$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: kKOu/wmKS6hcxfU2S110FUCJHtxkUtveGb1jSrdFCls= Subject key identifier: 79:5F:1E:DA:8D:E9:0C:A0:A4:DD:4D:2F:E8:03:61:5C:B4:16:D4:26 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019919525FC388CA621A54ACCF7DDCB6264D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 025A Signing time: Fri 05 Sep 2025 10:00:52 +0000 Manifest this update: Fri 05 Sep 2025 10:00:52 +0000 Manifest next update: Sat 06 Sep 2025 10:00:52 +0000 Files and hashes: 1: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=) 2: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=) 3: 8KCDPH2JrV05Zx7K2dBzU8WT0Hc.roa (hash: PmEeSgYpSMCgiJRPeD668IqZ2t3da6aT6doTbOtD5kI=) 4: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=) 5: E6Vgg_EG3-o4kevAX6JsBhsSEx0.roa (hash: B1nxVpndBldSwileez5MLRGWyQx07Ng0uk8WghFVI3c=) 6: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=) 7: IBOCMLtB9SlMS-tohbmgCBrthAM.roa (hash: +UtnxSEyg9bxUTqT8YASdLBvopMgQOQk8XviZQHhIXQ=) 8: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=) 9: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=) 10: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: QfxmwMEi4CyLkRRBKQoKLj/Xl+I/MIM0+3/Nv5GKy0E=) 11: ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa (hash: D+CShXZKLL9oHIWJLvakbCmqAweC612+uWibYooQqPQ=) 12: _abBv2Z4ueQE7wSnfYxgydB_BM0.roa (hash: 3IOCdjYObJ5KJJCmqqgmbhfx51pvGE0eK742ZYfwGCI=) 13: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=) 14: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=) 15: hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa (hash: d5aE0237PObi3lQ9lHWVJ8Zp5KEO+pn/hpTA26Y4sSI=) 16: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=) 17: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=) 18: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=) 19: qyeS5XOeD7KTa5gTfjaFtslzJpg.roa (hash: 8Bgb0MgzG8J4NKQsOGh60QGzdke+7qlv/3ICJzuKKzY=) 20: yK9I_Dq0dnDtl5O0ucRUFXoP4aE.roa (hash: PGylBrCxpXUuJKJIZQYtMcn+wp1/7qgRRy5jjVM0Q3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:19:52:5f:c3:88:ca:62:1a:54:ac:cf:7d:dc:b6:26:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Sep 5 10:00:52 2025 GMT Not After : Sep 6 10:00:52 2025 GMT Subject: CN=795f1eda8de90ca0a4dd4d2fe803615cb416d426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:f8:52:54:6b:77:0e:6a:77:5d:2b:db:25: 93:e4:b0:e5:eb:03:67:d2:99:b3:da:6c:d7:20:d6: 32:5f:53:44:06:be:aa:0f:70:5b:a9:8d:51:e8:41: af:bb:75:de:d1:8d:8a:05:f9:98:8a:40:71:48:a6: a1:d7:b2:f8:95:de:17:08:2e:20:41:7f:9e:73:4e: bb:80:97:6a:4d:0d:47:c4:99:8c:84:d8:e8:14:ea: 