$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: top8pYdRzsouU+9YswVT/uWXPDztI0P2a4EEvTPH0a8= Subject key identifier: F5:64:FF:E3:E1:CA:A5:0F:9E:EE:88:A4:11:9C:45:8D:73:01:C1:92 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 0199FC58C4061CDAAB451C5D13EE5EA48CC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 132C Signing time: Sun 19 Oct 2025 12:01:39 +0000 Manifest this update: Sun 19 Oct 2025 12:01:39 +0000 Manifest next update: Mon 20 Oct 2025 12:01:39 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: DirpbPXV9PEsSkJGkxNuGe42xHI.roa (hash: VBDmf9F3mz15N8FEL0FBBmeC/+Di4FvRutCT5g1tWEg=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: vbc2MuanJeCUtp2uyKhG18kPycIk0mbcd+WOQgr/epM=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:c4:06:1c:da:ab:45:1c:5d:13:ee:5e:a4:8c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Oct 19 12:01:39 2025 GMT Not After : Oct 20 12:01:39 2025 GMT Subject: CN=f564ffe3e1caa50f9eee88a4119c458d7301c192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:2f:45:13:42:77:48:aa:b0:2a:d0:f0:4c: 15:84:2f:68:f5:e2:32:c5:31:48:fc:42:d1:1c:29: fc:d6:32:c6:44:3d:39:fc:04:80:e0:15:23:30:d2: f8:63:08:69:c1:e1:93:bd:cf:2c:e4:ab:e6:e0:b0: ba:4a:8b:c2:60:b0:0b:16:f8:a9:af:1c:2e:a2:a6: 23:dc:45:35:f7:4b:77:ad:8a:f1:e4:45:21:e5:9e: 5b:3e:86:62:16:58:8a:11:68:ad:66:62:a5:01:e5: e1:2d:d9:b2:d5:fc:99:67:e9:d5:48:9b:14:1d:16: 82:bc:08:cd:f3:98:31:58:52:4d:20:3e:1f:97:6d: 27:a8:a5:a4:2d:3d:9e:18:5c:54:ad:35:04:4a:be: 74:24:59:8a:7f:71:14:1e:da:df:cf:80:89:10:8b: c4:87:52:b8:3a:16:04:28:be:6e:95:9e:76:11:1d: 24:cc:b7:56:46:f9:3b:b0:e1:1c:e3:b5:13:3e:81: 98:30:6e:7e:a9:f8:95:53:47:3b:e6:a3:51:b8:fd: bd:81:52:1b:63:d1:d0:d0:4b:ff:52:5f:6c:b1:9e: c5:89:7c:4a:c3:67:6f:f9:fc:05:07:d2:d9:5a:dd: 10:a5:63:89:81:f9:38:8d:c2:23:51:8e:72:39:5b: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:FF:E3:E1:CA:A5:0F:9E:EE:88:A4:11:9C:45:8D:73:01:C1:92 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:6d:a2:55:af:d1:93:3e:50:c5:16:a0:ec:62:98:bc:aa: 78:7e:35:e7:9e:27:40:f9:9f:ce:27:6e:04:d0:54:da:13:3f: c5:26:57:85:c4:1b:42:bb:8b:9b:2b:d6:41:16:a2:c6:b3:67: c6:dc:d5:7a:21:1c:df:b9:9e:18:02:27:5f:d6:d6:45:45:fa: 18:ff:9e:2f:f8:7d:55:1c:a2:7c:7e:d7:34:25:b8:41:cf:96: 99:f7:85:d6:4f:c8:07:07:9a:4a:8a:ec:64:19:fb:a3:4f:e7: aa:50:03:0e:fa:81:3b:2d:bf:fa:d5:4f:22:6d:39:2f:c6:bc: 25:db:b8:99:3c:db:54:6e:da:9b:50:d7:53:fb:0f:67:28:22: 55:a6:6d:ef:ce:60:7f:4e:a2:31:ab:22:f7:23:0a:4a:a4:3d: 3a:dd:d9:72:e9:b2:66:d4:60:d7:36:96:dc:32:f0:bb:29:51: 4b:96:21:79:09:71:c8:5d:2b:63:dc:54:d0:b8:f3:b2:5b:8e: 10:01:91:b4:4c:b0:38:53:09:26:55:c0:04:b0:a9:65:b6:34: ad:c6:84:7a:5b:64:3d:bd:33:c1:82:b8:ee:53:b1:7e:6d:e8: cc:3b:c9:e6:88:02:80:ea:75:9c:ca:5c:07:e5:64:e8:e9:93: da:32:b9:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WMQGHNqrRRxdE+5epIzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUxMDE5MTIwMTM5WhcNMjUxMDIwMTIwMTM5WjAzMTEwLwYDVQQD EyhmNTY0ZmZlM2UxY2FhNTBmOWVlZTg4YTQxMTljNDU4ZDczMDFjMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfovRRNCd0iqsCrQ8EwVhC9o9eIy xTFI/ELRHCn81jLGRD05/ASA4BUjMNL4YwhpweGTvc8s5Kvm4LC6SovCYLALFvip rxwuoqYj3EU190t3rYrx5EUh5Z5bPoZiFliKEWitZmKlAeXhLdmy1fyZZ+nVSJsU HRaCvAjN85gxWFJNID4fl20nqKWkLT2eGFxUrTUESr50JFmKf3EUHtrfz4CJEIvE h1K4OhYEKL5ulZ52ER0kzLdWRvk7sOEc47UTPoGYMG5+qfiVU0c75qNRuP29gVIb Y9HQ0Ev/Ul9ssZ7FiXxKw2dv+fwFB9LZWt0QpWOJgfk4jcIjUY5yOVtAWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVk/+PhyqUPnu6IpBGcRY1zAcGSMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp5tolWv 0ZM+UMUWoOximLyqeH41554nQPmfziduBNBU2hM/xSZXhcQbQruLmyvWQRaixrNn xtzVeiEc37meGAInX9bWRUX6GP+eL/h9VRyifH7XNCW4Qc+WmfeF1k/IBweaSors ZBn7o0/nqlADDvqBOy2/+tVPIm05L8a8Jdu4mTzbVG7am1DXU/sPZygiVaZt785g f06iMasi9yMKSqQ9Ot3ZcumyZtRg1zaW3DLwuylRS5YheQlxyF0rY9xU0LjzsluO EAGRtEywOFMJJlXABLCpZbY0rcaEeltkPb0zwYK47lOxfm3ozDvJ5ogCgOp1nMpc B+Vk6OmT2jK5vA== -----END CERTIFICATE-----Generated at Sun Oct 19 18:02:53 2025 by rpki-client