$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft File: VMvaeLHRthPfVl_5lwC2rulA3j8.mft (raw, json) Hash identifier: 88vFSwtxhBEc7O/E3OXTayHpzJogBrhhorNYXyg0giY= Subject key identifier: E9:BB:CA:06:7B:39:52:83:B2:87:93:E4:17:1B:79:48:13:F7:ED:92 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019A4F2B8598DAEAADDD56F8823A7EF46495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft Manifest number: 173C Signing time: Tue 04 Nov 2025 14:00:43 +0000 Manifest this update: Tue 04 Nov 2025 14:00:43 +0000 Manifest next update: Wed 05 Nov 2025 14:00:43 +0000 Files and hashes: 1: 0BP0KGJkFndJVhg4iJyuEpAUh2Q.roa (hash: +xARcNUOy44/0IUgRyFkDdCWb9Bmo8nmFLSiePQUm68=) 2: 0cO4ncofuOOavd4WKDZZp3uCU2A.roa (hash: xLawauZ1tEe7YyvT9w+7DlBDWVL0vSX2Y3B7u+HqboM=) 3: 1-Ic1C_JQ8WFUDRbQVM_sqmSHG0I.roa (hash: o/km+tRaUdqzFsCA8CD11A4YOHN5+bCH+yPZnxaNKw4=) 4: 1-LkhLBKkcj54UocdAxlIInyFc8w.roa (hash: nBYN95YGAJSbiE6yyJzIhCMy20uciRwVyVUw4AqhZCw=) 5: 1-Qbe7ItKLmTD3ZT6I_tfhnKA1F0.roa (hash: 35+u2TcewFG5MPcgu5/CWUo29LHqw3M3ErLqVomO6t4=) 6: 2SHzeEjAqvcLgdp5WwX1vUVg_b4.roa (hash: Hzy7kWjWavQFtlwLS0CVQpm6M+pMHdbRv3cNRgmcINA=) 7: 2ujhB6VtG1wsMePDSGyrLHuqsz4.roa (hash: dhHK2KxyQ/AB3/IoaSgau9aQ0lHwQqIE9ZsDmZIVap8=) 8: 6FrDuCY1vKJvYiNSjUCWvFLPFVQ.roa (hash: GnbdXxClu5QJNyR80vuHFcpVcehYzwyRhjEjW9CIyZY=) 9: 8mMS3HIomrHZlr0tSi4nJre_iQ0.roa (hash: wtOrmgukYQjypE1HeG89vBeioWsg00xvgoLaY2Mxgzk=) 10: AexxvHfZyLr0cw61OjpBts2b0GQ.roa (hash: QoCYA+e6SeTGoP5GL2LflAJnXWlHIBqT4FaJWKFAKhA=) 11: AfuoeYMBkn5sEeWIPbGAbVt-A8A.roa (hash: AdgC7UtrLYjY+UG2mFS8WfhKnMTOQwGIk4/vY7tKjoE=) 12: CPKskOAtzA-egJ2CR-qs28FaTns.roa (hash: 7WyLrVE2Z+tn0PjSAarRuKoKdxJR60QxJCCY+0bTg+0=) 13: Gr71KmVq4Fpo3C-WiVN0x-J5iIs.roa (hash: IZ3fisAoqz1jDgEKtaHhs6iOQRRtsE2MhCoBcG5PSvQ=) 14: LCgkZwmbKkdjXPlAXVdt7CYkbQ0.roa (hash: erTzc9OKk7rHqCvgZhdmqWwLIgx/iZXuiMkBNi83xQ0=) 15: NX7DD1CV1Fm-vrBgY_U3AzFTBx4.roa (hash: 45fMWvWbQyGgbggvJSHlk9SqOTeUewhUmU7EOLYsR9A=) 16: S_GqD0SxmtRzhF8ypadzBGAiS7A.roa (hash: Dg2rDfJPUZ6kGhaJNzjZPCtWt9Kc0Jc5sYdqgfiK2HQ=) 17: VMvaeLHRthPfVl_5lwC2rulA3j8.crl (hash: TEhikPiAjxxOhuR0SLBYZRilXXSeS7aVnixto/MVMj8=) 18: Vtfd1hM6TwLVIwuBpWAC2ArBtVs.roa (hash: v9qk0RO6muLVg9IyiMy1kdFG1e9XdhyvAHBpmi1n9aE=) 19: VxzvbbNUAObmMU0IpKcdnXZ1BxE.roa (hash: O0rL/Xrm85XOk/qFl3MooUNeHPMNMB+5ehqcO2RLcWI=) 20: WoVaijlh7MVqQV4JpMFA6Zv1lP8.roa (hash: 93LhitKZk/dhVJfftIZflc4ldcyFRpIg6pCX+BpkdaU=) 