$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: YtTOKWEUcfFcxakBIz81SBDe7ybcIDCLAPf4FUPfFbs= Subject key identifier: E6:DB:65:68:C2:16:F5:D2:24:0F:27:E0:DD:E6:BF:57:D3:19:E4:85 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 01982E24E5EAF52E6FBD6F5A37F9EB6D9A52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 01DC Signing time: Mon 21 Jul 2025 18:00:26 +0000 Manifest this update: Mon 21 Jul 2025 18:00:26 +0000 Manifest next update: Tue 22 Jul 2025 18:00:26 +0000 Files and hashes: 1: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=) 2: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=) 3: 8KCDPH2JrV05Zx7K2dBzU8WT0Hc.roa (hash: PmEeSgYpSMCgiJRPeD668IqZ2t3da6aT6doTbOtD5kI=) 4: BP6xc-GRow7em9LhzOxLgjKVYus.roa (hash: Hcth0RRyL3wBd/0xMlJH2ABMLkNBsFaEBwo7Oa2dz60=) 5: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=) 6: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=) 7: Lat7Ur59L9ROqgP8VE0UMBow9Ik.roa (hash: 71OLxleyHa71qzZb4OKazZRwmp0vQUFo/BqOXzVQbBI=) 8: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=) 9: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=) 10: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: iEwiA85ZaFdl1qojBjhOzb0zPwBue3BNGlmvlsSmW1U=) 11: ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa (hash: D+CShXZKLL9oHIWJLvakbCmqAweC612+uWibYooQqPQ=) 12: _abBv2Z4ueQE7wSnfYxgydB_BM0.roa (hash: 3IOCdjYObJ5KJJCmqqgmbhfx51pvGE0eK742ZYfwGCI=) 13: b5MC2G9gfifDOdjy6C8MLfgBcQA.roa (hash: o6vD4Gp4Mae4yiPr18V+Pjs9nO1iI0pHfiXFAFd7bkA=) 14: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=) 15: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=) 16: hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa (hash: d5aE0237PObi3lQ9lHWVJ8Zp5KEO+pn/hpTA26Y4sSI=) 17: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=) 18: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=) 19: ofbszTn0i-YSIBGbdtRQO-HAngw.roa (hash: +Yij66+the4UDsOblrHzuVkVOxLhBPgs2jttAsdE6SE=) 20: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=) 21: x-YMFFC50MPjiwbim8K7Y78OaWU.roa (hash: eND7BGcGgHdviQWu0IdfM0wmyxP3VDDiwFSUsQb8yDM=) 22: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (hash: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2e:24:e5:ea:f5:2e:6f:bd:6f:5a:37:f9:eb:6d:9a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jul 21 18:00:26 2025 GMT Not After : Jul 22 18:00:26 2025 GMT Subject: CN=e6db6568c216f5d2240f27e0dde6bf57d319e485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:1c:68:23:21:71:4e:dd:6b:b4:29:03:56: cc:76:56:20:0d:4a:4d:f3:93:2b:a4:b1:bd:72:d1: a1:51:bb:77:32:09:6b:ec:b8:5d:ab:9d:c2:0c:9d: 89:60:55:03:90:39:1c:09:c4:af:bd:44:85:08:d6: b1:b8:32:7d:aa:28:73:94:9f:7d:ff:f7:74:3d:3a: