$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: PB9Gfp4y7YBOIcO1zK1WeLX2OsO8dwbZIiRIFKse0Kc= Subject key identifier: 7D:E7:2D:0F:C9:74:B2:95:5F:CD:FE:52:98:4E:7D:3D:DC:49:15:F2 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019FCDF04493957740055A2FE54966ED4D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1A0F Signing time: Tue 04 Aug 2026 18:01:43 +0000 Manifest this update: Tue 04 Aug 2026 18:01:43 +0000 Manifest next update: Wed 05 Aug 2026 18:01:43 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=) 13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: CF8i+XAGQwNFvDMponJctVKAjnW0qJIayBJFhofr128=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cd:f0:44:93:95:77:40:05:5a:2f:e5:49:66:ed:4d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Aug 4 18:01:43 2026 GMT Not After : Aug 5 18:01:43 2026 GMT Subject: CN=7de72d0fc974b2955fcdfe52984e7d3ddc4915f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:f4:68:07:6b:f2:f7:e9:27:24:3a:6c:e0: 05:ae:88:b5:1a:a6:4d:10:5c:db:73:b9:d7:4f:4e: ff:ce:12:d9:04:96:83:37:eb:db:6e:d2:a6:16:d2: 29:c9:46:51:4b:60:a8:c4:06:5f:29:86:4d:4b:24: 8a:96:0f:04:03:86:76:48:4c:a9:ac:ee:62:38:23: 2b:a0:9c:ea:59:cb:9f:28:4c:37:4b:04:f3:d4:5c: 57:bc:21:62:2e:68:e2:2f:f9:f4:2a:74:67:e8:3a: 5d:25:31:e4:d3:d1:5a:d8:23:5b:8e:50:04:3c:39: 05:b6:e5:16:5c:94:47:34:77:a4:79:ba:ce:24:1a: 3c:6a:5f:24:88:de:5a:c0:36:46:ab:43:54:fc:1f: 0d:94:c5:9c:c0:40:5d:3d:fc:fe:74:7b:76:3e:0c: 34:81:cf:13:dd:f1:32:83:ce:f1:9c:cb:b4:ac:00: d6:1b:4f:6a:68:a3:0d:6f:46:0c:2b:c7:22:a9:d2: ec:ec:f9:96:40:fb:05:85:9a:3c:85:5e:0c:d0:26: 38:7e:40:35:d8:e3:35:aa:5a:9d:91:4d:95:3a:00: c2:78:84:73:cb:10:70:ec:75:c5:fd:45:3f:20:d9: 54:88:17:55:9a:47:97:fc:24:2a:08:74:97:8c:a3: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:2D:0F:C9:74:B2:95:5F:CD:FE:52:98:4E:7D:3D:DC:49:15:F2 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7a:77:cf:14:f5:dc:28:1d:cf:42:ce:53:07:b2:2a:8c:bd: 7d:17:3f:b5:94:dd:2a:b2:8a:93:4a:60:d3:2d:ce:8e:9a:9b: 24:94:e4:72:d6:ce:22:59:33:e6:7b:4c:4e:ba:84:7c:8a:31: 6c:4c:7c:a8:5c:8f:dc:e2:ef:b8:db:e1:b2:4e:af:80:d7:d2: 8f:ae:f7:7b:b6:5a:cf:81:82:ba:3f:c6:51:06:7f:63:51:4a: fd:b3:ea:03:56:1f:97:33:5a:26:75:0e:ab:a8:b4:13:49:16: 9a:a6:8d:2d:99:ad:82:10:00:a7:de:df:e6:22:93:20:e6:94: 65:02:e0:7f:f4:07:3d:fb:23:72:b0:6d:de:58:a1:40:ef:be: cf:94:d9:cd:22:08:3f:fd:c0:66:48:a0:79:1d:42:67:29:72: 1d:63:3b:14:85:6c:fc:da:6f:a6:0e:d3:1a:18:a8:0a:5c:7e: 2b:a5:6f:c1:2a:e4:85:eb:e3:ab:24:91:f9:55:24:9f:a7:91: a5:42:ba:5b:9b:78:d5:ec:1c:91:7c:ee:f5:8d:a6:bd:b1:65: 9e:22:16:7c:58:66:e0:9f:e8:dd:8b:72:00:c0:4f:0a:bb:aa: d3:da:ca:84:85:5e:bd:6a:c1:6d:a7:c6:72:24:1d:3e:bc:04: b4:20:bb:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/N8ESTlXdABVov5Ulm7U1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwODA0MTgwMTQzWhcNMjYwODA1MTgwMTQzWjAzMTEwLwYDVQQD Eyg3ZGU3MmQwZmM5NzRiMjk1NWZjZGZlNTI5ODRlN2QzZGRjNDkxNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzP0aAdr8vfpJyQ6bOAFroi1GqZN EFzbc7nXT07/zhLZBJaDN+vbbtKmFtIpyUZRS2CoxAZfKYZNSySKlg8EA4Z2SEyp rO5iOCMroJzqWcufKEw3SwTz1FxXvCFiLmjiL/n0KnRn6DpdJTHk09Fa2CNbjlAE PDkFtuUWXJRHNHekebrOJBo8al8kiN5awDZGq0NU/B8NlMWcwEBdPfz+dHt2Pgw0 gc8T3fEyg87xnMu0rADWG09qaKMNb0YMK8ciqdLs7PmWQPsFhZo8hV4M0CY4fkA1 2OM1qlqdkU2VOgDCeIRzyxBw7HXF/UU/INlUiBdVmkeX/CQqCHSXjKNetQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3nLQ/JdLKVX83+UphOfT3cSRXyMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHp3zxT1 3Cgdz0LOUweyKoy9fRc/tZTdKrKKk0pg0y3OjpqbJJTkctbOIlkz5ntMTrqEfIox bEx8qFyP3OLvuNvhsk6vgNfSj673e7Zaz4GCuj/GUQZ/Y1FK/bPqA1YflzNaJnUO q6i0E0kWmqaNLZmtghAAp97f5iKTIOaUZQLgf/QHPfsjcrBt3lihQO++z5TZzSII P/3AZkigeR1CZylyHWM7FIVs/Npvpg7TGhioClx+K6VvwSrkhevjqySR+VUkn6eR pUK6W5t41ewckXzu9Y2mvbFlniIWfFhm4J/o3YtyAMBPCruq09rKhIVevWrBbafG ciQdPrwEtCC7Nw== -----END CERTIFICATE-----Generated at Tue Aug 4 20:08:05 2026 by rpki-client