$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 9sDlUpYutp8k4dUT8rP2yx49ePojJEfhSqTEggN9fTA= Subject key identifier: DD:A1:3D:0C:37:2E:16:C2:99:15:7F:0B:1E:D2:FE:87:F1:E3:6E:78 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01A0BEB1289185539206B29E3B77180B01E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 1543 Signing time: Sun 20 Sep 2026 12:01:16 +0000 Manifest this update: Sun 20 Sep 2026 12:01:16 +0000 Manifest next update: Mon 21 Sep 2026 12:01:16 +0000 Files and hashes: 1: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=) 2: 5i8pJicwht3G-29N8gSePvi-neM.roa (hash: M5MbRvYtpMldz8xu0SCTyDZEqGvq8XvujJr3JK2yABw=) 3: E7Rm0aUdHrYBhOFVzUfIL2fIx1g.roa (hash: r3HZ3F7FXoFuLxCixJgEocAqMUN20PxmzrQVGnHd8Uc=) 4: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=) 5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: 8jxcAOc3QY+frZ3qRZjZMHGtsgBqyHO9zIoztr5ajT4=) 6: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=) 7: Y9g5RafdGF3cNhPA6x2FBbgWPQ4.roa (hash: 8GiMf+v1riQWRCrUxNvQcQr4xkt3wgt3m4cw6E13FaY=) 8: ctQ_pi7dHsaofgQDy3s_3MF0z5c.roa (hash: LuXSDcOcTzSmFT/Y8M2/v07fi5jciWmvVvQylNBVZ2A=) 9: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=) 10: kRWKSnE2BdhL2P09-15fn5hrxHI.roa (hash: 4gfL53RlpeXbUFwGxhLDWwBqrCzTTRLbTh1kbzrX4j8=) 11: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=) 12: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=) 13: oua9Kp44reoXheBwYMVIn0LsMK8.roa (hash: SAiOCmUsajRvlJSQ1si4F2WehUWy/HXpu9iNYf9XYuQ=) 14: whz1b1ik747CMiJFQQrkzi5a7vs.roa (hash: q5NZbknzGV4wjrsW4T1rPpniNdjNXJbM67VTZR8o7Oo=) 15: zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa (hash: ZkfO9/jzoHTqMuf/g6245EMxohpj+UHCz0pRarj0WJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:b1:28:91:85:53:92:06:b2:9e:3b:77:18:0b:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Sep 20 12:01:16 2026 GMT Not After : Sep 21 12:01:16 2026 GMT Subject: CN=dda13d0c372e16c299157f0b1ed2fe87f1e36e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:8e:2f:e3:cf:e0:17:0f:ef:62:2e:74:3d: ff:34:ec:9e:fd:4e:dd:c0:00:74:66:68:9a:c1:61: 4b:77:a2:05:5e:11:b5:ce:e7:32:eb:75:c9:fd:4c: 68:9e:de:fb:02:d0:de:ca:f3:46:23:2d:6d:e1:e5: 98:9b:81:df:8d:cd:9c:c6:7e:f5:4a:f7:56:a0:ce: 8f:2a:43:36:48:43:ad:24:e3:97:f8:04:ac:01:e3: b2:68:05:a8:53:9e:e1:67:a7:0d:aa:f1:28:a9:85: 49:b2:04:78:ca:96:93:2a:9f:0f:91:6c:b8:58:12: fd:0a:96:c8:66:6f:67:2f:53:88:b0:4f:59:22:17: 5c:77:28:6d:17:a0:84:d5:46:66:5d:f1:c8:2e:78: