$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 7XOkPhAF/fAGAb6g+Oe9ITSSd+ppOB/JhUR+BX8QWaY= Subject key identifier: 20:09:2A:F0:D4:46:BD:DD:35:8C:F2:46:5F:F5:36:17:97:2A:4D:54 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019A0C01FECDB219C976A47C7BC89D8D153D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 11C2 Signing time: Wed 22 Oct 2025 13:00:48 +0000 Manifest this update: Wed 22 Oct 2025 13:00:48 +0000 Manifest next update: Thu 23 Oct 2025 13:00:48 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: LBQu6jJtrdM52pFgR4TYoe/J8cdMfPvsxFx70uFHsyI=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0c:01:fe:cd:b2:19:c9:76:a4:7c:7b:c8:9d:8d:15:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Oct 22 13:00:48 2025 GMT Not After : Oct 23 13:00:48 2025 GMT Subject: CN=20092af0d446bddd358cf2465ff53617972a4d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:ec:06:7f:2f:a8:96:c1:04:e7:a7:f9:98: 1c:bb:60:2b:68:51:37:5c:ff:ef:4e:60:bc:97:36: 20:ea:58:83:68:ac:e5:dc:d7:47:d5:29:ab:66:75: 77:57:ec:e8:f9:a0:6c:d9:5b:be:7c:73:69:56:cb: 41:ea:85:69:36:09:33:22:b9:11:99:a0:37:91:7c: 27:38:ab:09:d9:32:77:9b:77:0f:7b:f3:6f:67:50: 73:b1:ae:29:d2:e6:d8:d7:b8:0e:b9:69:c5:fe:38: c3:56:52:11:19:57:7b:38:bb:a3:48:3b:35:52:45: 83:12:2b:ac:c2:da:71:69:38:e7:86:28:c0:52:e4: aa:92:1a:16:f6:b2:e1:fd:cd:fa:49:0b:53:db:9f: 0d:5c:b2:44:54:80:ed:29:56:f4:c6:ea:cc:fc:f7: 44:48:af:5a:18:fb:85:53:78:4e:84:aa:ae:45:c9: 2f:c7:a1:70:8c:63:c4:01:73:af:0e:ef:67:b9:24: 52:28:4e:a0:60:10:1e:52:ed:4d:bd:c6:b2:8c:d9: 74:95:0a:60:28:8e:d9:b8:aa:c9:c8:0e:ff:5c:1c: e5:12:78:0d:b1:ae:22:c3:57:8b:24:d8:22:0b:58: 5c:7a:46:6f:1d:44:ad:b0:6e:c5:9e:57:aa:31:79: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:09:2A:F0:D4:46:BD:DD:35:8C:F2:46:5F:F5:36:17:97:2A:4D:54 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3f:17:17:8d:35:bb:f2:2c:ab:02:df:68:9c:9c:d8:5b:de: 70:c2:96:07:d4:b9:e4:f2:55:32:aa:ff:37:89:00:ad:1c:d1: c8:36:61:5b:09:36:10:0d:b2:36:a6:0e:ad:e7:1e:55:fc:8d: d3:c6:26:63:a0:9b:9d:67:f1:ec:ef:17:10:35:03:0c:cf:d1: cb:f9:85:7c:e8:7f:e9:fe:7c:a5:ad:28:95:6a:3b:c7:8d:e6: 8e:0b:44:20:dd:62:cc:a2:4d:97:2c:b2:f9:e1:64:e7:26:f1: 36:7e:42:b5:eb:61:a8:ac:72:6e:3b:de:17:63:48:39:06:dd: 35:c1:c4:e7:ed:b8:d0:ce:69:76:5b:6c:c1:fe:b9:0b:67:0a: 14:5e:12:bb:b2:9a:6f:b4:96:c4:fb:f4:7a:93:dc:0d:53:9c: 95:7a:9d:bb:12:00:83:2a:2d:6e:df:42:fb:b2:51:54:9f:7a: 85:ed:d1:d8:3b:26:9d:4f:aa:97:7d:41:92:d8:fa:84:37:63: 2f:59:22:a9:9f:73:7d:2e:f2:0e:ce:44:77:04:e3:88:8a:32: 23:56:c5:7a:b2:b5:44:c7:b2:71:c1:3e:f0:89:22:86:06:59: c4:43:e2:05:16:db:a1:91:59:a5:92:31:03:64:df:a1:45:0c: b9:c3:99:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoMAf7NshnJdqR8e8idjRU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUxMDIyMTMwMDQ4WhcNMjUxMDIzMTMwMDQ4WjAzMTEwLwYDVQQD EygyMDA5MmFmMGQ0NDZiZGRkMzU4Y2YyNDY1ZmY1MzYxNzk3MmE0ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZzsBn8vqJbBBOen+Zgcu2AraFE3 XP/vTmC8lzYg6liDaKzl3NdH1SmrZnV3V+zo+aBs2Vu+fHNpVstB6oVpNgkzIrkR maA3kXwnOKsJ2TJ3m3cPe/NvZ1Bzsa4p0ubY17gOuWnF/jjDVlIRGVd7OLujSDs1 UkWDEiuswtpxaTjnhijAUuSqkhoW9rLh/c36SQtT258NXLJEVIDtKVb0xurM/PdE SK9aGPuFU3hOhKquRckvx6FwjGPEAXOvDu9nuSRSKE6gYBAeUu1NvcayjNl0lQpg KI7ZuKrJyA7/XBzlEngNsa4iw1eLJNgiC1hcekZvHUStsG7FnleqMXl82wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAJKvDURr3dNYzyRl/1NheXKk1UMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD8XF401 u/IsqwLfaJyc2FvecMKWB9S55PJVMqr/N4kArRzRyDZhWwk2EA2yNqYOreceVfyN 08YmY6CbnWfx7O8XEDUDDM/Ry/mFfOh/6f58pa0olWo7x43mjgtEIN1izKJNlyyy +eFk5ybxNn5CtethqKxybjveF2NIOQbdNcHE5+240M5pdltswf65C2cKFF4Su7Ka b7SWxPv0epPcDVOclXqduxIAgyotbt9C+7JRVJ96he3R2DsmnU+ql31Bktj6hDdj L1kiqZ9zfS7yDs5EdwTjiIoyI1bFerK1RMeyccE+8IkihgZZxEPiBRbboZFZpZIx A2TfoUUMucOZpg== -----END CERTIFICATE-----Generated at Wed Oct 22 20:28:00 2025 by rpki-client