$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: jElSGSN4TrnIRX26I5Iv7PGyP+GwKvHIsr0KvdoGf/g= Subject key identifier: 21:56:E6:F1:93:0A:C5:C6:CE:8B:B9:89:F4:1F:73:5A:B3:6F:E9:FD Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019A30E9EC379CDEF5055040540269527ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 140D Signing time: Wed 29 Oct 2025 17:00:27 +0000 Manifest this update: Wed 29 Oct 2025 17:00:27 +0000 Manifest next update: Thu 30 Oct 2025 17:00:27 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 0Ywfn3P78cGKn9ZNO1n9pL4rRW8pba6Jtx9wd3BI1sQ=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 17:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:30:e9:ec:37:9c:de:f5:05:50:40:54:02:69:52:7e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Oct 29 17:00:27 2025 GMT Not After : Oct 30 17:00:27 2025 GMT Subject: CN=2156e6f1930ac5c6ce8bb989f41f735ab36fe9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:03:68:2c:9b:ee:9f:4f:d9:d9:09:c1:9d: d0:f0:ca:60:85:76:92:c4:74:4e:e7:47:ef:d2:5b: 78:3c:c6:2b:58:9b:99:ca:a5:28:3e:c2:fd:8f:a4: 0f:21:f8:86:35:3c:ee:00:2b:58:83:cf:a5:fb:d5: b5:f3:8d:53:7f:57:26:6b:73:38:5b:3c:3c:78:e2: de:56:25:40:f8:fb:de:22:02:f4:d8:4f:e1:db:9a: ec:bc:3c:67:b3:ec:ed:f3:33:98:3f:f5:d5:7e:e4: ba:c8:42:fc:85:5a:e5:0c:3c:d0:2e:84:21:3f:23: f1:ac:5b:3f:85:a4:4b:1b:5b:ef:7d:e0:7b:ba:29: d4:00:33:04:23:4b:47:1b:d8:c9:04:26:b0:3c:19: 6d:b2:72:c5:86:a2:e0:50:06:eb:4a:5a:24:14:11: ce:53:0b:57:7b:59:79:c6:ee:de:3c:d4:42:ba:36: 66:d5:02:de:95:1b:8f:6b:70:76:d2:62:75:25:49: bd:30:75:0c:66:00:c8:56:66:a9:4a:1a:79:fd:c4: ac:fe:71:57:10:2a:c8:6b:ef:9b:e8:49:81:af:4e: 59:85:8c:dd:84:74:8c:f4:5c:5f:c5:a5:f2:ee:ae: 49:d3:9e:94:2c:be:c2:e7:2e:ab:06:58:2c:8e:dc: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:E6:F1:93:0A:C5:C6:CE:8B:B9:89:F4:1F:73:5A:B3:6F:E9:FD X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5d:3d:70:59:15:16:58:42:73:a8:fa:71:58:fb:38:c7:8c: 93:41:62:c7:38:50:1b:1b:f6:e6:34:b6:03:d2:da:16:2d:af: f4:d8:7a:66:d1:1f:99:7c:a2:bc:e5:45:c8:e9:57:89:c7:ae: 71:3a:f4:1f:f7:fe:3b:85:0c:4b:b1:9f:ab:97:33:3f:20:7a: 0d:41:0c:b3:5e:93:f1:2b:e5:f3:50:c7:71:46:65:56:99:91: 2e:44:26:ed:35:c8:8e:dd:de:17:4d:c9:ca:be:48:94:f9:72: d1:79:50:4d:21:f3:db:7a:c0:55:90:ce:34:d8:7f:fd:16:1f: d4:f8:9d:26:0b:dd:4e:a9:56:1c:d3:0c:b1:7f:b4:12:a4:ca: ad:60:2c:72:5f:39:f1:89:5c:72:0e:a3:8c:d8:8b:f6:31:bf: c1:72:44:63:54:a0:94:a6:5d:73:a9:55:3b:a9:d8:b7:37:8c: 38:c3:d0:23:4b:fb:5b:5c:96:79:ea:e5:cb:7b:82:34:3d:78: af:7f:f7:bf:96:6f:4e:8e:7d:da:4b:d9:00:6d:33:b4:7f:0f: 36:2a:3d:2d:c5:5a:3d:76:e6:19:f0:02:7f:a2:f6:0b:d6:1c: b7:48:fb:86:53:aa:0a:b0:30:f5:5c:f4:c5:0e:36:81:d5:92: 32:86:d1:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZow6ew3nN71BVBAVAJpUn7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUxMDI5MTcwMDI3WhcNMjUxMDMwMTcwMDI3WjAzMTEwLwYDVQQD EygyMTU2ZTZmMTkzMGFjNWM2Y2U4YmI5ODlmNDFmNzM1YWIzNmZlOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2EDaCyb7p9P2dkJwZ3Q8MpghXaS xHRO50fv0lt4PMYrWJuZyqUoPsL9j6QPIfiGNTzuACtYg8+l+9W1841Tf1cma3M4 Wzw8eOLeViVA+PveIgL02E/h25rsvDxns+zt8zOYP/XVfuS6yEL8hVrlDDzQLoQh PyPxrFs/haRLG1vvfeB7uinUADMEI0tHG9jJBCawPBltsnLFhqLgUAbrSlokFBHO UwtXe1l5xu7ePNRCujZm1QLelRuPa3B20mJ1JUm9MHUMZgDIVmapShp5/cSs/nFX ECrIa++b6EmBr05ZhYzdhHSM9FxfxaXy7q5J056ULL7C5y6rBlgsjtx+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFW5vGTCsXGzou5ifQfc1qzb+n9MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKF09cFkV FlhCc6j6cVj7OMeMk0FixzhQGxv25jS2A9LaFi2v9Nh6ZtEfmXyivOVFyOlXiceu cTr0H/f+O4UMS7Gfq5czPyB6DUEMs16T8Svl81DHcUZlVpmRLkQm7TXIjt3eF03J yr5IlPly0XlQTSHz23rAVZDONNh//RYf1PidJgvdTqlWHNMMsX+0EqTKrWAscl85 8Ylccg6jjNiL9jG/wXJEY1SglKZdc6lVO6nYtzeMOMPQI0v7W1yWeerly3uCND14 r3/3v5ZvTo592kvZAG0ztH8PNio9LcVaPXbmGfACf6L2C9Yct0j7hlOqCrAw9Vz0 xQ42gdWSMobRmw== -----END CERTIFICATE-----Generated at Wed Oct 29 22:23:14 2025 by rpki-client