$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 2/hfvpIN45irxJABigRVQddcQ/XUD2DD3MmG+jsznT8= Subject key identifier: F5:F3:1E:7B:85:32:3C:3B:E6:3E:2F:24:09:11:5B:D1:19:95:61:D7 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 0199FC8FBD274CAD2BA3AAAB144E9C316BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 11BA Signing time: Sun 19 Oct 2025 13:01:42 +0000 Manifest this update: Sun 19 Oct 2025 13:01:42 +0000 Manifest next update: Mon 20 Oct 2025 13:01:42 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: Zp0i8BBRqh366UKeYJIW7rqT9K2oMYES0f20aSuz33A=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:bd:27:4c:ad:2b:a3:aa:ab:14:4e:9c:31:6b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Oct 19 13:01:42 2025 GMT Not After : Oct 20 13:01:42 2025 GMT Subject: CN=f5f31e7b85323c3be63e2f2409115bd1199561d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:16:0a:9f:f5:92:6f:ba:94:7a:fe:1b:53: be:10:7e:4b:36:eb:98:54:e4:e0:70:e1:20:59:60: aa:64:d4:79:73:ae:82:87:e6:1e:ed:72:47:e3:1e: 79:b0:af:80:09:98:c7:f1:97:94:90:9b:bf:cc:c2: f5:c1:10:8c:c5:6b:07:f8:fc:8b:1f:2e:e1:6b:f7: 7a:cc:21:e8:18:9c:03:fb:26:cf:cb:f6:e6:c9:c0: cc:30:c3:fa:54:70:b0:4d:3b:0b:ea:a6:1b:7e:25: 82:4e:0a:31:dd:a3:71:c0:62:c9:e1:03:e5:b5:ab: 18:32:4e:b6:f6:f9:7e:45:29:f3:a3:7b:eb:d4:dc: d8:ed:99:95:8a:d9:34:60:c6:d5:98:c8:e5:50:08: 01:ed:4a:74:60:d0:b9:85:47:73:f4:17:d2:82:80: 04:19:2a:28:90:ef:e4:de:4d:89:ed:3e:61:bc:c3: 99:34:c0:30:62:72:09:e9:6d:58:d4:b3:c2:e8:54: 4c:51:49:92:85:92:8a:73:8c:ba:48:11:2d:48:d2: e8:31:a1:94:4a:99:78:99:ef:db:61:d6:2e:b3:6e: 53:e5:5c:d3:97:71:f4:a7:af:22:6e:ad:7d:0e:4c: 62:d3:da:c9:3f:42:9f:6f:ab:8e:b5:2f:92:67:d1: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F3:1E:7B:85:32:3C:3B:E6:3E:2F:24:09:11:5B:D1:19:95:61:D7 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:21:b0:6f:7f:7f:42:ec:27:6e:14:57:04:8b:ef:4c:51:ec: 36:44:e2:97:88:be:aa:d8:e8:4f:e6:75:7a:1e:78:f8:c4:fa: 37:02:f5:17:36:d2:00:0e:fa:b9:9c:14:58:37:17:5f:f2:8b: ab:c5:d6:3e:d2:ae:d4:9f:73:d8:6d:60:40:77:af:10:cc:6b: f5:df:25:2f:21:6b:ce:6c:c4:57:e4:81:fb:a3:8f:28:b4:58: d3:46:ff:28:0d:b8:a6:71:6f:62:68:7a:84:26:12:50:26:b8: f0:de:b8:11:69:96:6d:4c:58:40:91:b7:c7:1c:b2:11:c4:65: da:e6:cf:40:fb:ee:7c:92:3f:a6:27:c8:b6:84:01:00:b9:e0: 80:d9:c0:82:da:00:da:b3:c2:18:fc:97:cf:ef:ac:01:be:ae: 07:fb:38:44:af:cb:3a:a3:ff:e5:07:94:59:4c:35:c3:17:6e: e6:e3:1f:f0:65:52:43:ae:fc:8b:88:66:66:62:e8:e1:09:b0: 14:91:6d:0d:f8:12:e7:ee:0c:04:0e:7b:87:f0:aa:bf:68:94: 13:24:c7:80:fa:2f:ce:b3:87:ca:51:40:3f:f7:17:7e:6a:0b: 27:5d:f8:e3:32:8e:83:ef:31:9b:0c:46:0f:f9:eb:fb:cb:9d: 47:d8:d5:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j70nTK0ro6qrFE6cMWvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUxMDE5MTMwMTQyWhcNMjUxMDIwMTMwMTQyWjAzMTEwLwYDVQQD EyhmNWYzMWU3Yjg1MzIzYzNiZTYzZTJmMjQwOTExNWJkMTE5OTU2MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBsWCp/1km+6lHr+G1O+EH5LNuuY VOTgcOEgWWCqZNR5c66Ch+Ye7XJH4x55sK+ACZjH8ZeUkJu/zML1wRCMxWsH+PyL Hy7ha/d6zCHoGJwD+ybPy/bmycDMMMP6VHCwTTsL6qYbfiWCTgox3aNxwGLJ4QPl tasYMk629vl+RSnzo3vr1NzY7ZmVitk0YMbVmMjlUAgB7Up0YNC5hUdz9BfSgoAE GSookO/k3k2J7T5hvMOZNMAwYnIJ6W1Y1LPC6FRMUUmShZKKc4y6SBEtSNLoMaGU Spl4me/bYdYus25T5VzTl3H0p68ibq19Dkxi09rJP0Kfb6uOtS+SZ9ESxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXzHnuFMjw75j4vJAkRW9EZlWHXMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISGwb39/ QuwnbhRXBIvvTFHsNkTil4i+qtjoT+Z1eh54+MT6NwL1FzbSAA76uZwUWDcXX/KL q8XWPtKu1J9z2G1gQHevEMxr9d8lLyFrzmzEV+SB+6OPKLRY00b/KA24pnFvYmh6 hCYSUCa48N64EWmWbUxYQJG3xxyyEcRl2ubPQPvufJI/pifItoQBALnggNnAgtoA 2rPCGPyXz++sAb6uB/s4RK/LOqP/5QeUWUw1wxdu5uMf8GVSQ678i4hmZmLo4Qmw FJFtDfgS5+4MBA57h/Cqv2iUEyTHgPovzrOHylFAP/cXfmoLJ1344zKOg+8xmwxG D/nr+8udR9jVaQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:08:22 2025 by rpki-client