21: X1FkyHdlJ2lKyFx0O-FyBfUYZ8s.roa (hash: xR4PGLqAg+mGtPWKDhZKuoyTeYFeaF4MEFWpcGPlh5E=) 22: aTyGHkd8L6xF1SuLySccXunrA14.roa (hash: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=) 23: bb-Qgt64DIFzbq8j4XbnCr7ZXgU.roa (hash: xz9XLPoWhll2io7c8D81Bp9ZhnbsvdfV3miuDw9HOHQ=) 24: cYwwzAgaXEBJvEPe2tv_6hgv2Tw.roa (hash: CRrt42i3+A6BQui4Tr26+gGEI2j+qfNbfZYM48UONZ4=) 25: dJPP-PkBi33AJe9GjVGArq6S2Qk.roa (hash: 133fliltidDXZK3M/DsnNTOIe10JxO4p3F5kuAt/Mes=) 26: eQ-tpFbE-mG9mGrDlNWU1oCquvI.roa (hash: Zt2Vk5h5dO9kYMTWAEIEMaZQ+tgV3DRBAIFwRe9QmoA=) 27: knIR7TiOanL5_UuiRkjg6PExYPA.roa (hash: ERYy0uVVdjAIjaG9rMyUI8jUIPoDAHs5rghe95okyd0=) 28: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (hash: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=) 29: ljD_gVu1qs2Kl-0qKDp3UUaMANQ.roa (hash: YcPEsfq9GWzefDfl1aj8X/VvzCJxb2lIQMIp+xhIHmg=) 30: m-V1kiaksKavIZgS1xPF2dZqoHs.roa (hash: HcrfgfAGDi+sUTt8LJbJ88dGJyfIH4VygN2JiXexWI8=) 31: m-w-pPX-GIsFJGbFqTvk5xT9ShI.roa (hash: jmwgZACI5VikW6OLBks2wyMBOSwl5hT2QqdEebOMYEU=) 32: nHeF5wKOyjhxyKKHp_2iztg8Svo.roa (hash: kd9/vAT6su/4Ux9JkoU5RsRNOjaaYL2ILIdnRJ4W0+w=) 33: sKgxdVIxf_7aOcgI7uaLjKzXJaE.roa (hash: b/4TyNfL8tc0RdYYjm6a6HPdIzANJIlY5JKGTcbxZLk=) 34: vF_oOv9r76q0FdPzPzMSZ_Qg32Q.roa (hash: e1pIcFPEPVHgPSZ/4xAXLRUAcbxV8wPmoubi9BuN51c=) 35: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (hash: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=) 36: zSzl34L5RETNDTSuPWiH6TL51X4.roa (hash: FEK4ufmfWlN5aNgSIE6cz0/2QdmOZQ5aNRL/DGy69S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:85:98:da:ea:ad:dd:56:f8:82:3a:7e:f4:64:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Nov 4 14:00:43 2025 GMT Not After : Nov 5 14:00:43 2025 GMT Subject: CN=e9bbca067b395283b28793e4171b794813f7ed92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:3a:f8:83:78:e5:58:5c:26:ab:1d:1c:6b: fb:ad:01:32:86:26:c7:df:6f:32:2d:c0:79:b0:0c: d0:a7:50:ee:43:70:eb:97:77:b0:a5:ec:f4:8d:2c: fc:92:10:19:41:00:a1:ad:38:dd:01:ec:20:3d:0d: 76:1a:fa:7d:37:ee:27:90:83:a6:02:0e:7e:ec:8f: 86:1a:b6:77:ad:ae:3b:fd:f9:d7:70:7a:f8:85:12: b2:ca:57:40:bb:a2:fc:e3:c9:34:ae:45:5f:a9:65: b5:14:33:03:b5:7e:5e:cc:ff:7a:5e:14:10:3c:20: c2:28:c3:96:5f:7e:45:36:98:91:93:fa:89:4b:20: 71:21:22:c2:36:10:d1:69:9a:8e:b2:9d:93:f2:f3: 56:a6:86:34:21:ed:01:ae:c0:f8:39:0d:c3:78:47: 21:68:bb:6c:1e:42:10:c6:36:c2:d2:4e:9d:9d:ed: