$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: C1JSM11v1QKOylSQRqfRz2a7iCiaIFEYZNh5tcWNg1E= Subject key identifier: DD:A0:10:5D:27:BA:39:9B:E1:AD:D5:3B:01:8D:76:CA:4F:E8:21:7F Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01982936126E7B46011F3028B840FAE58BEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 10C8 Signing time: Sun 20 Jul 2025 19:01:06 +0000 Manifest this update: Sun 20 Jul 2025 19:01:06 +0000 Manifest next update: Mon 21 Jul 2025 19:01:06 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: vWNS7XTpFVL9ZIP+iEVXpok4QIQftU4ZKk2zSdyNYxo=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:29:36:12:6e:7b:46:01:1f:30:28:b8:40:fa:e5:8b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jul 20 19:01:06 2025 GMT Not After : Jul 21 19:01:06 2025 GMT Subject: CN=dda0105d27ba399be1add53b018d76ca4fe8217f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:48:60:c8:69:21:ff:10:95:77:ff:e8:7f: 49:a9:5a:11:84:93:3f:cc:e7:17:60:e0:03:76:9b: cf:77:8e:9e:40:c0:66:c6:13:95:7c:8a:19:a7:75: 67:1e:d9:4f:9c:96:08:ab:14:05:a9:ff:5b:6c:24: e0:b9:9f:b2:a8:5e:26:3e:b7:79:e7:da:b2:cb:ec: 61:e6:e5:ee:50:8d:b9:51:99:a0:0c:03:b2:09:66: c3:df:86:1a:7b:de:94:be:9d:98:8d:ff:2d:94:1e: e2:ce:17:08:80:b1:42:b4:b9:8a:03:99:bf:79:a0: 00:28:fa:e7:64:64:34:c5:9a:81:70:78:b9:91:8a: fc:94:b3:48:65:bd:fa:18:80:7a:12:4c:3d:42:e5: 3c:ea:cb:34:af:77:b6:eb:8e:ff:94:b8:f5:e8:1b: ff:1c:50:bb:db:ee:7c:34:c3:31:15:c1:d3:74:e2: e0:ac:fb:ab:18:ed:64:a8:0a:cc:6a:cc:f7:eb:89: 92:94:29:fc:65:2d:c9:89:19:b5:5a:29:09:d9:e6: df:38:54:a1:d9:97:3d:fb:46:e7:43:f5:f0:fa:e3: 27:ed:22:bf:72:37:a4:a3:01:f9:26:04:a2:fe:cc: d2:11:fe:c4:53:67:88:96:ff:89:3d:a6:9c:7d:e5: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A0:10:5D:27:BA:39:9B:E1:AD:D5:3B:01:8D:76:CA:4F:E8:21:7F X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:36:c5:e2:74:67:f8:e7:98:5b:9c:c8:05:7b:09:7d:6b:84: 31:68:c4:fe:6e:d7:db:42:24:b0:9b:84:a3:01:ee:1b:d3:fd: 60:27:28:77:4f:d2:7a:40:52:3c:82:bc:c5:6c:20:eb:ee:f6: 99:ce:21:2f:50:87:bd:9c:34:f9:9e:91:39:d0:70:78:33:d4: ca:6d:6a:90:b7:9e:14:8b:54:e9:e0:2e:35:bd:7b:43:3f:68: d8:43:b0:c0:65:ed:34:51:b7:d4:d2:e4:30:b4:7a:be:38:72: 22:f7:2a:06:b0:6e:c0:9f:56:ee:74:24:90:49:4a:84:ef:56: a7:be:70:c1:b5:b8:d5:06:77:43:c9:53:c5:fd:c3:f5:f8:b5: b2:6e:e8:f1:5f:b7:c6:90:a5:21:5f:50:7a:91:b2:f8:77:e9: 81:11:25:16:f4:85:c4:30:0a:04:60:ab:31:2b:17:95:82:24: 5d:0c:23:9a:9d:14:86:a3:6a:11:06:37:59:68:29:b3:c7:dc: 50:bc:65:3a:10:fa:ad:97:2e:61:23:9a:f2:58:dd:fc:47:4a: a2:4c:c6:92:ab:f2:39:08:e0:9b:78:aa:e3:b2:77:50:05:07: 7f:23:81:48:7d:6e:2e:f9:85:a8:25:69:71:29:6e:82:bf:bf: 25:45:d3:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgpNhJue0YBHzAouED65YvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwNzIwMTkwMTA2WhcNMjUwNzIxMTkwMTA2WjAzMTEwLwYDVQQD EyhkZGEwMTA1ZDI3YmEzOTliZTFhZGQ1M2IwMThkNzZjYTRmZTgyMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0dIYMhpIf8QlXf/6H9JqVoRhJM/ zOcXYOADdpvPd46eQMBmxhOVfIoZp3VnHtlPnJYIqxQFqf9bbCTguZ+yqF4mPrd5 59qyy+xh5uXuUI25UZmgDAOyCWbD34Yae96Uvp2Yjf8tlB7izhcIgLFCtLmKA5m/ eaAAKPrnZGQ0xZqBcHi5kYr8lLNIZb36GIB6Ekw9QuU86ss0r3e2647/lLj16Bv/ HFC72+58NMMxFcHTdOLgrPurGO1kqArMasz364mSlCn8ZS3JiRm1WikJ2ebfOFSh 2Zc9+0bnQ/Xw+uMn7SK/cjekowH5JgSi/szSEf7EU2eIlv+JPaacfeXeLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2gEF0nujmb4a3VOwGNdspP6CF/MB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDbF4nRn +OeYW5zIBXsJfWuEMWjE/m7X20IksJuEowHuG9P9YCcod0/SekBSPIK8xWwg6+72 mc4hL1CHvZw0+Z6ROdBweDPUym1qkLeeFItU6eAuNb17Qz9o2EOwwGXtNFG31NLk MLR6vjhyIvcqBrBuwJ9W7nQkkElKhO9Wp75wwbW41QZ3Q8lTxf3D9fi1sm7o8V+3 xpClIV9QepGy+HfpgRElFvSFxDAKBGCrMSsXlYIkXQwjmp0UhqNqEQY3WWgps8fc ULxlOhD6rZcuYSOa8ljd/EdKokzGkqvyOQjgm3iq47J3UAUHfyOBSH1uLvmFqCVp cSlugr+/JUXTkA== -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:24 2025 by rpki-client