$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft File: Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json) Hash identifier: x7cTeee/eMPXuTqr0jqpeM6eEFOXBQciBjRy6xVqF34= Subject key identifier: 03:49:02:EF:16:9B:E3:30:0E:A6:6E:2E:11:A8:6E:0E:4D:B2:CD:0A Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019A0636B11C7DFF6D7323242ABCB15E2875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft Manifest number: 1718 Signing time: Tue 21 Oct 2025 10:00:38 +0000 Manifest this update: Tue 21 Oct 2025 10:00:38 +0000 Manifest next update: Wed 22 Oct 2025 10:00:38 +0000 Files and hashes: 1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=) 2: 108BiaBt5OdPpJMqalaqOeNV69I.roa (hash: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=) 3: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=) 4: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=) 5: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (hash: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=) 6: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=) 7: Gyb8N9C301qSa0IG9gbjbLxMEdU.roa (hash: 4Y9Qbvs3yblIo0Yqohcxrse2Iin1t3H4aNo3+prWbaY=) 8: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=) 9: PQXaxHl_x5hCLUsVIoHDCNRTgCQ.roa (hash: 92Bl42I20RnqTYIC6hXMCEhevLacaiZKxk7OT2RhVWs=) 10: V9BWXIygnOhJHYu8bdQZRzbbGqg.roa (hash: re8sSZ6coeyXhQek/2jPbAPj3KlkVxVW/0zknsrcySY=) 11: VYwvZ9OHIlRbhHXyXxBLwaXS8K8.roa (hash: dnJzWIPR+2RTl2ECqdSA76Gag1tIQoNuzSSgRCHhVCA=) 12: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: 23SDCKPZI/kEDkmcMO7k3NR5DjjUkZ4MGx+BBQrc3DE=) 13: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=) 14: gWHF_rALnCC6aWL25OOLXmaYWd4.roa (hash: MNZsV6aY4RN1u/cCPIru0uGzTZOf4K/o0suBsxP2p4c=) 15: k5Aqa-da4KH0XLB24n43hX_ycfY.roa (hash: W7GIeml4QidNLEYcrSPcEhMsiifqshzVO/aRAhmqOJQ=) 16: o0SifTx2NU1sEhX0Vll10hyck8c.roa (hash: CTAgGKzxE8Fx3onDLMa7P2lInOfEaEKTgjP3A/rkyEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:36:b1:1c:7d:ff:6d:73:23:24:2a:bc:b1:5e:28:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Oct 21 10:00:38 2025 GMT Not After : Oct 22 10:00:38 2025 GMT Subject: CN=034902ef169be3300ea66e2e11a86e0e4db2cd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:69:a0:d2:a8:1b:4a:95:64:53:3b:a5:8a: 93:a8:16:b4:90:0a:a5:07:ca:6c:e3:dd:95:50:5f: 72:89:d0:e0:f7:99:3f:30:4f:ef:30:d6:19:db:38: 65:c2:8a:ae:5b:af:bf:30:82:02:70:2a:73:e8:42: 6c:fa:56:b1:a2:b0:96:3a:37:68:e5:01:11:54:b1: 37:6d:07:a7:36:5a:44:74:0c:c2:49:72:84:4d:66: e3:a1:13:2f:d7:f5:0b:5f:26:78:fb:d3:4d:cf:5a: 9b:01:4e:e9:d9:44:76:41:c3:8d:00:f4:ca:67:6b: