCMwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBug/MHoWLE7Ode/HUdoBj1VkYeKMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFu/XKEz Cx1ZxgSwFUIKeshXXc7Jbwkmk5kWIIfYKcXtRezOhXnuB6jcuEEvyA/S8PAkMmiv n6DM3/C9mo4LQEhCknhAJYDPn1HT0hwShrCwuiOEk9ad9/xQT1+jVTtM97Bgzl42 gchUP4MX1uLUBBXj3eKT0CDa9S9aoWZ4qFUyzK2JgyAltSbG8GJS0NCJQM5rOnTs GEE1vQZLcno1Jf2Pyy2R95Msl2lms83tQe5KpoYg9GN67idBDJL2FK/00N1vwV9i XZLnPqFQ+qiFnaP0yvgjnnsUIx4FeRUjDA+GFxyWiPYRafVGRCOSLwg8YZz1/RbK Ha2TZFrzSb7aQQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:26:03 2026 by rpki-client