$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: mP9Fx0KjLLPWEtCBU1bTyAlt/KWSo4w+qTxaJIoPwBw= Subject key identifier: 22:24:08:C5:32:4F:B9:BF:08:0A:D8:6E:B0:D0:5D:26:1F:12:EF:3B Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 01A0F230F9B2FFE97128B120B94D830A2DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0403 Signing time: Wed 30 Sep 2026 12:01:30 +0000 Manifest this update: Wed 30 Sep 2026 12:01:30 +0000 Manifest next update: Thu 01 Oct 2026 12:01:30 +0000 Files and hashes: 1: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 2: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 3: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 4: JsExkxn6ORep1Qkd7h1bnFYNnP8.roa (hash: w/DL5qJe1mUIHpRScRPUTBRiJWpSst+kv/3eNPLA4cI=) 5: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=) 6: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=) 7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: 6oGv9tvO1fFrNmven/8kiWhB/T4cIjIkS+tGHpBau9w=) 8: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=) 9: iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa (hash: /iUGvduptZ/JP8lKXh14YGIQgG7bREfF9xL+2QGrNB0=) 10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 11: oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa (hash: T3/R9exHSgP0k2kmjvxBvwzSyy0v3tasEbkkEODMBfE=) 12: ugdaZFijHYOlbpSUgTHvHNMkx3I.roa (hash: xF9mxjozl+pvQpm1H66f/KhL1MOe8lYaF6cLypnqfxo=) 13: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 14: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f2:30:f9:b2:ff:e9:71:28:b1:20:b9:4d:83:0a:2d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Sep 30 12:01:30 2026 GMT Not After : Oct 1 12:01:30 2026 GMT Subject: CN=222408c5324fb9bf080ad86eb0d05d261f12ef3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f5:75:93:03:54:18:a4:58:d4:9c:34:d2:aa: 37:0a:34:01:cf:77:04:c3:b6:c5:41:8e:81:49:42: 6b:0e:fa:cf:ee:6f:2f:c5:d1:49:23:74:5a:b7:2f: bb:0c:7b:a7:63:15:c4:da:61:46:61:c5:8e:fa:52: c0:e8:56:d0:45:31:43:45:1c:f5:e0:43:eb:58:02: 7a:f8:1c:3e:9b:62:43:13:07:0d:8e:d1:2d:f0:92: 4d:46:06:bc:dd:32:99:1c:1b:da:19:54:0b:ea:0f: e4:c2:be:10:a0:a2:e5:04:c8:cf:b9:e6:19:4f:f2: ca:42:b7:24:6d:21:e1:39:69:18:4d:d3:a1:2c:1b: 1e:eb:2b:2a:14:49:83:7b:b6:11:2f:b5:81:08:ce: c2:a4:19:8b:85:34:cc:e0:be:07:ab:10:9b:f7:78: 21:09:71:8b:ed:6e:26:57:47:6d:a7:3e:0c:22:7d: ba:b7:94:84:43:9c:ef:17:0f:1b:f5:70:bc:6d:5c: 64:cd:87:71:c3:3b:ff:27:07:a5:3e:83:9a:03:28: 3e:35:ca:fe:2a:74:b7:1c:33:a2:ee:66:5a:83:ea: d6:af:06:ed:8b:d3:4b:7e:e5:fc:45:40:94:1c:8e: 51:7b:06:fc:34:a4:aa:d2:0d:39:7d:38:58:fc:e0: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:08:C5:32:4F:B9:BF:08:0A:D8:6E:B0:D0:5D:26:1F:12:EF:3B X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1c:11:bb:7a:d8:37:0a:d5:35:6f:ef:eb:c2:3d:09:a1:89: d7:cf:52:a5:35:ba:16:06:59:5f:fa:8e:e7:94:80:d4:63:cb: 6c:b6:13:6a:f0:5d:53:f6:34:86:6d:14:ad:a5:6d:a8:a6:2f: cd:bb:55:86:04:b4:f9:f1:a5:ed:23:e8:31:99:6d:b4:3b:9f: 63:e5:31:49:00:f5:6a:cb:3f:f4:4f:1a:43:ca:39:66:61:bb: 64:06:ba:c5:07:22:b7:14:d5:3a:b4:c6:6f:e5:72:91:72:78: 09:78:28:df:5d:30:3a:99:86:7a:43:66:44:90:c0:3d:6a:9b: 1e:b8:f4:40:d6:dd:08:4a:dc:87:b9:e5:64:e5:e8:ca:40:c4: 4b:a9:89:70:e4:c3:b5:1c:54:bd:4a:fd:2c:7f:f9:2a:ad:36: dd:3e:7c:9c:c3:70:80:e7:d5:5c:4f:cc:8d:4f:84:17:d8:d4: 6d:3e:68:e5:fa:03:41:e0:76:81:ce:99:06:f9:c7:e4:b9:92: 04:0d:69:26:5a:52:ec:f9:09:a6:53:f9:b0:11:64:67:63:29: 01:86:e0:a1:50:65:9c:ed:eb:21:a7:fb:95:b6:4c:54:63:3a: e1:20:d0:be:3c:84:e3:41:56:0a:03:f8:75:28:db:3a:70:d2: b2:96:56:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDyMPmy/+lxKLEguU2DCi2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwOTMwMTIwMTMwWhcNMjYxMDAxMTIwMTMwWjAzMTEwLwYDVQQD EygyMjI0MDhjNTMyNGZiOWJmMDgwYWQ4NmViMGQwNWQyNjFmMTJlZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvV1kwNUGKRY1Jw00qo3CjQBz3cE w7bFQY6BSUJrDvrP7m8vxdFJI3Raty+7DHunYxXE2mFGYcWO+lLA6FbQRTFDRRz1 4EPrWAJ6+Bw+m2JDEwcNjtEt8JJNRga83TKZHBvaGVQL6g/kwr4QoKLlBMjPueYZ T/LKQrckbSHhOWkYTdOhLBse6ysqFEmDe7YRL7WBCM7CpBmLhTTM4L4HqxCb93gh CXGL7W4mV0dtpz4MIn26t5SEQ5zvFw8b9XC8bVxkzYdxwzv/JwelPoOaAyg+Ncr+ KnS3HDOi7mZag+rWrwbti9NLfuX8RUCUHI5Rewb8NKSq0g05fThY/OA38wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIkCMUyT7m/CArYbrDQXSYfEu87MB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBwRu3rY NwrVNW/v68I9CaGJ189SpTW6FgZZX/qO55SA1GPLbLYTavBdU/Y0hm0UraVtqKYv zbtVhgS0+fGl7SPoMZlttDufY+UxSQD1ass/9E8aQ8o5ZmG7ZAa6xQcitxTVOrTG b+VykXJ4CXgo310wOpmGekNmRJDAPWqbHrj0QNbdCErch7nlZOXoykDES6mJcOTD tRxUvUr9LH/5Kq023T58nMNwgOfVXE/MjU+EF9jUbT5o5foDQeB2gc6ZBvnH5LmS BA1pJlpS7PkJplP5sBFkZ2MpAYbgoVBlnO3rIaf7lbZMVGM64SDQvjyE40FWCgP4 dSjbOnDSspZWAg== -----END CERTIFICATE-----Generated at Wed Sep 30 22:51:24 2026 by rpki-client