$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: cYrepSo0zb5j+Bv7o43l0ERoCsN8PrUTyNPfEyc1GmI= Subject key identifier: A4:88:CE:39:48:3B:91:D0:0D:EF:45:FB:BC:91:D7:52:60:FD:C2:09 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 0197B9D8D9BDF5DEFB5E3DB07F5C8051E169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 15C4 Signing time: Sun 29 Jun 2025 04:01:25 +0000 Manifest this update: Sun 29 Jun 2025 04:01:25 +0000 Manifest next update: Mon 30 Jun 2025 04:01:25 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: ugl2MajpZA1/q18StBI+bHJdIv7TwHMdg39tDMwfcfY=) 8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=) 9: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 10: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:d8:d9:bd:f5:de:fb:5e:3d:b0:7f:5c:80:51:e1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jun 29 04:01:25 2025 GMT Not After : Jun 30 04:01:25 2025 GMT Subject: CN=a488ce39483b91d00def45fbbc91d75260fdc209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:45:4e:3e:30:e7:94:79:bf:ac:5a:20:f1: 51:24:4f:54:f5:9e:0e:e0:94:24:38:5d:1d:2e:58: 28:5c:c6:79:48:4c:a5:80:ea:39:bc:58:ff:8a:55: 39:df:e2:71:61:74:c4:7b:92:dd:44:68:6e:bd:ca: 17:41:f4:11:b1:76:1c:28:c8:01:35:4b:be:5f:45: 1a:26:f9:ae:84:2f:16:ef:06:e9:b9:3e:9f:75:a4: fb:e5:ae:d9:f9:ac:7e:14:fe:61:bd:71:13:56:3b: d3:7f:d8:3e:cf:ac:a8:a5:d1:7d:6c:bd:bc:c6:41: c8:67:5b:99:f5:70:b0:a1:d2:0c:0b:a4:c9:b3:06: 76:10:94:5a:3e:3b:e7:4f:8d:85:6f:fb:e6:33:14: 94:70:f9:32:af:bf:d4:bf:d2:84:96:61:3c:ad:60: 95:73:a6:f1:51:28:39:74:e0:4a:81:7e:a4:e8:1e: 6a:6f:a4:d6:f1:df:9b:1c:0a:bb:6f:7f:ce:8e:a2: 3f:5b:20:1f:a3:db:0d:3e:78:b5:af:a2:0c:db:74: bc:f9:ae:f1:37:26:fa:af:55:5a:d7:44:6f:3c:78: e7:13:22:74:66:93:eb:df:ab:31:88:a7:70:61:6d: 07:fb:b8:48:37:08:3e:33:a8:0e:58:49:c2:fd:a7: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:88:CE:39:48:3B:91:D0:0D:EF:45:FB:BC:91:D7:52:60:FD:C2:09 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5c:5e:7c:31:76:94:b6:46:b8:7b:9e:9d:41:86:e6:8b:13: 81:25:02:43:e8:36:04:8d:58:27:9e:48:50:c4:8b:67:d4:0f: 11:90:b5:aa:63:2c:58:60:ce:74:00:c6:8a:f5:a3:17:36:47: 36:28:54:d2:f7:b3:e0:7e:2a:15:cb:32:56:81:d0:ec:05:db: 79:e6:af:17:4d:cf:c8:1b:65:cb:0b:c3:57:00:19:52:1e:09: da:d2:bf:91:0e:7f:e4:b1:e4:44:52:1f:51:26:51:40:c7:aa: 7d:e4:07:ba:59:fe:21:71:c5:8d:34:70:63:d7:18:c9:7b:cb: ee:1e:d7:6f:4b:38:e2:a4:34:86:55:50:4a:e7:4b:4c:4e:42: 1a:09:ea:5f:fd:01:65:c1:85:c0:13:1b:86:97:fe:3e:10:34: 64:81:8a:2f:75:5d:ba:86:79:09:25:00:1a:a0:10:94:3a:15: 3c:c6:e4:f1:4e:90:7c:29:36:4f:68:d5:ff:d2:7d:d6:99:05: 33:57:ff:67:22:17:39:95:46:dc:13:4f:e0:71:12:ff:0e:38: 3f:b0:97:0b:15:00:c0:62:b3:aa:60:8d:19:00:ba:1c:c3:ef: f6:34:98:71:ce:e6:f1:78:f7:e5:76:a0:51:77:19:67:50:6f: 48:1a:7c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe52Nm99d77Xj2wf1yAUeFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwNjI5MDQwMTI1WhcNMjUwNjMwMDQwMTI1WjAzMTEwLwYDVQQD EyhhNDg4Y2UzOTQ4M2I5MWQwMGRlZjQ1ZmJiYzkxZDc1MjYwZmRjMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBFTj4w55R5v6xaIPFRJE9U9Z4O 4JQkOF0dLlgoXMZ5SEylgOo5vFj/ilU53+JxYXTEe5LdRGhuvcoXQfQRsXYcKMgB NUu+X0UaJvmuhC8W7wbpuT6fdaT75a7Z+ax+FP5hvXETVjvTf9g+z6yopdF9bL28 xkHIZ1uZ9XCwodIMC6TJswZ2EJRaPjvnT42Fb/vmMxSUcPkyr7/Uv9KElmE8rWCV c6bxUSg5dOBKgX6k6B5qb6TW8d+bHAq7b3/OjqI/WyAfo9sNPni1r6IM23S8+a7x Nyb6r1Va10RvPHjnEyJ0ZpPr36sxiKdwYW0H+7hINwg+M6gOWEnC/afqowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSIzjlIO5HQDe9F+7yR11Jg/cIJMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFxefDF2 lLZGuHuenUGG5osTgSUCQ+g2BI1YJ55IUMSLZ9QPEZC1qmMsWGDOdADGivWjFzZH NihU0vez4H4qFcsyVoHQ7AXbeeavF03PyBtlywvDVwAZUh4J2tK/kQ5/5LHkRFIf USZRQMeqfeQHuln+IXHFjTRwY9cYyXvL7h7Xb0s44qQ0hlVQSudLTE5CGgnqX/0B ZcGFwBMbhpf+PhA0ZIGKL3VduoZ5CSUAGqAQlDoVPMbk8U6QfCk2T2jV/9J91pkF M1f/ZyIXOZVG3BNP4HES/w44P7CXCxUAwGKzqmCNGQC6HMPv9jSYcc7m8Xj35Xag UXcZZ1BvSBp84g== -----END CERTIFICATE-----Generated at Sun Jun 29 06:22:05 2025 by rpki-client