$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: dFJ6s4ILYuilS+LjWV7dcRyLNLvX70iCT5VH4GkKce4= Subject key identifier: 9E:90:88:A8:41:61:22:E8:BE:71:C0:F4:38:5C:50:AC:C4:2A:88:4B Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 01982B91F55D97AFAF1484120C16C7DA472A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 115E Signing time: Mon 21 Jul 2025 06:00:42 +0000 Manifest this update: Mon 21 Jul 2025 06:00:42 +0000 Manifest next update: Tue 22 Jul 2025 06:00:42 +0000 Files and hashes: 1: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 2: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 3: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 4: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 5: 8TJR1HyAwg6k7vxm3-38XYPiUhs.roa (hash: UlmTtzmR+/FZGoYwPXPmvRp8bd7Kee7FHaH8ivwDixM=) 6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 7: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 8: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 9: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 10: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 11: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 12: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 13: ol5y8u_4G20fft_xzP2ULA8gimg.roa (hash: RSgj/k0UnHxK8vwqn89GdKZy49c0En9JMURDQ/SJ3jQ=) 14: oo68fdLP_MI4Rwlcq0C2I-y_K9g.roa (hash: UGZ9aKbm2nLCSA0ehujHTDQj51oKQ6d9RZi7a5m0ANs=) 15: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 16: pXb2BHcIMWoEt176mDnHX2eUQwo.roa (hash: c80j1v8Q2KRhUOiHX3xcSk3hTBR2+iNkEM9MIAJzxDc=) 17: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: Qklom8Uazf3BlCOxfIekbvMeNlmhKNLllg0GtBeo3Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2b:91:f5:5d:97:af:af:14:84:12:0c:16:c7:da:47:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jul 21 06:00:42 2025 GMT Not After : Jul 22 06:00:42 2025 GMT Subject: CN=9e9088a8416122e8be71c0f4385c50acc42a884b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:a6:6f:ec:aa:9e:79:08:b1:36:34:6d:77: 63:c3:b6:f9:c5:ec:b4:fb:09:bf:fd:08:ee:9c:b8: e9:db:96:c4:9e:06:79:97:e7:cd:41:0a:20:38:88: bd:b7:a0:7c:37:ce:3a:01:9d:e2:68:de:3d:83:31: da:e5:a7:5c:32:6b:c8:08:cc:7c:68:94:e0:32:e5: dc:21:5c:d8:b2:f1:74:e3:ba:fe:af:3e:e7:b6:fa: 08:11:2d:f7:ff:62:a3:18:56:a4:9b:38:ab:00:28: 54:5c:ce:60:a6:09:71:b7:d3:19:d9:72:9f:7c:32: 3b:2b:31:b6:a1:33:12:76:26:8c:92:90:a5:d9:0d: bb:c3:7f:f7:12:fc:cd:fc:45:0a:9e:58:04:32:83: 62:22:b4:b3:7c:c4:2a:8c:3e:2b:48:fc:45:ea:6b: 80:22:26:83:b7:42:25:11:33:e2:42:e2:ac:6b:61: 20:a8:9c:f4:1c:b5:e2:f7:9f:87:f4:3a:c5:f6:6e: 05:95:56:e7:8f:a5:c8:ba:9d:ba:ca:68:ee:76:e0: f7:9d:f0:db:e1:0d:cb:35:e8:45:66:f0:a6:c7:1f: c7:fb:2d:09:b5:8d:29:f1:49:11:c6:f7:e6:a2:a0: d6:f1:ad:3c:2e:b6:f4:69:71:f1:34:b3:88:a4:46: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:90:88:A8:41:61:22:E8:BE:71:C0:F4:38:5C:50:AC:C4:2A:88:4B X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:41:ab:d1:04:00:44:b0:e9:c8:6b:2c:6f:9c:05:d7:1e:35: 6d:ad:3d:67:87:a4:7f:60:a5:b3:5a:82:ed:39:93:63:4e:27: 35:11:54:02:bb:e3:ee:a8:bd:92:5d:31:ae:93:d2:ed:72:dc: 5f:19:14:6d:d1:45:59:11:ba:fc:37:f7:e6:ec:82:21:43:54: ec:52:c6:e1:0b:8d:82:43:31:90:ec:6b:35:5a:ad:60:6b:bf: eb:c0:fc:10:ec:7b:11:71:4d:d0:2d:11:81:af:69:4c:18:f3: dd:33:a2:62:a2:ef:02:94:19:2d:f7:a1:84:00:6f:d9:d8:17: f3:b6:0f:5f:c4:14:5b:77:31:1f:bd:c1:7f:9d:4c:90:c1:2a: bc:9d:f4:9c:f9:dc:e9:4c:43:d1:c1:1c:8f:24:9b:bf:26:77: 54:42:79:f0:6f:9a:ea:e4:86:7e:83:39:e5:b4:c8:e6:10:5d: 72:f9:48:63:c7:6a:bf:82:b6:b7:18:21:3d:ef:77:15:a1:2e: 4d:ea:6a:2a:02:62:65:69:bf:4c:dc:fd:bc:bb:54:ba:68:ee: 2e:8e:8f:80:95:d6:f7:97:74:8e:75:20:5b:37:93:1a:a4:e4: e5:4f:d4:83:98:7b:72:c0:22:4b:d9:18:c0:1c:99:36:aa:b5: b1:41:9e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgrkfVdl6+vFIQSDBbH2kcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwNzIxMDYwMDQyWhcNMjUwNzIyMDYwMDQyWjAzMTEwLwYDVQQD Eyg5ZTkwODhhODQxNjEyMmU4YmU3MWMwZjQzODVjNTBhY2M0MmE4ODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgamb+yqnnkIsTY0bXdjw7b5xey0 +wm//QjunLjp25bEngZ5l+fNQQogOIi9t6B8N846AZ3iaN49gzHa5adcMmvICMx8 aJTgMuXcIVzYsvF047r+rz7ntvoIES33/2KjGFakmzirAChUXM5gpglxt9MZ2XKf fDI7KzG2oTMSdiaMkpCl2Q27w3/3EvzN/EUKnlgEMoNiIrSzfMQqjD4rSPxF6muA IiaDt0IlETPiQuKsa2EgqJz0HLXi95+H9DrF9m4FlVbnj6XIup26ymjuduD3nfDb 4Q3LNehFZvCmxx/H+y0JtY0p8UkRxvfmoqDW8a08Lrb0aXHxNLOIpEbtkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6QiKhBYSLovnHA9DhcUKzEKohLMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0Gr0QQA RLDpyGssb5wF1x41ba09Z4ekf2Cls1qC7TmTY04nNRFUArvj7qi9kl0xrpPS7XLc XxkUbdFFWRG6/Df35uyCIUNU7FLG4QuNgkMxkOxrNVqtYGu/68D8EOx7EXFN0C0R ga9pTBjz3TOiYqLvApQZLfehhABv2dgX87YPX8QUW3cxH73Bf51MkMEqvJ30nPnc 6UxD0cEcjySbvyZ3VEJ58G+a6uSGfoM55bTI5hBdcvlIY8dqv4K2txghPe93FaEu TepqKgJiZWm/TNz9vLtUumjuLo6PgJXW95d0jnUgWzeTGqTk5U/Ug5h7csAiS9kY wByZNqq1sUGeag== -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:02 2025 by rpki-client