$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: ua1JXBOlSKopu2Vpv1XokSBw7jaKG1nrvy0p1+rdC1g= Subject key identifier: C0:2A:8A:7B:3E:CF:66:67:95:09:FA:8E:41:CB:AF:F7:9A:A7:41:8D Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019D2B854481DB8C504994957AA41B535DFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0207 Signing time: Thu 26 Mar 2026 19:00:47 +0000 Manifest this update: Thu 26 Mar 2026 19:00:47 +0000 Manifest next update: Fri 27 Mar 2026 19:00:47 +0000 Files and hashes: 1: 043Lbp27EDcUm-b86hgRfQTIMxA.roa (hash: kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=) 2: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=) 3: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=) 4: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 5: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 6: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 7: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=) 8: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: 8hm0VatWOuZRIjBjMjTfO0T4BmSfGGMSKHhgZYS3eGo=) 9: hTjSrcovPq648FqPM_7hdgfN-EI.roa (hash: lYgMjkKMuEdbys29eJuErKr4659N+NA6qhwRfkiwEHE=) 10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 16:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:85:44:81:db:8c:50:49:94:95:7a:a4:1b:53:5d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Mar 26 19:00:47 2026 GMT Not After : Mar 27 19:00:47 2026 GMT Subject: CN=c02a8a7b3ecf66679509fa8e41cbaff79aa7418d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:80:c8:21:ec:0c:16:bd:3f:e0:1f:89:2f: 94:9d:31:28:e6:37:84:52:47:fe:34:3c:fc:49:a6: e3:53:13:1b:e6:44:19:ac:1b:e6:4e:c8:aa:21:fa: 95:7c:fc:fe:27:78:cd:71:b1:08:49:f3:1e:8c:64: 4b:0a:17:85:38:20:e5:3f:b6:03:dc:6a:f0:09:22: 76:aa:ce:35:15:27:b1:2b:12:da:85:ea:4a:3f:60: 69:b2:c4:aa:28:01:c3:30:74:69:33:0f:6b:7c:be: 56:43:2a:8b:59:f9:56:d1:1a:fa:b1:b4:8e:f3:43: 82:4e:a3:5e:29:0e:23:9f:3c:23:15:a1:1a:dd:16: 44:38:5d:f2:70:41:15:25:88:a2:c4:57:71:0f:f6: bf:ad:60:b3:3c:df:25:c3:15:c9:d2:b1:3d:76:47: 9c:47:d5:c4:e8:a1:6d:22:3c:29:a0:c0:57:71:1e: 13:cc:b9:15:c3:42:1d:20:62:2e:ff:9d:76:6a:a8: e5:b8:73:01:a4:b5:dd:ff:79:65:de:e5:93:87:32: 37:87:5f:a4:c6:06:bd:89:b8:cd:2b:00:7f:d3:0e: 58:75:f6:49:a3:d5:fa:f9:59:28:4c:17:b5:25:a2: cf:56:98:38:50:69:71:1f:86:07:db:9f:1c:b7:a1: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2A:8A:7B:3E:CF:66:67:95:09:FA:8E:41:CB:AF:F7:9A:A7:41:8D X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:56:bf:e5:e7:bf:60:0a:1d:47:49:00:f9:c2:4e:2c:6f:b3: 99:ec:bc:8f:1a:0c:31:cc:0a:4d:04:ca:23:ac:9c:21:bb:b2: 48:8a:de:4a:7f:9e:91:68:8a:de:14:03:14:c6:71:93:85:30: 06:28:46:d3:0a:bd:2f:f6:4e:4a:5d:13:5c:a9:64:77:83:3c: 7f:04:3f:7e:7c:6e:75:8d:0e:2a:76:d2:98:4e:fd:1f:ce:ff: cd:cb:bc:88:e6:74:36:96:25:91:4b:eb:1c:f0:44:fc:5e:c8: 33:5d:f8:56:5c:21:8c:95:a1:d9:83:18:e0:e6:86:a1:ad:b3: c2:b9:31:7f:d3:c0:ba:15:aa:f7:fc:25:69:66:27:e6:8c:bb: 48:ff:24:ba:20:e2:91:1a:67:e1:39:b8:20:af:bf:12:cc:e2: 05:5b:df:9e:81:ac:82:d7:0a:5c:50:93:5d:97:4f:33:61:42: 13:99:88:2e:f6:32:dc:ff:8a:32:10:7a:86:a1:f5:1b:79:ce: 2e:72:19:d9:e3:bf:c2:eb:13:10:99:e5:aa:83:07:f5:77:e4: 6f:f0:ea:8f:b6:cd:d1:ec:e3:fd:50:79:31:da:fd:b6:e1:3d: 66:12:22:63:e4:43:20:9b:f2:13:86:f7:4d:2f:c6:38:fc:5a: 7e:b4:20:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rhUSB24xQSZSVeqQbU136MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwMzI2MTkwMDQ3WhcNMjYwMzI3MTkwMDQ3WjAzMTEwLwYDVQQD EyhjMDJhOGE3YjNlY2Y2NjY3OTUwOWZhOGU0MWNiYWZmNzlhYTc0MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJOAyCHsDBa9P+AfiS+UnTEo5jeE Ukf+NDz8SabjUxMb5kQZrBvmTsiqIfqVfPz+J3jNcbEISfMejGRLCheFOCDlP7YD 3GrwCSJ2qs41FSexKxLahepKP2BpssSqKAHDMHRpMw9rfL5WQyqLWflW0Rr6sbSO 80OCTqNeKQ4jnzwjFaEa3RZEOF3ycEEVJYiixFdxD/a/rWCzPN8lwxXJ0rE9dkec R9XE6KFtIjwpoMBXcR4TzLkVw0IdIGIu/512aqjluHMBpLXd/3ll3uWThzI3h1+k xga9ibjNKwB/0w5YdfZJo9X6+VkoTBe1JaLPVpg4UGlxH4YH258ct6H+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAqins+z2ZnlQn6jkHLr/eap0GNMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1a/5ee/ YAodR0kA+cJOLG+zmey8jxoMMcwKTQTKI6ycIbuySIreSn+ekWiK3hQDFMZxk4Uw BihG0wq9L/ZOSl0TXKlkd4M8fwQ/fnxudY0OKnbSmE79H87/zcu8iOZ0NpYlkUvr HPBE/F7IM134VlwhjJWh2YMY4OaGoa2zwrkxf9PAuhWq9/wlaWYn5oy7SP8kuiDi kRpn4Tm4IK+/EsziBVvfnoGsgtcKXFCTXZdPM2FCE5mILvYy3P+KMhB6hqH1G3nO LnIZ2eO/wusTEJnlqoMH9Xfkb/Dqj7bN0ezj/VB5Mdr9tuE9ZhIiY+RDIJvyE4b3 TS/GOPxafrQgcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:09 2026 by rpki-client