$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: OuxT4Q2DZEgBK2H2enNznGp0Fl5AaSaeyxTFlX+OLnU= Subject key identifier: 7E:82:28:B6:ED:C5:F2:04:B6:12:CC:13:5B:20:69:ED:02:FC:52:FF Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 01A17137D43F704211D2E5044DB4CC62B71C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 044A Signing time: Sun 25 Oct 2026 04:00:46 +0000 Manifest this update: Sun 25 Oct 2026 04:00:46 +0000 Manifest next update: Mon 26 Oct 2026 04:00:46 +0000 Files and hashes: 1: 1-TUl5bl45TJPQGnuHMcCKsdT79A.roa (hash: lkJW7XSZ0u8bcs5EClSe5KRTJRNb/4cugSEzGHCf+0o=) 2: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 3: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 4: JsExkxn6ORep1Qkd7h1bnFYNnP8.roa (hash: w/DL5qJe1mUIHpRScRPUTBRiJWpSst+kv/3eNPLA4cI=) 5: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: XI4DTXcSWBAjmIzu61zYii1aTDKie65EcOOKRBb6iJ0=) 6: Vn2rK68gO4hX2pWnjN-oM43j8yc.roa (hash: 5XKdFtGJBT5wIpudLsMAqxPWo69CxAm2hTM1+edfkJo=) 7: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=) 8: iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa (hash: /iUGvduptZ/JP8lKXh14YGIQgG7bREfF9xL+2QGrNB0=) 9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 10: oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa (hash: T3/R9exHSgP0k2kmjvxBvwzSyy0v3tasEbkkEODMBfE=) 11: ugdaZFijHYOlbpSUgTHvHNMkx3I.roa (hash: xF9mxjozl+pvQpm1H66f/KhL1MOe8lYaF6cLypnqfxo=) 12: xRrrNA7x7vKPlLppD34cufT_dP8.roa (hash: /PBdOJzD7JWKbvvWGWJLFAKyeLrxJaluhfiouPzHsog=) 13: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:71:37:d4:3f:70:42:11:d2:e5:04:4d:b4:cc:62:b7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Oct 25 04:00:46 2026 GMT Not After : Oct 26 04:00:46 2026 GMT Subject: CN=7e8228b6edc5f204b612cc135b2069ed02fc52ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:dd:aa:04:69:1c:45:de:2a:eb:a7:80:f2: 5e:53:41:8e:51:53:4d:08:a6:f2:02:78:d9:f7:96: 6d:4b:b9:53:41:fd:5b:3c:32:b9:8b:a7:ca:82:e9: a0:6f:3e:ee:a7:50:22:6c:14:71:8e:d3:b7:72:ec: 5b:e8:2b:71:bc:7d:d4:8a:9a:f7:ee:f3:fe:37:86: e5:30:09:ea:6f:e5:6d:84:9b:4a:d8:7f:06:5a:ce: db:95:4c:cb:d1:f7:4b:f2:50:68:dc:1a:99:d9:b4: f9:ff:06:77:2d:c4:73:ce:d5:07:6b:2e:5b:9f:89: 74:9c:7f:db:d4:17:96:47:98:49:41:f6:bd:b6:76: b5:3e:38:09:1e:f6:93:23:09:5c:da:2f:87:51:f0: dd:82:22:84:25:2b:3e:8d:6a:5d:8e:9b:b4:54:02: 11:90:1a:68:06:02:e7:b6:43:89:b7:d8:0a:bc:43: