$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: JMNkC+WLD032RgQ6Q+RWCVpjhLCgkuZT1jvACyyLxK4= Subject key identifier: 86:BD:C5:C5:79:3A:4B:F9:CE:08:76:D8:E3:FB:6F:02:1A:D9:DC:74 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 0196BD498F77A37DED673ADB9ECE044255B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1135 Signing time: Sun 11 May 2025 03:00:36 +0000 Manifest this update: Sun 11 May 2025 03:00:36 +0000 Manifest next update: Mon 12 May 2025 03:00:36 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 8: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 9: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: 6OXKLqRW11GcLbb7YrSActUs/io51CYm/BeED7s80R4=) 10: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 11: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 12: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 13: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) 14: vxIQauwrKYzhLqpR5ts19_s3Gik.roa (hash: EKZXt/kpQu59j0wMTCR+uQUX4jQn6+dN2RIU5r3Do0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:49:8f:77:a3:7d:ed:67:3a:db:9e:ce:04:42:55:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: May 11 03:00:36 2025 GMT Not After : May 12 03:00:36 2025 GMT Subject: CN=86bdc5c5793a4bf9ce0876d8e3fb6f021ad9dc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:6f:a3:4d:21:d7:57:57:24:28:13:1a:49: 8f:e9:04:7b:76:91:7b:16:4a:98:c3:a2:97:e6:72: 26:31:e5:1d:84:6d:f7:6b:9d:01:4a:9b:43:df:e5: 1d:cb:6b:eb:16:ff:58:a8:9e:c5:99:8a:5a:65:88: c4:96:42:a6:24:86:58:9b:51:0e:84:71:51:ae:cc: b7:5a:62:3a:fd:10:cf:60:7c:a4:42:df:17:21:72: 39:32:21:11:b4:6b:e1:f6:56:62:16:22:ce:89:4f: ee:fb:75:3a:f0:65:58:6a:2b:d0:81:b0:34:76:7a: cf:c1:0b:93:d5:bb:bc:39:8a:52:96:07:4f:aa:c2: 56:73:b1:75:75:f9:c3:17:48:64:3d:1c:c2:2e:f9: 3f:d1:00:d6:44:5c:ff:d2:49:dd:5b:f5:13:4e:b1: fc:be:64:2e:5f:01:b4:b1:c1:69:9d:65:8a:a7:e9: a7:64:36:b4:ef:a4:cf:cd:2d:05:e8:59:2a:27:97: fd:9a:bd:24:30:8a:f9:e3:85:b3:53:40:cf:bd:dc: c7:91:ae:51:77:f3:18:0f:ec:d3:86:e0:fe:29:8f: dc:6c:40:6c:54:e1:7a:94:b9:0b:ab:c3:80:a6:4f: ce:6e:74:8a:7f:9d:6f:34:64:69:87:74:1a:7a:a6: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BD:C5:C5:79:3A:4B:F9:CE:08:76:D8:E3:FB:6F:02:1A:D9:DC:74 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9a:dc:b8:40:1c:d6:3b:7d:19:25:b5:5f:b4:ba:5b:73:7d: 95:d5:ec:c1:6d:af:82:18:e5:75:4b:72:39:8a:ab:de:8f:09: fe:39:67:52:06:e8:8b:d4:ce:1b:4e:c1:40:7b:14:ad:dc:b5: c9:b4:7a:a3:ee:4b:17:ef:e2:f0:61:d9:54:1f:8c:50:d7:8e: cc:69:e4:df:ab:bd:ec:b9:e6:d6:e6:74:2c:f8:96:f0:be:5c: ba:b1:e5:34:5c:03:01:15:b8:e9:03:ed:d8:c0:b2:18:e6:2b: 8c:84:f0:f2:eb:11:52:3e:49:fb:9e:ef:4e:21:f6:35:49:26: 71:e3:a2:b9:90:8b:e0:44:4d:c7:40:24:66:95:30:ff:56:a2: e8:7c:16:ce:a9:e5:17:36:7f:3f:51:bc:90:49:dd:b0:ab:b3: 0c:e0:9b:6b:a9:06:04:e5:b8:b6:d7:14:e8:b0:10:a2:8d:12: 74:9b:6f:60:b4:3f:06:46:52:46:75:3e:39:44:ee:d6:6c:8a: 99:ce:95:c4:2f:25:8b:4b:99:3b:a7:22:0d:ee:17:cc:ff:a8: 16:18:58:3b:61:6c:4c:e7:d8:44:39:ca:40:8b:73:f7:1e:90: e0:3a:87:c6:0e:af:56:5b:47:1a:74:9d:4d:8f:97:20:6c:aa: 2a:2c:e3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9SY93o33tZzrbns4EQlW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNTExMDMwMDM2WhcNMjUwNTEyMDMwMDM2WjAzMTEwLwYDVQQD Eyg4NmJkYzVjNTc5M2E0YmY5Y2UwODc2ZDhlM2ZiNmYwMjFhZDlkYzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB9vo00h11dXJCgTGkmP6QR7dpF7 FkqYw6KX5nImMeUdhG33a50BSptD3+Udy2vrFv9YqJ7FmYpaZYjElkKmJIZYm1EO hHFRrsy3WmI6/RDPYHykQt8XIXI5MiERtGvh9lZiFiLOiU/u+3U68GVYaivQgbA0 dnrPwQuT1bu8OYpSlgdPqsJWc7F1dfnDF0hkPRzCLvk/0QDWRFz/0kndW/UTTrH8 vmQuXwG0scFpnWWKp+mnZDa076TPzS0F6FkqJ5f9mr0kMIr544WzU0DPvdzHka5R d/MYD+zThuD+KY/cbEBsVOF6lLkLq8OApk/ObnSKf51vNGRph3QaeqYeAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa9xcV5Okv5zgh22OP7bwIa2dx0MB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZrcuEAc 1jt9GSW1X7S6W3N9ldXswW2vghjldUtyOYqr3o8J/jlnUgboi9TOG07BQHsUrdy1 ybR6o+5LF+/i8GHZVB+MUNeOzGnk36u97Lnm1uZ0LPiW8L5curHlNFwDARW46QPt 2MCyGOYrjITw8usRUj5J+57vTiH2NUkmceOiuZCL4ERNx0AkZpUw/1ai6HwWzqnl FzZ/P1G8kEndsKuzDOCba6kGBOW4ttcU6LAQoo0SdJtvYLQ/BkZSRnU+OUTu1myK mc6VxC8li0uZO6ciDe4XzP+oFhhYO2FsTOfYRDnKQItz9x6Q4DqHxg6vVltHGnSd TY+XIGyqKizjMg== -----END CERTIFICATE-----Generated at Sun May 11 13:24:23 2025 by rpki-client