$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: UfXmVGxALAGeqliMRWaG12p5k6IzZzRWSyZlaLc+u54= Subject key identifier: C4:46:E5:76:49:B8:4A:54:CA:6E:2B:01:6A:2C:23:9B:67:77:20:67 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0199FC213A7BDEC747F12B8B185B76C6DBBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 16FE Signing time: Sun 19 Oct 2025 11:00:59 +0000 Manifest this update: Sun 19 Oct 2025 11:00:59 +0000 Manifest next update: Mon 20 Oct 2025 11:00:59 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: GCQqtakod1eJTRL6PjIZcoZqPbk.roa (hash: uw7TYrAKDmGLJeaKrdOqVzvHJTnCYwW9/8HncjUd7nU=) 4: HeAZWPmVbmkDY9lHE8AKw9lxvhU.roa (hash: sP0bXOhnayW/C5U8LWSRTmyBREQH+K1GXgkc2hDCxmE=) 5: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 6: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 7: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: Gx+fjZlHeI1AmTaej88ilQusYspigSr+qsJNxPY68P0=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:3a:7b:de:c7:47:f1:2b:8b:18:5b:76:c6:db:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Oct 19 11:00:59 2025 GMT Not After : Oct 20 11:00:59 2025 GMT Subject: CN=c446e57649b84a54ca6e2b016a2c239b67772067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:71:83:31:33:e2:55:fb:f0:ee:ee:e3:b3: dc:51:a5:54:da:55:2d:30:c7:95:2a:90:97:19:0e: 7d:07:31:90:e4:23:d3:a9:c5:06:f0:fd:e9:3b:3c: 1a:c7:e6:0e:10:d9:61:b8:96:28:94:54:64:06:a1: 4d:06:df:e6:4e:d1:31:f2:88:2c:c3:ee:e1:da:00: 35:0d:48:1e:ac:83:e8:47:e3:f4:e5:fc:36:76:6a: 2f:3c:5e:a0:4d:bd:b4:0c:88:ca:51:e3:d2:ee:43: 02:f2:cc:a8:66:e1:6d:1a:e7:a2:6e:fe:a0:82:33: 75:94:06:69:e8:82:08:ed:9e:57:a3:0a:1b:36:2c: 68:3c:16:22:52:26:7c:ac:b0:27:45:d3:2c:b9:89: b7:78:60:84:c8:ff:58:f2:e5:c4:b8:56:a2:4c:ea: 4b:92:2b:ed:34:33:59:6f:46:33:26:5d:8b:63:f4: f1:00:73:33:8e:92:27:35:24:3a:7e:9d:f3:be:4c: 1c:cf:d9:51:2c:68:73:be:15:63:a4:49:f6:06:13: 77:72:3c:f8:a8:b0:0e:d0:4c:ca:24:a1:a8:5e:3e: 13:9a:97:a2:ee:6b:92:08:25:10:df:32:97:29:dc: 1e:d0:7e:57:cb:26:0b:65:1d:a5:cc:09:f1:0b:37: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:46:E5:76:49:B8:4A:54:CA:6E:2B:01:6A:2C:23:9B:67:77:20:67 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:95:cc:21:88:2a:9f:f3:12:23:fa:26:97:f5:15:1d:bb:1c: b1:88:6b:f5:84:9e:64:46:8a:61:50:cd:26:a4:35:7c:c4:c5: db:6a:dd:90:b6:57:93:c1:55:62:ec:dc:7d:bd:c2:79:46:86: b9:65:b2:4a:17:1b:fd:8a:b8:a7:b8:59:47:24:92:00:ca:84: 8f:34:e8:e4:b5:61:b6:48:57:a7:26:c4:2f:23:36:fb:d4:8b: 48:4e:02:31:2c:02:dd:e6:1d:bc:e1:0f:28:f6:3e:0c:f2:1d: d8:b7:86:df:1b:51:3d:fa:63:96:2f:35:c1:d8:e7:3b:48:05: 0f:8e:33:02:6e:6a:ef:41:18:72:8f:8d:29:62:10:c7:18:67: ed:d4:8a:19:4a:22:c3:a4:d1:df:ad:73:20:be:ae:2b:fc:3e: c5:cb:32:4f:18:85:4f:7c:42:75:18:8e:67:1e:68:82:04:e6: 67:83:fd:53:d2:51:8e:50:00:54:b3:ca:ee:41:4e:44:9c:26: 94:d2:ca:b3:9b:df:cb:2d:20:c1:65:b2:6e:ab:28:c7:61:c2: 02:bd:37:a4:d1:cc:c7:84:38:7a:13:b4:c1:74:70:83:89:5f: 0f:7c:43:2f:e0:19:eb:d3:26:37:1b:9a:33:b5:20:7e:96:d2: 84:af:41:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8ITp73sdH8SuLGFt2xtu/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUxMDE5MTEwMDU5WhcNMjUxMDIwMTEwMDU5WjAzMTEwLwYDVQQD EyhjNDQ2ZTU3NjQ5Yjg0YTU0Y2E2ZTJiMDE2YTJjMjM5YjY3NzcyMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFRxgzEz4lX78O7u47PcUaVU2lUt MMeVKpCXGQ59BzGQ5CPTqcUG8P3pOzwax+YOENlhuJYolFRkBqFNBt/mTtEx8ogs w+7h2gA1DUgerIPoR+P05fw2dmovPF6gTb20DIjKUePS7kMC8syoZuFtGueibv6g gjN1lAZp6III7Z5XowobNixoPBYiUiZ8rLAnRdMsuYm3eGCEyP9Y8uXEuFaiTOpL kivtNDNZb0YzJl2LY/TxAHMzjpInNSQ6fp3zvkwcz9lRLGhzvhVjpEn2BhN3cjz4 qLAO0EzKJKGoXj4Tmpei7muSCCUQ3zKXKdwe0H5XyyYLZR2lzAnxCzfQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRG5XZJuEpUym4rAWosI5tndyBnMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpXMIYgq n/MSI/oml/UVHbscsYhr9YSeZEaKYVDNJqQ1fMTF22rdkLZXk8FVYuzcfb3CeUaG uWWyShcb/Yq4p7hZRySSAMqEjzTo5LVhtkhXpybELyM2+9SLSE4CMSwC3eYdvOEP KPY+DPId2LeG3xtRPfpjli81wdjnO0gFD44zAm5q70EYco+NKWIQxxhn7dSKGUoi w6TR361zIL6uK/w+xcsyTxiFT3xCdRiOZx5oggTmZ4P9U9JRjlAAVLPK7kFORJwm lNLKs5vfyy0gwWWybqsox2HCAr03pNHMx4Q4ehO0wXRwg4lfD3xDL+AZ69MmNxua M7UgfpbShK9B0g== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:02 2025 by rpki-client