$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: wuQ0gCOCvpUnYeLVi0KQiadxIAe/pJP3mtCzfaiYFUg= Subject key identifier: A4:DF:66:47:83:27:3B:5A:95:87:7A:87:8B:A2:7C:61:FF:8B:38:D5 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019A1D2C1581B0F8A0C4DC5F06321084B9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 133D Signing time: Sat 25 Oct 2025 21:00:19 +0000 Manifest this update: Sat 25 Oct 2025 21:00:19 +0000 Manifest next update: Sun 26 Oct 2025 21:00:19 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: DirpbPXV9PEsSkJGkxNuGe42xHI.roa (hash: VBDmf9F3mz15N8FEL0FBBmeC/+Di4FvRutCT5g1tWEg=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: ppdNUq6k/iTqigVvjP2B//gVAQrbeSgx6bttOCgv5y4=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:2c:15:81:b0:f8:a0:c4:dc:5f:06:32:10:84:b9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Oct 25 21:00:19 2025 GMT Not After : Oct 26 21:00:19 2025 GMT Subject: CN=a4df664783273b5a95877a878ba27c61ff8b38d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:e0:43:9a:12:77:c4:9b:b5:5f:e3:07:ad: 46:84:f8:5e:d4:2f:67:a7:3e:bb:66:d4:6f:c4:7e: 14:2c:67:b8:2d:24:9c:2f:f0:7b:a2:ee:6c:97:3b: f1:ca:dc:40:a1:f3:a4:cf:99:8a:de:90:63:f1:0d: 5c:08:20:e4:3e:57:0b:e3:54:72:17:34:25:e5:6a: 6e:cb:bb:c0:2e:10:e6:0d:5b:32:14:ed:27:b5:16: 0b:0d:c4:a1:59:19:5c:69:1b:b0:b3:8e:60:18:0e: fe:dc:94:40:5f:0f:e7:e3:45:d8:d8:7a:63:b2:a9: 9d:12:99:b7:fb:69:e8:a4:72:3a:24:97:d6:1a:43: 37:84:f1:16:a4:35:82:16:04:0c:28:f9:f9:67:c9: e4:79:bc:b1:08:bf:c4:1e:8e:fd:14:f9:57:c3:91: de:80:f7:b5:f3:39:dd:d5:5c:99:78:53:ba:f3:3d: e5:75:a8:44:7d:ed:91:5c:83:17:df:0f:3f:f6:62: 18:81:66:a7:2a:bc:df:a9:fa:cd:40:a6:3a:12:42: 65:4a:dd:48:dd:81:ab:7d:03:30:27:e9:9a:60:4d: 99:23:23:2b:c1:97:52:d5:22:c5:da:79:5c:c8:a0: 46:58:d0:0e:97:e1:df:bc:f0:7a:75:00:01:05:2b: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:66:47:83:27:3B:5A:95:87:7A:87:8B:A2:7C:61:FF:8B:38:D5 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:90:55:99:46:f8:8f:e2:06:76:31:5b:d6:21:54:e6:ad:ce: c5:05:e1:34:ad:e4:10:c0:d1:12:48:b6:af:bb:72:1c:68:e7: ed:d0:e8:dc:db:d1:e5:76:c1:16:43:87:31:d2:6a:ec:25:ed: be:80:e1:62:85:c3:c8:bc:1e:8c:66:ec:cb:3e:59:8a:e4:19: 90:03:2d:79:2f:b1:3b:f3:e5:9f:44:04:1d:5c:0d:63:70:2e: 65:ba:33:bd:92:17:c6:d2:7d:14:43:41:e7:2c:17:04:cb:f3: ed:dd:6c:dd:d4:3e:bc:dd:62:36:2b:40:9e:24:60:c3:56:0c: 4c:3c:df:a3:b1:a9:ee:84:7e:08:99:f2:f5:a8:15:70:73:fd: f1:60:28:71:c8:5b:b3:76:89:e2:b5:31:2b:00:52:3d:b3:8c: bd:d5:9d:35:b5:80:b7:9c:43:11:cd:2a:09:7e:00:e5:f6:00: b7:de:af:79:15:b4:05:3a:35:42:7f:3f:30:65:d8:62:7f:0b: ad:61:21:46:32:23:5f:12:0c:34:99:42:1c:50:65:e3:ce:ae: 04:6f:f7:e5:e2:24:01:4e:ee:fb:49:70:4f:e1:e4:38:a0:b9: 39:81:93:8a:94:1f:4c:df:b5:ca:e7:52:b8:95:00:1f:66:c3: 05:b4:89:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodLBWBsPigxNxfBjIQhLnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUxMDI1MjEwMDE5WhcNMjUxMDI2MjEwMDE5WjAzMTEwLwYDVQQD EyhhNGRmNjY0NzgzMjczYjVhOTU4NzdhODc4YmEyN2M2MWZmOGIzOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodXgQ5oSd8SbtV/jB61GhPhe1C9n pz67ZtRvxH4ULGe4LSScL/B7ou5slzvxytxAofOkz5mK3pBj8Q1cCCDkPlcL41Ry FzQl5Wpuy7vALhDmDVsyFO0ntRYLDcShWRlcaRuws45gGA7+3JRAXw/n40XY2Hpj sqmdEpm3+2nopHI6JJfWGkM3hPEWpDWCFgQMKPn5Z8nkebyxCL/EHo79FPlXw5He gPe18znd1VyZeFO68z3ldahEfe2RXIMX3w8/9mIYgWanKrzfqfrNQKY6EkJlSt1I 3YGrfQMwJ+maYE2ZIyMrwZdS1SLF2nlcyKBGWNAOl+HfvPB6dQABBStinQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTfZkeDJztalYd6h4uifGH/izjVMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpBVmUb4 j+IGdjFb1iFU5q3OxQXhNK3kEMDREki2r7tyHGjn7dDo3NvR5XbBFkOHMdJq7CXt voDhYoXDyLwejGbsyz5ZiuQZkAMteS+xO/Pln0QEHVwNY3AuZbozvZIXxtJ9FENB 5ywXBMvz7d1s3dQ+vN1iNitAniRgw1YMTDzfo7Gp7oR+CJny9agVcHP98WAocchb s3aJ4rUxKwBSPbOMvdWdNbWAt5xDEc0qCX4A5fYAt96veRW0BTo1Qn8/MGXYYn8L rWEhRjIjXxIMNJlCHFBl486uBG/35eIkAU7u+0lwT+HkOKC5OYGTipQfTN+1yudS uJUAH2bDBbSJ6g== -----END CERTIFICATE-----Generated at Sun Oct 26 02:59:36 2025 by rpki-client