$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: m+2fn/q4J5qtdNoxD1ff1mt1KKUGZC3U9G+FK9yok1c= Subject key identifier: F8:1A:5D:29:3C:32:E3:D9:D3:76:D7:E0:42:0D:E9:58:4B:CF:A4:DB Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 0198D54E86364CEA9914B30C9E5F6FF9682E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1293 Signing time: Sat 23 Aug 2025 05:02:29 +0000 Manifest this update: Sat 23 Aug 2025 05:02:29 +0000 Manifest next update: Sun 24 Aug 2025 05:02:29 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: kwPBxcYAxT576M+eTkVh2fbRZ+IMjmxiJaRNGnsV2/0=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:86:36:4c:ea:99:14:b3:0c:9e:5f:6f:f9:68:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Aug 23 05:02:29 2025 GMT Not After : Aug 24 05:02:29 2025 GMT Subject: CN=f81a5d293c32e3d9d376d7e0420de9584bcfa4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:92:71:94:3a:59:14:1d:14:19:b0:8a:ef: cb:2b:ca:82:84:46:7c:69:cd:ba:17:49:04:c5:b9: 86:32:8f:a3:d6:e8:af:03:cb:7a:09:b4:aa:bb:5c: b0:74:24:19:5b:8e:f2:a7:ea:9e:b6:ba:9e:ff:67: c8:12:99:78:0d:f4:63:56:cd:5d:f2:73:f2:e0:69: 0a:0e:8b:4e:59:57:56:a9:7c:dd:8b:90:0f:ea:cc: ec:9f:ea:9c:3a:c2:d2:33:88:ef:9d:2d:df:6b:36: 30:dc:4d:2f:df:c8:ba:29:64:76:34:06:17:0b:54: a0:87:7e:11:a8:da:d5:da:c1:8d:28:eb:4c:e6:32: e2:a0:8b:c9:c6:87:bb:27:4b:e9:b1:d1:41:ec:50: 83:da:d0:4e:f5:f4:90:7c:e7:22:82:42:af:14:a1: 00:b1:6b:a2:a0:24:3e:1d:9c:ba:4c:6c:f0:53:20: 68:85:97:ac:01:69:6e:6b:26:17:0f:08:6b:0d:23: 76:8d:a7:98:96:9d:a6:4c:48:b2:b6:37:56:35:7c: ad:11:8d:88:4a:9c:80:f4:96:f2:0b:26:ae:6b:30: 4f:e1:b0:71:1b:b0:4a:c0:0a:67:ca:68:46:0a:11: b7:23:85:0f:cf:14:39:fb:5c:b2:60:1b:ec:7a:9d: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1A:5D:29:3C:32:E3:D9:D3:76:D7:E0:42:0D:E9:58:4B:CF:A4:DB X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:11:96:7f:2a:f4:82:be:06:17:54:d4:61:fd:a5:9a:00:0e: bf:90:1b:ff:ad:32:2e:e6:82:ed:3a:ce:38:93:f9:58:93:8c: 7b:00:ca:be:4d:4d:eb:d8:62:e1:94:90:c5:32:c1:c0:91:23: 37:9a:df:fb:0c:49:25:3b:7b:ce:cb:a4:4c:01:78:e1:a5:00: aa:0b:09:12:69:92:a3:0e:dc:4d:c1:63:03:fe:f7:9c:42:0b: f3:7d:e0:ce:f3:09:d9:db:ff:a0:45:c4:d5:cb:31:fb:93:ea: 17:78:f3:c3:b3:f1:94:ed:96:c6:98:d3:da:39:88:ed:cc:d9: 30:c6:2f:e6:38:54:4e:4e:f5:45:bb:4c:12:1e:5d:88:c7:a4: 06:35:d4:05:2f:79:b9:e9:af:e7:9d:83:a6:6f:5b:ba:f0:cc: 55:69:6f:8b:d4:ca:c3:bc:1f:92:8d:28:88:bc:6d:69:2d:29: 5d:5c:d1:ac:c6:1d:f3:f8:00:d0:4f:c0:15:d1:a6:e6:45:f5: 9a:0e:44:19:59:f9:f1:82:8d:1f:e7:7b:34:13:66:c2:d7:c2: 42:32:f9:45:23:71:59:f9:9c:93:ef:47:4c:ee:34:77:93:71: f0:51:95:96:13:93:ff:19:08:75:00:71:3a:8e:18:a6:9d:92: 91:ea:3f:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVToY2TOqZFLMMnl9v+WguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwODIzMDUwMjI5WhcNMjUwODI0MDUwMjI5WjAzMTEwLwYDVQQD EyhmODFhNWQyOTNjMzJlM2Q5ZDM3NmQ3ZTA0MjBkZTk1ODRiY2ZhNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBWScZQ6WRQdFBmwiu/LK8qChEZ8 ac26F0kExbmGMo+j1uivA8t6CbSqu1ywdCQZW47yp+qetrqe/2fIEpl4DfRjVs1d 8nPy4GkKDotOWVdWqXzdi5AP6szsn+qcOsLSM4jvnS3fazYw3E0v38i6KWR2NAYX C1Sgh34RqNrV2sGNKOtM5jLioIvJxoe7J0vpsdFB7FCD2tBO9fSQfOcigkKvFKEA sWuioCQ+HZy6TGzwUyBohZesAWluayYXDwhrDSN2jaeYlp2mTEiytjdWNXytEY2I SpyA9JbyCyauazBP4bBxG7BKwApnymhGChG3I4UPzxQ5+1yyYBvsep1HfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgaXSk8MuPZ03bX4EIN6VhLz6TbMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBGWfyr0 gr4GF1TUYf2lmgAOv5Ab/60yLuaC7TrOOJP5WJOMewDKvk1N69hi4ZSQxTLBwJEj N5rf+wxJJTt7zsukTAF44aUAqgsJEmmSow7cTcFjA/73nEIL833gzvMJ2dv/oEXE 1csx+5PqF3jzw7PxlO2WxpjT2jmI7czZMMYv5jhUTk71RbtMEh5diMekBjXUBS95 uemv552Dpm9buvDMVWlvi9TKw7wfko0oiLxtaS0pXVzRrMYd8/gA0E/AFdGm5kX1 mg5EGVn58YKNH+d7NBNmwtfCQjL5RSNxWfmck+9HTO40d5Nx8FGVlhOT/xkIdQBx Oo4Ypp2Skeo/sw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:46:11 2025 by rpki-client