$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: 9wJOmiZ4L50JCNCLwArnihnDkH2j85FHBWwZSB+o3PA= Subject key identifier: 45:BF:83:52:75:72:BB:44:E0:C8:44:AB:90:63:CC:3E:7C:CF:3D:3C Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019E1FEC52DAE14337A674093EB7B12479B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0289 Signing time: Wed 13 May 2026 06:00:41 +0000 Manifest this update: Wed 13 May 2026 06:00:41 +0000 Manifest next update: Thu 14 May 2026 06:00:41 +0000 Files and hashes: 1: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=) 2: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=) 3: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 4: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 5: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 6: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=) 7: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=) 8: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=) 9: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: p8Wvl6fL0dnKRkBZcyt1NFZ9fMT+bEC1hUu5o96nUHo=) 10: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=) 11: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 12: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 13: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:ec:52:da:e1:43:37:a6:74:09:3e:b7:b1:24:79:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: May 13 06:00:41 2026 GMT Not After : May 14 06:00:41 2026 GMT Subject: CN=45bf83527572bb44e0c844ab9063cc3e7ccf3d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:30:c6:53:2d:1e:76:c7:41:ba:97:70:c0: bd:58:34:a5:2b:61:10:94:cd:7b:9b:48:2f:c8:8e: 6f:07:97:30:72:57:06:19:54:12:3b:cc:6a:3b:ab: 60:3e:d8:0c:de:52:9c:ce:a9:96:dd:f9:bd:8d:d5: 13:3c:7e:29:b9:39:7f:c9:fe:80:5e:a4:54:c2:87: 4f:37:07:94:f2:8c:9e:ad:07:c3:1f:4c:6e:e1:89: d8:6e:19:a4:9f:e8:06:83:17:7c:b9:ae:a2:1a:b2: 4c:86:97:b5:bd:76:83:fa:69:97:51:2b:31:82:6b: 7a:0d:ba:4f:f9:9b:43:12:c3:bf:37:10:e0:34:8d: b5:21:cc:0b:da:ec:2d:db:33:f6:a6:dd:2f:0c:22: 13:ad:a5:4d:6e:f1:42:a6:75:a1:e9:e1:5c:b5:e7: d2:08:af:93:82:10:bd:65:a7:47:83:e8:d4:da:eb: a5:df:2d:f5:bc:a1:89:79:e6:bd:c7:13:0f:5c:17: db:ef:46:f7:27:fd:74:7f:47:45:87:fa:d1:b2:16: eb:9f:b8:f1:9c:99:aa:7b:27:c0:df:a8:d7:f6:63: 95:a9:99:61:83:2f:9b:9b:d3:29:84:95:38:3d:da: 95:c4:cb:8a:39:60:6b:c6:c2:ab:48:8a:0b:a1:a2: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BF:83:52:75:72:BB:44:E0:C8:44:AB:90:63:CC:3E:7C:CF:3D:3C X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:19:eb:3f:60:92:d7:2f:20:02:41:e6:2b:44:74:f4:95:be: de:71:22:d3:f2:36:ce:2f:fa:78:a0:6b:e9:a2:35:aa:41:25: 9f:a1:5f:0e:2c:95:80:99:a6:25:ce:1f:83:b9:55:8a:5e:ca: 44:47:0d:4a:fe:82:0b:1d:3e:5d:a4:bc:3a:7b:0d:e9:e4:41: 2a:1a:c7:92:a9:8c:03:6e:b6:fd:1f:3b:b2:42:59:cb:36:40: 8f:c2:c5:30:20:62:bc:df:30:b5:22:ae:ec:fd:33:70:f6:8b: 61:17:d0:01:17:49:c5:04:be:38:3d:d8:14:a7:f3:8b:17:49: e3:38:a4:8d:ca:00:65:fc:a9:65:c9:1a:df:03:70:15:3d:36: 1d:3d:d3:03:96:bb:1b:0c:b7:65:ba:cb:09:a9:19:9f:35:6e: 64:2d:4a:87:ca:78:e4:af:fc:f1:0e:06:3b:3e:12:69:c8:a4: 30:32:97:53:e0:c4:0f:0a:89:72:5f:40:a0:dd:f7:1c:0a:23: 3f:b8:56:0d:9d:3e:35:5e:9b:cc:f9:e6:fd:07:06:1e:d5:6b: 13:e9:0f:50:ff:88:b7:f6:ec:21:1c:37:34:01:5b:8b:7b:c1: b7:18:13:c5:e4:9e:f1:b3:71:2d:93:b1:36:5b:87:3a:dd:dc: 2a:0a:5e:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4f7FLa4UM3pnQJPrexJHmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwNTEzMDYwMDQxWhcNMjYwNTE0MDYwMDQxWjAzMTEwLwYDVQQD Eyg0NWJmODM1Mjc1NzJiYjQ0ZTBjODQ0YWI5MDYzY2MzZTdjY2YzZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiucwxlMtHnbHQbqXcMC9WDSlK2EQ lM17m0gvyI5vB5cwclcGGVQSO8xqO6tgPtgM3lKczqmW3fm9jdUTPH4puTl/yf6A XqRUwodPNweU8oyerQfDH0xu4YnYbhmkn+gGgxd8ua6iGrJMhpe1vXaD+mmXUSsx gmt6DbpP+ZtDEsO/NxDgNI21IcwL2uwt2zP2pt0vDCITraVNbvFCpnWh6eFctefS CK+TghC9ZadHg+jU2uul3y31vKGJeea9xxMPXBfb70b3J/10f0dFh/rRshbrn7jx nJmqeyfA36jX9mOVqZlhgy+bm9MphJU4PdqVxMuKOWBrxsKrSIoLoaK0lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW/g1J1crtE4MhEq5BjzD58zz08MB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhnrP2CS 1y8gAkHmK0R09JW+3nEi0/I2zi/6eKBr6aI1qkEln6FfDiyVgJmmJc4fg7lVil7K REcNSv6CCx0+XaS8OnsN6eRBKhrHkqmMA262/R87skJZyzZAj8LFMCBivN8wtSKu 7P0zcPaLYRfQARdJxQS+OD3YFKfzixdJ4zikjcoAZfypZcka3wNwFT02HT3TA5a7 Gwy3ZbrLCakZnzVuZC1Kh8p45K/88Q4GOz4SacikMDKXU+DEDwqJcl9AoN33HAoj P7hWDZ0+NV6bzPnm/QcGHtVrE+kPUP+It/bsIRw3NAFbi3vBtxgTxeSe8bNxLZOx NluHOt3cKgpe7A== -----END CERTIFICATE-----Generated at Wed May 13 13:39:05 2026 by rpki-client