$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: Dh6DL97du7GrMNZo01ajmdbx0OY6o354+bcKARA0d2U= Subject key identifier: F7:A2:D3:BB:96:6D:FE:C4:21:6D:EF:94:6C:AA:B1:6B:BF:C2:C8:A3 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 0198D404BABD8BECC0FC19B021930F47F0F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 0235 Signing time: Fri 22 Aug 2025 23:02:16 +0000 Manifest this update: Fri 22 Aug 2025 23:02:16 +0000 Manifest next update: Sat 23 Aug 2025 23:02:16 +0000 Files and hashes: 1: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=) 2: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=) 3: 8KCDPH2JrV05Zx7K2dBzU8WT0Hc.roa (hash: PmEeSgYpSMCgiJRPeD668IqZ2t3da6aT6doTbOtD5kI=) 4: BP6xc-GRow7em9LhzOxLgjKVYus.roa (hash: Hcth0RRyL3wBd/0xMlJH2ABMLkNBsFaEBwo7Oa2dz60=) 5: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=) 6: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=) 7: IBOCMLtB9SlMS-tohbmgCBrthAM.roa (hash: +UtnxSEyg9bxUTqT8YASdLBvopMgQOQk8XviZQHhIXQ=) 8: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=) 9: OTb3RJ8QGwAa0qmbJRJdand5oek.roa (hash: 35s3aW51ENlACLiU5525DOVYomE/7TQws0tcqlRlsWs=) 10: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=) 11: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: nBKHLFmFzSaX2SKr2/364Y1KL4CLHkg1L4Z2T9wVytc=) 12: ZuDOaLlmvBS_T6ACbcDR9tJINLg.roa (hash: D+CShXZKLL9oHIWJLvakbCmqAweC612+uWibYooQqPQ=) 13: _abBv2Z4ueQE7wSnfYxgydB_BM0.roa (hash: 3IOCdjYObJ5KJJCmqqgmbhfx51pvGE0eK742ZYfwGCI=) 14: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=) 15: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=) 16: hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa (hash: d5aE0237PObi3lQ9lHWVJ8Zp5KEO+pn/hpTA26Y4sSI=) 17: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=) 18: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=) 19: ofbszTn0i-YSIBGbdtRQO-HAngw.roa (hash: +Yij66+the4UDsOblrHzuVkVOxLhBPgs2jttAsdE6SE=) 20: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=) 21: qyeS5XOeD7KTa5gTfjaFtslzJpg.roa (hash: 8Bgb0MgzG8J4NKQsOGh60QGzdke+7qlv/3ICJzuKKzY=) 22: yK9I_Dq0dnDtl5O0ucRUFXoP4aE.roa (hash: PGylBrCxpXUuJKJIZQYtMcn+wp1/7qgRRy5jjVM0Q3I=) 23: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (hash: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:ba:bd:8b:ec:c0:fc:19:b0:21:93:0f:47:f0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Aug 22 23:02:16 2025 GMT Not After : Aug 23 23:02:16 2025 GMT Subject: CN=f7a2d3bb966dfec4216def946caab16bbfc2c8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:38:f6:4d:18:84:5d:c5:d9:86:a3:66:84: f8:ac:5b:e5:53:a7:50:5c:a4:88:fc:8c:fd:88:37: ba:8e:ef:f5:9b:2b:41:45:30:29:ad:0b:01:b3:91: 1e:86:9f:39:48:27:95:2c:be:76:55:db:0a:d3:b3: 