b5:c1:02:bf:67:68:84:e4:b4:99:15:c6:7c:f3:93: 0f:00:a0:13:02:07:bf:21:bd:a7:dd:80:25:51:b6: 51:9a:d4:f5:40:98:81:c8:b3:b8:38:1c:09:a1:46: f9:d2:17:c4:9c:30:bb:fe:3e:5d:95:68:23:10:41: 98:34:64:e9:0d:ef:07:8d:ed:ee:e8:64:e4:c7:e8: cd:ee:e9:36:b4:29:3b:93:41:18:39:d0:91:7e:38: 0a:2a:25:52:1d:e8:27:35:32:df:a8:89:11:f6:fe: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:3D:0C:37:2E:16:C2:99:15:7F:0B:1E:D2:FE:87:F1:E3:6E:78 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:13:bd:97:2a:9d:fc:43:76:90:ac:7e:b8:c1:12:4a:6f:47: 6a:d2:c1:40:58:8b:4d:11:20:b6:21:66:68:37:8c:fa:cc:42: b6:95:3c:fa:63:ad:c0:23:6c:83:f4:d7:c3:22:45:04:52:78: b9:85:10:d8:9e:4e:3b:c4:33:29:a9:f4:88:7e:a7:f9:da:0f: ed:d8:0d:4e:bf:3f:9e:94:6f:89:7d:7f:d4:71:d7:05:8b:3d: 11:70:83:cc:10:bb:55:b0:27:e8:cf:eb:61:ec:89:0d:44:4e: 94:95:9c:8c:2f:8f:e3:a2:38:7e:35:32:10:41:26:b2:78:df: 2c:84:af:f5:ed:11:ff:d4:b5:77:4b:63:c6:ac:51:02:2e:2f: e9:41:8c:09:1e:a7:87:af:50:56:a3:4a:5d:25:da:59:1f:b3: 80:38:1a:d8:8c:63:dd:ab:e0:5f:bd:7a:4c:f1:e0:8f:30:84: be:58:f6:7a:94:77:0f:f5:06:00:37:13:e8:cc:81:be:c5:14: 23:8d:fb:62:62:fe:22:4c:9a:4d:52:f4:f4:19:ee:07:38:96: 69:29:e5:c8:38:9a:ce:65:6e:81:6d:e3:db:ff:d9:da:70:b6: e3:82:ff:ca:bb:f4:86:42:e4:3d:e6:ad:df:62:7a:a0:44:0e: 69:20:32:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+sSiRhVOSBrKeO3cYCwHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwOTIwMTIwMTE2WhcNMjYwOTIxMTIwMTE2WjAzMTEwLwYDVQQD EyhkZGExM2QwYzM3MmUxNmMyOTkxNTdmMGIxZWQyZmU4N2YxZTM2ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUGOL+PP4BcP72IudD3/NOye/U7d wAB0ZmiawWFLd6IFXhG1zucy63XJ/Uxont77AtDeyvNGIy1t4eWYm4Hfjc2cxn71 SvdWoM6PKkM2SEOtJOOX+ASsAeOyaAWoU57hZ6cNqvEoqYVJsgR4ypaTKp8PkWy4 WBL9CpbIZm9nL1OIsE9ZIhdcdyhtF6CE1UZmXfHILni1wQK/Z2iE5LSZFcZ885MP AKATAge/Ib2n3YAlUbZRmtT1QJiByLO4OBwJoUb50hfEnDC7/j5dlWgjEEGYNGTp De8Hje3u6GTkx+jN7uk2tCk7k0EYOdCRfjgKKiVSHegnNTLfqIkR9v4YywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2hPQw3LhbCmRV/Cx7S/ofx4254MB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxO9lyqd /EN2kKx+uMESSm9HatLBQFiLTREgtiFmaDeM+sxCtpU8+mOtwCNsg/TXwyJFBFJ4 uYUQ2J5OO8QzKan0iH6n+doP7dgNTr8/npRviX1/1HHXBYs9EXCDzBC7VbAn6M/r YeyJDUROlJWcjC+P46I4fjUyEEEmsnjfLISv9e0R/9S1d0tjxqxRAi4v6UGMCR6n h69QVqNKXSXaWR+zgDga2Ixj3avgX716TPHgjzCEvlj2epR3D/UGADcT6MyBvsUU I437YmL+IkyaTVL09BnuBziWaSnlyDiazmVugW3j2//Z2nC244L/yrv0hkLkPeat 32J6oEQOaSAydg== -----END CERTIFICATE-----Generated at Sun Sep 20 22:23:57 2026 by rpki-client