$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: iiXdThCThTD4JrKTp5eHsw3ZWbNInToua+lrrH7n8s0= Subject key identifier: A9:C8:16:E8:70:EB:E8:37:0D:C4:5A:2B:64:74:9F:11:E3:EA:88:D2 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019F566B7D6F8DA8E64ACEA1D73A50B605F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 19B6 Signing time: Sun 12 Jul 2026 13:01:52 +0000 Manifest this update: Sun 12 Jul 2026 13:01:52 +0000 Manifest next update: Mon 13 Jul 2026 13:01:52 +0000 Files and hashes: 1: 05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa (hash: ot1oRZWtexWP8FkLp7pJg/bXEU47s255RLNkcaHGXF8=) 2: 4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa (hash: nVIZnWls1sIIik8WAyGLvHsDtoBb4V67LyqEiuL3hhM=) 3: 5E3SENo7enmJV0f5QzVUO8ZLEBY.roa (hash: c2R0qq7Mhrj8ssta1I81r5ZynPZiiMEvO75gJxGz+s8=) 4: 5d-FBtLfeZqIezw12H0l7p2J7yQ.roa (hash: d84QOVN+1AP2/0GG7hx3uB1uInDZl8CHvh9J2TCGVTc=) 5: 9X0nqUKArhus_YUqfdP3WTiMnG8.roa (hash: c1biU22O73yr/MYC9AlC9fUEO9WNlunWbEG9QDYb8AA=) 6: A1WtZ_NCi3HRctp1iEUsUikRlRM.roa (hash: 2lGWGw+d+TArO/mPqTalF9zlkxryWG+SZsKODp2pgBY=) 7: PftedbvI9uIuGEN_e3yVk4LES7w.roa (hash: 9ALJe0lDwIScP2qwOJuyd3SZeutT5jJfaDAcFe7xqEQ=) 8: Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa (hash: IGSzzbDAIRV0gMo02Xu7ZT8JSjcCTONJ9LlOYiDEp/g=) 9: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: BKEYynNv3e377XWyJZ8tjW/2SQhKE8YwsXeGwBuMZwg=) 10: _90PdAdYFkH9HSAzXdpXa1HTPhg.roa (hash: r2HnEsU3YMp8gF0il12do2DrsODy0omS2NrJJQ+cHvg=) 11: fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa (hash: nwpw3EqTS3bDEUKnzI/z5QrY+YFUcA5dqpUchh6jOTc=) 12: pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa (hash: Tb4DafAqkHk2LhEolFtqXJ4NxI34mPUG6zMArDdgQBU=) 13: rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa (hash: JY8aR7gymzRVW+zZjreC+9drKDyPLMEiDLQuy04AC5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 13:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:56:6b:7d:6f:8d:a8:e6:4a:ce:a1:d7:3a:50:b6:05:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jul 12 13:01:52 2026 GMT Not After : Jul 13 13:01:52 2026 GMT Subject: CN=a9c816e870ebe8370dc45a2b64749f11e3ea88d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dc:71:51:8f:6b:34:99:a4:96:bb:ee:68:f7: 97:d1:3a:a6:01:2c:5d:e0:dd:50:2d:26:f9:07:b5: 79:5e:08:01:c1:22:21:79:68:71:1c:02:8f:1f:95: 10:98:80:09:fb:59:8e:e5:e0:d5:4a:e0:9d:ec:4f: a3:8e:a3:86:06:f6:6c:93:42:35:3d:89:96:cf:e4: 5e:2e:da:6c:99:40:8f:1a:4e:15:68:34:6b:a0:e2: 1b:19:48:e0:20:f4:5b:99:cd:20:6c:47:9f:9c:c9: 3a:67:e9:4f:3c:63:54:22:3b:bb:3e:8b:6b:81:78: 