$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: dsHXTZcRMLFWVTlLrKysJ88xcT5lQMgIJC6HgGdKBxg= Subject key identifier: 98:02:EA:CF:34:51:3C:D4:B2:4F:F2:8A:72:81:41:47:FA:EE:FF:9B Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019DD7663FD5E92D33790F2AE57063FFF246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1909 Signing time: Wed 29 Apr 2026 04:01:35 +0000 Manifest this update: Wed 29 Apr 2026 04:01:35 +0000 Manifest next update: Thu 30 Apr 2026 04:01:35 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 5: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 6: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 7: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 8: YB9m1TJ1VAcZcgsWqQBIsxMhh9o.roa (hash: PV9hsobyM1OnjRRgN0MXs4+vRd37S7Rtc77wsaiFFtk=) 9: YbiVbFuXcTmnqDJPuqbutg5azlI.roa (hash: suv2Xv3nrxD/FlkPKIbbU1EFp7k8UcHgjFF/BnohR4s=) 10: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 11: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 12: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: IphXRM9S8NUxmL8LF0sfJk7aKI67kCWz0PQ4cqEPujo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d7:66:3f:d5:e9:2d:33:79:0f:2a:e5:70:63:ff:f2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Apr 29 04:01:35 2026 GMT Not After : Apr 30 04:01:35 2026 GMT Subject: CN=9802eacf34513cd4b24ff28a72814147faeeff9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:52:a3:97:c7:df:75:16:64:5e:ba:28:85: 33:81:61:5d:ef:17:72:2f:66:4e:a7:6f:70:b1:af: d8:0a:d0:9f:38:1e:69:c8:a3:c3:d3:0a:66:81:b9: 81:8f:e0:c5:fe:97:67:26:76:5c:7b:76:79:9e:ca: 05:13:50:f8:5b:e7:d3:27:5c:2e:31:fc:49:47:7d: 2f:e2:87:eb:f3:7e:bf:54:4a:31:44:f3:c2:cd:7a: 79:bb:53:38:4f:d2:ae:1c:4b:d0:20:5a:a9:e7:a6: 3f:a2:55:27:a4:1e:d9:ed:c9:bc:bb:e4:92:33:a4: 13:11:c8:bc:27:8b:25:45:0c:ad:9f:61:5c:8f:6d: f8:00:17:0d:78:17:ed:79:2b:2e:f0:57:58:04:3d: 5b:e3:f2:01:d2:93:24:e6:32:ff:48:06:ae:38:6e: 04:12:aa:17:f6:fe:a5:47:1d:aa:61:01:56:8d:33: 7a:d5:4a:c3:97:6a:55:0d:33:1f:f4:75:91:e1:ea: 16:c7:ea:9c:17:18:1c:d5:a9:7b:69:8c:06:78:42: 87:c3:49:0c:f7:41:d4:dd:3a:e6:21:2f:7d:b8:02: e4:7d:57:ce:55:72:7f:74:97:3f:26:00:85:3a:a6: e1:96:48:ad:12:03:5c:12:3b:88:44:19:d9:dd:45: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:02:EA:CF:34:51:3C:D4:B2:4F:F2:8A:72:81:41:47:FA:EE:FF:9B X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:63:80:eb:32:19:6a:78:9d:a7:46:c3:f3:84:d0:c7:c5:ca: 56:8a:d9:b4:b9:a9:73:a4:0b:bf:32:43:c0:74:c5:96:d1:00: 5f:cc:d8:f6:16:ef:82:6d:ef:6e:41:74:94:1d:57:7f:48:d7: 0d:81:fb:be:29:47:3d:d0:b1:bb:cc:6c:71:81:81:65:d3:19: b3:be:da:b4:88:7a:06:b4:e8:6d:0d:aa:65:5d:cb:a3:9b:0f: bd:4c:24:68:fe:80:69:f4:4b:c6:5e:ca:03:9d:0f:e8:94:6e: 85:7b:3d:02:ab:2d:7e:44:1a:59:19:92:30:3d:02:bd:6a:f0: 13:3e:c9:c6:11:d1:ef:1f:b9:3d:3e:90:ab:35:21:51:ee:31: 0f:6a:44:1a:3a:d1:81:3f:78:a0:65:81:06:65:8d:d1:41:ff: 55:3e:43:a0:46:96:05:42:db:83:63:d8:c0:e4:d3:58:f6:9c: bb:b6:90:93:7c:12:e2:23:1d:e1:c3:7f:a5:41:57:03:61:71: 4c:a9:ca:6a:02:0c:79:c9:bb:6d:d8:34:3e:38:8d:3c:62:ee: ac:85:25:88:db:b8:81:c9:b9:2e:f0:78:1a:06:c1:03:c3:4f: 66:d6:f9:e2:ce:39:18:82:d5:e3:3c:01:65:b7:c7:20:c5:76: 14:d8:2f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3XZj/V6S0zeQ8q5XBj//JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwNDI5MDQwMTM1WhcNMjYwNDMwMDQwMTM1WjAzMTEwLwYDVQQD Eyg5ODAyZWFjZjM0NTEzY2Q0YjI0ZmYyOGE3MjgxNDE0N2ZhZWVmZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWxSo5fH33UWZF66KIUzgWFd7xdy L2ZOp29wsa/YCtCfOB5pyKPD0wpmgbmBj+DF/pdnJnZce3Z5nsoFE1D4W+fTJ1wu MfxJR30v4ofr836/VEoxRPPCzXp5u1M4T9KuHEvQIFqp56Y/olUnpB7Z7cm8u+SS M6QTEci8J4slRQytn2Fcj234ABcNeBfteSsu8FdYBD1b4/IB0pMk5jL/SAauOG4E EqoX9v6lRx2qYQFWjTN61UrDl2pVDTMf9HWR4eoWx+qcFxgc1al7aYwGeEKHw0kM 90HU3TrmIS99uALkfVfOVXJ/dJc/JgCFOqbhlkitEgNcEjuIRBnZ3UXEMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgC6s80UTzUsk/yinKBQUf67v+bMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGOA6zIZ anidp0bD84TQx8XKVorZtLmpc6QLvzJDwHTFltEAX8zY9hbvgm3vbkF0lB1Xf0jX DYH7vilHPdCxu8xscYGBZdMZs77atIh6BrTobQ2qZV3Lo5sPvUwkaP6AafRLxl7K A50P6JRuhXs9AqstfkQaWRmSMD0CvWrwEz7JxhHR7x+5PT6QqzUhUe4xD2pEGjrR gT94oGWBBmWN0UH/VT5DoEaWBULbg2PYwOTTWPacu7aQk3wS4iMd4cN/pUFXA2Fx TKnKagIMecm7bdg0PjiNPGLurIUliNu4gcm5LvB4GgbBA8NPZtb54s45GILV4zwB ZbfHIMV2FNgvMA== -----END CERTIFICATE-----Generated at Wed Apr 29 15:04:34 2026 by rpki-client