$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: g6jTeAuiSLxAyTg0fcM5nHf+zhkmNoB70ytWHWCQzBE= Subject key identifier: 57:A1:FA:AF:E1:61:10:09:EB:F1:0D:81:4E:1D:F9:50:81:23:ED:63 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019D265F2D3AEA2AD51782EFEB6B9C660736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 148D Signing time: Wed 25 Mar 2026 19:01:04 +0000 Manifest this update: Wed 25 Mar 2026 19:01:04 +0000 Manifest next update: Thu 26 Mar 2026 19:01:04 +0000 Files and hashes: 1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=) 2: 6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa (hash: v/QGU12lL7jXnFdRXhuFEp2CT8RQFfRo1Ne+cIb2yis=) 3: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=) 4: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=) 5: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=) 6: ROfnr-yW-JBi8THaR14ceYEf5UU.roa (hash: OKDpfOdHzWNWGSjSI9fchvAxY4jaCD6LSkpW8oCJUZ4=) 7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: WIp1lB4Ge0QjqlRdW+4zmw7vgYX7bRR5JyfyxtKWb8Q=) 8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=) 9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=) 10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=) 11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=) 12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:2d:3a:ea:2a:d5:17:82:ef:eb:6b:9c:66:07:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Mar 25 19:01:04 2026 GMT Not After : Mar 26 19:01:04 2026 GMT Subject: CN=57a1faafe1611009ebf10d814e1df9508123ed63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:ab:4d:02:f6:0c:23:7f:7f:60:5e:36:27: f0:af:58:f4:fc:97:83:6d:16:e0:a8:89:50:63:73: ce:69:c4:9e:ac:ed:03:c8:7f:d4:ea:6f:2c:4f:32: f1:9a:fe:5e:1a:b3:d7:be:de:a0:fc:50:39:13:cd: 26:53:0d:1d:2b:0b:37:c3:1f:57:94:1c:3c:77:31: c5:c1:2d:27:f7:6d:85:42:a0:ea:1b:3d:d3:50:48: f7:23:61:66:87:6e:74:68:00:b7:c2:3d:4a:d2:ce: 7f:02:f1:11:b1:71:32:fa:54:8f:63:44:b0:a9:72: 17:89:79:72:74:12:2a:e6:11:0c:f1:6a:5a:33:75: 85:b1:cf:98:a9:2f:a2:95:e6:85:47:b2:f5:2e:4e: f0:79:f8:72:dc:02:32:e8:4f:e5:be:fe:d3:08:c9: 11:a7:94:f7:90:9e:87:98:58:26:9b:b9:f4:3e:e2: e5:9f:91:6c:c2:3a:70:3d:6c:17:9e:34:e3:09:13: c9:4b:15:1f:98:21:91:96:8e:7e:32:4c:5e:0c:44: 4a:0b:4c:fd:ed:62:3a:4d:02:a8:1e:53:f4:e5:33: be:08:d3:d3:59:4d:d2:ec:24:c2:b8:1d:19:b1:e7: f1:1b:61:77:82:6e:ee:6a:ac:0c:cf:4a:9a:d3:eb: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:FA:AF:E1:61:10:09:EB:F1:0D:81:4E:1D:F9:50:81:23:ED:63 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6b:7f:61:c8:17:30:ee:0f:fe:ac:45:d7:8c:a2:d4:73:65: b9:95:fc:cc:31:fc:18:ea:27:fa:2d:d0:17:02:81:a5:3d:83: 7a:13:f4:c5:9e:1b:da:38:ae:69:ac:5a:26:94:ed:8e:7f:df: a1:eb:35:01:ba:4c:17:47:70:21:20:17:f1:63:cd:d7:df:84: 03:fe:9e:d7:be:10:a3:0b:17:13:b7:4e:3c:89:bc:d1:2b:93: c9:8f:34:95:71:19:19:2c:b4:9a:6b:44:da:14:54:98:1c:86: 15:40:1e:08:a8:16:ca:86:09:de:47:32:aa:23:07:28:f9:8d: 0f:17:f1:b9:33:50:75:79:f7:cc:f4:0d:4e:2c:03:db:95:eb: 51:1d:e2:81:84:ff:9a:fa:7e:c9:a6:3a:27:a1:21:a5:d3:31: cb:c2:59:6d:54:4d:63:21:6a:0d:43:60:90:43:fb:9c:6e:aa: 58:dd:c3:44:cb:70:b8:d4:29:b9:66:20:a8:a7:93:4d:db:1f: a8:3e:87:45:72:d3:20:9c:61:12:7d:3f:64:f7:48:53:93:85: 65:94:e3:ce:b4:9c:30:33:37:e4:bf:af:33:1d:56:01:cb:c1: 36:1c:59:41:a7:7d:27:c6:f6:29:7a:a8:49:f0:14:38:d9:9e: 75:0c:f5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mXy066irVF4Lv62ucZgc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMzI1MTkwMTA0WhcNMjYwMzI2MTkwMTA0WjAzMTEwLwYDVQQD Eyg1N2ExZmFhZmUxNjExMDA5ZWJmMTBkODE0ZTFkZjk1MDgxMjNlZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyWrTQL2DCN/f2BeNifwr1j0/JeD bRbgqIlQY3POacSerO0DyH/U6m8sTzLxmv5eGrPXvt6g/FA5E80mUw0dKws3wx9X lBw8dzHFwS0n922FQqDqGz3TUEj3I2Fmh250aAC3wj1K0s5/AvERsXEy+lSPY0Sw qXIXiXlydBIq5hEM8WpaM3WFsc+YqS+ileaFR7L1Lk7wefhy3AIy6E/lvv7TCMkR p5T3kJ6HmFgmm7n0PuLln5FswjpwPWwXnjTjCRPJSxUfmCGRlo5+MkxeDERKC0z9 7WI6TQKoHlP05TO+CNPTWU3S7CTCuB0ZsefxG2F3gm7uaqwMz0qa0+uW7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeh+q/hYRAJ6/ENgU4d+VCBI+1jMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWt/YcgX MO4P/qxF14yi1HNluZX8zDH8GOon+i3QFwKBpT2DehP0xZ4b2jiuaaxaJpTtjn/f oes1AbpMF0dwISAX8WPN19+EA/6e174QowsXE7dOPIm80SuTyY80lXEZGSy0mmtE 2hRUmByGFUAeCKgWyoYJ3kcyqiMHKPmNDxfxuTNQdXn3zPQNTiwD25XrUR3igYT/ mvp+yaY6J6EhpdMxy8JZbVRNYyFqDUNgkEP7nG6qWN3DRMtwuNQpuWYgqKeTTdsf qD6HRXLTIJxhEn0/ZPdIU5OFZZTjzrScMDM35L+vMx1WAcvBNhxZQad9J8b2KXqo SfAUONmedQz1ww== -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:40 2026 by rpki-client