$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: Qo4vUWEuiWlGby2q+GoxcNV2RpRpC5BPb5IkMOtlbCE= Subject key identifier: 24:33:18:24:78:0C:EC:B3:10:0A:5E:2B:B7:0C:3E:91:38:DA:BD:48 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01987298E329A11AF497DBC4BFE92BB0C396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 10EE Signing time: Mon 04 Aug 2025 01:01:18 +0000 Manifest this update: Mon 04 Aug 2025 01:01:18 +0000 Manifest next update: Tue 05 Aug 2025 01:01:18 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: Zm2okYWBe5uLhwkxUjuUj88MCZzjEAY4fxBcbzLkUfs=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:e3:29:a1:1a:f4:97:db:c4:bf:e9:2b:b0:c3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Aug 4 01:01:18 2025 GMT Not After : Aug 5 01:01:18 2025 GMT Subject: CN=24331824780cecb3100a5e2bb70c3e9138dabd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:0d:e0:39:91:4d:cd:d0:44:2d:32:b2:65: 3d:ef:37:7a:4d:66:8a:88:5c:a6:38:5c:a6:d4:e4: 34:23:cf:d1:a3:44:3f:f2:ce:ff:95:be:1f:33:1c: af:18:cf:51:d5:fd:cb:41:36:fb:dd:ba:65:ed:f6: f4:1a:77:72:a0:58:58:89:4e:a3:02:75:4d:3a:09: 72:37:df:4c:62:a5:88:af:eb:de:8d:42:d3:e3:16: 4e:ca:84:ad:77:8a:84:87:bc:78:10:97:09:59:b6: 80:65:49:60:ab:b7:99:98:8a:df:0d:78:25:62:dd: 38:b7:f6:ab:23:2a:4c:e3:cc:01:43:b6:cf:19:20: 15:73:65:3b:93:28:27:b6:ba:e2:a1:c3:a3:2d:a0: b7:87:3e:3a:15:17:11:cf:7a:16:7c:57:f6:cc:99: d1:77:ac:9e:9f:54:00:ac:4d:14:d3:21:30:a6:cb: 41:6e:e1:4c:5b:85:e7:7f:b4:dc:63:b8:bd:a0:33: 29:69:2e:f6:c3:f1:f2:b7:43:b9:ab:91:ed:74:87: b9:dc:5a:ea:fa:12:a2:80:87:99:5f:32:bc:ee:29: 06:72:58:91:f0:3b:cc:1f:8a:ff:75:40:a5:ef:3a: 06:bf:fc:fa:c7:3a:ff:a4:01:d3:5a:da:90:3d:89: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:18:24:78:0C:EC:B3:10:0A:5E:2B:B7:0C:3E:91:38:DA:BD:48 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3f:6d:db:a4:58:d5:56:5f:a9:d7:ff:6c:16:10:1f:a3:a6: b4:e9:55:a9:f7:82:fb:1c:7b:64:e4:53:51:ef:c4:0c:bc:e3: 85:9f:c8:1e:ff:c1:b0:f0:f2:72:ee:e9:24:c3:15:46:e7:fd: 51:15:76:e5:bb:f9:1c:b0:8b:50:8d:90:a5:0a:bc:02:6e:1e: e7:07:ba:ba:67:72:1c:6e:0a:7d:94:30:4c:92:9a:f7:c3:a6: f0:ad:3b:a7:1d:11:53:a3:a4:7b:6e:bd:a4:1d:60:5a:8a:0d: 06:90:92:d6:30:d4:64:fb:5b:e8:3f:b0:be:35:ed:4a:05:25: 25:2c:01:c8:cf:5a:fc:c2:4c:d5:2a:0c:38:0c:6f:8c:29:6f: 39:68:de:d7:e9:ee:e4:fc:be:b9:93:2b:28:20:ed:3c:99:eb: 90:3f:c5:74:3c:f7:b9:ed:03:f1:a5:9c:60:32:8d:a9:fb:d5: 56:e3:61:49:cf:79:3b:6f:59:10:54:43:9f:25:1e:b5:65:2f: 36:2d:18:ec:33:67:bb:d3:f0:5f:2f:6c:a2:18:58:11:ff:c0: 81:9d:dc:b5:ab:5d:4b:9f:50:9a:38:0c:c2:c2:62:31:38:08: 96:4c:5e:9e:df:b1:2a:21:c2:5f:c6:38:c7:b3:5b:02:c9:92: ae:22:55:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymOMpoRr0l9vEv+krsMOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwODA0MDEwMTE4WhcNMjUwODA1MDEwMTE4WjAzMTEwLwYDVQQD EygyNDMzMTgyNDc4MGNlY2IzMTAwYTVlMmJiNzBjM2U5MTM4ZGFiZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LwN4DmRTc3QRC0ysmU97zd6TWaK iFymOFym1OQ0I8/Ro0Q/8s7/lb4fMxyvGM9R1f3LQTb73bpl7fb0GndyoFhYiU6j AnVNOglyN99MYqWIr+vejULT4xZOyoStd4qEh7x4EJcJWbaAZUlgq7eZmIrfDXgl Yt04t/arIypM48wBQ7bPGSAVc2U7kygntrriocOjLaC3hz46FRcRz3oWfFf2zJnR d6yen1QArE0U0yEwpstBbuFMW4Xnf7TcY7i9oDMpaS72w/Hyt0O5q5HtdIe53Frq +hKigIeZXzK87ikGcliR8DvMH4r/dUCl7zoGv/z6xzr/pAHTWtqQPYmd6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQzGCR4DOyzEApeK7cMPpE42r1IMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkT9t26RY 1VZfqdf/bBYQH6OmtOlVqfeC+xx7ZORTUe/EDLzjhZ/IHv/BsPDycu7pJMMVRuf9 URV25bv5HLCLUI2QpQq8Am4e5we6umdyHG4KfZQwTJKa98Om8K07px0RU6Oke269 pB1gWooNBpCS1jDUZPtb6D+wvjXtSgUlJSwByM9a/MJM1SoMOAxvjClvOWje1+nu 5Py+uZMrKCDtPJnrkD/FdDz3ue0D8aWcYDKNqfvVVuNhSc95O29ZEFRDnyUetWUv Ni0Y7DNnu9PwXy9sohhYEf/AgZ3ctatdS59QmjgMwsJiMTgIlkxent+xKiHCX8Y4 x7NbAsmSriJVYQ== -----END CERTIFICATE-----Generated at Mon Aug 4 03:24:57 2025 by rpki-client