$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json) Hash identifier: Vb6Tkjh1K6BZ5tQvElhgaZHu1zorsQgwPpzcujQ/VBU= Subject key identifier: 42:5C:90:6E:FD:92:05:AC:65:86:E0:A5:EA:94:1D:DB:AB:97:6F:7F Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 01A03AB9B1F9D9932C0833FB4A604EDEF599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft Manifest number: 1003 Signing time: Tue 25 Aug 2026 21:00:43 +0000 Manifest this update: Tue 25 Aug 2026 21:00:43 +0000 Manifest next update: Wed 26 Aug 2026 21:00:43 +0000 Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=) 2: 0szAMahK1oQnINJK81wlTT6Btig.roa (hash: SZ/iPl1/uEv70XbCNZiszMUzRfgvtHmx/hWYhWGapmo=) 3: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=) 4: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=) 5: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=) 6: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=) 7: USAO41jbUP97p--JRu_ZqtNe5EI.roa (hash: LfdCpC2uNJXwWHbUHSlZAnK3PC0CH3cNb7AHvc9pYvs=) 8: UW-4UFZx7To3RNwelVOgzAwhD_o.roa (hash: eiBKYL64skKUAlgyf8e0asSrepS7YuL7BO8UWyOpmg8=) 9: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: pMpcNy2uLFIOvyiP9Pf7IiNhxTrjjxR5YZ9OET+dulo=) 10: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=) 11: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 15:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3a:b9:b1:f9:d9:93:2c:08:33:fb:4a:60:4e:de:f5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Aug 25 21:00:43 2026 GMT Not After : Aug 26 21:00:43 2026 GMT Subject: CN=425c906efd9205ac6586e0a5ea941ddbab976f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:a2:9f:51:a1:aa:5d:04:01:a4:87:73:44: 5f:13:6e:80:5a:cc:56:d4:31:92:8e:1d:05:5e:fd: 36:23:96:e1:fe:e7:21:da:6a:f0:e9:09:88:6c:ad: a3:4a:d8:4a:f3:a0:94:18:5d:f3:ed:9e:31:9a:42: 60:11:fd:54:a4:0c:d6:92:3e:29:c7:f2:6c:4e:ba: e0:32:a8:79:2c:d9:b1:6c:ed:32:f0:23:a6:98:00: 74:6c:89:c7:50:52:eb:f4:90:e6:69:eb:ed:62:c6: 90:bd:cc:32:c7:f5:1d:1f:a5:e5:c9:b8:ac:55:ff: 0b:f2:c4:7e:0b:8a:48:24:cd:dc:b1:1e:20:a4:b9: 51:bf:10:e3:22:03:e8:bc:66:34:82:bc:1e:cb:b9: f8:e7:3a:81:eb:0b:34:e1:a9:9a:18:b0:e2:38:d5: ad:7d:32:c3:f6:bc:7b:53:3e:52:a1:e2:9a:91:5b: 49:3a:7c:8f:a4:53:69:e2:da:dc:0f:b7:ab:cd:24: 9a:2f:bd:94:f4:84:08:3d:15:7a:e0:91:3f:a1:51: e4:b6:a8:5c:8f:4e:04:b2:5d:74:38:d3:e2:c7:e3: ea:f7:11:eb:16:7f:d9:ab:9d:18:95:9f:a0:a3:5d: b3:93:b8:49:c6:b9:df:8a:4d:ac:61:ee:c0:45:8c: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5C:90:6E:FD:92:05:AC:65:86:E0:A5:EA:94:1D:DB:AB:97:6F:7F X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8a:2e:38:fd:a6:cf:5c:d2:c0:35:48:18:65:60:47:a5:a6: 39:b4:55:5a:b8:5c:f1:be:0d:7e:f5:9b:33:10:88:14:44:00: 12:59:b0:59:a3:f8:5d:1b:08:f6:10:4c:e0:58:91:13:3e:23: d2:bb:f2:ba:33:4d:16:56:6b:16:78:97:b3:44:09:c9:76:ef: a9:8c:31:93:97:f4:1d:b1:15:88:e7:0b:1f:73:5f:56:b4:ff: 73:4a:df:21:33:0b:dd:c7:46:8f:cd:1d:8a:18:9a:8c:f3:c9: 92:e4:58:87:d1:4f:5f:a3:73:a9:94:51:64:34:d9:5c:9d:02: 44:7f:79:bf:45:c1:2f:1d:b1:e8:3e:e7:40:c2:d8:1c:7a:27: 01:fc:4f:e6:70:f2:c7:d6:1e:e9:96:66:bf:f2:d3:a1:4c:a9: 65:9e:b4:07:02:40:6b:af:b4:18:8f:d4:84:75:76:10:66:5e: e3:4e:92:d1:9c:94:5b:f8:bc:3c:02:2b:56:39:09:69:4e:d9: 6c:80:ac:0e:74:59:6e:3c:e3:2b:41:2a:13:d6:0f:b4:5d:2f: 97:ed:88:82:4b:02:a9:48:3b:27:bf:ad:1a:48:ce:c5:45:90: e7:81:a8:46:83:87:da:5c:42:9b:25:1b:cd:f8:21:c0:da:11: 7a:dd:6b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA6ubH52ZMsCDP7SmBO3vWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwODI1MjEwMDQzWhcNMjYwODI2MjEwMDQzWjAzMTEwLwYDVQQD Eyg0MjVjOTA2ZWZkOTIwNWFjNjU4NmUwYTVlYTk0MWRkYmFiOTc2ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbWin1Ghql0EAaSHc0RfE26AWsxW 1DGSjh0FXv02I5bh/uch2mrw6QmIbK2jSthK86CUGF3z7Z4xmkJgEf1UpAzWkj4p x/JsTrrgMqh5LNmxbO0y8COmmAB0bInHUFLr9JDmaevtYsaQvcwyx/UdH6Xlybis Vf8L8sR+C4pIJM3csR4gpLlRvxDjIgPovGY0grwey7n45zqB6ws04amaGLDiONWt fTLD9rx7Uz5SoeKakVtJOnyPpFNp4trcD7erzSSaL72U9IQIPRV64JE/oVHktqhc j04Esl10ONPix+Pq9xHrFn/Zq50YlZ+go12zk7hJxrnfik2sYe7ARYzRRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJckG79kgWsZYbgpeqUHdurl29/MB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIouOP2m z1zSwDVIGGVgR6WmObRVWrhc8b4NfvWbMxCIFEQAElmwWaP4XRsI9hBM4FiREz4j 0rvyujNNFlZrFniXs0QJyXbvqYwxk5f0HbEViOcLH3NfVrT/c0rfITML3cdGj80d ihiajPPJkuRYh9FPX6NzqZRRZDTZXJ0CRH95v0XBLx2x6D7nQMLYHHonAfxP5nDy x9Ye6ZZmv/LToUypZZ60BwJAa6+0GI/UhHV2EGZe406S0ZyUW/i8PAIrVjkJaU7Z bICsDnRZbjzjK0EqE9YPtF0vl+2IgksCqUg7J7+tGkjOxUWQ54GoRoOH2lxCmyUb zfghwNoRet1rug== -----END CERTIFICATE-----Generated at Wed Aug 26 01:05:16 2026 by rpki-client