$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: 2g+gFem9VhFUSdKzinthVzLhvD9HEjJgCtXKSL+ljWo= Subject key identifier: 64:7E:4F:E4:5A:CF:4D:D0:68:5C:67:12:E1:B1:91:55:3A:ED:1D:27 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019ECD1643B3773BC76E2F67248AE2498EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 198A Signing time: Mon 15 Jun 2026 21:00:48 +0000 Manifest this update: Mon 15 Jun 2026 21:00:48 +0000 Manifest next update: Tue 16 Jun 2026 21:00:48 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=) 13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: AGqN0ZHx+ejq4Xy0vtkGxPHTkhO0dOk1OIgcD3LpO1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Jun 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:cd:16:43:b3:77:3b:c7:6e:2f:67:24:8a:e2:49:8e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jun 15 21:00:48 2026 GMT Not After : Jun 16 21:00:48 2026 GMT Subject: CN=647e4fe45acf4dd0685c6712e1b191553aed1d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:19:d0:69:02:0e:44:39:a3:e6:f9:7c:0a:a6: af:1e:d6:7a:b3:61:3c:ac:3a:38:d5:90:55:ba:c9: 23:6a:7b:32:a0:c9:a1:25:db:91:ba:53:58:ac:de: 09:48:8b:bf:17:54:fc:d8:db:ef:df:02:44:17:5d: 98:93:a6:e4:c6:ab:b4:54:3e:2e:25:ab:08:bc:a0: e3:20:a1:03:1c:c1:2b:cc:67:26:45:96:e8:06:20: 42:11:34:0c:16:2c:0f:26:54:8b:53:4d:41:8a:52: 37:22:e1:fe:bc:1b:76:4c:1a:32:ea:7c:35:36:d5: be:70:df:5e:c7:83:ca:95:69:26:8f:45:c8:97:92: 0c:7f:27:5a:d0:df:29:22:91:8c:16:d3:1d:d4:48: 0e:24:96:f8:28:29:99:54:2a:4e:53:4c:bf:31:3e: 06:18:ae:f1:fd:b8:36:d9:59:2c:16:5f:3d:ea:4a: b4:ad:6d:a4:80:87:16:c8:d7:e4:ee:0f:af:e2:96: 04:00:58:1e:cc:a0:fd:e8:53:f5:fc:b5:29:34:f0: 59:de:c7:ea:ab:b9:59:68:bc:17:70:7c:e1:76:d5: 1a:49:cc:1d:04:6f:3a:23:d3:70:08:c9:d2:d5:d2: bf:af:5b:8b:10:74:1e:87:4e:2f:d8:fe:8c:d5:c3: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7E:4F:E4:5A:CF:4D:D0:68:5C:67:12:E1:B1:91:55:3A:ED:1D:27 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2d:27:a7:90:d5:a0:f6:f7:0a:40:fc:2a:72:5d:47:e1:69: 2f:88:26:d3:e3:d7:b7:65:6c:90:90:36:4d:bc:74:45:8b:e9: 33:82:24:6a:ed:31:64:4e:7b:7f:da:f7:48:9e:4c:ac:ab:59: f8:7a:7b:7d:fc:d2:e0:2c:88:0b:3b:1c:be:af:65:cb:70:99: 30:45:96:f3:ae:db:a0:85:84:f4:95:e7:db:61:82:02:8a:b5: 43:1c:5c:51:86:20:0a:30:56:ea:1f:f7:d0:1a:31:d8:6f:b8: a7:31:f8:dd:7f:43:b7:12:71:12:35:44:bc:bb:4f:2b:ec:34: df:40:e1:68:7e:08:8e:45:b1:36:86:b0:1b:6f:e3:12:59:62: e3:ed:6b:e6:29:6f:0c:2f:fe:3a:71:41:ae:d0:b8:b6:49:f7: 94:bf:89:fa:78:8c:3d:06:98:75:80:06:ce:99:98:6e:7a:00: 9b:cd:22:d1:08:6e:8e:e1:28:01:a2:5f:cd:f2:17:2c:bb:39: 7a:be:80:96:c7:cc:7d:85:0c:1f:23:5a:e0:11:ba:80:a3:2a: e0:c3:da:b0:7d:c5:2e:d8:fc:08:3c:0e:b4:b7:13:f4:b6:b6: 5c:04:a3:76:df:2b:1c:86:c2:04:82:e8:8e:db:8b:08:bc:3e: e7:28:e6:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7NFkOzdzvHbi9nJIriSY7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwNjE1MjEwMDQ4WhcNMjYwNjE2MjEwMDQ4WjAzMTEwLwYDVQQD Eyg2NDdlNGZlNDVhY2Y0ZGQwNjg1YzY3MTJlMWIxOTE1NTNhZWQxZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hnQaQIORDmj5vl8CqavHtZ6s2E8 rDo41ZBVuskjansyoMmhJduRulNYrN4JSIu/F1T82Nvv3wJEF12Yk6bkxqu0VD4u JasIvKDjIKEDHMErzGcmRZboBiBCETQMFiwPJlSLU01BilI3IuH+vBt2TBoy6nw1 NtW+cN9ex4PKlWkmj0XIl5IMfyda0N8pIpGMFtMd1EgOJJb4KCmZVCpOU0y/MT4G GK7x/bg22VksFl896kq0rW2kgIcWyNfk7g+v4pYEAFgezKD96FP1/LUpNPBZ3sfq q7lZaLwXcHzhdtUaScwdBG86I9NwCMnS1dK/r1uLEHQeh04v2P6M1cOi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR+T+Raz03QaFxnEuGxkVU67R0nMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi0np5DV oPb3CkD8KnJdR+FpL4gm0+PXt2VskJA2Tbx0RYvpM4Ikau0xZE57f9r3SJ5MrKtZ +Hp7ffzS4CyICzscvq9ly3CZMEWW867boIWE9JXn22GCAoq1QxxcUYYgCjBW6h/3 0Box2G+4pzH43X9DtxJxEjVEvLtPK+w030DhaH4IjkWxNoawG2/jElli4+1r5ilv DC/+OnFBrtC4tkn3lL+J+niMPQaYdYAGzpmYbnoAm80i0QhujuEoAaJfzfIXLLs5 er6AlsfMfYUMHyNa4BG6gKMq4MPasH3FLtj8CDwOtLcT9La2XASjdt8rHIbCBILo jtuLCLw+5yjmqg== -----END CERTIFICATE-----Generated at Tue Jun 16 03:56:18 2026 by rpki-client