$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: ihVcwnJAUZBiJH4kyHG1mnjrEYFd9UNZC+ZQteJqzB8= Subject key identifier: 44:0F:C3:C8:82:34:1C:FB:3A:EC:23:3B:7E:DC:E7:08:FE:E6:A2:CE Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019934C916B9D33FA4B29ACD89B72307EF63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 1689 Signing time: Wed 10 Sep 2025 18:00:17 +0000 Manifest this update: Wed 10 Sep 2025 18:00:17 +0000 Manifest next update: Thu 11 Sep 2025 18:00:17 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: UyMnXCzERFHuMfG9nOWN2JfyXW8.roa (hash: EQ7hm2P0BQiEP7hNsHxFIlwQPko0e6zROHrzHeJDMiU=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: FCDH4mvpxOR3DZskVeNW1/PvVSxjKeaehQJV2xlRwBU=) 8: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 9: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 10: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (hash: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:34:c9:16:b9:d3:3f:a4:b2:9a:cd:89:b7:23:07:ef:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Sep 10 18:00:17 2025 GMT Not After : Sep 11 18:00:17 2025 GMT Subject: CN=440fc3c882341cfb3aec233b7edce708fee6a2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:7a:19:19:77:82:f8:37:11:90:73:2e:fb: 30:49:db:42:43:ca:60:e7:9e:b8:94:89:11:19:15: 14:82:40:ae:46:c6:47:4a:fe:e4:6d:e9:dc:45:b9: ca:e6:64:b1:b8:93:7b:0b:f1:cf:6d:53:4a:f4:10: 67:dc:a2:94:42:86:93:81:c0:5c:71:53:3b:88:f5: 58:61:7b:1b:74:a3:ef:1b:a9:56:ce:5f:3c:5d:6b: 9c:79:d4:e2:f4:fe:30:ec:de:e6:3d:ae:09:11:59: 04:7f:35:10:8f:44:bd:1a:24:57:a3:b6:68:8a:ad: ed:38:da:1a:43:b8:17:d3:0d:ed:95:62:7e:13:34: 3f:d1:d9:bc:49:59:07:94:13:9c:47:1b:f4:3d:71: de:fa:fc:2f:97:20:7e:30:b7:6d:f7:92:a6:bf:2f: 20:61:37:51:6b:8d:8b:be:62:ef:c8:a1:25:2d:66: e8:6f:a0:b3:a3:3d:0f:50:a6:f3:7c:04:46:07:8d: 5a:95:9a:b5:5c:3b:5d:de:8d:b5:ce:10:bd:d0:2e: 50:e5:cb:2d:b0:73:70:fa:ab:25:9c:bd:51:f2:8d: 07:2b:1f:50:5d:12:4b:a5:91:7d:ba:8b:33:63:c7: 58:96:b4:c3:b3:24:bb:83:79:ab:27:ff:6c:5b:55: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0F:C3:C8:82:34:1C:FB:3A:EC:23:3B:7E:DC:E7:08:FE:E6:A2:CE X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:95:47:fe:79:7a:0a:d4:23:c5:51:77:cb:e0:57:9b:67:55: e8:71:24:ad:e0:01:84:81:65:2a:80:5a:2f:96:03:22:83:ad: 86:e2:54:72:ec:38:d6:76:14:a3:ea:0e:02:9d:6d:4f:94:01: 54:20:b0:11:52:f2:ce:e9:7b:1b:29:5f:9c:62:d6:fa:f8:88: 2a:3a:a8:d5:ed:e1:39:8e:20:5a:c0:65:3a:8a:2b:25:75:d3: b3:68:70:f7:62:76:a9:9f:cb:af:71:79:7c:68:8f:29:99:fa: b6:fc:ad:ce:9b:6a:5d:33:62:65:d5:1f:14:87:de:c4:f5:70: 22:7c:07:3b:d4:39:12:7e:d5:9c:3c:aa:96:0b:39:84:6f:35: 09:88:b0:26:67:6d:74:b5:82:e9:e6:90:4a:2c:7c:71:ad:00: 8e:10:42:ef:2f:b3:34:bf:30:9d:20:aa:00:6a:45:fa:1e:15: e5:1d:5d:98:c1:ee:72:2b:ab:a0:d7:89:3a:2b:32:d0:a5:1c: 6c:38:3f:05:d4:63:60:73:de:18:41:98:95:87:60:80:f3:ce: 2e:b2:32:00:a7:18:6c:fb:16:46:3d:ed:af:4d:00:dd:91:d5: 86:ee:a9:41:79:9b:7f:1e:16:e9:0a:48:11:90:df:6c:f9:a2: 0f:df:75:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk0yRa50z+ksprNibcjB+9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwOTEwMTgwMDE3WhcNMjUwOTExMTgwMDE3WjAzMTEwLwYDVQQD Eyg0NDBmYzNjODgyMzQxY2ZiM2FlYzIzM2I3ZWRjZTcwOGZlZTZhMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDt6GRl3gvg3EZBzLvswSdtCQ8pg 5564lIkRGRUUgkCuRsZHSv7kbencRbnK5mSxuJN7C/HPbVNK9BBn3KKUQoaTgcBc cVM7iPVYYXsbdKPvG6lWzl88XWucedTi9P4w7N7mPa4JEVkEfzUQj0S9GiRXo7Zo iq3tONoaQ7gX0w3tlWJ+EzQ/0dm8SVkHlBOcRxv0PXHe+vwvlyB+MLdt95Kmvy8g YTdRa42LvmLvyKElLWbob6Czoz0PUKbzfARGB41alZq1XDtd3o21zhC90C5Q5cst sHNw+qslnL1R8o0HKx9QXRJLpZF9uoszY8dYlrTDsyS7g3mrJ/9sW1W1mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQPw8iCNBz7OuwjO37c5wj+5qLOMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZVH/nl6 CtQjxVF3y+BXm2dV6HEkreABhIFlKoBaL5YDIoOthuJUcuw41nYUo+oOAp1tT5QB VCCwEVLyzul7GylfnGLW+viIKjqo1e3hOY4gWsBlOoorJXXTs2hw92J2qZ/Lr3F5 fGiPKZn6tvytzptqXTNiZdUfFIfexPVwInwHO9Q5En7VnDyqlgs5hG81CYiwJmdt dLWC6eaQSix8ca0AjhBC7y+zNL8wnSCqAGpF+h4V5R1dmMHuciuroNeJOisy0KUc bDg/BdRjYHPeGEGYlYdggPPOLrIyAKcYbPsWRj3tr00A3ZHVhu6pQXmbfx4W6QpI EZDfbPmiD991TA== -----END CERTIFICATE-----Generated at Wed Sep 10 22:55:57 2025 by rpki-client