$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: JlibgRVFZ6XWY3GeCJ35I2PqOWOL5jjujvFEJFI3c0I= Subject key identifier: 60:E7:A1:58:E4:89:B5:DB:D7:1F:F0:AB:B8:4C:9E:39:F7:E3:E5:0B Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019FAA50B21A871F74D0707F2AE40A5D4DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: 0357 Signing time: Tue 28 Jul 2026 20:00:42 +0000 Manifest this update: Tue 28 Jul 2026 20:00:42 +0000 Manifest next update: Wed 29 Jul 2026 20:00:42 +0000 Files and hashes: 1: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=) 2: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=) 3: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=) 4: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=) 5: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=) 6: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=) 7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: U/uwNU0nboK4f3ANjP1UxVvOUGNtNr+oVKX9Tjsdhn8=) 8: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=) 9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=) 10: rxUnx1ra5EHEfcrIj6uPq_Tbrrs.roa (hash: xMlkEOl/cVJYjxYinyPnGY0MzSt5ZGRrCF7oAtp8yYg=) 11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=) 12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:b2:1a:87:1f:74:d0:70:7f:2a:e4:0a:5d:4d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jul 28 20:00:42 2026 GMT Not After : Jul 29 20:00:42 2026 GMT Subject: CN=60e7a158e489b5dbd71ff0abb84c9e39f7e3e50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:59:82:c1:68:ba:44:87:9b:be:94:1e:ec: c0:e4:38:24:c6:d5:81:e3:5f:39:54:2b:21:b1:a9: 6e:d8:3e:c2:15:e3:e7:9b:cf:1f:94:44:f3:a4:d8: 13:27:20:d0:09:5f:67:3b:8f:45:01:58:fb:8f:24: 00:00:46:ac:0e:2a:a8:99:00:85:a3:f9:ac:19:8d: 4b:51:e6:4d:d7:9b:0e:13:3e:bd:c6:93:32:b1:41: 55:a6:f7:ea:ea:04:37:70:92:07:1f:7b:e2:ca:7d: 77:a9:12:ce:84:7b:50:8c:86:ae:63:83:1f:93:ac: 10:ae:50:bb:37:4f:c4:44:fe:05:24:0b:05:d7:10: b9:d0:93:75:85:88:86:24:06:52:5a:bb:37:0f:7f: dc:37:06:9b:4b:de:32:7c:3f:5a:b7:a1:a9:07:a6: 3a:81:52:44:54:4d:fc:aa:8e:0f:e1:45:97:59:4d: c2:c4:a6:fa:e7:47:dc:c4:6a:c1:44:3e:fd:17:b4: 35:00:ae:62:4c:dd:0d:d2:2b:f0:fc:b5:c1:46:44: d3:76:89:9f:ec:9e:b7:a6:77:6c:de:da:30:46:bf: f2:8c:54:e7:fe:05:a6:ab:e7:1c:45:b9:87:52:1c: 4e:54:da:ce:83:d8:b6:5c:48:7e:e5:23:77:9e:cd: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E7:A1:58:E4:89:B5:DB:D7:1F:F0:AB:B8:4C:9E:39:F7:E3:E5:0B X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:4b:b9:9a:ac:12:50:b7:8f:ca:d8:ad:41:b6:57:f2:0e: 84:6e:62:73:10:d5:2b:94:25:af:af:70:73:d3:3a:79:c4:b6: 6a:84:0d:60:ac:a5:95:64:c5:2e:f2:33:99:e5:5d:01:a9:ee: e3:56:a1:01:0d:86:61:bc:7f:be:31:fe:29:63:f5:dd:c4:18: e8:dd:82:a5:e9:c1:7d:57:19:8c:5b:e4:bd:4a:b2:3f:22:d6: 57:47:86:3f:68:db:f9:d7:ec:42:38:04:6a:d5:15:d9:0b:1b: 0f:0b:c5:da:f4:4a:bc:50:8a:72:da:0a:cf:9c:c1:31:8a:47: 03:66:3e:bd:e8:49:3f:d0:cd:a7:f4:97:cb:e2:d2:57:4f:91: 27:07:b5:fb:99:de:44:0a:25:2c:04:e8:3b:96:04:eb:e1:42: b8:69:5f:19:8b:55:0d:03:c6:d6:42:de:85:65:00:d3:45:2f: 17:10:4a:f5:f1:5d:2a:08:94:87:2f:e4:c2:3f:df:80:6a:59: 6a:9d:cb:68:2d:90:c8:cd:17:1f:79:02:5d:9b:0e:c1:c6:fa: 10:14:bb:3d:ce:e2:de:a4:f6:ef:96:8c:51:f1:e1:41:75:b9: 8a:b6:c9:2b:85:d7:d7:cc:d3:08:47:e1:cc:93:0a:a0:61:59: f1:e4:62:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qULIahx900HB/KuQKXU2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwNzI4MjAwMDQyWhcNMjYwNzI5MjAwMDQyWjAzMTEwLwYDVQQD Eyg2MGU3YTE1OGU0ODliNWRiZDcxZmYwYWJiODRjOWUzOWY3ZTNlNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S9ZgsFoukSHm76UHuzA5DgkxtWB 4185VCshsalu2D7CFePnm88flETzpNgTJyDQCV9nO49FAVj7jyQAAEasDiqomQCF o/msGY1LUeZN15sOEz69xpMysUFVpvfq6gQ3cJIHH3viyn13qRLOhHtQjIauY4Mf k6wQrlC7N0/ERP4FJAsF1xC50JN1hYiGJAZSWrs3D3/cNwabS94yfD9at6GpB6Y6 gVJEVE38qo4P4UWXWU3CxKb650fcxGrBRD79F7Q1AK5iTN0N0ivw/LXBRkTTdomf 7J63pnds3towRr/yjFTn/gWmq+ccRbmHUhxOVNrOg9i2XEh+5SN3ns0K+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDnoVjkibXb1x/wq7hMnjn34+ULMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGRLuZqs ElC3j8rYrUG2V/IOhG5icxDVK5Qlr69wc9M6ecS2aoQNYKyllWTFLvIzmeVdAanu 41ahAQ2GYbx/vjH+KWP13cQY6N2CpenBfVcZjFvkvUqyPyLWV0eGP2jb+dfsQjgE atUV2QsbDwvF2vRKvFCKctoKz5zBMYpHA2Y+vehJP9DNp/SXy+LSV0+RJwe1+5ne RAolLAToO5YE6+FCuGlfGYtVDQPG1kLehWUA00UvFxBK9fFdKgiUhy/kwj/fgGpZ ap3LaC2QyM0XH3kCXZsOwcb6EBS7Pc7i3qT275aMUfHhQXW5irbJK4XX18zTCEfh zJMKoGFZ8eRiFw== -----END CERTIFICATE-----Generated at Wed Jul 29 01:18:09 2026 by rpki-client