$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: nE02KQEPhrI1ayhahkYyeaWatBG+IVz/xvbACMMXoqg= Subject key identifier: EA:8E:F4:FC:67:D2:0D:90:25:94:E1:84:DC:33:5C:11:70:5F:96:18 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019F9249071260A7AC787F1D32D9A276BDD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 19D5 Signing time: Fri 24 Jul 2026 04:01:27 +0000 Manifest this update: Fri 24 Jul 2026 04:01:27 +0000 Manifest next update: Sat 25 Jul 2026 04:01:27 +0000 Files and hashes: 1: 05JvlK8l5zGiZuKN0_KQ-Ov5CiY.roa (hash: ot1oRZWtexWP8FkLp7pJg/bXEU47s255RLNkcaHGXF8=) 2: 4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa (hash: nVIZnWls1sIIik8WAyGLvHsDtoBb4V67LyqEiuL3hhM=) 3: 5E3SENo7enmJV0f5QzVUO8ZLEBY.roa (hash: c2R0qq7Mhrj8ssta1I81r5ZynPZiiMEvO75gJxGz+s8=) 4: 5d-FBtLfeZqIezw12H0l7p2J7yQ.roa (hash: d84QOVN+1AP2/0GG7hx3uB1uInDZl8CHvh9J2TCGVTc=) 5: 9X0nqUKArhus_YUqfdP3WTiMnG8.roa (hash: c1biU22O73yr/MYC9AlC9fUEO9WNlunWbEG9QDYb8AA=) 6: A1WtZ_NCi3HRctp1iEUsUikRlRM.roa (hash: 2lGWGw+d+TArO/mPqTalF9zlkxryWG+SZsKODp2pgBY=) 7: PftedbvI9uIuGEN_e3yVk4LES7w.roa (hash: 9ALJe0lDwIScP2qwOJuyd3SZeutT5jJfaDAcFe7xqEQ=) 8: Q1gsiMhG7KeFlqjLEtCWXzCSx7w.roa (hash: IGSzzbDAIRV0gMo02Xu7ZT8JSjcCTONJ9LlOYiDEp/g=) 9: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: 6T8Q11inBmn+tXCeOp6PqwLePIkvTpifXyDAcIei39k=) 10: _90PdAdYFkH9HSAzXdpXa1HTPhg.roa (hash: r2HnEsU3YMp8gF0il12do2DrsODy0omS2NrJJQ+cHvg=) 11: fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa (hash: nwpw3EqTS3bDEUKnzI/z5QrY+YFUcA5dqpUchh6jOTc=) 12: pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa (hash: Tb4DafAqkHk2LhEolFtqXJ4NxI34mPUG6zMArDdgQBU=) 13: rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa (hash: JY8aR7gymzRVW+zZjreC+9drKDyPLMEiDLQuy04AC5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:49:07:12:60:a7:ac:78:7f:1d:32:d9:a2:76:bd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jul 24 04:01:27 2026 GMT Not After : Jul 25 04:01:27 2026 GMT Subject: CN=ea8ef4fc67d20d902594e184dc335c11705f9618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:84:54:4f:c0:e7:17:4b:8f:cb:67:2d:6f: d5:f9:df:c2:80:36:e0:45:f6:04:7c:28:a2:a8:ba: c1:0e:ef:2d:e0:f9:a1:f2:e3:2c:eb:3b:b6:49:83: 50:a6:d1:b7:2d:d8:73:49:2e:3a:04:84:15:2c:ca: da:59:dd:e9:2e:8d:da:00:cd:1f:9e:aa:f4:db:50: 08:c3:86:62:1e:a7:06:d5:53:04:54:86:20:12:b2: d0:c8:94:5d:4b:47:78:60:54:3f:ed:4d:c2:97:47: 00:5b:53:70:67:5e:e7:95:f2:e9:54:ab:b1:b6:1f: 30:8d:60:25:e1:39:03:0d:ed:11:32:72:12:73:cd: 