$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: d9REe002ytH92LYNYfHHdF/aHMrxu2MkHMFpSZt085I= Subject key identifier: 83:92:AE:F8:9E:2F:76:22:F6:3F:C0:8A:83:A2:23:75:E6:98:DF:8A Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019F859FA11DBBD75BC997C44D75E8E1A1E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0344 Signing time: Tue 21 Jul 2026 17:00:58 +0000 Manifest this update: Tue 21 Jul 2026 17:00:58 +0000 Manifest next update: Wed 22 Jul 2026 17:00:58 +0000 Files and hashes: 1: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=) 2: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 3: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 4: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 5: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=) 6: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=) 7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: bWzJlcQv3hc8tnE15C6B3SbB/PlAxRVWuISb4P5ivP4=) 8: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=) 9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 10: rxUnx1ra5EHEfcrIj6uPq_Tbrrs.roa (hash: xMlkEOl/cVJYjxYinyPnGY0MzSt5ZGRrCF7oAtp8yYg=) 11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:85:9f:a1:1d:bb:d7:5b:c9:97:c4:4d:75:e8:e1:a1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jul 21 17:00:58 2026 GMT Not After : Jul 22 17:00:58 2026 GMT Subject: CN=8392aef89e2f7622f63fc08a83a22375e698df8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:12:5c:d8:cf:1e:0f:2c:03:e1:7e:1f:c0: e2:85:49:09:5a:e4:54:ce:f8:21:8a:29:ef:21:7f: 3c:09:97:49:41:c6:f4:7b:17:7f:eb:c2:ea:23:ed: 14:63:66:8b:36:6e:aa:94:a4:a6:cc:94:e3:3c:b5: 53:d8:8a:5f:d8:c5:03:0a:33:14:7e:10:7c:a2:91: f8:12:23:28:d3:ae:de:85:de:7d:10:6e:77:39:16: 06:95:8f:0a:14:ad:34:8a:e6:25:ff:bf:cb:b5:ed: f5:00:df:aa:82:7e:cd:04:cf:f3:e3:d4:cb:93:f8: 4b:83:11:ed:f9:f1:f5:ff:84:3f:dc:90:59:66:72: fa:fd:4e:3a:7e:c4:4e:14:0a:51:8f:05:a0:23:7b: 45:ad:95:2a:84:9c:72:f1:18:10:93:bc:da:1d:8b: 10:14:b2:58:13:a1:8c:f2:29:26:2d:8b:95:0a:ec: 54:b9:69:58:f1:7d:77:65:63:46:a0:cc:b5:a3:b9: ae:58:1c:99:44:4b:12:74:83:db:58:1d:c1:a4:87: 6d:47:db:24:0a:a1:18:cc:ac:bf:4a:96:f9:cf:e5: d3:57:3b:8a:b2:e0:9b:d0:1c:e4:6a:08:99:25:34: 1d:14:df:b5:49:fd:e8:8c:15:4d:2f:0a:b3:ac:7b: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:92:AE:F8:9E:2F:76:22:F6:3F:C0:8A:83:A2:23:75:E6:98:DF:8A X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cf:7a:fe:ac:3c:f3:7b:44:5e:5d:68:aa:65:f1:b6:54:04: 97:6a:fd:68:70:73:b8:b8:93:be:23:29:91:4e:63:e6:23:b9: 10:3f:10:ae:00:d8:a7:e3:a4:98:a6:0d:dd:df:91:84:5b:e6: f7:b6:9b:64:a4:9f:de:90:0c:24:ef:64:7c:00:e6:d7:1a:cf: c1:c1:a4:6b:27:8b:58:cd:e1:af:eb:88:be:ff:9e:7e:8a:a9: 04:ee:77:b7:6d:b5:d1:0d:f4:3d:8b:dc:1d:7e:f3:09:66:3f: 03:b4:33:1d:9a:8b:a5:cf:6e:8a:c6:40:64:17:ce:4c:be:40: 6d:9d:61:81:92:8e:e2:ee:1d:59:ee:97:c7:6a:9b:91:1f:ef: a2:cd:06:70:9a:fa:cb:76:2d:b1:9c:72:66:bc:cd:6e:25:5b: 32:75:42:24:7d:ef:7e:8e:b8:be:70:28:cf:83:52:21:ae:c1: 9d:46:3b:5c:d2:38:c1:2c:4c:3f:98:f6:2a:94:78:9c:b0:a9: 35:d1:cf:1a:28:c8:e3:75:05:06:a2:30:c2:e8:9f:0e:e5:84: c4:89:62:6c:80:c7:b7:7f:b4:fd:fa:3b:1a:2c:15:f5:ad:40: 27:e5:1a:5c:c2:c0:b4:32:39:f3:01:0b:09:d6:77:72:8c:a0: 1b:c5:ef:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Fn6Edu9dbyZfETXXo4aHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwNzIxMTcwMDU4WhcNMjYwNzIyMTcwMDU4WjAzMTEwLwYDVQQD Eyg4MzkyYWVmODllMmY3NjIyZjYzZmMwOGE4M2EyMjM3NWU2OThkZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv4SXNjPHg8sA+F+H8DihUkJWuRU zvghiinvIX88CZdJQcb0exd/68LqI+0UY2aLNm6qlKSmzJTjPLVT2Ipf2MUDCjMU fhB8opH4EiMo067ehd59EG53ORYGlY8KFK00iuYl/7/Lte31AN+qgn7NBM/z49TL k/hLgxHt+fH1/4Q/3JBZZnL6/U46fsROFApRjwWgI3tFrZUqhJxy8RgQk7zaHYsQ FLJYE6GM8ikmLYuVCuxUuWlY8X13ZWNGoMy1o7muWByZREsSdIPbWB3BpIdtR9sk CqEYzKy/Spb5z+XTVzuKsuCb0BzkagiZJTQdFN+1Sf3ojBVNLwqzrHsewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOSrvieL3Yi9j/AioOiI3XmmN+KMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE896/qw8 83tEXl1oqmXxtlQEl2r9aHBzuLiTviMpkU5j5iO5ED8QrgDYp+OkmKYN3d+RhFvm 97abZKSf3pAMJO9kfADm1xrPwcGkayeLWM3hr+uIvv+efoqpBO53t2210Q30PYvc HX7zCWY/A7QzHZqLpc9uisZAZBfOTL5AbZ1hgZKO4u4dWe6Xx2qbkR/vos0GcJr6 y3YtsZxyZrzNbiVbMnVCJH3vfo64vnAoz4NSIa7BnUY7XNI4wSxMP5j2KpR4nLCp NdHPGijI43UFBqIwwuifDuWExIlibIDHt3+0/fo7GiwV9a1AJ+UaXMLAtDI58wEL CdZ3coygG8XvQw== -----END CERTIFICATE-----Generated at Tue Jul 21 23:12:58 2026 by rpki-client