8d:08:09:e3:bd:85:1a:24:35:c9:62:47:cb:09:2a: ff:4b:3b:88:81:2e:10:ef:ba:17:89:a1:fc:e5:25: 0e:09:92:9d:9c:83:0a:b4:82:19:15:d6:ce:10:2a: bf:a8:6b:4c:81:99:81:32:7b:cc:16:a9:d5:35:67: ff:4c:ce:e2:8d:d6:02:4e:8f:77:dd:31:96:13:87: a0:ce:53:14:12:fa:b0:0a:b7:20:ff:db:e3:cf:67: 66:7f:88:cb:62:5a:cb:87:2b:4d:e1:6f:ec:48:e8: bf:34:53:a5:35:41:59:0e:13:06:f1:85:c6:74:06: c9:7f:10:67:1c:36:77:a9:10:e5:08:b2:72:35:ad: 5f:b5:29:02:d1:33:7e:1d:34:cb:2c:fa:d2:ed:9a: 5b:2c:9e:e2:54:a8:5a:61:dc:56:e4:0b:2f:ba:42: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:1E:DA:8D:E9:0C:A0:A4:DD:4D:2F:E8:03:61:5C:B4:16:D4:26 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:da:8a:54:6b:4b:db:65:15:33:f3:53:a8:c2:f3:b2:61:1f: 29:9b:bb:48:e4:29:f1:f3:ec:43:02:3f:3f:60:bd:3c:91:d1: c1:98:dc:52:2a:f8:9a:a2:e5:52:ff:6f:50:18:70:51:26:86: ac:80:85:29:7a:56:36:bf:2a:50:17:ab:fc:45:54:d8:e4:56: 28:56:e1:d9:a8:19:f9:d8:54:b4:81:70:a4:6b:10:cc:dc:2a: ea:0c:cd:9a:6f:1a:f0:18:80:bf:dc:a9:2b:98:30:f0:bb:7f: 0a:9a:64:d3:2b:5f:18:29:34:0b:8b:48:5b:a4:98:83:c5:83: 42:50:4c:92:88:96:05:4c:83:96:d9:15:42:da:68:7d:f5:2c: 95:3e:49:e5:05:f3:00:ce:50:65:26:b6:31:e8:e5:cb:01:99: 35:67:d1:99:dd:87:e6:70:98:73:09:26:23:ce:e9:c4:a0:b7: 22:a0:3e:e2:d7:c6:28:f9:ed:dd:16:57:cc:1a:96:c9:1f:91: d4:06:70:11:e6:2b:9b:68:20:05:af:43:ce:0e:2c:e5:6e:e4: 13:71:9a:22:4f:21:b3:77:11:49:d1:49:0b:f0:d4:64:17:44: 64:cc:c2:90:92:d1:cc:77:eb:69:17:6b:fb:a9:7b:f2:5b:93: 1b:a6:cd:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkZUl/DiMpiGlSsz33ctiZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUwOTA1MTAwMDUyWhcNMjUwOTA2MTAwMDUyWjAzMTEwLwYDVQQD Eyg3OTVmMWVkYThkZTkwY2EwYTRkZDRkMmZlODAzNjE1Y2I0MTZkNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uj4UlRrdw5qd10r2yWT5LDl6wNn 0pmz2mzXINYyX1NEBr6qD3BbqY1R6EGvu3Xe0Y2KBfmYikBxSKah17L4ld4XCC4g QX+ec067gJdqTQ1HxJmMhNjoFOqNCAnjvYUaJDXJYkfLCSr/SzuIgS4Q77oXiaH8 5SUOCZKdnIMKtIIZFdbOECq/qGtMgZmBMnvMFqnVNWf/TM7ijdYCTo933TGWE4eg zlMUEvqwCrcg/9vjz2dmf4jLYlrLhytN4W/sSOi/NFOlNUFZDhMG8YXGdAbJfxBn HDZ3qRDlCLJyNa1ftSkC0TN+HTTLLPrS7ZpbLJ7iVKhaYdxW5AsvukKuPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlfHtqN6QygpN1NL+gDYVy0FtQmMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdqKVGtL 22UVM/NTqMLzsmEfKZu7SOQp8fPsQwI/P2C9PJHRwZjcUir4mqLlUv9vUBhwUSaG rICFKXpWNr8qUBer/EVU2ORWKFbh2agZ+dhUtIFwpGsQzNwq6gzNmm8a8BiAv9yp K5gw8Lt/Cppk0ytfGCk0C4tIW6SYg8WDQlBMkoiWBUyDltkVQtpoffUslT5J5QXz AM5QZSa2MejlywGZNWfRmd2H5nCYcwkmI87pxKC3IqA+4tfGKPnt3RZXzBqWyR+R 1AZwEeYrm2ggBa9Dzg4s5W7kE3GaIk8hs3cRSdFJC/DUZBdEZMzCkJLRzHfraRdr +6l78luTG6bNrQ== -----END CERTIFICATE-----Generated at Fri Sep 5 12:09:14 2025 by rpki-client