$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: XOylSoQp/h/VoCF+b5Yu6ndttXoHGXYt+xifwoFTQ3k= Subject key identifier: 50:DA:6D:9A:74:D6:52:12:02:44:00:45:7F:0B:FB:14:0E:DB:85:9A Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 01A1A9397B6A8FB8F618DDF0D7F8BD737EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1B06 Signing time: Thu 05 Nov 2026 01:01:18 +0000 Manifest this update: Thu 05 Nov 2026 01:01:18 +0000 Manifest next update: Fri 06 Nov 2026 01:01:18 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 12: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 13: uHcHm-Q2inkIqyesgnfD4jPip48.roa (hash: 4PMfdYi17AF2Wi/23XG4oqCHUKA2wU+FYFq+eyTKfzA=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: sF0j38pxQqBZb5V4f/PVJ9D+e+PZgsAIJmQGQjqBc+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a9:39:7b:6a:8f:b8:f6:18:dd:f0:d7:f8:bd:73:7e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Nov 5 01:01:18 2026 GMT Not After : Nov 6 01:01:18 2026 GMT Subject: CN=50da6d9a74d65212024400457f0bfb140edb859a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:c5:11:f5:68:58:62:43:0e:a6:7a:f0:20: 79:b4:48:c7:54:ae:0d:87:df:b3:26:c1:4b:8b:01: 69:8f:96:a2:75:8e:08:4a:19:0d:72:2e:ee:1e:5b: db:ef:1e:dc:f3:83:e4:61:02:f0:66:c9:8a:94:67: 85:a2:32:2b:34:76:34:7f:02:84:33:bd:a0:c7:55: 01:75:64:f6:97:bf:d6:a3:1a:68:49:59:02:e6:c7: a3:41:68:f0:be:94:df:06:2e:27:fc:08:98:de:07: 63:31:17:91:4d:90:a4:5f:30:34:90:25:a2:e3:9f: fa:3e:8b:58:7c:a8:4f:a8:c0:db:f1:01:ca:69:c8: 58:85:aa:c2:22:18:84:37:91:f3:b2:4e:18:ef:79: 9d:b1:1f:eb:2d:6a:ed:92:1b:03:78:53:7b:9c:44: 88:10:a2:1f:8c:e4:dd:09:6b:f3:e3:d4:fb:92:07: e0:5b:ee:5b:a0:55:94:e4:59:27:0f:88:2c:a8:c2: dd:39:49:60:d1:42:37:0f:4a:18:43:83:c7:46:5f: 02:65:a9:14:40:81:e6:76:f0:a2:1a:4b:12:97:da: 10:c5:56:03:7d:3e:11:fd:be:58:83:5c:af:b2:a3: fe:a1:a7:10:ee:1f:33:14:81:8b:3c:57:3e:d3:02: 08:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:6D:9A:74:D6:52:12:02:44:00:45:7F:0B:FB:14:0E:DB:85:9A X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e6:d9:b0:de:d2:80:c4:66:f3:95:07:84:c7:22:61:f7:89: 3b:7c:30:6d:f7:56:3c:03:a8:25:44:dc:14:b5:06:da:d2:ae: 39:dd:df:52:84:03:10:5d:ba:11:ba:93:df:5e:63:f5:41:19: 7f:3e:bf:d3:64:90:cb:6d:1c:7b:db:53:6a:c4:3b:5e:6e:02: e2:19:d9:d8:7f:19:b5:af:45:42:02:9f:4b:4a:b2:11:19:d0: e6:38:2b:a9:18:35:ed:98:ac:01:10:1c:2c:f1:8f:0e:70:c1: 07:9c:cf:ff:80:cc:f6:3a:e0:1c:60:01:1e:53:56:0b:0b:1a: 05:60:cd:33:15:2a:e1:62:32:b4:c6:d1:45:75:85:a3:70:ba: f9:cc:81:6b:e2:73:a2:d8:2f:06:f2:82:34:03:6a:db:c4:cf: 11:71:dd:81:6b:8c:96:fa:e7:e0:e8:c0:84:20:e2:37:09:6d: 74:34:05:a6:c0:43:93:de:72:67:5b:e8:c4:dc:f2:39:54:61: 02:9a:5e:85:0d:0c:af:b2:22:88:ba:1c:a3:fd:77:5d:82:a4: 82:e1:5a:0a:ac:80:62:28:7e:9d:c2:fb:ea:94:a5:9b:3b:9f: f6:42:60:a9:52:dc:a8:c9:f1:58:a0:d4:ca:f2:a0:06:f6:2a: 68:0d:da:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGpOXtqj7j2GN3w1/i9c36yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYxMTA1MDEwMTE4WhcNMjYxMTA2MDEwMTE4WjAzMTEwLwYDVQQD Eyg1MGRhNmQ5YTc0ZDY1MjEyMDI0NDAwNDU3ZjBiZmIxNDBlZGI4NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZrFEfVoWGJDDqZ68CB5tEjHVK4N h9+zJsFLiwFpj5aidY4IShkNci7uHlvb7x7c84PkYQLwZsmKlGeFojIrNHY0fwKE M72gx1UBdWT2l7/WoxpoSVkC5sejQWjwvpTfBi4n/AiY3gdjMReRTZCkXzA0kCWi 45/6PotYfKhPqMDb8QHKachYharCIhiEN5Hzsk4Y73mdsR/rLWrtkhsDeFN7nESI EKIfjOTdCWvz49T7kgfgW+5boFWU5FknD4gsqMLdOUlg0UI3D0oYQ4PHRl8CZakU QIHmdvCiGksSl9oQxVYDfT4R/b5Yg1yvsqP+oacQ7h8zFIGLPFc+0wIIrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDabZp01lISAkQARX8L+xQO24WaMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATubZsN7S gMRm85UHhMciYfeJO3wwbfdWPAOoJUTcFLUG2tKuOd3fUoQDEF26EbqT315j9UEZ fz6/02SQy20ce9tTasQ7Xm4C4hnZ2H8Zta9FQgKfS0qyERnQ5jgrqRg17ZisARAc LPGPDnDBB5zP/4DM9jrgHGABHlNWCwsaBWDNMxUq4WIytMbRRXWFo3C6+cyBa+Jz otgvBvKCNANq28TPEXHdgWuMlvrn4OjAhCDiNwltdDQFpsBDk95yZ1voxNzyOVRh AppehQ0Mr7IiiLoco/13XYKkguFaCqyAYih+ncL76pSlmzuf9kJgqVLcqMnxWKDU yvKgBvYqaA3aPw== -----END CERTIFICATE-----Generated at Thu Nov 5 11:40:22 2026 by rpki-client