$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: x+x1KfoXfH+VfWi1EnNxKu0dkdMiVrpoao0ZqNOt+2M= Subject key identifier: 7B:06:E1:76:EE:F8:33:DF:8A:FD:A8:B4:08:54:82:38:2C:38:4F:97 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 0196816B8117A268AF183DD58604FA39A953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1116 Signing time: Tue 29 Apr 2025 12:00:28 +0000 Manifest this update: Tue 29 Apr 2025 12:00:28 +0000 Manifest next update: Wed 30 Apr 2025 12:00:28 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: ETvmywd5Rir-J3y7qRm8frtoDkU.roa (hash: bjOrlkCANJ5B71U0IjD7OIaGchmcfn7UmglfHnTETsU=) 5: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (hash: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=) 6: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 7: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 8: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 9: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: T7NcrzEpA6tNTpXwpH4zvYH3gizXKDmX12AdwpCIlx0=) 10: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 11: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) 12: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=) 13: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=) 14: vxIQauwrKYzhLqpR5ts19_s3Gik.roa (hash: EKZXt/kpQu59j0wMTCR+uQUX4jQn6+dN2RIU5r3Do0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:81:6b:81:17:a2:68:af:18:3d:d5:86:04:fa:39:a9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Apr 29 12:00:28 2025 GMT Not After : Apr 30 12:00:28 2025 GMT Subject: CN=7b06e176eef833df8afda8b4085482382c384f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:b0:ef:06:19:d8:01:2b:89:82:9f:ab:2a: 32:a0:8a:54:ce:8d:8d:ca:9b:c8:28:92:86:68:82: 6b:30:a2:f0:ca:b2:60:a6:c6:04:9e:9f:37:fa:db: 58:84:e3:5b:34:57:78:72:df:ea:27:92:3c:ed:f6: 6b:5d:e7:7c:53:3c:b3:58:ed:59:0a:5a:bd:b9:39: db:ef:33:32:a2:a1:34:91:2d:06:e0:fc:b5:7b:71: ea:ef:f7:d8:51:90:fa:2c:f0:97:e9:b6:15:f8:ab: 5b:1c:bf:3b:f0:f3:e6:eb:2b:67:85:c4:13:68:76: 8c:f4:21:d7:a6:a1:73:07:2a:c3:1c:64:ee:6a:8a: ad:ef:cc:c8:e5:c6:bd:85:17:e5:e5:96:22:4d:1b: 82:36:71:46:33:fd:a7:f4:e1:f6:3d:2b:aa:a3:58: 9b:1e:72:23:74:f6:85:e2:a0:b2:aa:f2:a8:dc:50: 8d:86:3e:b1:56:32:3a:86:6a:93:e0:3c:8f:db:0f: 05:8f:e3:be:88:be:f9:6a:61:98:fa:6e:d2:5a:5e: 7a:f4:1e:08:f2:5f:d9:6e:89:fe:c6:e5:39:5c:d2: 3a:52:36:2e:1e:14:1f:e5:89:28:33:85:a1:16:39: 42:63:f6:c8:e2:8a:b8:a3:b0:42:89:75:66:85:a7: 77:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:06:E1:76:EE:F8:33:DF:8A:FD:A8:B4:08:54:82:38:2C:38:4F:97 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:34:76:04:e7:aa:d2:47:6c:82:47:73:bc:e1:7b:fd:4e:78: 61:64:6a:80:9e:84:56:4d:14:ca:ad:56:42:73:dd:54:9d:55: 92:78:2a:c9:f2:66:c6:31:47:f7:07:99:42:d3:a6:9c:c8:ec: c9:90:ee:7f:a5:1f:e7:52:bd:29:5f:b7:9c:79:e0:4e:44:4b: 60:8c:ba:70:3e:dd:96:d0:83:b0:84:25:1f:32:9f:cf:55:b6: 5e:fb:26:67:c8:e5:b3:85:6e:fa:4a:8a:38:44:b5:93:1d:67: 69:2e:a0:cd:b9:3f:e6:ad:da:4c:fd:8c:49:3d:7e:67:86:03: 2d:18:8c:d8:92:00:1a:48:2e:82:43:9c:eb:52:a0:0d:c1:44: 1b:1a:9b:7d:3e:f2:09:df:87:d2:19:dd:6b:d8:6f:f7:39:f8: 99:08:d7:96:fb:19:bc:b3:eb:37:73:a4:b4:8e:8c:69:6b:cf: 3c:46:18:ac:d4:a9:10:3e:79:0c:84:64:3d:9b:e9:52:8d:7b: fc:f0:95:7e:1e:07:dd:fc:4d:fc:d5:d4:1d:cb:96:35:ab:30: 80:42:5a:f1:24:ff:14:96:d5:ec:c1:cc:9f:7f:ed:1b:23:42: 59:00:2d:18:5b:70:23:8e:6f:30:d1:de:18:bc:b9:6c:e7:49: 4e:59:fc:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaBa4EXomivGD3VhgT6OalTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUwNDI5MTIwMDI4WhcNMjUwNDMwMTIwMDI4WjAzMTEwLwYDVQQD Eyg3YjA2ZTE3NmVlZjgzM2RmOGFmZGE4YjQwODU0ODIzODJjMzg0Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP+w7wYZ2AEriYKfqyoyoIpUzo2N ypvIKJKGaIJrMKLwyrJgpsYEnp83+ttYhONbNFd4ct/qJ5I87fZrXed8UzyzWO1Z Clq9uTnb7zMyoqE0kS0G4Py1e3Hq7/fYUZD6LPCX6bYV+KtbHL878PPm6ytnhcQT aHaM9CHXpqFzByrDHGTuaoqt78zI5ca9hRfl5ZYiTRuCNnFGM/2n9OH2PSuqo1ib HnIjdPaF4qCyqvKo3FCNhj6xVjI6hmqT4DyP2w8Fj+O+iL75amGY+m7SWl569B4I 8l/Zbon+xuU5XNI6UjYuHhQf5YkoM4WhFjlCY/bI4oq4o7BCiXVmhad3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsG4Xbu+DPfiv2otAhUgjgsOE+XMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzR2BOeq 0kdsgkdzvOF7/U54YWRqgJ6EVk0Uyq1WQnPdVJ1VkngqyfJmxjFH9weZQtOmnMjs yZDuf6Uf51K9KV+3nHngTkRLYIy6cD7dltCDsIQlHzKfz1W2XvsmZ8jls4Vu+kqK OES1kx1naS6gzbk/5q3aTP2MST1+Z4YDLRiM2JIAGkgugkOc61KgDcFEGxqbfT7y Cd+H0hnda9hv9zn4mQjXlvsZvLPrN3OktI6MaWvPPEYYrNSpED55DIRkPZvpUo17 /PCVfh4H3fxN/NXUHcuWNaswgEJa8ST/FJbV7MHMn3/tGyNCWQAtGFtwI45vMNHe GLy5bOdJTln8nQ== -----END CERTIFICATE-----Generated at Tue Apr 29 20:08:22 2025 by rpki-client