d6:cb:31:22:67:87:89:5b:9d:fc:7e:8c:c0:6f:73: 5a:06:f5:d4:22:ce:e8:11:d8:16:35:d0:47:af:58: 7d:2b:5f:75:8a:03:da:82:15:45:47:43:5a:ff:01: 86:84:02:68:92:07:11:4f:86:c1:70:73:29:b4:e4: 6a:36:1c:33:99:07:e2:4d:39:4b:4d:b9:5a:2e:37: 87:a1:33:fe:55:d9:56:39:04:4b:a2:6f:32:02:0d: 26:a9:41:65:c1:5d:72:e0:fc:9d:c2:c9:48:7b:53: 9f:16:db:01:6f:ec:0d:35:17:76:65:ce:b3:40:86: 9c:78:e0:41:d7:b6:48:1c:a7:6d:08:d5:35:7a:95: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:02:EF:16:9B:E3:30:0E:A6:6E:2E:11:A8:6E:0E:4D:B2:CD:0A X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e2:bc:60:e7:2b:60:e6:c0:5f:b1:f8:97:93:f0:ce:86:5c: f2:a4:26:3d:b9:09:f7:47:c6:a7:30:a2:27:da:18:a5:60:8a: 6e:eb:82:dd:ff:4d:e5:9a:0e:5a:43:8e:70:e9:78:e2:1e:d7: e8:81:d0:88:08:9f:49:76:ef:58:fb:bb:07:d7:4a:6a:23:8e: 4d:65:de:ba:27:6f:e9:26:41:00:2d:a5:a7:6e:e5:b8:70:09: 7e:b8:2f:69:92:65:38:47:64:6c:80:f9:ee:dc:83:cb:4e:99: fb:3c:80:a5:e0:d4:74:c0:41:e7:2d:f9:f2:9c:6d:c4:78:f9: a0:22:71:2f:28:45:ee:6a:68:af:75:55:54:6e:b0:c5:f0:fa: 90:31:eb:bc:4b:3c:93:5a:29:62:b2:f6:5d:7c:f1:6c:26:cf: 6c:e4:ed:7d:53:b3:cc:fe:74:c3:6c:22:7f:0f:3d:80:ff:78: 06:31:52:88:a3:93:b5:6c:04:43:1f:be:a1:c6:36:15:da:34: 77:e4:eb:ad:c4:22:ac:07:5c:cc:88:c9:47:09:31:02:dd:b8: 55:d5:4c:b3:a9:6c:f3:ce:47:dc:1a:4b:e5:25:c3:a1:71:e8: b5:cf:cc:e0:8b:03:a8:e8:fe:08:d3:99:a9:4f:44:cf:26:ea: e0:1f:64:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGNrEcff9tcyMkKryxXih1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjUxMDIxMTAwMDM4WhcNMjUxMDIyMTAwMDM4WjAzMTEwLwYDVQQD EygwMzQ5MDJlZjE2OWJlMzMwMGVhNjZlMmUxMWE4NmUwZTRkYjJjZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnBpoNKoG0qVZFM7pYqTqBa0kAql B8ps492VUF9yidDg95k/ME/vMNYZ2zhlwoquW6+/MIICcCpz6EJs+laxorCWOjdo 5QERVLE3bQenNlpEdAzCSXKETWbjoRMv1/ULXyZ4+9NNz1qbAU7p2UR2QcONAPTK Z2vWyzEiZ4eJW538fozAb3NaBvXUIs7oEdgWNdBHr1h9K191igPaghVFR0Na/wGG hAJokgcRT4bBcHMptORqNhwzmQfiTTlLTblaLjeHoTP+VdlWOQRLom8yAg0mqUFl wV1y4PydwslIe1OfFtsBb+wNNRd2Zc6zQIaceOBB17ZIHKdtCNU1epVEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANJAu8Wm+MwDqZuLhGobg5Nss0KMB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOK8YOcr YObAX7H4l5PwzoZc8qQmPbkJ90fGpzCiJ9oYpWCKbuuC3f9N5ZoOWkOOcOl44h7X 6IHQiAifSXbvWPu7B9dKaiOOTWXeuidv6SZBAC2lp27luHAJfrgvaZJlOEdkbID5 7tyDy06Z+zyApeDUdMBB5y358pxtxHj5oCJxLyhF7mpor3VVVG6wxfD6kDHrvEs8 k1opYrL2XXzxbCbPbOTtfVOzzP50w2wifw89gP94BjFSiKOTtWwEQx++ocY2Fdo0 d+TrrcQirAdczIjJRwkxAt24VdVMs6ls885H3BpL5SXDoXHotc/M4IsDqOj+CNOZ qU9Ezybq4B9kpw== -----END CERTIFICATE-----Generated at Tue Oct 21 18:17:28 2025 by rpki-client