$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: d0Vyr4tIYhkV7Nsfbrvd2mAkhkB9c1/RGYdveeq4jGk= Subject key identifier: B9:A3:C1:0F:12:3B:82:D6:C7:A7:A1:7D:C6:B6:3C:C9:E1:84:32:3B Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019937CA55A98586AE23B12C90CC97E0A47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 138C Signing time: Thu 11 Sep 2025 08:00:31 +0000 Manifest this update: Thu 11 Sep 2025 08:00:31 +0000 Manifest next update: Fri 12 Sep 2025 08:00:31 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: EROmhs9w7OZFV484VJyDwyU6d/0E63yhjRpUVfp6EQk=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:37:ca:55:a9:85:86:ae:23:b1:2c:90:cc:97:e0:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Sep 11 08:00:31 2025 GMT Not After : Sep 12 08:00:31 2025 GMT Subject: CN=b9a3c10f123b82d6c7a7a17dc6b63cc9e184323b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:60:7e:7f:a2:23:e1:4c:53:94:f6:76:b2: 3d:cd:8a:90:71:fc:1c:4b:64:b7:28:ec:ca:d4:43: 60:04:60:9a:90:d3:d6:cc:19:5e:5d:d7:68:48:3f: 78:a2:2d:0f:2c:7a:97:0b:bf:b1:9e:0f:ba:46:09: 05:db:b9:80:2d:d8:e1:7d:59:1b:d8:23:4c:63:0a: 2f:08:50:84:24:22:9f:62:16:08:52:ab:20:4e:f1: e1:c5:2d:a6:1b:6f:fc:2d:af:0b:ca:dc:b3:75:8b: 1d:37:0f:57:53:cd:3d:bb:6a:a6:cf:1b:0b:f5:b1: 3c:ee:35:62:71:8e:56:73:bb:ec:e1:4c:64:f3:b9: a7:8d:ac:4d:57:c1:d9:1d:e5:a0:44:0f:2d:12:7b: 08:0e:de:a0:9b:6e:9c:e1:48:e7:be:74:2f:98:48: e2:0d:c5:02:8b:15:40:b2:dd:d1:74:ee:bc:43:9a: a5:cb:02:e0:2e:42:4f:96:a4:32:f5:25:31:e9:7c: 82:17:f5:fd:99:ea:cd:73:03:e3:f0:6e:ab:6f:d2: 7c:03:5b:4a:42:3f:2d:48:f9:7e:e8:75:d4:31:40: 39:c0:99:ce:6e:4b:48:c9:e1:9d:5a:a3:40:6a:a2: b7:1c:fe:2f:82:dc:37:e0:96:35:92:7f:62:4a:5e: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:C1:0F:12:3B:82:D6:C7:A7:A1:7D:C6:B6:3C:C9:E1:84:32:3B X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b2:df:d7:37:64:92:6d:0f:3d:57:71:7d:80:33:00:66:f1: 20:47:71:92:14:fc:00:dc:4d:53:dc:ac:d6:10:78:d9:07:3e: d2:35:cc:3e:d3:58:26:25:b3:91:7e:3c:68:d4:56:ec:f1:3d: dd:82:ea:24:6d:e9:95:1d:88:15:06:55:13:55:dc:af:a0:15: 73:d2:6e:c7:75:65:45:f2:68:02:33:20:aa:0b:1d:16:18:c6: db:7d:ca:31:94:3a:36:3a:ab:13:69:28:e0:5e:dc:a6:3e:c5: 91:33:c6:68:83:78:1b:c3:b1:f4:b3:f5:4a:d1:84:aa:7c:f5: 5e:0c:84:ab:ca:f6:11:02:6b:61:6c:d5:77:26:01:64:c8:5f: 2b:37:00:26:58:8b:7e:de:74:69:cc:20:ea:e9:80:07:ff:fc: 7e:9d:67:c9:3a:cd:a1:2e:4e:cf:8e:38:a4:5b:47:b1:d6:21: a9:bf:6b:d2:cc:86:02:56:23:10:83:18:49:09:c0:34:78:62: b3:16:7d:38:69:7d:cd:ae:43:c7:67:66:19:2e:02:45:4a:8e: 95:33:9f:49:cb:45:aa:6c:07:c6:7d:d0:12:91:41:49:2d:7e: 64:b6:3b:29:4d:73:84:d9:ee:b1:50:89:3c:2d:8b:b8:1e:cd: 56:8a:49:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk3ylWphYauI7EskMyX4KR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwOTExMDgwMDMxWhcNMjUwOTEyMDgwMDMxWjAzMTEwLwYDVQQD EyhiOWEzYzEwZjEyM2I4MmQ2YzdhN2ExN2RjNmI2M2NjOWUxODQzMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoxgfn+iI+FMU5T2drI9zYqQcfwc S2S3KOzK1ENgBGCakNPWzBleXddoSD94oi0PLHqXC7+xng+6RgkF27mALdjhfVkb 2CNMYwovCFCEJCKfYhYIUqsgTvHhxS2mG2/8La8LytyzdYsdNw9XU809u2qmzxsL 9bE87jVicY5Wc7vs4Uxk87mnjaxNV8HZHeWgRA8tEnsIDt6gm26c4UjnvnQvmEji DcUCixVAst3RdO68Q5qlywLgLkJPlqQy9SUx6XyCF/X9merNcwPj8G6rb9J8A1tK Qj8tSPl+6HXUMUA5wJnObktIyeGdWqNAaqK3HP4vgtw34JY1kn9iSl5XNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmjwQ8SO4LWx6ehfca2PMnhhDI7MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbLf1zdk km0PPVdxfYAzAGbxIEdxkhT8ANxNU9ys1hB42Qc+0jXMPtNYJiWzkX48aNRW7PE9 3YLqJG3plR2IFQZVE1Xcr6AVc9Jux3VlRfJoAjMgqgsdFhjG233KMZQ6NjqrE2ko 4F7cpj7FkTPGaIN4G8Ox9LP1StGEqnz1XgyEq8r2EQJrYWzVdyYBZMhfKzcAJliL ft50acwg6umAB//8fp1nyTrNoS5Oz444pFtHsdYhqb9r0syGAlYjEIMYSQnANHhi sxZ9OGl9za5Dx2dmGS4CRUqOlTOfSctFqmwHxn3QEpFBSS1+ZLY7KU1zhNnusVCJ PC2LuB7NVopJPg== -----END CERTIFICATE-----Generated at Thu Sep 11 16:16:14 2025 by rpki-client