$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: FdBRYXzodg7mJRWo2emYHjqna2Ze4biys+ZkWCKM5MY= Subject key identifier: 05:2F:0F:73:3A:B4:48:A7:05:17:1D:C2:C8:D2:B2:9B:2F:03:E8:A5 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0197499F37A4B9FECE0A332427075A094ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1597 Signing time: Sat 07 Jun 2025 09:01:00 +0000 Manifest this update: Sat 07 Jun 2025 09:01:00 +0000 Manifest next update: Sun 08 Jun 2025 09:01:00 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: CCAWSo+yIqTrxEayx147c0sc0dpWhV/p8heiuewrCqg=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:9f:37:a4:b9:fe:ce:0a:33:24:27:07:5a:09:4a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jun 7 09:01:00 2025 GMT Not After : Jun 8 09:01:00 2025 GMT Subject: CN=052f0f733ab448a705171dc2c8d2b29b2f03e8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:9a:5d:04:6e:aa:27:83:4d:e7:3f:a4:5a: 5b:b7:aa:c6:c2:99:c2:05:c7:9d:19:4d:93:cf:12: 83:7f:50:0d:ab:cc:b7:4f:30:ed:bb:3d:f5:96:1d: 90:98:de:da:1c:0f:a3:43:39:b0:eb:3c:17:08:ea: db:23:2d:ff:1b:e4:5b:74:02:1d:e7:17:8c:32:81: 93:f9:06:7b:77:23:59:24:b8:be:dd:84:4d:30:d5: fd:e8:35:a0:7b:b9:10:63:44:0d:71:e6:3e:af:11: a6:a9:b3:46:d4:a2:13:e1:c7:0b:df:ff:31:10:fd: a7:6c:b9:33:89:d3:c7:39:e0:6b:0c:aa:5f:19:1c: 9f:dc:e7:d7:7b:b2:75:cf:15:12:75:01:1b:f4:3b: 84:96:48:bb:47:0f:1d:e6:63:bb:4f:26:ef:31:1c: 5b:dd:aa:54:b9:d5:a5:43:cd:07:91:a1:ec:b6:01: 27:6d:48:b1:96:20:9d:d4:a9:63:ed:1a:7c:15:df: 5b:96:dc:7c:bc:f3:6e:e7:f9:3b:23:21:d9:59:cf: a6:1f:8b:d4:e4:c7:09:a1:ba:9d:a7:6e:f3:31:09: 91:93:9c:fe:45:89:2e:4c:fe:6f:35:b1:53:ca:f8: 80:71:8f:6f:68:c4:e5:b6:03:bd:8d:17:a0:93:69: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2F:0F:73:3A:B4:48:A7:05:17:1D:C2:C8:D2:B2:9B:2F:03:E8:A5 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:54:19:6e:08:2e:2a:36:29:31:e8:e5:80:41:f2:8f:c5:97: 56:3d:c8:d1:05:eb:ed:bf:42:d4:fe:b3:d1:45:18:f3:54:4b: 6b:51:06:f2:d8:49:22:6b:3d:64:ca:29:f6:44:ed:d2:00:fe: 69:2b:c4:ad:09:df:85:f1:32:85:62:f6:51:51:43:69:cc:7a: 2c:e9:b3:b1:35:3c:8f:db:28:95:43:da:52:07:10:e6:4e:59: 62:3c:73:33:35:66:ea:c8:ad:08:35:e5:b7:53:d1:33:21:c6: 21:ef:3f:55:02:29:86:30:45:f4:59:8e:be:b6:8e:7f:48:cd: c8:f1:a5:44:78:ee:86:99:a0:58:be:5a:3a:8b:1b:3e:b8:5e: b5:c2:0f:95:12:94:90:73:99:e0:39:07:1d:6e:1f:59:bb:a8: d8:64:06:3c:f5:88:b4:6c:fd:b2:78:44:a7:3c:97:14:4d:5d: 77:83:25:43:f3:b1:83:67:2d:3f:4e:43:08:d9:38:4c:83:9d: fd:7b:b5:b0:d6:64:64:c4:20:05:f8:db:0e:8d:eb:4d:ba:7b: 36:26:df:05:0e:5e:66:db:27:e0:8c:9f:7d:2d:45:11:50:33: 10:a4:bb:79:d8:2b:76:cc:47:be:c1:4f:49:95:fb:9f:50:7a: ee:60:8c:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJnzekuf7OCjMkJwdaCUq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwNjA3MDkwMTAwWhcNMjUwNjA4MDkwMTAwWjAzMTEwLwYDVQQD EygwNTJmMGY3MzNhYjQ0OGE3MDUxNzFkYzJjOGQyYjI5YjJmMDNlOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+WaXQRuqieDTec/pFpbt6rGwpnC BcedGU2TzxKDf1ANq8y3TzDtuz31lh2QmN7aHA+jQzmw6zwXCOrbIy3/G+RbdAId 5xeMMoGT+QZ7dyNZJLi+3YRNMNX96DWge7kQY0QNceY+rxGmqbNG1KIT4ccL3/8x EP2nbLkzidPHOeBrDKpfGRyf3OfXe7J1zxUSdQEb9DuElki7Rw8d5mO7TybvMRxb 3apUudWlQ80HkaHstgEnbUixliCd1Klj7Rp8Fd9bltx8vPNu5/k7IyHZWc+mH4vU 5McJobqdp27zMQmRk5z+RYkuTP5vNbFTyviAcY9vaMTltgO9jRegk2nJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUvD3M6tEinBRcdwsjSspsvA+ilMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1QZbggu KjYpMejlgEHyj8WXVj3I0QXr7b9C1P6z0UUY81RLa1EG8thJIms9ZMop9kTt0gD+ aSvErQnfhfEyhWL2UVFDacx6LOmzsTU8j9solUPaUgcQ5k5ZYjxzMzVm6sitCDXl t1PRMyHGIe8/VQIphjBF9FmOvraOf0jNyPGlRHjuhpmgWL5aOosbPrhetcIPlRKU kHOZ4DkHHW4fWbuo2GQGPPWItGz9snhEpzyXFE1dd4MlQ/Oxg2ctP05DCNk4TIOd /Xu1sNZkZMQgBfjbDo3rTbp7NibfBQ5eZtsn4IyffS1FEVAzEKS7edgrdsxHvsFP SZX7n1B67mCMsQ== -----END CERTIFICATE-----Generated at Sat Jun 7 15:30:19 2025 by rpki-client