$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: PPlb3NIppph+/cklCcPkB6JtdxSOLgKQ00RiQ55nAT0= Subject key identifier: C7:0C:51:3E:70:6A:BE:74:0F:DF:8B:05:D4:56:68:E1:C9:A5:1B:1B Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019889574453ECF2074B5EDFA919D7CCE931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1224 Signing time: Fri 08 Aug 2025 11:00:54 +0000 Manifest this update: Fri 08 Aug 2025 11:00:54 +0000 Manifest next update: Sat 09 Aug 2025 11:00:54 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 8: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 9: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 10: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: DFJn3P5ftzJ7bArzaEvHH8AlXTuVLzFO4/tVjOYHlmg=) 11: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 13: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 14: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:57:44:53:ec:f2:07:4b:5e:df:a9:19:d7:cc:e9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Aug 8 11:00:54 2025 GMT Not After : Aug 9 11:00:54 2025 GMT Subject: CN=c70c513e706abe740fdf8b05d45668e1c9a51b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:cc:c4:b5:86:da:9d:de:47:ef:9d:38:e4: c4:0a:f3:0a:41:f0:2c:78:7d:9c:f3:35:e9:3a:d3: 65:ac:c8:af:e3:8b:35:7f:ab:15:87:0b:6b:78:c1: 3b:d6:2b:ec:d3:36:d3:91:22:e4:d0:99:6d:8b:3f: 7f:0b:43:27:6a:27:4d:f2:91:df:6c:f7:a1:27:80: 8d:b6:12:61:5f:3c:c2:35:b8:29:3c:86:df:1b:c6: 7c:56:30:e3:3a:b3:df:67:d6:71:65:42:c8:99:f3: 9e:73:28:98:07:7c:f0:7d:c0:01:50:6b:21:39:7e: 37:24:e9:d1:b3:45:37:1c:73:2f:d8:56:95:11:9b: e7:d9:7f:57:65:83:46:04:07:4d:1f:2e:09:b6:53: a5:88:fa:96:1d:2e:3d:ce:e3:6a:02:62:87:80:d4: 51:8e:a5:92:84:b3:6d:2d:71:28:40:7c:91:83:dc: 0b:c5:ab:17:a5:84:b1:67:b2:f8:5f:26:79:6b:2c: a0:0e:45:b0:3a:e0:17:b6:9b:5a:22:8f:35:14:cc: 1a:bc:6f:a0:0f:26:73:fa:57:b3:2b:bc:99:b8:8f: b4:42:8a:d2:3a:83:ce:74:c4:bc:e0:ff:8a:33:52: 3c:3f:a1:42:00:0c:53:96:fa:f9:2c:d1:01:10:c6: 7c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:51:3E:70:6A:BE:74:0F:DF:8B:05:D4:56:68:E1:C9:A5:1B:1B X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:f4:92:44:3c:4a:66:32:36:d9:dd:cd:0e:de:3f:8d:53: 0f:fd:25:16:28:d8:b5:c2:44:98:79:ce:04:cc:30:c1:89:b0: 78:83:90:9e:06:ec:bd:64:c9:df:1a:db:64:4f:0b:5f:da:2a: 3e:1b:fb:a1:44:0b:73:99:15:2f:9f:a1:21:6b:39:44:5e:0c: fc:ce:76:7c:1c:51:07:68:bd:25:53:e9:72:b4:09:8f:13:fb: 83:08:75:94:9d:e5:17:35:4d:22:bf:6f:1d:f3:b3:60:7a:cd: 93:c2:3e:a4:ad:73:00:1c:28:35:eb:7d:b4:ca:9c:96:19:40: 9a:e0:34:f0:33:40:bc:f5:39:06:f5:97:cf:45:90:1a:20:7e: 58:cd:62:76:bb:04:9d:5a:82:6f:35:99:1d:00:d5:a9:8c:9a: 7b:82:9c:da:36:3d:de:c1:33:07:77:6e:52:e9:27:39:a0:5c: 44:b7:41:b3:9c:13:4e:c9:09:28:18:db:b0:a7:1c:23:32:df: 76:bd:f5:e5:0c:7b:0d:39:cd:42:d0:82:01:ff:8e:97:b6:1d: f6:8d:a0:cf:dc:16:11:7f:38:d5:73:dc:b9:4a:0f:31:25:90: 49:d9:01:86:26:fd:1a:d7:df:3d:59:4b:32:e4:9f:fe:a0:f6: 42:9c:a6:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJV0RT7PIHS17fqRnXzOkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwODA4MTEwMDU0WhcNMjUwODA5MTEwMDU0WjAzMTEwLwYDVQQD EyhjNzBjNTEzZTcwNmFiZTc0MGZkZjhiMDVkNDU2NjhlMWM5YTUxYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCjMxLWG2p3eR++dOOTECvMKQfAs eH2c8zXpOtNlrMiv44s1f6sVhwtreME71ivs0zbTkSLk0Jltiz9/C0MnaidN8pHf bPehJ4CNthJhXzzCNbgpPIbfG8Z8VjDjOrPfZ9ZxZULImfOecyiYB3zwfcABUGsh OX43JOnRs0U3HHMv2FaVEZvn2X9XZYNGBAdNHy4JtlOliPqWHS49zuNqAmKHgNRR jqWShLNtLXEoQHyRg9wLxasXpYSxZ7L4XyZ5ayygDkWwOuAXtptaIo81FMwavG+g DyZz+lezK7yZuI+0QorSOoPOdMS84P+KM1I8P6FCAAxTlvr5LNEBEMZ8kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcMUT5war50D9+LBdRWaOHJpRsbMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjv0kkQ8 SmYyNtndzQ7eP41TD/0lFijYtcJEmHnOBMwwwYmweIOQngbsvWTJ3xrbZE8LX9oq Phv7oUQLc5kVL5+hIWs5RF4M/M52fBxRB2i9JVPpcrQJjxP7gwh1lJ3lFzVNIr9v HfOzYHrNk8I+pK1zABwoNet9tMqclhlAmuA08DNAvPU5BvWXz0WQGiB+WM1idrsE nVqCbzWZHQDVqYyae4Kc2jY93sEzB3duUuknOaBcRLdBs5wTTskJKBjbsKccIzLf dr315Qx7DTnNQtCCAf+Ol7Yd9o2gz9wWEX841XPcuUoPMSWQSdkBhib9GtffPVlL MuSf/qD2QpymQQ== -----END CERTIFICATE-----Generated at Fri Aug 8 13:11:24 2025 by rpki-client