$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: e6itI4K8SWq8BfRrSRG/Kinf+J9NLGSAEcsOOw0V8zw= Subject key identifier: 63:4F:57:60:94:F4:3C:95:AF:50:5A:96:BB:7C:F9:EA:3E:EB:F6:9E Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 0199FF90382EF306DB707E203095E56867E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 16F2 Signing time: Mon 20 Oct 2025 03:01:05 +0000 Manifest this update: Mon 20 Oct 2025 03:01:05 +0000 Manifest next update: Tue 21 Oct 2025 03:01:05 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: UyMnXCzERFHuMfG9nOWN2JfyXW8.roa (hash: EQ7hm2P0BQiEP7hNsHxFIlwQPko0e6zROHrzHeJDMiU=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: +KgxbABag5z/UU6XdA0sARxley8j6w6SCsVw4lEhybs=) 8: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 9: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 10: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (hash: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:90:38:2e:f3:06:db:70:7e:20:30:95:e5:68:67:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Oct 20 03:01:05 2025 GMT Not After : Oct 21 03:01:05 2025 GMT Subject: CN=634f576094f43c95af505a96bb7cf9ea3eebf69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:6d:10:b3:fe:1b:d7:d5:7c:70:73:c7:ae: df:14:35:3e:e4:1f:53:15:38:06:43:77:e7:ee:ec: 81:e6:6f:ac:e0:0b:51:8f:00:15:21:34:e9:9c:2e: e3:87:0f:c8:a8:38:0e:02:f2:1c:78:d0:6e:95:d4: 26:d6:5a:c5:42:6f:b9:6f:be:de:ea:5c:5c:7a:37: 90:8c:ab:48:1f:bf:38:1f:32:59:09:55:f6:7a:4d: 3d:95:dc:cc:99:dc:ca:1f:98:68:8d:4d:10:60:07: 9a:c2:6d:2b:fe:6d:cf:3c:e4:60:a1:6c:85:ff:b6: 95:36:3e:eb:5b:92:ee:f0:64:a8:3e:f7:e3:0b:47: a5:48:45:90:f4:e6:22:53:2a:b5:14:23:22:db:f3: d4:13:ce:e4:78:89:ac:cd:8f:0b:40:65:86:38:d3: 1a:e3:af:32:56:94:73:f2:50:c1:8d:0b:d2:32:be: d6:1e:9d:3f:2b:26:0f:50:b1:cb:fe:76:b6:83:b3: 41:30:2a:5b:e1:11:33:76:2b:22:bf:a3:d4:ba:38: 4e:28:6f:e4:b5:9c:ef:72:57:d8:46:bc:19:99:e2: a2:91:cf:2e:15:ae:b1:d4:5c:10:e0:11:8f:bf:83: a4:0c:24:c1:35:d5:b7:c7:29:cf:c5:ce:48:d7:be: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4F:57:60:94:F4:3C:95:AF:50:5A:96:BB:7C:F9:EA:3E:EB:F6:9E X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:dd:56:fb:47:bd:ed:ee:88:3e:1c:b5:d2:28:0f:0a:88:ae: 71:8e:3a:30:dc:25:36:6a:c2:da:ed:48:1d:fe:cc:68:4b:6d: 96:a4:62:b3:f7:9e:d9:ac:4c:47:14:db:fe:c0:35:57:ef:87: 64:92:ce:f3:a4:e7:18:d3:08:a0:50:ee:4e:71:16:79:c0:c6: 8e:b3:e5:49:b4:45:d6:ea:d7:2b:5c:55:f4:2d:92:f9:30:a6: 89:97:d2:9e:af:dd:9d:75:6c:e1:f7:a3:c9:46:b5:e0:6c:12: 51:0c:69:5e:31:18:bc:96:5b:94:cc:aa:16:b2:0d:34:c7:d2: 7a:c0:c1:35:92:5d:3c:f6:1c:6c:fb:d0:22:d8:4e:08:87:f8: f2:dc:74:53:b7:ba:9b:65:00:e0:1e:fc:17:04:e5:69:5a:9d: 5b:e0:18:fb:62:63:86:92:be:ca:87:b4:c9:d9:e7:11:00:f3: 2a:3f:bd:f7:24:ad:84:47:0f:dd:39:0d:48:2d:80:73:a1:0c: 60:92:27:d6:a0:c0:23:3b:ad:0d:ae:51:f7:f8:13:dd:58:69: 0d:57:70:a8:7f:bd:fb:44:cc:5d:5f:9d:1a:28:6f:de:74:08: 0e:41:b7:2f:27:5e:b5:ca:50:0a:ba:c7:e2:ad:56:2b:85:b3: 2e:23:92:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/kDgu8wbbcH4gMJXlaGfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUxMDIwMDMwMTA1WhcNMjUxMDIxMDMwMTA1WjAzMTEwLwYDVQQD Eyg2MzRmNTc2MDk0ZjQzYzk1YWY1MDVhOTZiYjdjZjllYTNlZWJmNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5xtELP+G9fVfHBzx67fFDU+5B9T FTgGQ3fn7uyB5m+s4AtRjwAVITTpnC7jhw/IqDgOAvIceNBuldQm1lrFQm+5b77e 6lxcejeQjKtIH784HzJZCVX2ek09ldzMmdzKH5hojU0QYAeawm0r/m3PPORgoWyF /7aVNj7rW5Lu8GSoPvfjC0elSEWQ9OYiUyq1FCMi2/PUE87keImszY8LQGWGONMa 468yVpRz8lDBjQvSMr7WHp0/KyYPULHL/na2g7NBMCpb4REzdisiv6PUujhOKG/k tZzvclfYRrwZmeKikc8uFa6x1FwQ4BGPv4OkDCTBNdW3xynPxc5I174v0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNPV2CU9DyVr1Balrt8+eo+6/aeMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANN1W+0e9 7e6IPhy10igPCoiucY46MNwlNmrC2u1IHf7MaEttlqRis/ee2axMRxTb/sA1V++H ZJLO86TnGNMIoFDuTnEWecDGjrPlSbRF1urXK1xV9C2S+TCmiZfSnq/dnXVs4fej yUa14GwSUQxpXjEYvJZblMyqFrINNMfSesDBNZJdPPYcbPvQIthOCIf48tx0U7e6 m2UA4B78FwTlaVqdW+AY+2JjhpK+yoe0ydnnEQDzKj+99ySthEcP3TkNSC2Ac6EM YJIn1qDAIzutDa5R9/gT3VhpDVdwqH+9+0TMXV+dGihv3nQIDkG3LydetcpQCrrH 4q1WK4WzLiOSCA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:24 2025 by rpki-client