$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: px4bF99x2ppiA0LdUZNCZ9mpCNn4I6WgMK7+0od1d7k= Subject key identifier: 0B:67:ED:CC:83:A5:BF:81:AE:13:4B:A7:67:AC:3A:F1:56:64:EF:B0 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0198D5BBBFC0D1EB731C903EFB451CBA3FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1665 Signing time: Sat 23 Aug 2025 07:01:47 +0000 Manifest this update: Sat 23 Aug 2025 07:01:47 +0000 Manifest next update: Sun 24 Aug 2025 07:01:47 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa (hash: sP0bXOhnayW/C5U8LWSRTmyBREQH+K1GXgkc2hDCxmE=) 4: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 5: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 6: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 7: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: +4KuRTZzFysuUnNtVImjR/9FDev/3HLF6HTASK8WV6I=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:bf:c0:d1:eb:73:1c:90:3e:fb:45:1c:ba:3f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Aug 23 07:01:47 2025 GMT Not After : Aug 24 07:01:47 2025 GMT Subject: CN=0b67edcc83a5bf81ae134ba767ac3af15664efb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:a9:59:c4:76:95:05:8a:f1:f9:0e:aa:c2: 92:81:bb:75:92:10:b6:55:c7:99:56:ba:53:21:cf: ab:66:6b:23:25:d8:33:8c:be:3a:5c:34:5a:4c:37: 31:dd:76:ea:d8:58:dc:67:f3:30:51:94:b7:ff:ae: f6:ce:96:73:b6:2f:a8:17:af:99:a7:f7:01:1e:dc: 15:87:85:80:ee:5e:44:d4:74:c0:9d:85:ae:8e:9b: 96:91:02:5e:8c:db:3b:40:18:9d:4b:a8:ce:f5:af: 55:c4:58:76:65:c9:2f:7a:1e:97:94:3a:73:ed:cc: 5c:25:fe:13:ec:ad:ce:57:6d:f1:14:e7:6c:53:63: 08:52:fe:39:38:af:64:40:b7:35:0d:32:4a:40:54: e8:61:53:e3:40:fb:e4:5b:0e:4e:e9:73:4f:0a:43: 84:86:e4:95:99:20:46:6f:ca:24:03:52:1e:7b:17: 3c:65:1e:e6:88:6e:db:2c:82:2b:d0:15:47:a0:93: 05:d8:80:14:17:b3:65:34:ab:a6:c9:24:e1:d2:4c: de:bc:b9:0b:46:7f:a0:b9:c9:b5:6a:3c:98:24:89: 48:c5:74:3a:79:26:3f:ff:7c:0f:d1:21:40:e4:35: 87:4a:6d:3f:30:a1:59:1b:cd:7a:36:6d:8a:c6:04: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:ED:CC:83:A5:BF:81:AE:13:4B:A7:67:AC:3A:F1:56:64:EF:B0 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a7:4a:49:a9:52:8a:be:0d:80:c3:47:c2:ad:ef:08:e4:8d: 1c:4d:e8:96:ab:c1:58:91:44:cc:01:c9:61:d1:4e:c4:56:02: 8f:2e:a5:3b:08:c2:48:d2:83:58:dc:75:c7:02:a2:1c:91:9f: 24:d2:c1:1c:d2:fa:2d:8a:42:b7:be:a2:c5:04:85:eb:d0:4a: 24:3c:21:cc:99:3a:84:c5:54:73:26:10:9a:5f:ed:43:8e:21: ad:42:45:e2:fe:f6:ad:83:a9:35:94:98:d9:fb:de:a2:2f:da: 63:63:74:d3:a3:31:9d:ee:fb:9c:c1:e5:6a:fd:2f:35:49:36: 1e:ef:10:87:87:b3:b2:3a:99:6c:12:35:fe:af:d5:32:5e:58: bc:34:4d:1c:67:37:3f:94:d0:86:cf:3a:64:fb:55:80:5e:7d: e4:14:8e:c4:9c:2a:a1:89:71:78:47:cd:ae:16:9e:f7:cf:da: 5f:20:df:76:d8:66:1b:e5:e2:63:f1:68:be:5c:9f:87:56:35: 29:02:55:b6:a7:4a:ee:89:ac:f2:81:6d:73:29:44:07:8d:f0: 1f:24:14:16:e4:cc:6f:ab:d1:f4:9b:45:b4:17:bc:d4:23:96: be:35:17:40:c7:8f:ae:bb:a6:4b:6e:74:0d:6a:0e:16:f7:eb: c5:dc:0d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu7/A0etzHJA++0Ucuj/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwODIzMDcwMTQ3WhcNMjUwODI0MDcwMTQ3WjAzMTEwLwYDVQQD EygwYjY3ZWRjYzgzYTViZjgxYWUxMzRiYTc2N2FjM2FmMTU2NjRlZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu++pWcR2lQWK8fkOqsKSgbt1khC2 VceZVrpTIc+rZmsjJdgzjL46XDRaTDcx3Xbq2FjcZ/MwUZS3/672zpZzti+oF6+Z p/cBHtwVh4WA7l5E1HTAnYWujpuWkQJejNs7QBidS6jO9a9VxFh2Zckveh6XlDpz 7cxcJf4T7K3OV23xFOdsU2MIUv45OK9kQLc1DTJKQFToYVPjQPvkWw5O6XNPCkOE huSVmSBGb8okA1Ieexc8ZR7miG7bLIIr0BVHoJMF2IAUF7NlNKumySTh0kzevLkL Rn+gucm1ajyYJIlIxXQ6eSY//3wP0SFA5DWHSm0/MKFZG816Nm2KxgSRvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtn7cyDpb+BrhNLp2esOvFWZO+wMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKdKSalS ir4NgMNHwq3vCOSNHE3olqvBWJFEzAHJYdFOxFYCjy6lOwjCSNKDWNx1xwKiHJGf JNLBHNL6LYpCt76ixQSF69BKJDwhzJk6hMVUcyYQml/tQ44hrUJF4v72rYOpNZSY 2fveoi/aY2N006Mxne77nMHlav0vNUk2Hu8Qh4ezsjqZbBI1/q/VMl5YvDRNHGc3 P5TQhs86ZPtVgF595BSOxJwqoYlxeEfNrhae98/aXyDfdthmG+XiY/Fovlyfh1Y1 KQJVtqdK7oms8oFtcylEB43wHyQUFuTMb6vR9JtFtBe81COWvjUXQMePrrumS250 DWoOFvfrxdwNtg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:40 2025 by rpki-client