$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: pKMPkuEym7EkSaDYFwoepATISXUe5d3+HdLl1YJWwWc= Subject key identifier: 9B:0F:2C:78:A6:BE:DA:8A:B5:CD:CF:75:AB:5B:A4:2F:88:A9:F7:8E Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019FCC01BD6F99F34C83CA9C605A35B1FEE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1A0E Signing time: Tue 04 Aug 2026 09:01:33 +0000 Manifest this update: Tue 04 Aug 2026 09:01:33 +0000 Manifest next update: Wed 05 Aug 2026 09:01:33 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=) 13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: nmgKnJTjKfQaejm1grEAYP8s4FL89Dd7r6VD/vYBBNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cc:01:bd:6f:99:f3:4c:83:ca:9c:60:5a:35:b1:fe:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Aug 4 09:01:33 2026 GMT Not After : Aug 5 09:01:33 2026 GMT Subject: CN=9b0f2c78a6beda8ab5cdcf75ab5ba42f88a9f78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:55:04:5f:98:58:95:e0:93:f5:11:23:e2: 95:b9:fd:87:ec:80:ae:5c:ff:ad:3c:2a:1f:1c:91: 36:64:3f:7c:d1:f8:38:7e:f9:05:a9:12:0d:6a:f1: b9:7e:4f:c1:cd:a7:75:e8:9c:6c:92:ab:30:7e:38: 29:79:b7:25:22:1f:59:de:f8:9f:64:b2:03:12:e9: e1:38:ad:1d:51:ca:f2:7c:9f:fc:83:d8:51:19:ae: 7a:1d:ee:ea:7e:83:f4:6a:30:45:13:cd:28:a3:b5: cd:00:a8:76:92:96:ac:63:cc:96:b9:55:79:71:13: e4:1f:09:26:ab:54:90:b8:cc:a8:7e:49:38:65:1a: 48:1d:26:d3:98:11:12:22:1a:eb:7a:4b:a4:05:89: 96:10:f2:58:a8:ef:b5:74:c2:27:87:04:6f:c2:cc: 45:87:5c:b7:2f:74:ab:e6:8a:d7:4a:54:65:ab:a2: 32:fa:f8:50:ce:39:a9:d2:a3:3c:c9:f7:c9:ad:c8: bf:37:4d:ec:bf:dc:3a:64:19:ec:1e:47:73:9c:f6: 6e:c5:cc:2a:46:10:cb:67:8c:96:89:45:d8:28:7a: fa:d5:01:2f:fa:0b:35:10:0c:35:ca:11:b9:8c:5a: 19:51:fb:f9:8e:b9:14:21:aa:45:e0:66:36:1c:7b: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0F:2C:78:A6:BE:DA:8A:B5:CD:CF:75:AB:5B:A4:2F:88:A9:F7:8E X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9e:04:16:af:ee:16:72:ba:8c:8e:b6:3f:fb:f1:22:2e:e7: 6c:e5:d6:9b:de:c6:8a:e7:df:bb:ec:3b:da:10:5d:1c:fb:fe: da:c2:ed:8e:64:d8:dd:74:a0:1f:e9:7b:da:a4:9b:f3:4c:5c: 82:a4:bc:92:fa:43:d2:0a:92:ca:83:52:fe:46:b8:68:d9:45: c1:cc:35:a3:b9:0a:53:a6:39:cb:0b:36:d6:ad:3f:b3:6c:86: d0:35:96:0b:69:d1:65:48:21:26:0f:02:5c:aa:57:b1:c8:41: cb:31:71:a5:15:26:5d:19:4d:8a:2d:ee:59:8a:6d:c5:bf:07: 11:98:ef:32:45:b9:83:f7:90:0a:5b:df:f6:48:5b:7e:61:d1: 9a:a2:2b:8b:2a:1c:17:64:b9:1d:c3:a8:45:ea:54:b0:40:f6: 76:9d:79:de:da:a2:0c:5a:00:6e:73:48:2b:e7:58:41:2c:fa: 70:dd:21:17:17:3e:87:67:0a:b6:b1:44:61:45:6d:af:2f:28: 7f:8b:bf:3e:0c:7f:7d:8d:76:5a:aa:55:f1:72:79:a8:87:37: ac:1e:eb:b8:61:c4:54:f3:f6:f2:5d:5a:c1:e0:d2:94:13:a7: ac:3f:6f:b1:bd:13:95:4a:5b:08:f5:eb:17:24:1a:ef:95:31: 0a:a1:fb:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/MAb1vmfNMg8qcYFo1sf7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwODA0MDkwMTMzWhcNMjYwODA1MDkwMTMzWjAzMTEwLwYDVQQD Eyg5YjBmMmM3OGE2YmVkYThhYjVjZGNmNzVhYjViYTQyZjg4YTlmNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uRVBF+YWJXgk/URI+KVuf2H7ICu XP+tPCofHJE2ZD980fg4fvkFqRINavG5fk/Bzad16JxskqswfjgpebclIh9Z3vif ZLIDEunhOK0dUcryfJ/8g9hRGa56He7qfoP0ajBFE80oo7XNAKh2kpasY8yWuVV5 cRPkHwkmq1SQuMyofkk4ZRpIHSbTmBESIhrrekukBYmWEPJYqO+1dMInhwRvwsxF h1y3L3Sr5orXSlRlq6Iy+vhQzjmp0qM8yffJrci/N03sv9w6ZBnsHkdznPZuxcwq RhDLZ4yWiUXYKHr61QEv+gs1EAw1yhG5jFoZUfv5jrkUIapF4GY2HHt4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsPLHimvtqKtc3PdatbpC+IqfeOMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ4EFq/u FnK6jI62P/vxIi7nbOXWm97Giuffu+w72hBdHPv+2sLtjmTY3XSgH+l72qSb80xc gqS8kvpD0gqSyoNS/ka4aNlFwcw1o7kKU6Y5yws21q0/s2yG0DWWC2nRZUghJg8C XKpXschByzFxpRUmXRlNii3uWYptxb8HEZjvMkW5g/eQClvf9khbfmHRmqIriyoc F2S5HcOoRepUsED2dp153tqiDFoAbnNIK+dYQSz6cN0hFxc+h2cKtrFEYUVtry8o f4u/Pgx/fY12WqpV8XJ5qIc3rB7ruGHEVPP28l1aweDSlBOnrD9vsb0TlUpbCPXr FyQa75UxCqH74w== -----END CERTIFICATE-----Generated at Tue Aug 4 18:54:41 2026 by rpki-client