$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: HdfggmD56NKwi7jmV4MwEA+qMRvhZi4xYraXlq11fvQ= Subject key identifier: 42:AF:75:D3:A9:5A:54:61:C9:E2:8D:10:02:60:A7:23:31:BF:AC:09 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0196B2FCF1C5EFC7B52AD395FE5E8EC25D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1549 Signing time: Fri 09 May 2025 03:00:43 +0000 Manifest this update: Fri 09 May 2025 03:00:43 +0000 Manifest next update: Sat 10 May 2025 03:00:43 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: OyVivzDgYzqx8lRRpo0i5YRJJtJ7caSh7VkBrdiRQ/0=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b2:fc:f1:c5:ef:c7:b5:2a:d3:95:fe:5e:8e:c2:5d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: May 9 03:00:43 2025 GMT Not After : May 10 03:00:43 2025 GMT Subject: CN=42af75d3a95a5461c9e28d100260a72331bfac09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:b8:7c:8e:42:61:49:58:6e:33:a0:a9:e8: d0:82:bd:27:ec:15:0e:c4:01:01:83:d7:ce:60:f7: 9e:83:7e:f9:34:e4:66:ac:5f:83:de:7d:0f:1b:4e: 04:69:97:a7:56:b6:d7:0e:73:aa:b2:50:df:6a:1e: 00:8a:b7:d9:1b:6f:08:c2:48:c4:ce:3d:47:38:62: 7c:1f:60:4f:c4:b7:f1:be:84:a3:d8:c5:e7:13:ed: 57:7e:ad:00:82:19:51:d0:98:f9:35:29:c8:22:9d: 91:f5:ae:f9:8b:aa:74:77:37:59:21:97:7e:15:e9: 7b:4c:81:ef:f9:54:e4:e8:44:8f:70:7b:fe:11:2c: 9f:f2:74:15:21:bd:6d:74:98:41:29:76:d2:aa:40: 55:bb:95:be:de:77:fc:35:e7:04:b9:62:ae:b7:2d: ab:87:f3:3d:ca:61:71:67:38:ad:a5:60:e9:37:36: 79:6e:3d:b3:01:df:97:9d:6b:be:e2:ea:8e:49:83: 1f:01:b5:08:1d:00:d1:d1:e1:04:5a:c8:75:c4:d7: fa:e7:5e:81:0d:3b:6c:f4:d9:46:ed:a6:12:18:f5: a7:85:2d:fa:50:f0:0d:79:52:c2:b5:ff:40:09:41: 43:f6:c1:01:ef:1c:35:ff:bb:f7:73:24:26:91:a7: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:75:D3:A9:5A:54:61:C9:E2:8D:10:02:60:A7:23:31:BF:AC:09 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:df:56:c5:2f:80:ad:e2:97:0d:50:30:06:93:dc:25:62:9f: 0d:5a:ed:fd:aa:db:db:aa:a7:84:d3:02:df:67:49:49:df:97: c6:59:de:aa:17:d0:a2:e9:76:98:f5:37:56:4b:2c:51:00:fe: d0:b8:6c:c0:ff:24:8f:a9:25:69:34:a0:5f:8f:c1:78:52:64: 00:70:0a:90:1b:06:d5:f2:6a:ed:3d:08:33:34:9c:be:1f:6a: 2c:86:6d:b9:d2:de:cd:d2:f0:4b:3c:75:c9:af:e4:8c:24:9b: 17:45:f7:f7:15:ed:29:9b:c9:87:01:96:e4:b1:86:ce:f8:45: 90:41:6f:8a:f8:cf:bd:02:92:c7:ab:78:e0:a5:d1:dc:25:59: b6:c5:9b:2c:41:8c:ed:ba:0e:e1:49:f4:25:5c:ce:7c:ed:28: dd:f6:99:87:f2:96:66:7c:a0:b5:81:cb:d2:ee:81:30:00:f5: b0:04:77:e5:d4:d9:f9:4e:6b:5d:49:f0:85:55:28:a0:87:0b: e7:e3:5e:c9:d4:c6:8d:c9:b3:64:75:9a:a5:57:3a:c5:22:b8: 3f:aa:ab:1a:d4:f1:05:16:d5:ea:ac:02:03:15:65:be:f3:96: 7d:82:b3:67:80:e4:44:91:0a:fa:95:2a:2c:1c:ad:4d:37:d2: cf:55:24:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZay/PHF78e1KtOV/l6Owl1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwNTA5MDMwMDQzWhcNMjUwNTEwMDMwMDQzWjAzMTEwLwYDVQQD Eyg0MmFmNzVkM2E5NWE1NDYxYzllMjhkMTAwMjYwYTcyMzMxYmZhYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh24fI5CYUlYbjOgqejQgr0n7BUO xAEBg9fOYPeeg375NORmrF+D3n0PG04EaZenVrbXDnOqslDfah4AirfZG28IwkjE zj1HOGJ8H2BPxLfxvoSj2MXnE+1Xfq0AghlR0Jj5NSnIIp2R9a75i6p0dzdZIZd+ Fel7TIHv+VTk6ESPcHv+ESyf8nQVIb1tdJhBKXbSqkBVu5W+3nf8NecEuWKuty2r h/M9ymFxZzitpWDpNzZ5bj2zAd+XnWu+4uqOSYMfAbUIHQDR0eEEWsh1xNf6516B DTts9NlG7aYSGPWnhS36UPANeVLCtf9ACUFD9sEB7xw1/7v3cyQmkafe0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKvddOpWlRhyeKNEAJgpyMxv6wJMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt9WxS+A reKXDVAwBpPcJWKfDVrt/arb26qnhNMC32dJSd+XxlneqhfQoul2mPU3VkssUQD+ 0LhswP8kj6klaTSgX4/BeFJkAHAKkBsG1fJq7T0IMzScvh9qLIZtudLezdLwSzx1 ya/kjCSbF0X39xXtKZvJhwGW5LGGzvhFkEFvivjPvQKSx6t44KXR3CVZtsWbLEGM 7boO4Un0JVzOfO0o3faZh/KWZnygtYHL0u6BMAD1sAR35dTZ+U5rXUnwhVUooIcL 5+NeydTGjcmzZHWapVc6xSK4P6qrGtTxBRbV6qwCAxVlvvOWfYKzZ4DkRJEK+pUq LBytTTfSz1UkaA== -----END CERTIFICATE-----Generated at Fri May 9 06:37:43 2025 by rpki-client