$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: c0dvGmQPweNjL7+raBsACZYixsBxDAyVnnIopCo8So4= Subject key identifier: E1:1C:4A:DD:45:1B:FE:F2:E3:17:0D:84:E7:76:83:F8:2D:72:BE:43 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019A017E9CCECE40DE3B953BB914B851FDE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 16F3 Signing time: Mon 20 Oct 2025 12:01:06 +0000 Manifest this update: Mon 20 Oct 2025 12:01:06 +0000 Manifest next update: Tue 21 Oct 2025 12:01:06 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: UyMnXCzERFHuMfG9nOWN2JfyXW8.roa (hash: EQ7hm2P0BQiEP7hNsHxFIlwQPko0e6zROHrzHeJDMiU=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: aUK187YYB9xlf5T7mW9oqKxLXibti8ez4e806/yM+Ac=) 8: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 9: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 10: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (hash: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:7e:9c:ce:ce:40:de:3b:95:3b:b9:14:b8:51:fd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Oct 20 12:01:06 2025 GMT Not After : Oct 21 12:01:06 2025 GMT Subject: CN=e11c4add451bfef2e3170d84e77683f82d72be43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:63:84:f9:9f:ca:9d:2c:8e:81:bd:3a:26: d8:1b:29:ee:2c:8a:39:6b:f7:82:f5:88:c4:10:09: 9c:76:c0:ed:ce:d9:8f:c4:0a:84:e4:1c:68:ff:27: 72:3b:1a:38:9c:47:f0:ea:a0:7d:65:6f:f1:52:a0: 70:39:38:f0:70:dc:02:8a:9b:b3:7f:36:84:2b:e9: 3a:04:39:e7:ae:28:35:26:5b:d8:eb:db:cf:a0:d7: 92:9b:d7:28:11:7e:e9:f2:05:29:e7:b0:30:f8:9e: 4d:a4:95:bf:0e:fa:26:6e:e1:13:fd:52:8a:08:36: 14:fe:81:42:10:4f:4f:3d:a5:3c:dc:74:53:01:7a: d4:7b:c3:e1:42:1d:fd:d3:64:9e:13:e1:96:db:90: 2d:ae:75:eb:18:eb:36:19:3c:46:4b:e6:e7:c1:e4: 51:3c:98:dc:7b:71:73:17:9c:08:fa:ff:ca:db:e4: 0e:91:8b:dd:cb:18:e6:7b:29:cc:0b:c8:77:80:8b: a7:87:5a:52:7e:bc:73:24:ba:7a:21:43:94:7a:69: 52:c2:0a:fc:9b:f8:82:d6:fa:b4:9f:99:3f:d4:cd: 08:05:1b:08:2b:07:e4:3d:ef:a8:5c:17:9c:c7:cc: 42:ac:c0:6a:5a:f4:8b:4d:c4:bd:bf:d5:34:56:7b: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:4A:DD:45:1B:FE:F2:E3:17:0D:84:E7:76:83:F8:2D:72:BE:43 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3f:9e:7f:3e:2a:aa:9b:7c:8c:99:dd:5b:9f:14:4a:89:f0: 28:b3:a8:9b:47:4d:76:00:6d:7c:44:79:c1:42:83:df:16:12: 24:2c:3b:69:fa:46:4d:cc:cf:74:31:b3:60:32:5d:7f:33:1c: 2e:0f:49:d6:c6:32:ae:ff:da:16:77:2e:99:9d:f9:76:8e:ba: 44:96:5d:37:e4:48:48:e3:d9:62:c9:b4:f4:e3:ef:47:3b:05: 2a:da:88:ae:fa:78:33:27:14:e3:e9:f6:98:32:20:89:7e:9f: a5:05:be:71:6c:4d:ba:9b:22:e1:07:c4:85:96:4c:f2:c4:8a: 43:1a:3c:8c:83:99:b8:72:e8:df:db:86:89:86:b3:40:4c:5f: 1c:ed:33:e1:6e:6b:f0:c9:44:98:05:83:e2:90:98:75:5f:a8: b2:f0:bd:f9:9e:c4:63:c9:2b:f5:ee:22:a8:1f:ec:cc:28:96: 83:cc:8c:12:5d:10:01:a2:09:79:14:c5:2d:bf:2a:35:1a:93: 51:6c:f7:05:8e:69:c9:5b:28:4c:0c:88:41:fc:0f:df:8a:09: 80:7d:9d:b3:38:6b:f7:6c:ba:9c:35:04:ec:5e:d4:88:3b:3c: 43:ef:81:0c:c8:71:84:5b:9a:cc:b6:f5:e1:b8:7c:87:51:80: 44:36:3f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoBfpzOzkDeO5U7uRS4Uf3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUxMDIwMTIwMTA2WhcNMjUxMDIxMTIwMTA2WjAzMTEwLwYDVQQD EyhlMTFjNGFkZDQ1MWJmZWYyZTMxNzBkODRlNzc2ODNmODJkNzJiZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kpjhPmfyp0sjoG9OibYGynuLIo5 a/eC9YjEEAmcdsDtztmPxAqE5Bxo/ydyOxo4nEfw6qB9ZW/xUqBwOTjwcNwCipuz fzaEK+k6BDnnrig1JlvY69vPoNeSm9coEX7p8gUp57Aw+J5NpJW/DvombuET/VKK CDYU/oFCEE9PPaU83HRTAXrUe8PhQh3902SeE+GW25AtrnXrGOs2GTxGS+bnweRR PJjce3FzF5wI+v/K2+QOkYvdyxjmeynMC8h3gIunh1pSfrxzJLp6IUOUemlSwgr8 m/iC1vq0n5k/1M0IBRsIKwfkPe+oXBecx8xCrMBqWvSLTcS9v9U0Vntw8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEcSt1FG/7y4xcNhOd2g/gtcr5DMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARj+efz4q qpt8jJndW58USonwKLOom0dNdgBtfER5wUKD3xYSJCw7afpGTczPdDGzYDJdfzMc Lg9J1sYyrv/aFncumZ35do66RJZdN+RISOPZYsm09OPvRzsFKtqIrvp4MycU4+n2 mDIgiX6fpQW+cWxNupsi4QfEhZZM8sSKQxo8jIOZuHLo39uGiYazQExfHO0z4W5r 8MlEmAWD4pCYdV+osvC9+Z7EY8kr9e4iqB/szCiWg8yMEl0QAaIJeRTFLb8qNRqT UWz3BY5pyVsoTAyIQfwP34oJgH2dszhr92y6nDUE7F7UiDs8Q++BDMhxhFuazLb1 4bh8h1GARDY/Pg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:11 2025 by rpki-client