$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: 5UnrhaytYbQFGCjoa2/il6lZyZNtZftOrCyiK9MUjuk= Subject key identifier: 10:0D:6C:0A:4D:40:92:73:2B:AC:89:2D:AE:CA:5A:27:94:65:73:57 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 01976D746175B0100358689C071F73F99A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1191 Signing time: Sat 14 Jun 2025 08:00:32 +0000 Manifest this update: Sat 14 Jun 2025 08:00:32 +0000 Manifest next update: Sun 15 Jun 2025 08:00:32 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: RU9jcgdKvs4rzR1IUXFtP10RZYOSPWDtozEZtlAXnik=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:74:61:75:b0:10:03:58:68:9c:07:1f:73:f9:9a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jun 14 08:00:32 2025 GMT Not After : Jun 15 08:00:32 2025 GMT Subject: CN=100d6c0a4d4092732bac892daeca5a2794657357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:25:91:94:f2:f1:08:6e:be:10:f1:e9:f4: b2:4f:d7:5d:a5:6c:6b:9a:2b:25:68:c5:cd:0a:0c: f6:2d:b9:ba:66:6e:84:84:95:68:d1:93:1e:e0:da: b1:9d:a6:7e:cf:d0:42:89:50:23:11:6a:17:18:c3: 22:c9:e1:d6:b1:b3:05:ba:00:9b:5d:8c:a8:57:c9: 62:59:67:38:33:f8:3c:bc:7d:5c:cc:22:cb:eb:0c: 63:87:9b:b5:c5:71:6f:a3:09:3c:9d:d6:a1:73:d6: dc:de:f2:e4:10:00:65:58:1a:23:1e:9f:43:69:fe: ce:1d:d7:f6:02:fa:41:4b:c4:3d:5f:54:58:32:f4: 47:09:05:65:e7:d3:32:30:41:84:1d:4d:84:62:98: d3:62:69:9a:41:4f:f7:55:d8:75:ab:13:02:89:15: ed:3b:84:ca:f0:be:99:6e:be:a7:5e:3c:c5:54:4f: 85:47:13:d7:53:c7:51:5a:df:d1:24:a5:8e:20:56: 0a:1b:1e:95:49:35:ee:8a:94:47:23:4b:76:61:18: 72:a8:7e:43:ac:b1:f1:f5:a7:31:87:d0:80:fe:dd: e9:9b:b4:dc:6e:7b:94:ac:e4:a2:a9:d9:f5:76:50: 64:1f:2d:d0:ff:ba:db:cc:07:74:df:fa:81:24:34: ca:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:6C:0A:4D:40:92:73:2B:AC:89:2D:AE:CA:5A:27:94:65:73:57 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bd:82:2d:bd:be:4a:43:bb:68:14:4b:5c:c2:6d:8f:02:01: bb:ae:81:70:0a:3e:d3:58:0e:f2:74:4b:1d:29:dc:31:48:b9: 95:59:73:7c:be:01:de:39:d0:be:f0:74:09:be:63:fd:2f:fa: d5:a8:7a:0a:ad:6f:ba:33:e6:dc:f5:83:e1:aa:6a:b1:86:86: 03:2f:f8:44:64:94:d5:f0:95:70:8e:51:98:45:8e:df:1c:3e: 3c:d1:58:7b:88:37:00:65:f4:05:d6:e8:9b:bf:5a:c5:47:1d: d6:62:e7:a0:19:c0:8a:c2:ed:e5:4f:34:b1:83:7e:05:fd:1c: 7c:11:6d:fd:1f:7d:df:6a:a1:fc:35:ab:8c:7b:bf:fd:4b:00: d9:7c:cf:16:c7:83:0d:11:ff:a0:69:f3:47:67:23:6f:67:53: 40:3e:60:ab:61:ba:1e:9a:ee:46:24:0d:a5:3a:3a:1f:89:21: 07:e8:83:8a:99:04:37:11:19:08:2f:9b:0f:f9:fd:12:c9:8f: 65:ce:56:43:17:fb:cf:da:f2:73:60:46:36:00:18:64:e5:5c: 95:73:28:32:ed:03:e5:54:f6:1d:fe:d0:36:72:83:8f:61:96: 08:96:7d:85:e6:d5:6b:c4:0c:e7:9d:4a:85:dd:8f:3b:a2:37: 5f:b7:14:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtdGF1sBADWGicBx9z+ZpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNjE0MDgwMDMyWhcNMjUwNjE1MDgwMDMyWjAzMTEwLwYDVQQD EygxMDBkNmMwYTRkNDA5MjczMmJhYzg5MmRhZWNhNWEyNzk0NjU3MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLwlkZTy8QhuvhDx6fSyT9ddpWxr mislaMXNCgz2Lbm6Zm6EhJVo0ZMe4NqxnaZ+z9BCiVAjEWoXGMMiyeHWsbMFugCb XYyoV8liWWc4M/g8vH1czCLL6wxjh5u1xXFvowk8ndahc9bc3vLkEABlWBojHp9D af7OHdf2AvpBS8Q9X1RYMvRHCQVl59MyMEGEHU2EYpjTYmmaQU/3Vdh1qxMCiRXt O4TK8L6Zbr6nXjzFVE+FRxPXU8dRWt/RJKWOIFYKGx6VSTXuipRHI0t2YRhyqH5D rLHx9acxh9CA/t3pm7TcbnuUrOSiqdn1dlBkHy3Q/7rbzAd03/qBJDTKXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBANbApNQJJzK6yJLa7KWieUZXNXMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL2CLb2+ SkO7aBRLXMJtjwIBu66BcAo+01gO8nRLHSncMUi5lVlzfL4B3jnQvvB0Cb5j/S/6 1ah6Cq1vujPm3PWD4apqsYaGAy/4RGSU1fCVcI5RmEWO3xw+PNFYe4g3AGX0Bdbo m79axUcd1mLnoBnAisLt5U80sYN+Bf0cfBFt/R9932qh/DWrjHu//UsA2XzPFseD DRH/oGnzR2cjb2dTQD5gq2G6HpruRiQNpTo6H4khB+iDipkENxEZCC+bD/n9EsmP Zc5WQxf7z9ryc2BGNgAYZOVclXMoMu0D5VT2Hf7QNnKDj2GWCJZ9hebVa8QM551K hd2PO6I3X7cUZw== -----END CERTIFICATE-----Generated at Sat Jun 14 13:08:06 2025 by rpki-client