$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: KrQ9CjoOTpB85aZrViIybAFT7qy3WXiS0RN23Ml1cDg= Subject key identifier: 00:90:6E:2C:8B:5E:6C:69:52:D8:C8:C5:5D:34:07:87:F5:E8:09:7C Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01992255ADBC0C277D4392242279BA3647B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 1149 Signing time: Sun 07 Sep 2025 04:01:03 +0000 Manifest this update: Sun 07 Sep 2025 04:01:03 +0000 Manifest next update: Mon 08 Sep 2025 04:01:03 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: vuO/BOg9VRxD8RXN2podS7E1HroPUndMVa1dtJZT294=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:55:ad:bc:0c:27:7d:43:92:24:22:79:ba:36:47:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Sep 7 04:01:03 2025 GMT Not After : Sep 8 04:01:03 2025 GMT Subject: CN=00906e2c8b5e6c6952d8c8c55d340787f5e8097c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:df:83:bc:c4:d7:6e:aa:13:61:00:33:80: 36:94:19:d8:9c:e0:92:0e:cd:49:23:d6:ac:92:bd: 0f:58:b9:66:de:c5:2e:ee:6e:0c:a5:0a:7d:e4:79: 39:19:48:a6:43:2d:0a:10:24:51:0a:92:56:3c:5a: 84:0f:3d:d6:8b:63:71:28:8a:92:6e:63:62:06:bc: 20:b4:73:90:59:c5:23:67:57:96:35:73:01:47:23: dc:e7:c5:4d:a2:04:84:38:4a:bf:37:49:6d:74:4d: 56:2b:c4:90:2e:88:b9:f2:f0:f7:50:af:2b:4f:8c: 04:39:c1:40:70:11:a9:f9:7e:92:48:06:56:b9:d1: 39:3c:fb:e0:0a:99:fc:fa:73:03:af:28:43:4d:c7: eb:98:9a:5f:ec:74:4c:5a:16:e1:cb:3b:3d:6c:f4: 7b:74:f4:66:bc:e5:21:52:4f:57:66:d5:07:88:76: e8:45:42:9c:0e:e7:ba:dd:87:68:db:54:17:71:29: 31:8b:54:bd:5c:ab:b0:d6:6b:d5:48:50:d9:14:42: 00:35:3f:07:b1:6c:c2:c6:ea:d2:1c:5f:73:20:a5: 85:79:7f:16:d2:78:ab:03:98:9a:70:a9:3e:7a:d8: 5a:6f:40:3b:37:23:f4:e2:83:c9:b8:17:59:21:41: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:6E:2C:8B:5E:6C:69:52:D8:C8:C5:5D:34:07:87:F5:E8:09:7C X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c1:0a:6f:20:dd:87:e6:d4:d0:df:d9:17:72:fe:9a:b3:25: fb:07:37:8b:f7:8b:38:5c:cc:94:b0:b3:fe:ae:49:eb:a3:7a: 66:15:09:4c:8d:36:e9:db:cb:7f:20:e9:e6:72:3a:a7:0a:2c: 76:e3:27:8d:27:c2:53:23:3c:60:49:17:55:f0:82:b5:58:9a: b1:a0:5d:82:83:47:f7:c3:10:99:3f:7b:ec:b3:d6:3f:1e:14: 4f:f7:71:4e:3e:26:a4:b8:1c:0d:74:a4:a1:a1:45:d4:04:c2: e6:66:a0:bf:c4:ed:81:39:40:c4:08:57:21:b2:36:65:45:d0: 18:81:2f:ea:b5:a6:24:c6:66:70:0d:40:6f:c3:b2:7b:3c:00: 9e:77:08:70:09:52:cf:08:9f:76:16:c8:6e:dd:64:9a:ef:8d: d0:a4:09:2d:90:60:cd:e2:1f:7a:34:55:98:e5:47:ab:c7:87: b6:9f:7c:5f:06:34:64:7d:63:78:b7:0b:ba:06:98:c7:66:38: 31:2c:56:69:85:00:47:19:fb:df:d0:c0:8d:59:c4:95:8e:88: d8:90:97:3e:a4:2a:4f:49:97:a3:42:48:0a:4d:7c:9f:53:bf: 06:10:d9:59:31:4e:bc:83:43:2a:aa:14:f1:56:ea:ac:ab:1b: 00:3d:74:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiVa28DCd9Q5IkInm6NkewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwOTA3MDQwMTAzWhcNMjUwOTA4MDQwMTAzWjAzMTEwLwYDVQQD EygwMDkwNmUyYzhiNWU2YzY5NTJkOGM4YzU1ZDM0MDc4N2Y1ZTgwOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVjfg7zE126qE2EAM4A2lBnYnOCS Ds1JI9askr0PWLlm3sUu7m4MpQp95Hk5GUimQy0KECRRCpJWPFqEDz3Wi2NxKIqS bmNiBrwgtHOQWcUjZ1eWNXMBRyPc58VNogSEOEq/N0ltdE1WK8SQLoi58vD3UK8r T4wEOcFAcBGp+X6SSAZWudE5PPvgCpn8+nMDryhDTcfrmJpf7HRMWhbhyzs9bPR7 dPRmvOUhUk9XZtUHiHboRUKcDue63Ydo21QXcSkxi1S9XKuw1mvVSFDZFEIANT8H sWzCxurSHF9zIKWFeX8W0nirA5iacKk+ethab0A7NyP04oPJuBdZIUEzkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACQbiyLXmxpUtjIxV00B4f16Al8MB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8EKbyDd h+bU0N/ZF3L+mrMl+wc3i/eLOFzMlLCz/q5J66N6ZhUJTI026dvLfyDp5nI6pwos duMnjSfCUyM8YEkXVfCCtViasaBdgoNH98MQmT977LPWPx4UT/dxTj4mpLgcDXSk oaFF1ATC5magv8TtgTlAxAhXIbI2ZUXQGIEv6rWmJMZmcA1Ab8OyezwAnncIcAlS zwifdhbIbt1kmu+N0KQJLZBgzeIfejRVmOVHq8eHtp98XwY0ZH1jeLcLugaYx2Y4 MSxWaYUARxn739DAjVnElY6I2JCXPqQqT0mXo0JICk18n1O/BhDZWTFOvINDKqoU 8VbqrKsbAD10vA== -----END CERTIFICATE-----Generated at Sun Sep 7 12:34:19 2025 by rpki-client