a7:46:ab:02:fd:6b:bf:3e:9e:9a:08:22:d1:56:ea: 78:96:e1:51:2d:a9:22:2e:f1:c8:7e:27:59:52:3a: a8:24:67:69:58:02:ff:04:33:b2:89:4a:24:9f:bb: c4:ef:a4:48:cd:97:c4:94:16:82:16:b4:99:ee:ef: 94:f2:6d:9d:0b:10:a0:8d:df:57:20:a0:4b:a3:14: 4a:fe:dd:a8:b0:08:f4:2d:d3:d0:89:f5:de:96:c5: 8f:8c:eb:42:59:cd:ee:04:32:ab:93:79:9d:e6:e4: 6c:af:bc:54:15:19:62:70:89:82:15:6e:10:7c:31: 95:6d:8f:37:5b:4a:3e:80:97:44:df:77:18:a9:8f: 9f:0f:e3:f7:6f:d9:27:33:da:a3:48:8c:b2:50:d5: 88:cf:58:1f:e0:f6:a3:7f:ef:b2:23:42:ce:7f:78: a2:4d:ad:29:28:ed:89:ae:8f:38:53:52:3d:79:d8: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:65:68:C2:16:F5:D2:24:0F:27:E0:DD:E6:BF:57:D3:19:E4:85 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:15:e8:ac:bb:ed:c0:71:45:db:02:c2:8d:3f:aa:ea:f9:c6: b0:bc:8d:bf:53:29:f7:85:03:d7:1e:83:4d:f6:19:54:41:6f: 8b:49:cb:52:c7:4f:35:4e:58:b9:0a:9c:69:01:19:22:96:b9: 1b:33:05:16:79:0b:af:f8:1c:75:68:88:15:ca:cf:3e:a8:59: a7:6f:65:e6:c7:bc:a2:d4:e8:ee:fb:41:ea:f7:ad:49:8e:42: e2:62:2d:f7:ce:30:f8:8e:4c:96:d6:dd:c6:46:d6:f3:67:c1: c9:bf:c3:e1:44:6e:a4:92:7c:26:e2:74:19:5b:5d:3e:22:fd: 38:df:d8:b9:fd:dc:5a:85:d8:f1:9a:c8:09:3f:94:56:7e:34: 71:63:3c:f5:67:8a:64:a2:39:34:87:6d:3f:25:27:57:c6:7d: 3f:33:53:e2:9b:24:19:16:8c:86:82:53:27:0f:6c:ba:c9:ab: a5:6b:b6:83:34:2b:9e:57:42:28:3c:78:24:f2:79:e5:f8:25: 92:92:9b:11:1b:63:31:ef:91:91:66:4b:6f:14:68:c5:d1:dc: ab:ba:a2:51:fb:6d:61:ce:b0:89:d2:29:78:e8:7b:94:3a:c6: 37:bf:15:8e:ab:ab:65:c8:31:a6:92:a9:76:2c:e9:ca:85:76: 4f:38:e0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZguJOXq9S5vvW9aN/nrbZpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUwNzIxMTgwMDI2WhcNMjUwNzIyMTgwMDI2WjAzMTEwLwYDVQQD EyhlNmRiNjU2OGMyMTZmNWQyMjQwZjI3ZTBkZGU2YmY1N2QzMTllNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlocaCMhcU7da7QpA1bMdlYgDUpN 85MrpLG9ctGhUbt3Mglr7Lhdq53CDJ2JYFUDkDkcCcSvvUSFCNaxuDJ9qihzlJ99 //d0PTqnRqsC/Wu/Pp6aCCLRVup4luFRLakiLvHIfidZUjqoJGdpWAL/BDOyiUok n7vE76RIzZfElBaCFrSZ7u+U8m2dCxCgjd9XIKBLoxRK/t2osAj0LdPQifXelsWP jOtCWc3uBDKrk3md5uRsr7xUFRlicImCFW4QfDGVbY83W0o+gJdE33cYqY+fD+P3 b9knM9qjSIyyUNWIz1gf4Pajf++yI0LOf3iiTa0pKO2Jro84U1I9edhSFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObbZWjCFvXSJA8n4N3mv1fTGeSFMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohXorLvt wHFF2wLCjT+q6vnGsLyNv1Mp94UD1x6DTfYZVEFvi0nLUsdPNU5YuQqcaQEZIpa5 GzMFFnkLr/gcdWiIFcrPPqhZp29l5se8otTo7vtB6vetSY5C4mIt984w+I5Mltbd xkbW82fByb/D4URupJJ8JuJ0GVtdPiL9ON/Yuf3cWoXY8ZrICT+UVn40cWM89WeK ZKI5NIdtPyUnV8Z9PzNT4pskGRaMhoJTJw9susmrpWu2gzQrnldCKDx4JPJ55fgl kpKbERtjMe+RkWZLbxRoxdHcq7qiUfttYc6widIpeOh7lDrGN78VjqurZcgxppKp dizpyoV2TzjgrA== -----END CERTIFICATE-----Generated at Mon Jul 21 23:58:22 2025 by rpki-client