$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: irK5vaf+dT+IQJ69t8DG+/UaNpuZ0mAiPm02fZanWSE= Subject key identifier: 77:BB:33:30:77:E2:A1:05:AC:FD:40:58:DA:77:F3:AF:18:07:01:19 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 0198733D6B3FC9BC027BF5D854989011B576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 1624 Signing time: Mon 04 Aug 2025 04:01:01 +0000 Manifest this update: Mon 04 Aug 2025 04:01:01 +0000 Manifest next update: Tue 05 Aug 2025 04:01:01 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: Tq9G6OpVZ646TuNuTT5jcsvNoiNoltGZw4//fXA3AtQ=) 8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=) 9: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=) 10: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=) 11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=) 13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:3d:6b:3f:c9:bc:02:7b:f5:d8:54:98:90:11:b5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Aug 4 04:01:01 2025 GMT Not After : Aug 5 04:01:01 2025 GMT Subject: CN=77bb333077e2a105acfd4058da77f3af18070119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:c7:11:0f:f0:2b:b2:ef:aa:63:a9:f6:2b: f8:d0:e0:e4:09:31:55:97:0b:27:bf:c2:f1:4d:2f: 6c:c1:53:ad:10:99:2d:d0:8c:b2:f7:e3:05:2b:cc: 66:37:87:2f:06:1a:ae:d6:51:93:08:bc:fa:0d:48: 68:71:f1:c9:18:ff:9e:01:76:e9:1a:14:95:08:71: 10:94:d1:3a:8a:d4:8c:77:a0:c1:28:71:55:fd:47: 71:5e:2b:3d:81:75:5f:fe:44:00:b4:68:58:57:7d: 0f:c9:1e:6a:9e:5b:df:e1:17:cb:51:a6:b9:18:86: 2d:84:b3:8e:d4:40:c8:1f:c9:d9:e2:cf:00:20:8b: 25:8d:3d:31:da:3d:4f:82:c0:f3:88:38:2e:08:7a: 9f:4b:79:16:1b:0c:0f:98:cc:2a:f3:13:bf:62:78: b7:f8:67:be:54:55:50:fd:41:1b:0f:36:cd:4f:d9: 0a:8d:7e:58:21:1f:a1:2b:5b:ba:ee:20:6a:23:da: 8c:15:da:87:67:f8:17:ca:a2:e0:31:1b:8b:d0:b6: 03:78:ed:27:82:0f:5b:c8:b5:2f:2b:89:56:7f:4b: 95:10:09:a7:2a:5e:d4:11:dc:50:ed:30:15:1e:b8: 74:bf:ab:3e:2d:47:f5:76:2e:d7:e6:63:2e:98:9d: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BB:33:30:77:E2:A1:05:AC:FD:40:58:DA:77:F3:AF:18:07:01:19 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ad:18:36:59:39:76:2e:b7:da:b5:7b:41:a5:c6:42:72:76: 7f:e5:e1:41:fc:94:b0:cc:66:6d:13:4c:8f:d7:fa:b3:1b:5d: 52:b4:52:63:2a:66:9d:bd:d7:f7:f2:09:c6:03:2b:87:f3:68: 3e:e4:99:18:4f:42:7c:5e:67:45:4c:30:2a:5f:cd:df:06:ca: d8:93:4b:b8:56:8b:d6:6d:68:f5:6e:f2:63:33:2c:a9:55:04: 13:00:be:52:2c:d3:34:55:bc:23:a3:ab:f2:36:07:02:49:8e: d7:55:d8:6c:ea:3b:2c:0a:de:2d:35:71:ad:fa:f3:99:93:4f: cd:2a:2c:2e:15:13:3c:36:b7:d5:b8:61:3e:f5:33:e8:de:9c: 8b:4f:8c:39:aa:7c:e4:0b:16:3e:57:d4:74:47:f1:f6:be:45: da:91:cf:4f:dd:eb:ff:02:e7:2f:13:36:c3:a6:3b:8d:8f:0c: 30:b0:d4:5a:35:ef:b3:da:8a:2a:04:51:7f:3f:cf:1d:1e:79: 13:dc:d3:61:f7:bd:b9:c8:ea:b7:5f:0c:ef:ad:d2:5b:2a:50: b8:a6:0b:42:d5:8a:11:3b:ee:b9:0a:f6:0d:e4:7c:32:96:f6: 31:90:8c:0a:6b:4a:e5:90:23:67:d1:37:d2:4e:1c:14:c4:d7: eb:b7:20:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzPWs/ybwCe/XYVJiQEbV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwODA0MDQwMTAxWhcNMjUwODA1MDQwMTAxWjAzMTEwLwYDVQQD Eyg3N2JiMzMzMDc3ZTJhMTA1YWNmZDQwNThkYTc3ZjNhZjE4MDcwMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWXHEQ/wK7LvqmOp9iv40ODkCTFV lwsnv8LxTS9swVOtEJkt0Iyy9+MFK8xmN4cvBhqu1lGTCLz6DUhocfHJGP+eAXbp GhSVCHEQlNE6itSMd6DBKHFV/UdxXis9gXVf/kQAtGhYV30PyR5qnlvf4RfLUaa5 GIYthLOO1EDIH8nZ4s8AIIsljT0x2j1PgsDziDguCHqfS3kWGwwPmMwq8xO/Yni3 +Ge+VFVQ/UEbDzbNT9kKjX5YIR+hK1u67iBqI9qMFdqHZ/gXyqLgMRuL0LYDeO0n gg9byLUvK4lWf0uVEAmnKl7UEdxQ7TAVHrh0v6s+LUf1di7X5mMumJ1mRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe7MzB34qEFrP1AWNp3868YBwEZMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT60YNlk5 di632rV7QaXGQnJ2f+XhQfyUsMxmbRNMj9f6sxtdUrRSYypmnb3X9/IJxgMrh/No PuSZGE9CfF5nRUwwKl/N3wbK2JNLuFaL1m1o9W7yYzMsqVUEEwC+UizTNFW8I6Or 8jYHAkmO11XYbOo7LAreLTVxrfrzmZNPzSosLhUTPDa31bhhPvUz6N6ci0+MOap8 5AsWPlfUdEfx9r5F2pHPT93r/wLnLxM2w6Y7jY8MMLDUWjXvs9qKKgRRfz/PHR55 E9zTYfe9ucjqt18M763SWypQuKYLQtWKETvuuQr2DeR8Mpb2MZCMCmtK5ZAjZ9E3 0k4cFMTX67cgDw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:02 2025 by rpki-client