$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: oUbSUEyDvwj9jEMfJZg5E0f8RQdXKDjfRe122df87hw= Subject key identifier: 12:63:EE:42:A5:40:DC:00:72:A0:8B:ED:F4:A2:14:0A:FD:6D:94:3E Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01992C345DB267D5E7686A037F589F589E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 12C0 Signing time: Tue 09 Sep 2025 02:00:53 +0000 Manifest this update: Tue 09 Sep 2025 02:00:53 +0000 Manifest next update: Wed 10 Sep 2025 02:00:53 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: shq+MduVvb/CauGom6etRol05tO4Vze3YJgwb2uAlyI=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:34:5d:b2:67:d5:e7:68:6a:03:7f:58:9f:58:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Sep 9 02:00:53 2025 GMT Not After : Sep 10 02:00:53 2025 GMT Subject: CN=1263ee42a540dc0072a08bedf4a2140afd6d943e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:66:7e:f0:91:ca:ec:3d:b2:6a:73:8c:66: cb:d6:cb:85:9f:0b:32:93:06:de:89:51:24:f5:bb: 1e:b0:47:64:21:b6:cf:83:22:7b:ea:5b:17:55:b8: e6:6f:38:dc:68:a1:d5:5e:c3:3a:15:5e:99:7a:30: 51:33:b4:cc:7e:51:f8:f5:86:5c:6b:f5:2d:d9:11: 68:7d:54:ca:1a:2b:e0:a6:1d:3b:82:36:9c:d6:48: da:a2:96:d6:43:86:fc:c1:c1:4d:c2:18:4b:3e:c2: d9:99:e7:26:9e:da:c0:c4:3d:0a:09:14:98:6c:76: 5f:1f:fa:a2:66:95:ca:3b:3f:6f:36:fa:21:6c:13: 42:bd:8f:23:90:82:0b:ac:c1:f9:61:cc:ba:65:b1: 43:2e:4d:47:0f:c6:96:bc:34:22:24:74:f6:da:3f: de:f1:ee:ff:76:6a:98:46:e6:1a:67:24:cf:7b:c1: 30:b1:f7:a7:cd:9e:36:38:89:82:12:45:be:52:5b: be:84:33:fd:1f:68:d0:41:7e:08:da:51:51:55:64: a0:e5:2b:f7:9b:f8:ca:19:bf:ba:51:cc:8b:44:6f: a3:b2:8c:43:32:cf:d6:b3:a6:24:1b:bb:34:f0:48: e4:cd:9f:13:48:36:35:c7:55:93:31:49:a0:ec:28: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:63:EE:42:A5:40:DC:00:72:A0:8B:ED:F4:A2:14:0A:FD:6D:94:3E X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5d:04:6a:e9:11:23:25:e5:2f:8a:20:bd:b8:d5:f5:89:b3: b1:77:ce:72:81:f0:75:86:9f:da:d6:3f:8c:bf:b4:6b:71:1c: 53:5d:1a:95:e3:9a:8a:8c:5a:47:85:f4:ea:4a:04:0f:a6:fa: 31:9a:df:5d:a2:79:1a:6d:5d:b4:d8:39:49:c8:e4:fd:61:1e: 05:d4:39:f3:b6:bd:12:c3:02:52:28:b2:20:1f:bd:2e:58:60: 97:a8:73:83:fc:8c:78:47:a5:02:40:b5:0a:12:26:44:c8:74: d9:b4:7f:b6:d5:a7:3c:0a:42:85:34:e8:78:03:21:37:ed:85: 68:e5:f5:4f:d6:5c:11:a1:d5:52:db:06:ee:b7:60:8d:db:24: 3a:02:48:d3:ff:ba:8e:4c:d4:c7:ab:fa:2f:8f:93:08:bf:e9: d3:67:2a:30:30:62:31:96:4a:89:6d:67:23:a6:72:31:2c:65: e1:12:a9:e0:a2:4c:fd:7c:3c:3b:7f:ca:08:9a:4b:f3:a8:3f: 20:f6:f4:bb:37:06:c7:80:25:27:4a:36:4e:bb:3d:54:9f:f2: 01:b6:6b:57:f1:38:ee:99:44:f1:5c:fd:82:54:93:cc:95:ac: 45:96:d6:48:c0:69:96:43:99:49:72:be:0a:ad:d2:7f:27:06: 31:f1:34:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksNF2yZ9XnaGoDf1ifWJ4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwOTA5MDIwMDUzWhcNMjUwOTEwMDIwMDUzWjAzMTEwLwYDVQQD EygxMjYzZWU0MmE1NDBkYzAwNzJhMDhiZWRmNGEyMTQwYWZkNmQ5NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZlmfvCRyuw9smpzjGbL1suFnwsy kwbeiVEk9bsesEdkIbbPgyJ76lsXVbjmbzjcaKHVXsM6FV6ZejBRM7TMflH49YZc a/Ut2RFofVTKGivgph07gjac1kjaopbWQ4b8wcFNwhhLPsLZmecmntrAxD0KCRSY bHZfH/qiZpXKOz9vNvohbBNCvY8jkIILrMH5Ycy6ZbFDLk1HD8aWvDQiJHT22j/e 8e7/dmqYRuYaZyTPe8EwsfenzZ42OImCEkW+Ulu+hDP9H2jQQX4I2lFRVWSg5Sv3 m/jKGb+6UcyLRG+jsoxDMs/Ws6YkG7s08EjkzZ8TSDY1x1WTMUmg7CjMtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJj7kKlQNwAcqCL7fSiFAr9bZQ+MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADl0EaukR IyXlL4ogvbjV9YmzsXfOcoHwdYaf2tY/jL+0a3EcU10aleOaioxaR4X06koED6b6 MZrfXaJ5Gm1dtNg5Scjk/WEeBdQ587a9EsMCUiiyIB+9Llhgl6hzg/yMeEelAkC1 ChImRMh02bR/ttWnPApChTToeAMhN+2FaOX1T9ZcEaHVUtsG7rdgjdskOgJI0/+6 jkzUx6v6L4+TCL/p02cqMDBiMZZKiW1nI6ZyMSxl4RKp4KJM/Xw8O3/KCJpL86g/ IPb0uzcGx4AlJ0o2Trs9VJ/yAbZrV/E47plE8Vz9glSTzJWsRZbWSMBplkOZSXK+ Cq3SfycGMfE0XA== -----END CERTIFICATE-----Generated at Tue Sep 9 09:37:20 2025 by rpki-client