$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: 9kjMdXDEbzMnhh3Be0OGubR3lYGZbsOUfNxsR18qu3k= Subject key identifier: FF:0E:E7:46:CE:E6:8E:E3:F9:3E:BE:53:21:5A:E0:CA:6C:0E:2C:5F Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 0198D5BBF1E9D345B1FFEE974963114F5EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 07:02:00 +0000 Manifest this update: Sat 23 Aug 2025 07:02:00 +0000 Manifest next update: Sun 24 Aug 2025 07:02:00 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: mEJgn4Y7+hYt2CuB8++B29fQh5tQz8xRyF9h95MM2wE=) 8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=) 9: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 10: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:f1:e9:d3:45:b1:ff:ee:97:49:63:11:4f:5e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Aug 23 07:02:00 2025 GMT Not After : Aug 24 07:02:00 2025 GMT Subject: CN=ff0ee746cee68ee3f93ebe53215ae0ca6c0e2c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:58:b7:80:15:5f:b7:b5:28:9c:a1:d3:15: 38:b3:d1:64:3f:46:5f:71:5c:7c:66:b9:cd:a7:da: e2:0d:0b:41:30:b2:73:4b:03:5f:02:3c:16:68:09: c1:21:f9:13:29:44:8c:99:6c:9b:c0:ae:67:fd:94: 76:29:d7:c0:3b:e6:21:b2:c4:00:2c:94:fa:86:53: f3:8e:be:69:7d:15:dc:ba:24:85:54:f8:51:d4:8f: 4e:d1:c5:4f:c8:88:53:2a:c8:5a:4e:e6:df:d6:9a: b1:dd:a8:83:2e:a3:93:e7:1e:39:be:6e:11:d6:65: 1f:00:71:e1:3b:d0:1b:bc:95:ef:44:c1:35:56:fd: 24:6b:77:2f:f4:26:8e:57:b0:8f:30:b9:8b:93:c4: c6:88:cb:c6:3b:65:07:e9:3a:c5:83:cd:a7:d0:0f: 16:fe:15:39:99:23:f6:24:c8:fc:c5:8f:ed:58:23: 6d:9c:37:f6:3b:25:44:a8:21:49:61:b4:c1:bc:67: 3d:f3:86:82:0c:21:a1:a6:9a:55:97:79:06:1e:c0: a1:96:da:1e:32:22:5f:14:a7:69:0c:3b:73:7c:a7: 84:f3:4d:b4:c3:b2:99:f6:b4:23:12:a9:4b:02:9e: de:97:c3:5c:e8:f6:44:48:b0:06:f1:23:e3:36:22: 3c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0E:E7:46:CE:E6:8E:E3:F9:3E:BE:53:21:5A:E0:CA:6C:0E:2C:5F X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a2:54:bc:71:a5:db:88:b3:67:4d:01:42:24:0d:53:03:fd: 6d:07:f1:d2:34:20:0d:68:d6:59:ad:2e:61:40:4d:fc:5b:d5: 32:86:cf:bb:87:26:31:a1:a0:24:b5:9b:b7:82:51:f4:0c:50: a9:49:af:ea:e2:f5:70:b7:1e:8d:0f:a5:b5:0c:c1:93:96:cc: 42:2d:43:b9:93:8a:0a:84:e8:cf:5e:e8:97:7d:1c:ac:00:68: 31:fe:b0:e2:88:99:eb:74:40:db:a3:5a:c5:5b:a5:3d:96:05: c2:f3:23:f9:39:0f:7b:10:04:4e:82:5c:86:04:6d:d4:d8:d9: 6e:cc:2a:36:04:ce:7e:59:6c:4e:c5:e6:bb:01:8c:6e:d6:11: 9f:7b:37:89:44:6f:cd:c6:07:4a:98:11:bb:14:b4:a3:86:3c: 58:e1:82:8b:2b:a2:39:10:0b:88:32:fa:6a:a8:50:ac:85:50: 10:78:01:c2:b6:d5:ef:ba:b2:aa:c2:11:29:a9:da:1d:b6:c9: 7c:b5:b6:29:93:11:28:b2:6a:c3:af:cc:0d:5d:18:19:d0:03: 43:32:9c:c1:de:34:1b:cb:76:a9:e6:00:03:29:db:38:24:4d: a7:c7:c0:d6:e4:fc:a0:63:41:a4:63:6a:03:d4:be:bf:ed:12: be:0a:74:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu/Hp00Wx/+6XSWMRT17kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD EyhmZjBlZTc0NmNlZTY4ZWUzZjkzZWJlNTMyMTVhZTBjYTZjMGUyYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnxYt4AVX7e1KJyh0xU4s9FkP0Zf cVx8ZrnNp9riDQtBMLJzSwNfAjwWaAnBIfkTKUSMmWybwK5n/ZR2KdfAO+YhssQA LJT6hlPzjr5pfRXcuiSFVPhR1I9O0cVPyIhTKshaTubf1pqx3aiDLqOT5x45vm4R 1mUfAHHhO9AbvJXvRME1Vv0ka3cv9CaOV7CPMLmLk8TGiMvGO2UH6TrFg82n0A8W /hU5mSP2JMj8xY/tWCNtnDf2OyVEqCFJYbTBvGc984aCDCGhpppVl3kGHsChltoe MiJfFKdpDDtzfKeE8020w7KZ9rQjEqlLAp7el8Nc6PZESLAG8SPjNiI8hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8O50bO5o7j+T6+UyFa4MpsDixfMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaJUvHGl 24izZ00BQiQNUwP9bQfx0jQgDWjWWa0uYUBN/FvVMobPu4cmMaGgJLWbt4JR9AxQ qUmv6uL1cLcejQ+ltQzBk5bMQi1DuZOKCoToz17ol30crABoMf6w4oiZ63RA26Na xVulPZYFwvMj+TkPexAEToJchgRt1NjZbswqNgTOfllsTsXmuwGMbtYRn3s3iURv zcYHSpgRuxS0o4Y8WOGCiyuiORALiDL6aqhQrIVQEHgBwrbV77qyqsIRKanaHbbJ fLW2KZMRKLJqw6/MDV0YGdADQzKcwd40G8t2qeYAAynbOCRNp8fA1uT8oGNBpGNq A9S+v+0Svgp0yQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:40:35 2025 by rpki-client