$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: CdAmsmzTwkv7eB16q7gp9Z7UO7bRX6nrgItHn3Zao/o= Subject key identifier: 4E:1F:C8:66:80:B9:A8:EC:E2:EA:53:B2:F7:50:5E:12:41:C1:5D:BA Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01975121DFBD18F3B5B2EF33A3C6B0A32DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 11CA Signing time: Sun 08 Jun 2025 20:01:03 +0000 Manifest this update: Sun 08 Jun 2025 20:01:03 +0000 Manifest next update: Mon 09 Jun 2025 20:01:03 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: b+/lQGce+fjCe/O6ih8hEDsZ0OFyftkcp9f3/WTdP/0=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:51:21:df:bd:18:f3:b5:b2:ef:33:a3:c6:b0:a3:2d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jun 8 20:01:03 2025 GMT Not After : Jun 9 20:01:03 2025 GMT Subject: CN=4e1fc86680b9a8ece2ea53b2f7505e1241c15dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:80:e8:26:26:e8:04:58:fd:c7:cf:2b:5c: f2:a0:cd:e3:5a:96:bf:82:18:e1:af:54:19:1a:59: 77:0a:7f:cf:2e:2b:a5:47:75:95:71:49:a6:d2:29: 40:3e:c5:36:38:cd:e4:c0:07:fc:84:7a:6d:27:c7: 2d:17:60:68:23:9d:00:46:5f:66:dd:b6:9c:30:2d: be:3d:2c:a3:73:5d:64:ce:06:69:e7:11:a1:5d:b2: 77:30:1f:e4:b0:24:81:f8:f1:42:b7:e6:a7:af:b2: f9:6d:9b:23:81:4c:35:8e:de:f4:0e:ad:58:05:8b: 2a:91:96:3c:98:d1:eb:ec:83:48:17:90:d2:8c:74: 17:9a:62:eb:16:e5:67:c2:4c:f6:e9:6a:8e:6d:87: 99:17:63:e1:d5:35:9b:cb:7c:bb:03:d7:ab:d5:0f: f3:62:59:25:f6:91:2a:5f:42:e6:ee:b3:c7:e1:a1: 19:17:d7:97:19:00:7b:3d:2b:7d:b2:89:f1:85:6b: 42:e6:63:c3:f8:39:0d:7f:d6:92:52:be:c4:02:97: 8e:ea:f6:b0:d6:58:18:88:46:9b:a0:9a:98:ff:1f: 3a:ee:f3:27:79:1e:5f:a7:57:e8:93:ae:7a:30:0b: 95:b5:0a:89:7f:5c:2f:7d:27:ad:72:7d:f2:f8:b6: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:C8:66:80:B9:A8:EC:E2:EA:53:B2:F7:50:5E:12:41:C1:5D:BA X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b5:48:c5:dc:91:82:c2:7a:17:a7:75:d5:8d:0b:bd:8d:5d: a1:02:ab:b0:43:2f:3c:13:f6:ba:dc:17:ad:8b:66:fd:73:28: df:93:9b:67:55:ea:15:c4:dc:6a:a6:ba:27:67:45:b2:0f:42: 8c:3e:d4:aa:c7:d9:5c:d7:98:46:31:03:22:6b:61:65:29:c8: 05:42:78:89:f8:56:cb:88:9f:89:f0:48:bb:0c:3f:08:ee:b3: bc:80:fb:64:08:da:dc:cb:99:2c:92:47:47:88:e5:07:f1:9a: 59:45:40:c4:98:29:3d:38:05:84:b5:66:ed:05:95:fa:5f:d3: 7a:f1:4b:74:c5:09:32:8a:0c:69:2e:66:e6:14:7d:d8:f5:0f: 46:2c:fb:ef:74:94:c1:23:e0:a8:9c:23:da:58:4b:7b:f5:fd: 9a:96:6f:cb:9d:2f:09:dd:b5:67:90:11:5b:fc:f3:2c:d6:13: 20:43:aa:26:09:89:55:8a:41:69:b6:61:e5:64:7d:90:7c:0a: 78:c7:28:fb:9a:2b:ca:c6:b9:0b:5a:35:fe:e0:cf:ae:e4:57: bd:5c:7c:4f:0e:af:43:61:63:1b:cc:59:03:02:dc:52:58:73: 9d:b6:00:89:28:f4:f6:0e:ac:d7:0f:b5:27:2a:34:77:f4:ae: 21:8c:c2:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdRId+9GPO1su8zo8awoy3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNjA4MjAwMTAzWhcNMjUwNjA5MjAwMTAzWjAzMTEwLwYDVQQD Eyg0ZTFmYzg2NjgwYjlhOGVjZTJlYTUzYjJmNzUwNWUxMjQxYzE1ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6CA6CYm6ARY/cfPK1zyoM3jWpa/ ghjhr1QZGll3Cn/PLiulR3WVcUmm0ilAPsU2OM3kwAf8hHptJ8ctF2BoI50ARl9m 3bacMC2+PSyjc11kzgZp5xGhXbJ3MB/ksCSB+PFCt+anr7L5bZsjgUw1jt70Dq1Y BYsqkZY8mNHr7INIF5DSjHQXmmLrFuVnwkz26WqObYeZF2Ph1TWby3y7A9er1Q/z Ylkl9pEqX0Lm7rPH4aEZF9eXGQB7PSt9sonxhWtC5mPD+DkNf9aSUr7EApeO6vaw 1lgYiEaboJqY/x867vMneR5fp1fok656MAuVtQqJf1wvfSetcn3y+Lb0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4fyGaAuajs4upTsvdQXhJBwV26MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALVIxdyR gsJ6F6d11Y0LvY1doQKrsEMvPBP2utwXrYtm/XMo35ObZ1XqFcTcaqa6J2dFsg9C jD7UqsfZXNeYRjEDImthZSnIBUJ4ifhWy4ififBIuww/CO6zvID7ZAja3MuZLJJH R4jlB/GaWUVAxJgpPTgFhLVm7QWV+l/TevFLdMUJMooMaS5m5hR92PUPRiz773SU wSPgqJwj2lhLe/X9mpZvy50vCd21Z5ARW/zzLNYTIEOqJgmJVYpBabZh5WR9kHwK eMco+5orysa5C1o1/uDPruRXvVx8Tw6vQ2FjG8xZAwLcUlhznbYAiSj09g6s1w+1 Jyo0d/SuIYzCew== -----END CERTIFICATE-----Generated at Sun Jun 8 23:19:56 2025 by rpki-client