c4:4e:94:a1:b2:1a:19:77:4c:3a:ff:4c:20:b5:b3: b3:d3:ee:b3:e1:5b:05:2f:1c:65:12:d4:7f:4d:aa: 54:f2:b5:19:87:22:d9:2b:df:3c:c8:00:36:22:88: 9c:e3:34:43:0d:39:d3:b8:cd:3f:7b:05:58:2d:d4: d7:15:fe:a5:4a:42:56:97:fd:ad:21:4c:46:11:ca: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BB:CA:06:7B:39:52:83:B2:87:93:E4:17:1B:79:48:13:F7:ED:92 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d3:6d:18:ac:3d:ba:d6:68:ac:71:cf:f5:96:5e:5a:80:d9: 2d:49:6e:c0:72:ab:c5:b4:f8:52:72:21:d0:1e:87:6b:5f:75: 26:3c:14:e5:63:f6:f6:8f:0a:37:2f:77:4a:4c:c1:61:e4:ab: 17:ef:e1:26:03:92:01:aa:85:ca:37:c0:bf:09:8a:39:0a:02: 20:40:38:68:4e:e8:cd:5c:26:11:ae:21:fd:6a:8e:22:e4:6f: 06:2e:37:d0:5b:fb:a9:4b:df:5a:b9:9e:aa:c9:3d:85:16:86: cd:ec:16:14:6d:bf:f3:c1:37:5a:d5:7c:d2:0b:23:ae:8f:ba: 1b:a7:71:ea:12:3e:af:12:08:9e:32:ae:02:07:03:c0:45:c5: 75:c4:41:89:df:85:5b:62:1e:86:75:ee:48:c9:41:44:72:83: 22:c1:82:d4:72:27:78:26:5e:6e:21:b7:76:4c:8e:83:7d:0c: e2:5f:dc:92:00:ed:c2:20:47:ac:d7:35:1f:8b:03:f0:15:76: 1d:38:b7:d8:b5:cb:07:56:07:ad:ae:51:69:57:7f:b3:d5:84: 73:d0:98:eb:de:6f:5b:cc:a3:bf:b2:02:82:09:48:92:cd:6b: 9b:a8:db:9e:2c:f9:6d:f4:b0:cc:48:b9:f0:d5:7c:85:bf:18: ff:2e:49:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK4WY2uqt3Vb4gjp+9GSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjUxMTA0MTQwMDQzWhcNMjUxMTA1MTQwMDQzWjAzMTEwLwYDVQQD EyhlOWJiY2EwNjdiMzk1MjgzYjI4NzkzZTQxNzFiNzk0ODEzZjdlZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtM6+IN45VhcJqsdHGv7rQEyhibH 328yLcB5sAzQp1DuQ3Drl3ewpez0jSz8khAZQQChrTjdAewgPQ12Gvp9N+4nkIOm Ag5+7I+GGrZ3ra47/fnXcHr4hRKyyldAu6L848k0rkVfqWW1FDMDtX5ezP96XhQQ PCDCKMOWX35FNpiRk/qJSyBxISLCNhDRaZqOsp2T8vNWpoY0Ie0BrsD4OQ3DeEch aLtsHkIQxjbC0k6dne3ETpShshoZd0w6/0wgtbOz0+6z4VsFLxxlEtR/TapU8rUZ hyLZK988yAA2Ioic4zRDDTnTuM0/ewVYLdTXFf6lSkJWl/2tIUxGEcoeawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOm7ygZ7OVKDsoeT5BcbeUgT9+2SMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9NtGKw9 utZorHHP9ZZeWoDZLUluwHKrxbT4UnIh0B6Ha191JjwU5WP29o8KNy93SkzBYeSr F+/hJgOSAaqFyjfAvwmKOQoCIEA4aE7ozVwmEa4h/WqOIuRvBi430Fv7qUvfWrme qsk9hRaGzewWFG2/88E3WtV80gsjro+6G6dx6hI+rxIInjKuAgcDwEXFdcRBid+F W2IehnXuSMlBRHKDIsGC1HIneCZebiG3dkyOg30M4l/ckgDtwiBHrNc1H4sD8BV2 HTi32LXLB1YHra5RaVd/s9WEc9CY695vW8yjv7ICgglIks1rm6jbniz5bfSwzEi5 8NV8hb8Y/y5JZg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:01:17 2025 by rpki-client