75:df:fa:0e:9d:2e:fe:ab:0d:32:b3:85:1d:fb:ac: db:fc:2a:6f:5a:fa:a4:48:36:6a:37:2b:8d:d4:1c: 7a:bf:e2:f6:4c:0f:76:93:09:07:d7:72:55:e5:97: db:ac:63:7d:1a:24:36:2c:09:4d:6c:ca:e4:49:49: 6b:82:39:e1:63:ed:5e:af:50:9e:cc:5a:46:10:5b: 27:2d:d9:e9:6e:b0:a3:cd:54:89:29:88:15:43:7a: 6d:04:8f:12:29:c9:35:ad:d6:1e:7e:c3:a9:cb:c9: 91:27:0e:0a:66:2e:3f:af:d4:61:e3:95:18:41:f5: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8E:F4:FC:67:D2:0D:90:25:94:E1:84:DC:33:5C:11:70:5F:96:18 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a9:aa:c8:1b:23:51:93:32:aa:6a:b2:db:32:5f:bb:35:76: 81:86:e3:78:1f:be:7d:a5:56:b7:1f:0d:10:fb:84:8a:b4:41: 7d:98:ba:bc:db:84:87:b1:dc:44:b9:f5:e8:4c:0f:aa:f5:d9: 6b:01:0e:08:bb:c2:25:b3:29:7d:a3:1d:7b:c2:e2:5c:86:a0: c4:ab:77:eb:ec:7b:5f:2c:b6:79:c3:fc:50:81:82:8f:fd:49: 5f:d1:60:63:fd:9e:6d:8a:6d:56:bf:56:01:04:c6:b2:fc:71: f8:e6:63:38:03:b2:b2:8b:91:90:8f:56:82:e6:dd:53:39:2b: 33:4b:73:b2:7b:f2:1b:1f:c5:d9:c4:22:a2:08:4e:50:0b:40: 6c:b7:33:4e:7c:3c:e5:dc:5d:fa:ec:6b:b2:77:11:cb:af:aa: 91:0f:6e:9c:7f:de:a6:8a:18:f0:34:94:d0:e9:d3:91:17:cf: 93:47:3b:a7:e9:a3:54:bd:8f:db:38:a5:d8:65:6b:07:9c:97: e3:d1:5c:51:19:ea:c3:47:76:ca:1a:0b:b6:5d:be:37:78:b4: 5a:2f:cf:be:27:bb:24:6a:aa:77:de:3f:26:96:81:60:24:91: 6c:9c:05:fb:d3:80:dc:ba:f8:8a:ac:1e:ce:27:53:22:4a:bf: f3:cb:f4:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSQcSYKeseH8dMtmidr3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwNzI0MDQwMTI3WhcNMjYwNzI1MDQwMTI3WjAzMTEwLwYDVQQD EyhlYThlZjRmYzY3ZDIwZDkwMjU5NGUxODRkYzMzNWMxMTcwNWY5NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRqEVE/A5xdLj8tnLW/V+d/CgDbg RfYEfCiiqLrBDu8t4Pmh8uMs6zu2SYNQptG3LdhzSS46BIQVLMraWd3pLo3aAM0f nqr021AIw4ZiHqcG1VMEVIYgErLQyJRdS0d4YFQ/7U3Cl0cAW1NwZ17nlfLpVKux th8wjWAl4TkDDe0RMnISc8113/oOnS7+qw0ys4Ud+6zb/CpvWvqkSDZqNyuN1Bx6 v+L2TA92kwkH13JV5ZfbrGN9GiQ2LAlNbMrkSUlrgjnhY+1er1CezFpGEFsnLdnp brCjzVSJKYgVQ3ptBI8SKck1rdYefsOpy8mRJw4KZi4/r9Rh45UYQfVLewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqO9Pxn0g2QJZThhNwzXBFwX5YYMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqmqyBsj UZMyqmqy2zJfuzV2gYbjeB++faVWtx8NEPuEirRBfZi6vNuEh7HcRLn16EwPqvXZ awEOCLvCJbMpfaMde8LiXIagxKt36+x7Xyy2ecP8UIGCj/1JX9FgY/2ebYptVr9W AQTGsvxx+OZjOAOysouRkI9WgubdUzkrM0tzsnvyGx/F2cQioghOUAtAbLczTnw8 5dxd+uxrsncRy6+qkQ9unH/epooY8DSU0OnTkRfPk0c7p+mjVL2P2zil2GVrB5yX 49FcURnqw0d2yhoLtl2+N3i0Wi/Pvie7JGqqd94/JpaBYCSRbJwF+9OA3Lr4iqwe zidTIkq/88v0DQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:03 2026 by rpki-client