$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: ozhL45EuTd9yPwkRQALkI4PPt3knVnhETmSTrP07GbI= Subject key identifier: A9:2D:C5:42:12:05:7A:6C:04:65:74:E0:10:62:C3:67:65:CC:6E:E6 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01983CBCC6BD235FF1A82990EA06EFE4DF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1244 Signing time: Thu 24 Jul 2025 14:01:01 +0000 Manifest this update: Thu 24 Jul 2025 14:01:01 +0000 Manifest next update: Fri 25 Jul 2025 14:01:01 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: M6tjduo3itHmTdYYl937aLxvnIXGhFJSRvFtotXTWHE=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3c:bc:c6:bd:23:5f:f1:a8:29:90:ea:06:ef:e4:df:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jul 24 14:01:01 2025 GMT Not After : Jul 25 14:01:01 2025 GMT Subject: CN=a92dc54212057a6c046574e01062c36765cc6ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:3e:32:0e:3d:74:20:23:63:2f:d3:12:36: c4:d9:72:60:1f:d9:ae:61:72:8f:a2:eb:a8:83:a2: d0:71:8f:e7:f1:14:6b:a5:4b:6e:c0:55:ce:a6:bc: 28:9d:70:c4:d5:42:fd:15:9b:b3:7b:3b:a7:40:32: a9:f0:b3:c5:53:90:bb:92:5c:5d:5d:9d:da:95:10: 0a:d3:4b:fa:6f:0f:3d:1a:8f:59:f1:db:59:72:59: 97:37:df:bb:c9:e7:2c:5b:bd:c9:0c:67:61:a6:b9: 67:18:36:6f:8b:4e:64:09:59:67:ae:90:37:de:05: a7:63:03:d0:42:d2:91:85:bd:5d:26:fe:28:c4:ad: b4:b8:52:18:ca:27:81:37:df:9a:8d:d0:4a:a6:54: 4a:69:d9:c2:28:9b:8d:bf:f7:21:0c:28:41:c9:63: 21:a6:e7:fc:9c:de:ac:98:f6:38:78:91:3c:70:a2: 58:73:d4:c9:e3:d0:bc:52:0f:1e:59:28:e1:f8:2a: 42:05:c5:94:bb:d8:e2:8b:d1:14:62:bc:fd:80:5f: a5:95:6b:a5:d8:cb:2c:b1:64:73:bb:65:7c:6a:38: 5a:46:e6:ad:37:b9:91:5f:a1:2f:c5:e6:4b:0d:b7: 5a:54:f4:57:c8:1f:a9:0f:d1:e3:69:87:60:88:01: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2D:C5:42:12:05:7A:6C:04:65:74:E0:10:62:C3:67:65:CC:6E:E6 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:eb:d0:0d:5e:dd:7b:04:c3:f2:c1:57:e1:ce:42:f6:0e:41: 61:1a:bf:b5:b3:85:f6:40:d4:4b:35:4c:ea:4b:af:e2:b2:aa: 9c:3f:8f:f5:c8:e4:df:5a:70:dd:9e:9c:14:51:2b:1d:4e:90: 9f:ad:40:87:8b:ce:b8:4d:30:56:d1:cf:b1:ec:9b:1c:23:56: 69:e5:ec:57:16:54:f1:c0:10:ca:a7:21:90:77:9e:63:84:87: b0:1b:22:94:23:ca:1d:06:b1:88:aa:eb:44:95:90:9e:29:06: 64:32:ff:7d:d8:be:32:07:1a:28:b3:23:52:75:5f:0b:15:89: 11:c8:f4:55:18:fc:da:02:54:08:27:30:be:34:20:29:90:63: 8a:c1:c0:45:01:b8:e2:97:0b:65:96:2a:fc:77:4d:5e:40:b7: d7:45:4b:98:28:26:e1:35:9a:52:5b:52:03:92:64:a1:7c:c0: a7:35:38:af:23:6f:09:d2:a1:b7:c2:52:60:8e:6d:fb:4d:3f: ce:c5:a3:bc:bf:5a:67:e1:b6:39:7f:66:4e:f5:09:64:7e:5c: df:eb:b8:14:2e:7f:c4:77:4e:fa:30:d5:93:9e:0c:f8:e0:54: f9:11:32:1c:49:67:c4:de:cf:ec:73:32:68:6f:8b:57:61:21: 24:d3:9d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg8vMa9I1/xqCmQ6gbv5N9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNzI0MTQwMTAxWhcNMjUwNzI1MTQwMTAxWjAzMTEwLwYDVQQD EyhhOTJkYzU0MjEyMDU3YTZjMDQ2NTc0ZTAxMDYyYzM2NzY1Y2M2ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqww+Mg49dCAjYy/TEjbE2XJgH9mu YXKPouuog6LQcY/n8RRrpUtuwFXOprwonXDE1UL9FZuzezunQDKp8LPFU5C7klxd XZ3alRAK00v6bw89Go9Z8dtZclmXN9+7yecsW73JDGdhprlnGDZvi05kCVlnrpA3 3gWnYwPQQtKRhb1dJv4oxK20uFIYyieBN9+ajdBKplRKadnCKJuNv/chDChByWMh puf8nN6smPY4eJE8cKJYc9TJ49C8Ug8eWSjh+CpCBcWUu9jii9EUYrz9gF+llWul 2MsssWRzu2V8ajhaRuatN7mRX6EvxeZLDbdaVPRXyB+pD9HjaYdgiAG5uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKktxUISBXpsBGV04BBiw2dlzG7mMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuvQDV7d ewTD8sFX4c5C9g5BYRq/tbOF9kDUSzVM6kuv4rKqnD+P9cjk31pw3Z6cFFErHU6Q n61Ah4vOuE0wVtHPseybHCNWaeXsVxZU8cAQyqchkHeeY4SHsBsilCPKHQaxiKrr RJWQnikGZDL/fdi+MgcaKLMjUnVfCxWJEcj0VRj82gJUCCcwvjQgKZBjisHARQG4 4pcLZZYq/HdNXkC310VLmCgm4TWaUltSA5JkoXzApzU4ryNvCdKht8JSYI5t+00/ zsWjvL9aZ+G2OX9mTvUJZH5c3+u4FC5/xHdO+jDVk54M+OBU+REyHElnxN7P7HMy aG+LV2EhJNOdoQ== -----END CERTIFICATE-----Generated at Thu Jul 24 21:46:13 2025 by rpki-client