$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: I6wygGXzNFRAekGbwg2UouFUVIVJZ5JMChm1xmpKSoE= Subject key identifier: DD:71:54:53:B3:84:8F:D5:5E:9B:01:07:94:55:0D:8F:36:04:27:40 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019922FA2FDF18FCD2EEA64AEDA52DC83AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 168D Signing time: Sun 07 Sep 2025 07:00:45 +0000 Manifest this update: Sun 07 Sep 2025 07:00:45 +0000 Manifest next update: Mon 08 Sep 2025 07:00:45 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa (hash: sP0bXOhnayW/C5U8LWSRTmyBREQH+K1GXgkc2hDCxmE=) 4: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 5: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 6: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 7: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: 9W9AsrvMVZovvhN7NVhlzF8JuQpAnwYP1ZlWJlh9WlQ=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:fa:2f:df:18:fc:d2:ee:a6:4a:ed:a5:2d:c8:3a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Sep 7 07:00:45 2025 GMT Not After : Sep 8 07:00:45 2025 GMT Subject: CN=dd715453b3848fd55e9b010794550d8f36042740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:ab:62:de:8f:b2:94:af:0e:db:85:4a:0b: 54:d4:9e:5c:93:ab:fd:c9:25:03:50:3b:87:ee:e2: 99:53:51:d9:51:2c:f3:87:89:e4:51:fe:71:87:e7: d2:b1:a8:22:36:ab:b1:3b:ba:a2:9b:d2:30:4b:1b: 34:7d:44:63:ed:19:ec:04:30:a1:cb:d8:f4:bb:a8: 74:b5:48:60:fe:45:62:11:5d:75:0c:05:cc:8f:92: c1:59:1f:0c:7c:b1:ce:2b:c0:98:9d:f1:0a:6e:d9: d1:02:f4:db:03:1c:18:0d:55:98:94:c9:21:60:59: 6d:38:3e:92:a7:29:66:5f:8c:b5:1c:a7:f6:f7:6a: 0b:f3:85:bc:75:24:e1:d1:31:3d:67:04:5b:c0:e0: b0:2b:9f:9f:0c:32:06:e1:ff:96:19:1d:34:a6:87: 23:88:29:1c:27:81:bb:87:c4:f6:3d:06:56:52:ae: 82:1e:73:4d:bb:bb:44:e3:d9:96:c1:23:b4:e0:5c: 2b:40:e3:f2:b0:46:1c:8f:19:1f:95:88:31:bf:bc: 4a:86:79:d2:95:ff:ef:3f:d9:8a:d7:2d:59:ca:0e: 9e:e5:67:37:88:60:a1:11:d5:ed:0b:11:d4:8c:23: 6f:9a:d2:49:21:5c:e5:b1:ad:5c:51:81:6a:8d:d2: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:71:54:53:B3:84:8F:D5:5E:9B:01:07:94:55:0D:8F:36:04:27:40 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e0:f1:ee:ca:c5:07:58:94:42:ae:42:5e:20:63:10:1d:d7: c9:00:a4:25:66:5c:bf:3a:5e:a5:0b:08:60:c8:a2:c2:16:df: 7e:64:52:5c:b9:7c:c8:4e:29:8f:ad:cc:4e:c3:47:e4:26:1c: 10:93:ca:8f:70:51:65:ae:e9:66:3d:d1:99:5b:b5:1b:62:57: e9:66:7e:94:42:f2:dc:ff:ad:f5:76:2e:fd:12:93:56:6b:30: f5:82:ca:53:be:8a:bd:d1:69:c1:77:cc:ac:9b:b6:ba:3a:8b: fd:27:0e:e0:a4:3f:79:8f:d0:1c:ef:79:6e:3b:91:c7:32:38: a9:92:d6:66:5c:7d:b5:66:0d:52:7d:08:43:0b:23:32:cd:6d: 5f:f7:a1:88:7f:42:8d:d0:15:80:2c:81:48:d0:da:3b:5c:6d: 17:73:58:67:50:04:de:92:ae:90:e6:7e:b6:93:48:5d:31:fb: 9f:87:46:7a:8b:9e:a5:57:d8:2c:66:f4:39:af:82:64:fe:e0: 5b:e5:f9:1a:23:3b:8c:2e:6c:6c:20:76:89:08:cb:bb:2f:8e: dc:7a:2c:18:44:17:0c:8d:d7:54:65:cf:4b:aa:80:05:0c:30: 48:22:9e:d6:c4:74:bc:ef:0c:de:68:1f:60:84:2b:86:6c:d8: d4:6c:aa:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZki+i/fGPzS7qZK7aUtyDr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwOTA3MDcwMDQ1WhcNMjUwOTA4MDcwMDQ1WjAzMTEwLwYDVQQD EyhkZDcxNTQ1M2IzODQ4ZmQ1NWU5YjAxMDc5NDU1MGQ4ZjM2MDQyNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MOrYt6PspSvDtuFSgtU1J5ck6v9 ySUDUDuH7uKZU1HZUSzzh4nkUf5xh+fSsagiNquxO7qim9IwSxs0fURj7RnsBDCh y9j0u6h0tUhg/kViEV11DAXMj5LBWR8MfLHOK8CYnfEKbtnRAvTbAxwYDVWYlMkh YFltOD6SpylmX4y1HKf292oL84W8dSTh0TE9ZwRbwOCwK5+fDDIG4f+WGR00pocj iCkcJ4G7h8T2PQZWUq6CHnNNu7tE49mWwSO04FwrQOPysEYcjxkflYgxv7xKhnnS lf/vP9mK1y1Zyg6e5Wc3iGChEdXtCxHUjCNvmtJJIVzlsa1cUYFqjdL0AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1xVFOzhI/VXpsBB5RVDY82BCdAMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+Dx7srF B1iUQq5CXiBjEB3XyQCkJWZcvzpepQsIYMiiwhbffmRSXLl8yE4pj63MTsNH5CYc EJPKj3BRZa7pZj3RmVu1G2JX6WZ+lELy3P+t9XYu/RKTVmsw9YLKU76KvdFpwXfM rJu2ujqL/ScO4KQ/eY/QHO95bjuRxzI4qZLWZlx9tWYNUn0IQwsjMs1tX/ehiH9C jdAVgCyBSNDaO1xtF3NYZ1AE3pKukOZ+tpNIXTH7n4dGeouepVfYLGb0Oa+CZP7g W+X5GiM7jC5sbCB2iQjLuy+O3HosGEQXDI3XVGXPS6qABQwwSCKe1sR0vO8M3mgf YIQrhmzY1Gyq1A== -----END CERTIFICATE-----Generated at Sun Sep 7 12:32:59 2025 by rpki-client