5f:a3:56:29:ae:88:a6:79:d8:13:9c:4b:4c:6a:72: 0c:7f:49:bd:43:cf:41:35:62:3d:b3:f6:c9:60:9e: e2:5c:50:10:0f:bd:05:75:5d:47:5a:53:21:c0:26: 53:5c:c0:01:76:26:55:ba:ca:c2:1c:f6:84:ab:04: ff:85:4d:e4:31:b1:6a:f4:b8:19:18:96:81:ad:67: 38:f8:12:41:8c:fe:a2:28:e6:e0:c5:c0:44:2f:7e: 62:d8:5b:57:80:f4:e1:bf:d2:7d:9e:8c:4a:00:b6: 3f:b7:83:70:8b:26:0f:61:ef:62:97:db:d8:78:cc: 12:9b:f0:a6:cd:8f:c6:82:ea:41:cb:54:20:48:90: f8:cf:c2:d9:63:f8:8e:2c:66:27:c0:e7:85:79:66: 2b:79:34:a3:3d:56:b5:57:48:7d:76:37:60:12:59: 90:fd:37:6b:25:60:aa:87:51:a3:a1:5b:f2:79:de: 81:ca:2e:1a:b5:63:c0:f5:40:68:92:93:69:f0:e4: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A2:D3:BB:96:6D:FE:C4:21:6D:EF:94:6C:AA:B1:6B:BF:C2:C8:A3 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:6d:11:b9:20:2b:03:24:d2:33:54:11:79:5d:d5:58:d5: 5d:46:57:b2:9d:2e:9c:a2:d6:47:ff:fd:9c:55:ee:13:c6:5a: 93:3c:a0:56:6e:0c:bc:8b:65:33:dc:3a:30:80:96:50:9b:18: d1:6d:64:71:b4:d5:6d:8e:fa:03:87:1e:cf:37:66:8e:21:9d: 38:6e:92:74:c8:88:c3:5f:67:59:ab:a3:6b:4d:11:8d:54:4b: a5:14:64:d3:c2:47:1f:e8:62:91:0b:5d:ed:be:a7:23:87:db: f0:61:4e:f3:5b:3e:e8:1c:a7:5c:b6:a9:5a:c0:22:d0:36:22: c7:c5:fd:40:0b:c7:92:87:16:74:4f:3e:3f:c6:4b:15:ef:ca: 10:13:95:7e:24:c9:2f:5b:ac:66:00:f7:2d:5e:9c:9e:7c:06: 8c:c3:5b:03:d3:49:c0:da:47:35:b3:3c:61:0d:32:63:6e:68: 68:c5:82:5e:da:ff:e3:58:6a:57:fa:06:e9:77:88:54:1d:d5: 67:ad:21:58:fa:04:4f:47:30:05:7a:d4:fd:d0:c0:9a:8e:9b: ed:e0:e7:9d:8b:a0:31:bc:f4:11:7e:d4:29:17:32:d4:f9:c8: 7b:26:5d:82:f4:3c:5d:47:a7:52:5d:30:dc:b0:a2:a2:92:0e: c5:ff:70:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBLq9i+zA/BmwIZMPR/D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUwODIyMjMwMjE2WhcNMjUwODIzMjMwMjE2WjAzMTEwLwYDVQQD EyhmN2EyZDNiYjk2NmRmZWM0MjE2ZGVmOTQ2Y2FhYjE2YmJmYzJjOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVk49k0YhF3F2YajZoT4rFvlU6dQ XKSI/Iz9iDe6ju/1mytBRTAprQsBs5Eehp85SCeVLL52VdsK07Nfo1YproimedgT nEtManIMf0m9Q89BNWI9s/bJYJ7iXFAQD70FdV1HWlMhwCZTXMABdiZVusrCHPaE qwT/hU3kMbFq9LgZGJaBrWc4+BJBjP6iKObgxcBEL35i2FtXgPThv9J9noxKALY/ t4NwiyYPYe9il9vYeMwSm/CmzY/GgupBy1QgSJD4z8LZY/iOLGYnwOeFeWYreTSj PVa1V0h9djdgElmQ/TdrJWCqh1GjoVvyed6Byi4atWPA9UBokpNp8OQpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPei07uWbf7EIW3vlGyqsWu/wsijMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsJtEbkg KwMk0jNUEXld1VjVXUZXsp0unKLWR//9nFXuE8ZakzygVm4MvItlM9w6MICWUJsY 0W1kcbTVbY76A4cezzdmjiGdOG6SdMiIw19nWauja00RjVRLpRRk08JHH+hikQtd 7b6nI4fb8GFO81s+6BynXLapWsAi0DYix8X9QAvHkocWdE8+P8ZLFe/KEBOVfiTJ L1usZgD3LV6cnnwGjMNbA9NJwNpHNbM8YQ0yY25oaMWCXtr/41hqV/oG6XeIVB3V Z60hWPoET0cwBXrU/dDAmo6b7eDnnYugMbz0EX7UKRcy1PnIeyZdgvQ8XUenUl0w 3LCiopIOxf9wrQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:40:00 2025 by rpki-client