$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: mvVKyElhSsfu4HvPbzgQKw7baTdgOREx9n7j7PZGbF0= Subject key identifier: 0D:A7:E6:25:6C:33:F6:B9:70:9A:32:5F:00:A0:7F:20:11:9E:9C:7A Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 01A0B5E4860A4AD2C194F8C5A967905C8381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1A88 Signing time: Fri 18 Sep 2026 19:00:47 +0000 Manifest this update: Fri 18 Sep 2026 19:00:47 +0000 Manifest next update: Sat 19 Sep 2026 19:00:47 +0000 Files and hashes: 1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=) 2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=) 3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=) 4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=) 5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=) 6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=) 7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=) 8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=) 9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=) 10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=) 11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=) 12: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=) 13: uHcHm-Q2inkIqyesgnfD4jPip48.roa (hash: 4PMfdYi17AF2Wi/23XG4oqCHUKA2wU+FYFq+eyTKfzA=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: tk3j2G5fY/UkQxwdJuc498dksGaODb9h4ppYHFbfThA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b5:e4:86:0a:4a:d2:c1:94:f8:c5:a9:67:90:5c:83:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Sep 18 19:00:47 2026 GMT Not After : Sep 19 19:00:47 2026 GMT Subject: CN=0da7e6256c33f6b9709a325f00a07f20119e9c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:55:0a:76:66:83:fd:1d:46:6e:51:2b:26: 52:4e:f7:9e:80:9f:aa:01:db:74:41:48:1f:ab:b4: 09:aa:cd:68:93:ef:e5:fa:3f:58:a1:83:b8:aa:cc: 78:c9:fe:43:44:86:7b:63:4b:66:c2:15:ea:15:71: 9d:5a:bb:47:e1:65:5d:f5:f2:9e:4a:ef:43:61:9b: cb:d6:7d:a8:f1:0f:d7:0e:b9:ff:8e:77:e0:04:84: 62:4a:e8:f8:e8:8a:39:2a:82:11:88:47:0b:57:8a: 73:b8:f9:fb:1d:c5:29:7f:94:3e:4b:78:5b:57:2f: 5a:bc:9a:5f:f3:fe:fa:b3:9c:f0:53:a3:a1:15:f8: 50:7c:55:9a:33:54:3d:ba:99:09:bc:a0:37:c2:e9: 2e:e7:af:0f:03:5c:62:a0:b6:e9:2a:62:3a:48:93: ef:d1:f4:e9:ff:91:7c:5d:5e:ef:c5:b7:4e:7c:f2: 75:2b:a8:97:0d:24:3d:34:78:bd:c4:21:ba:d6:54: ef:09:d4:4c:52:8e:b7:4d:95:43:36:64:5a:e6:5c: 3c:a4:50:cd:e0:6f:43:6b:93:55:e9:59:27:8a:78: 60:b7:8f:dc:4d:1b:6a:0f:7f:e2:24:f2:99:21:da: 66:cf:0f:cc:3e:9f:ba:2d:2a:14:12:4c:dd:a0:b1: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A7:E6:25:6C:33:F6:B9:70:9A:32:5F:00:A0:7F:20:11:9E:9C:7A X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f1:1e:2e:73:32:95:0b:51:fb:1c:76:c5:d9:85:96:18:6f: bf:f3:2d:a7:02:ed:9a:72:30:ba:cb:35:9f:3f:95:cd:b8:1f: eb:da:4d:5b:d0:14:36:01:60:14:62:0b:9d:d2:58:d3:f6:11: 61:07:ee:94:97:e2:74:59:06:93:c1:7a:2e:de:e2:74:29:bd: 34:79:88:2a:81:bd:80:7b:e0:92:c8:7c:63:6e:fe:2b:4e:ba: fe:e9:9b:42:ce:1b:05:56:9b:57:c5:2f:38:cc:07:a6:cc:c2: 1f:73:69:24:a3:5e:61:aa:62:86:cd:3b:15:87:25:af:0b:32: eb:a8:fc:f5:00:a0:72:c4:1f:f9:de:d6:df:40:59:fc:0c:0a: 92:9c:f7:61:5a:30:92:12:13:ac:47:2f:66:f1:0e:7d:df:bc: ef:88:fa:79:56:d5:bd:dc:97:83:31:74:bc:6d:81:42:23:53: e9:53:c7:6d:c3:de:31:00:c6:31:df:8b:b2:d7:8f:6c:df:14: 39:f6:79:50:40:65:e2:3b:9e:68:93:2b:e9:b5:44:42:11:67: bc:02:76:9a:26:4c:b8:d4:e9:2c:83:8f:42:7d:b2:8a:d6:09: a9:72:6a:d3:c1:de:d2:d7:b0:7b:56:da:f1:e7:f6:30:1e:99: 5a:fc:1a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC15IYKStLBlPjFqWeQXIOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwOTE4MTkwMDQ3WhcNMjYwOTE5MTkwMDQ3WjAzMTEwLwYDVQQD EygwZGE3ZTYyNTZjMzNmNmI5NzA5YTMyNWYwMGEwN2YyMDExOWU5YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tRVCnZmg/0dRm5RKyZSTveegJ+q Adt0QUgfq7QJqs1ok+/l+j9YoYO4qsx4yf5DRIZ7Y0tmwhXqFXGdWrtH4WVd9fKe Su9DYZvL1n2o8Q/XDrn/jnfgBIRiSuj46Io5KoIRiEcLV4pzuPn7HcUpf5Q+S3hb Vy9avJpf8/76s5zwU6OhFfhQfFWaM1Q9upkJvKA3wuku568PA1xioLbpKmI6SJPv 0fTp/5F8XV7vxbdOfPJ1K6iXDSQ9NHi9xCG61lTvCdRMUo63TZVDNmRa5lw8pFDN 4G9Da5NV6Vkninhgt4/cTRtqD3/iJPKZIdpmzw/MPp+6LSoUEkzdoLFlIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2n5iVsM/a5cJoyXwCgfyARnpx6MB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPEeLnMy lQtR+xx2xdmFlhhvv/MtpwLtmnIwuss1nz+Vzbgf69pNW9AUNgFgFGILndJY0/YR YQfulJfidFkGk8F6Lt7idCm9NHmIKoG9gHvgksh8Y27+K066/umbQs4bBVabV8Uv OMwHpszCH3NpJKNeYapihs07FYclrwsy66j89QCgcsQf+d7W30BZ/AwKkpz3YVow khITrEcvZvEOfd+874j6eVbVvdyXgzF0vG2BQiNT6VPHbcPeMQDGMd+LstePbN8U OfZ5UEBl4jueaJMr6bVEQhFnvAJ2miZMuNTpLIOPQn2yitYJqXJq08He0tewe1ba 8ef2MB6ZWvwaLA== -----END CERTIFICATE-----Generated at Sat Sep 19 01:10:47 2026 by rpki-client