$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: S0GQAZmvQysagatfXFAN+zGa7IpK4xgFH3XsBEy0+Qk= Subject key identifier: 45:69:C3:BC:19:66:AA:B9:5B:18:1D:74:7C:22:D2:00:0F:7E:6A:3F Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 0197B77C27086C28ACD655E11A9511F53B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 11FF Signing time: Sat 28 Jun 2025 17:00:56 +0000 Manifest this update: Sat 28 Jun 2025 17:00:56 +0000 Manifest next update: Sun 29 Jun 2025 17:00:56 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: U0Ow0uGBneFXITgkYoy62sVt8W2G8T7v7XdY+zx7qmI=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:27:08:6c:28:ac:d6:55:e1:1a:95:11:f5:3b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jun 28 17:00:56 2025 GMT Not After : Jun 29 17:00:56 2025 GMT Subject: CN=4569c3bc1966aab95b181d747c22d2000f7e6a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bf:82:37:7f:3d:d6:4f:16:e4:4d:cf:da:0f: 85:3b:bd:12:fb:a2:c5:dd:6b:77:91:59:49:17:31: 8b:6e:98:4e:cc:a9:16:3d:3d:04:96:2d:40:e5:ba: fc:fa:53:13:0a:96:f2:59:a5:1e:3e:2c:c0:01:a4: 1d:b3:de:85:51:fa:9f:9a:70:17:20:82:ec:ea:a7: 46:95:a0:2e:f5:47:86:bb:67:46:6e:6a:29:2a:78: ba:d2:6e:b4:71:ee:a3:16:e1:1f:07:aa:0e:76:f8: b2:c9:f5:26:eb:75:4e:14:ff:c8:a9:2a:cd:a5:f1: 36:a4:1e:62:e4:b0:75:cb:02:00:d5:7e:59:02:fa: 60:12:ed:2b:a0:23:78:a4:93:51:8c:dd:c1:90:8b: 5f:32:6c:7f:90:b3:4a:53:b0:d3:54:f9:ec:7e:a6: 1e:20:2a:89:b7:0e:2e:5d:c3:a5:e2:be:a2:67:5f: d7:e2:52:5f:e1:98:6a:00:a5:fb:3a:f8:98:82:e0: a6:d3:ae:d8:4f:19:0a:73:6e:2e:4d:89:68:92:b1: 56:32:a7:b6:31:43:b4:56:12:86:24:46:39:62:20: 7c:ec:e7:88:f7:a5:ae:6c:bc:8f:e6:59:71:16:b8: f6:c6:36:ba:2a:71:d6:46:d3:38:2e:90:8e:bd:a8: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:69:C3:BC:19:66:AA:B9:5B:18:1D:74:7C:22:D2:00:0F:7E:6A:3F X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:18:51:73:b3:22:c8:1c:83:97:44:8a:80:c4:fb:ad:97:aa: 8a:2e:45:51:0e:c6:aa:3b:06:bf:12:f3:e9:b8:11:e0:10:38: c6:bd:70:8a:a4:43:66:be:ed:de:34:cf:e7:41:d0:8a:cc:ad: fc:d1:9e:e7:0b:a3:ac:63:b2:47:2a:f9:e2:09:a6:76:47:16: c4:b4:1a:95:09:9a:e5:c9:83:69:31:91:0c:d0:b1:68:f5:d0: 3a:35:1c:d7:f2:64:7c:78:26:b4:22:19:64:24:50:4c:c9:89: 28:5d:24:24:d1:b9:96:83:77:67:48:d1:e6:7c:91:6e:ef:3f: 98:bb:bf:07:84:68:dc:17:bc:d5:db:4c:69:6a:9a:05:37:e4: b2:ce:98:21:a7:0d:22:9b:02:d7:87:55:5c:17:87:4b:68:40: c7:29:3b:46:8e:ca:33:42:e2:12:e3:6e:48:e3:30:38:c1:a3: 1c:9e:e1:d7:38:6e:47:a9:6b:0e:8c:22:d8:02:cb:82:72:e7: 15:06:4b:60:38:fb:e3:8e:f0:9d:b1:5d:ae:89:19:61:42:c0: 12:10:95:51:c6:91:5f:6a:a1:d2:dd:83:39:3a:21:e5:a1:8a: 45:1b:26:c1:52:6a:0e:64:db:9c:6c:3b:e7:7f:bd:7b:5a:08: 1d:4e:75:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fCcIbCis1lXhGpUR9Tt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNjI4MTcwMDU2WhcNMjUwNjI5MTcwMDU2WjAzMTEwLwYDVQQD Eyg0NTY5YzNiYzE5NjZhYWI5NWIxODFkNzQ3YzIyZDIwMDBmN2U2YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb+CN3891k8W5E3P2g+FO70S+6LF 3Wt3kVlJFzGLbphOzKkWPT0Eli1A5br8+lMTCpbyWaUePizAAaQds96FUfqfmnAX IILs6qdGlaAu9UeGu2dGbmopKni60m60ce6jFuEfB6oOdviyyfUm63VOFP/IqSrN pfE2pB5i5LB1ywIA1X5ZAvpgEu0roCN4pJNRjN3BkItfMmx/kLNKU7DTVPnsfqYe ICqJtw4uXcOl4r6iZ1/X4lJf4ZhqAKX7OviYguCm067YTxkKc24uTYlokrFWMqe2 MUO0VhKGJEY5YiB87OeI96WubLyP5llxFrj2xja6KnHWRtM4LpCOvaiBCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVpw7wZZqq5WxgddHwi0gAPfmo/MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRhRc7Mi yByDl0SKgMT7rZeqii5FUQ7GqjsGvxLz6bgR4BA4xr1wiqRDZr7t3jTP50HQisyt /NGe5wujrGOyRyr54gmmdkcWxLQalQma5cmDaTGRDNCxaPXQOjUc1/JkfHgmtCIZ ZCRQTMmJKF0kJNG5loN3Z0jR5nyRbu8/mLu/B4Ro3Be81dtMaWqaBTfkss6YIacN IpsC14dVXBeHS2hAxyk7Ro7KM0LiEuNuSOMwOMGjHJ7h1zhuR6lrDowi2ALLgnLn FQZLYDj7447wnbFdrokZYULAEhCVUcaRX2qh0t2DOToh5aGKRRsmwVJqDmTbnGw7 53+9e1oIHU510g== -----END CERTIFICATE-----Generated at Sat Jun 28 23:25:28 2025 by rpki-client