$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: /qbQFU5bmVDZlnhUt7T/r5bYcjeRxUIPyUhnbk+8hwI= Subject key identifier: 3B:60:AC:6B:48:6A:C6:A6:DC:CA:6C:21:18:80:84:AA:1F:CE:39:92 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019F9F95D0A097B56BA107AEB694A31667CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 161A Signing time: Sun 26 Jul 2026 18:00:23 +0000 Manifest this update: Sun 26 Jul 2026 18:00:23 +0000 Manifest next update: Mon 27 Jul 2026 18:00:23 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 3: 8z4En2plcFrjsgMpeWFMiLDbrcc.roa (hash: yDoic8WShwoiebxseKBsUc7cWs7ZX5yTJy41hV/uxk8=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: fbHbmkfnHqRMN7OAVjFMPSrpSurQ3/M4vRmOxI77FOk=) 7: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 8: esVt0oPMibqnLUm7kqKj2LAl8vw.roa (hash: zfjNtga+p5eHk5tvmOl3gLN+iJp2qqpxamjLqdh8gKM=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) 12: u08NEvufIyYOw5wjByrYL3KDftg.roa (hash: +kuBshu076KXzQxN7e8+v+U/mTU0N1n8TG4+SUR96MM=) 13: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (hash: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 15:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:95:d0:a0:97:b5:6b:a1:07:ae:b6:94:a3:16:67:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jul 26 18:00:23 2026 GMT Not After : Jul 27 18:00:23 2026 GMT Subject: CN=3b60ac6b486ac6a6dcca6c21188084aa1fce3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:e9:98:19:1f:c9:41:86:dd:73:da:03:f1: 43:7f:38:d6:42:e1:93:9f:b4:8a:a8:ee:60:4a:35: 61:11:71:db:89:0e:80:da:16:6c:52:b1:62:ff:90: d0:93:11:5a:b4:2b:54:b5:b2:fa:21:76:9a:c6:55: 9a:1d:4f:79:2d:dc:6c:cc:49:2f:c0:43:14:cc:ca: a2:b8:dc:4b:27:ef:e7:ff:c8:93:22:0a:be:3c:3e: 74:3f:21:90:ca:64:c5:a5:bc:72:d4:67:44:34:be: 33:ee:aa:82:06:bf:34:d9:74:96:9e:6a:bc:ed:da: 54:82:8c:07:da:3a:45:59:71:f8:50:d2:18:25:ea: 7c:09:c6:f5:af:48:5d:4b:00:c4:27:ac:11:b8:50: 16:18:4a:29:17:5f:d6:69:b2:05:57:60:7f:ed:a8: f4:1c:96:39:e0:5b:b9:84:6e:44:11:1a:32:c9:a0: 33:a4:87:d5:a8:43:6e:3a:30:2d:7e:40:70:21:eb: c9:19:ca:c3:a6:a6:6f:a9:86:e2:e2:e8:91:9e:94: b2:4b:b3:27:11:7a:9c:3d:60:33:e4:74:ea:91:26: 4d:d8:a7:08:6a:0e:a7:af:51:44:f9:9e:1e:d6:dd: 2b:df:11:a4:7d:39:4e:02:98:3a:68:a0:93:d7:63: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:AC:6B:48:6A:C6:A6:DC:CA:6C:21:18:80:84:AA:1F:CE:39:92 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7d:cb:9e:b0:b9:16:00:a1:e4:bb:7f:8a:80:b8:2d:cb:fb: 6e:d7:da:ad:7e:a8:a1:0e:3b:ae:82:ff:d8:c5:da:84:eb:6c: ed:40:62:59:27:11:a7:83:9d:14:8d:14:39:89:9d:33:5f:2b: c9:91:51:8a:17:45:a3:c8:9f:5d:77:4d:b6:06:73:12:bc:b7: 05:74:45:36:54:f5:c4:af:6d:2e:c5:2a:36:d4:cd:12:e5:54: f7:5b:52:f7:c5:e5:57:68:ec:1f:d6:0c:61:61:e0:2f:87:29: 88:c9:ab:05:05:4d:bd:72:7f:bd:11:fb:32:04:ca:46:31:2a: 1d:70:d6:21:54:d1:83:ac:ec:15:14:26:df:94:f1:f6:3b:cb: c3:48:9b:0e:e2:12:8b:7d:d1:e0:1e:7c:74:7c:71:a8:29:22: ae:00:9d:78:50:01:94:26:f0:14:bc:3a:c7:fd:81:23:85:80: 41:8b:9e:0a:3f:b7:02:24:62:1e:43:e1:1a:39:71:10:20:af: 0f:47:0a:e4:c2:f9:1d:6e:b5:9c:1a:ad:18:ad:7b:26:71:3e: 6c:a3:2e:e3:eb:8d:57:19:39:e8:3a:29:85:cd:59:2c:72:2d: ce:99:b1:3c:11:cd:df:2a:8e:ad:6b:9b:7d:88:70:5f:56:51: 18:6c:f9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fldCgl7VroQeutpSjFmfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwNzI2MTgwMDIzWhcNMjYwNzI3MTgwMDIzWjAzMTEwLwYDVQQD EygzYjYwYWM2YjQ4NmFjNmE2ZGNjYTZjMjExODgwODRhYTFmY2UzOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswDpmBkfyUGG3XPaA/FDfzjWQuGT n7SKqO5gSjVhEXHbiQ6A2hZsUrFi/5DQkxFatCtUtbL6IXaaxlWaHU95LdxszEkv wEMUzMqiuNxLJ+/n/8iTIgq+PD50PyGQymTFpbxy1GdENL4z7qqCBr802XSWnmq8 7dpUgowH2jpFWXH4UNIYJep8Ccb1r0hdSwDEJ6wRuFAWGEopF1/WabIFV2B/7aj0 HJY54Fu5hG5EERoyyaAzpIfVqENuOjAtfkBwIevJGcrDpqZvqYbi4uiRnpSyS7Mn EXqcPWAz5HTqkSZN2KcIag6nr1FE+Z4e1t0r3xGkfTlOApg6aKCT12P2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtgrGtIasam3MpsIRiAhKofzjmSMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH3LnrC5 FgCh5Lt/ioC4Lcv7btfarX6ooQ47roL/2MXahOts7UBiWScRp4OdFI0UOYmdM18r yZFRihdFo8ifXXdNtgZzEry3BXRFNlT1xK9tLsUqNtTNEuVU91tS98XlV2jsH9YM YWHgL4cpiMmrBQVNvXJ/vRH7MgTKRjEqHXDWIVTRg6zsFRQm35Tx9jvLw0ibDuIS i33R4B58dHxxqCkirgCdeFABlCbwFLw6x/2BI4WAQYueCj+3AiRiHkPhGjlxECCv D0cK5ML5HW61nBqtGK17JnE+bKMu4+uNVxk56Dophc1ZLHItzpmxPBHN3yqOrWub fYhwX1ZRGGz5eQ== -----END CERTIFICATE-----Generated at Mon Jul 27 00:50:42 2026 by rpki-client