e2:2c:b5:8c:60:c2:9a:c7:e1:36:d2:70:31:a5:33: af:9d:79:ea:82:6f:ab:18:a1:8d:85:ac:ec:2e:ef: 97:78:8d:a3:c5:ee:46:d7:74:99:dc:64:a5:83:3d: e9:f1:74:72:4a:5f:46:7c:93:a5:f9:cf:23:2d:30: 3d:7e:23:d0:b3:1b:34:0f:4f:55:fb:ca:56:65:75: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:82:28:B6:ED:C5:F2:04:B6:12:CC:13:5B:20:69:ED:02:FC:52:FF X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1e:42:74:14:82:5d:8b:ed:9a:b1:31:5c:35:dd:5f:cb:e9: a0:28:56:d0:9b:d6:e1:f4:06:b0:1d:6d:a5:96:b5:e5:17:01: 8d:52:8c:8b:55:2d:93:06:f4:d2:49:d9:d1:88:d0:c3:4a:58: 1d:86:0e:cf:61:34:9b:14:e4:e0:03:ff:ff:b4:9f:be:8e:1b: 8f:23:72:bf:42:00:d8:0a:f8:4b:34:c7:c9:13:d0:89:23:cc: 82:b9:92:2c:a2:43:54:12:f4:84:32:f3:ee:02:5e:bf:91:9e: bc:18:70:fc:5b:a7:a4:71:39:bd:21:bb:22:41:70:c0:a1:e4: d5:67:83:c6:2e:8f:bf:d0:27:2b:ec:2a:fb:dd:00:85:59:71: 34:3e:5e:eb:b1:31:d6:11:b8:3f:68:eb:af:41:53:b3:db:1f: f0:60:97:e1:00:e7:fe:fb:01:0a:26:c4:da:4d:81:26:30:1d: 2f:57:30:50:21:c5:35:0a:86:b3:05:de:d7:e3:b9:40:39:82: da:3b:53:f2:f4:d9:17:3f:43:c6:a0:1b:02:69:b1:78:da:e9: 7b:b5:4e:3e:ea:27:fc:7a:6e:43:8e:53:23:47:6d:57:c1:bb: 22:3f:cb:a4:68:1f:b0:77:51:0b:a0:f9:b0:4c:e7:3a:89:44: 05:d7:2f:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFxN9Q/cEIR0uUETbTMYrccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYxMDI1MDQwMDQ2WhcNMjYxMDI2MDQwMDQ2WjAzMTEwLwYDVQQD Eyg3ZTgyMjhiNmVkYzVmMjA0YjYxMmNjMTM1YjIwNjllZDAyZmM1MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4jdqgRpHEXeKuungPJeU0GOUVNN CKbyAnjZ95ZtS7lTQf1bPDK5i6fKgumgbz7up1AibBRxjtO3cuxb6CtxvH3Uipr3 7vP+N4blMAnqb+VthJtK2H8GWs7blUzL0fdL8lBo3BqZ2bT5/wZ3LcRzztUHay5b n4l0nH/b1BeWR5hJQfa9tna1PjgJHvaTIwlc2i+HUfDdgiKEJSs+jWpdjpu0VAIR kBpoBgLntkOJt9gKvEPiLLWMYMKax+E20nAxpTOvnXnqgm+rGKGNhazsLu+XeI2j xe5G13SZ3GSlgz3p8XRySl9GfJOl+c8jLTA9fiPQsxs0D09V+8pWZXVKYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6CKLbtxfIEthLME1sgae0C/FL/MB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB5CdBSC XYvtmrExXDXdX8vpoChW0JvW4fQGsB1tpZa15RcBjVKMi1Utkwb00knZ0YjQw0pY HYYOz2E0mxTk4AP//7Sfvo4bjyNyv0IA2Ar4SzTHyRPQiSPMgrmSLKJDVBL0hDLz 7gJev5GevBhw/FunpHE5vSG7IkFwwKHk1WeDxi6Pv9AnK+wq+90AhVlxND5e67Ex 1hG4P2jrr0FTs9sf8GCX4QDn/vsBCibE2k2BJjAdL1cwUCHFNQqGswXe1+O5QDmC 2jtT8vTZFz9DxqAbAmmxeNrpe7VOPuon/HpuQ45TI0dtV8G7Ij/LpGgfsHdRC6D5 sEznOolEBdcvVg== -----END CERTIFICATE-----Generated at Sun Oct 25 14:23:44 2026 by rpki-client