$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: KJoNFYaaMM/eVCe6NshIqXAO6rRhRdRm4hf6/X1tDP4= Subject key identifier: 7F:5D:94:2B:94:EE:82:E2:E1:66:F5:4E:09:31:FC:5B:3D:7F:0C:0E Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019FAC953820513E6587A70C1B8CE64EA0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0359 Signing time: Wed 29 Jul 2026 06:34:48 +0000 Manifest this update: Wed 29 Jul 2026 06:34:48 +0000 Manifest next update: Thu 30 Jul 2026 06:34:48 +0000 Files and hashes: 1: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=) 2: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 3: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 4: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 5: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=) 6: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=) 7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: pZ+DF/BWWP9DUf3uA0HhLngCVQl5LuJ69ioy8/Y4cAU=) 8: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=) 9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 10: oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa (hash: T3/R9exHSgP0k2kmjvxBvwzSyy0v3tasEbkkEODMBfE=) 11: rxUnx1ra5EHEfcrIj6uPq_Tbrrs.roa (hash: xMlkEOl/cVJYjxYinyPnGY0MzSt5ZGRrCF7oAtp8yYg=) 12: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 13: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:95:38:20:51:3e:65:87:a7:0c:1b:8c:e6:4e:a0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jul 29 06:34:48 2026 GMT Not After : Jul 30 06:34:48 2026 GMT Subject: CN=7f5d942b94ee82e2e166f54e0931fc5b3d7f0c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:37:95:9a:d1:18:6b:d6:7d:3a:ae:10:c1: 04:1d:de:ae:04:ad:c7:26:6f:7b:54:64:c6:16:98: 80:9a:fb:5c:ba:27:12:60:9c:f4:61:2e:8b:01:29: 90:5b:73:17:ef:1a:49:55:a2:f0:48:61:27:69:8b: 42:64:9a:78:c1:f0:b5:36:60:43:ac:9d:d6:78:a8: f5:cb:64:f2:d8:87:5c:56:35:06:f7:c5:1f:b8:d1: 4b:0c:f1:5a:de:db:26:50:f2:ed:39:ea:37:d0:07: 55:94:b7:7f:70:69:9f:54:81:36:4f:83:a8:59:8b: 8f:1e:d7:a1:82:3c:db:f6:64:8a:6c:10:60:1d:a8: 18:91:d8:17:5c:be:3f:17:24:ec:c3:40:26:1d:68: f6:f4:11:51:2f:0e:9a:c4:c8:cc:0a:10:4b:79:6a: 93:cc:a7:e9:0f:9d:24:6a:fa:e0:ae:a9:7a:4a:bc: a6:9d:2d:a3:5d:8e:29:ec:d6:6b:27:9b:0c:4c:24: 0c:d1:50:18:77:4d:9e:4c:d2:07:1b:5a:63:86:f2: 9b:15:c7:49:4b:00:bf:f9:05:58:fb:30:df:54:7b: 53:0e:52:a0:8c:22:cb:9d:11:f8:f3:7d:e0:f2:48: 6f:74:08:81:4d:87:3c:57:ac:c1:0d:55:75:f1:94: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5D:94:2B:94:EE:82:E2:E1:66:F5:4E:09:31:FC:5B:3D:7F:0C:0E X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:9b:8a:fa:83:c1:c5:80:51:03:88:8a:a3:11:75:93:62:28: 31:4f:4a:fa:06:83:b5:1f:69:19:dd:1a:06:34:1c:eb:dd:89: 27:33:cc:1f:c8:d7:13:3d:fb:18:1f:da:63:65:b3:99:5d:71: 56:d6:d5:08:e8:fb:e1:74:bd:e7:ea:c8:09:51:18:fc:9d:2a: 0f:71:bc:ad:6b:d4:f8:3e:0d:9a:d6:c7:05:88:c4:5f:00:40: 83:bf:e3:7b:92:4b:27:26:fa:06:a9:ea:6e:fa:9c:2b:36:c6: 9d:3b:88:aa:a9:8f:3d:85:ba:1e:ae:80:2c:90:d8:ff:58:80: e8:b8:c5:6d:cd:0e:56:6a:25:70:5c:be:25:08:66:4c:35:a6: d9:3f:cb:5a:44:60:5a:fe:40:59:39:d0:91:2f:c4:c5:7a:b2: d3:ee:d3:6f:98:9c:1b:dc:1f:d2:66:bb:40:43:b6:02:30:60: 79:3a:fe:e7:88:01:2d:b4:dc:9c:96:a7:2f:a6:d2:03:12:a2: 67:d4:b9:80:bb:35:da:73:e7:0a:a8:56:ce:e8:3f:90:e8:09: 66:6d:fc:56:c8:e3:96:11:a1:46:e0:7f:8b:50:16:40:6e:12: ff:5e:05:60:d8:bf:04:44:11:46:a7:43:9d:48:99:ae:0b:c5: 57:16:2b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+slTggUT5lh6cMG4zmTqC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwNzI5MDYzNDQ4WhcNMjYwNzMwMDYzNDQ4WjAzMTEwLwYDVQQD Eyg3ZjVkOTQyYjk0ZWU4MmUyZTE2NmY1NGUwOTMxZmM1YjNkN2YwYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIY3lZrRGGvWfTquEMEEHd6uBK3H Jm97VGTGFpiAmvtcuicSYJz0YS6LASmQW3MX7xpJVaLwSGEnaYtCZJp4wfC1NmBD rJ3WeKj1y2Ty2IdcVjUG98UfuNFLDPFa3tsmUPLtOeo30AdVlLd/cGmfVIE2T4Oo WYuPHtehgjzb9mSKbBBgHagYkdgXXL4/FyTsw0AmHWj29BFRLw6axMjMChBLeWqT zKfpD50kavrgrql6SrymnS2jXY4p7NZrJ5sMTCQM0VAYd02eTNIHG1pjhvKbFcdJ SwC/+QVY+zDfVHtTDlKgjCLLnRH4833g8khvdAiBTYc8V6zBDVV18ZSeoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9dlCuU7oLi4Wb1Tgkx/Fs9fwwOMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6ZuK+oPB xYBRA4iKoxF1k2IoMU9K+gaDtR9pGd0aBjQc692JJzPMH8jXEz37GB/aY2WzmV1x VtbVCOj74XS95+rICVEY/J0qD3G8rWvU+D4NmtbHBYjEXwBAg7/je5JLJyb6Bqnq bvqcKzbGnTuIqqmPPYW6Hq6ALJDY/1iA6LjFbc0OVmolcFy+JQhmTDWm2T/LWkRg Wv5AWTnQkS/ExXqy0+7Tb5icG9wf0ma7QEO2AjBgeTr+54gBLbTcnJanL6bSAxKi Z9S5gLs12nPnCqhWzug/kOgJZm38VsjjlhGhRuB/i1AWQG4S/14FYNi/BEQRRqdD nUiZrgvFVxYr0g== -----END CERTIFICATE-----Generated at Wed Jul 29 08:40:24 2026 by rpki-client