56:7e:f9:e8:b1:f3:56:a2:27:97:43:57:d2:b0:69: f0:9a:7e:c6:5f:63:56:1b:ed:f9:e5:81:47:c5:25: f3:6a:8d:3a:e1:93:e6:47:2c:45:e1:a2:c1:8a:c4: 35:9c:ec:4c:ea:ab:a4:cf:43:ea:95:2f:5c:e7:a3: e1:bc:9a:bc:80:03:39:f1:1e:20:75:6a:68:2d:ac: f4:1e:87:02:a6:bd:b1:15:87:53:f0:00:a3:c0:c1: e6:95:40:19:0b:2f:b1:74:15:15:1c:97:52:07:fd: 20:54:3d:60:5a:9e:4c:76:c6:74:0b:6d:93:58:b5: d3:52:c4:fc:52:82:86:3b:90:57:b2:76:c9:8b:0a: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:16:E8:70:EB:E8:37:0D:C4:5A:2B:64:74:9F:11:E3:EA:88:D2 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cf:0b:76:d5:c1:db:26:33:2a:16:2c:ad:d8:05:7f:d1:a8: 44:62:0a:2e:1d:1a:ae:66:6a:aa:89:41:ea:50:1b:43:cd:e4: 34:7a:98:6d:87:46:f2:58:eb:95:59:39:ae:d3:8b:bc:72:df: e1:e3:14:41:f8:d4:b6:ce:d9:ff:ec:be:9c:b5:cc:5b:80:68: a1:88:94:34:62:4c:e3:55:42:18:62:12:dc:9e:9a:9b:75:0e: 94:ee:a9:c3:b8:9c:c7:f8:2d:8b:f5:a1:c2:38:4a:77:23:9e: ad:d3:52:31:59:44:07:c6:91:f9:9a:4d:a4:48:22:d3:f5:ed: db:61:cf:14:d3:ce:60:d3:f5:f9:c4:14:17:cb:c4:22:f4:e5: 62:02:f3:a2:20:38:1c:e3:f3:e5:de:08:c6:1c:b8:6e:46:6d: eb:69:30:bd:60:1b:fe:05:f4:b0:f6:93:57:95:20:4b:fe:11: 88:6d:e7:9d:86:72:32:df:a6:56:3b:62:30:80:85:42:ab:18: 7e:88:99:6c:c8:49:d6:1a:af:84:1c:36:35:6b:8d:ed:f9:4c: 1f:1e:d0:84:fc:91:30:99:2b:07:9f:55:9c:ec:8c:40:e5:6d: 26:cb:12:3a:42:63:8b:12:70:98:94:55:74:f3:13:f8:30:be: a1:c1:ac:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9Wa31vjajmSs6h1zpQtgXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwNzEyMTMwMTUyWhcNMjYwNzEzMTMwMTUyWjAzMTEwLwYDVQQD EyhhOWM4MTZlODcwZWJlODM3MGRjNDVhMmI2NDc0OWYxMWUzZWE4OGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dxxUY9rNJmklrvuaPeX0TqmASxd 4N1QLSb5B7V5XggBwSIheWhxHAKPH5UQmIAJ+1mO5eDVSuCd7E+jjqOGBvZsk0I1 PYmWz+ReLtpsmUCPGk4VaDRroOIbGUjgIPRbmc0gbEefnMk6Z+lPPGNUIju7Potr gXhWfvnosfNWoieXQ1fSsGnwmn7GX2NWG+355YFHxSXzao064ZPmRyxF4aLBisQ1 nOxM6qukz0PqlS9c56PhvJq8gAM58R4gdWpoLaz0HocCpr2xFYdT8ACjwMHmlUAZ Cy+xdBUVHJdSB/0gVD1gWp5MdsZ0C22TWLXTUsT8UoKGO5BXsnbJiwqsEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnIFuhw6+g3DcRaK2R0nxHj6ojSMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM8LdtXB 2yYzKhYsrdgFf9GoRGIKLh0armZqqolB6lAbQ83kNHqYbYdG8ljrlVk5rtOLvHLf 4eMUQfjUts7Z/+y+nLXMW4BooYiUNGJM41VCGGIS3J6am3UOlO6pw7icx/gti/Wh wjhKdyOerdNSMVlEB8aR+ZpNpEgi0/Xt22HPFNPOYNP1+cQUF8vEIvTlYgLzoiA4 HOPz5d4Ixhy4bkZt62kwvWAb/gX0sPaTV5UgS/4RiG3nnYZyMt+mVjtiMICFQqsY foiZbMhJ1hqvhBw2NWuN7flMHx7QhPyRMJkrB59VnOyMQOVtJssSOkJjixJwmJRV dPMT+DC+ocGsRg== -----END CERTIFICATE-----Generated at Sun Jul 12 21:33:45 2026 by rpki-client