$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: F69zclmebeQXLSBFowZNESYW7kvTRHzwWZNgm0tCF7o= Subject key identifier: 76:7A:7A:02:19:9F:BD:3C:2E:00:A6:6E:F4:41:8F:E3:1B:84:F1:95 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0198808B9E52CD7146C92C5CB169E19F3E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1638 Signing time: Wed 06 Aug 2025 18:01:30 +0000 Manifest this update: Wed 06 Aug 2025 18:01:30 +0000 Manifest next update: Thu 07 Aug 2025 18:01:30 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: z7oPvkJhsZ3fgIK+GmoS1IQveeOBtNXXio9wis0L7zI=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 18:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:80:8b:9e:52:cd:71:46:c9:2c:5c:b1:69:e1:9f:3e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Aug 6 18:01:30 2025 GMT Not After : Aug 7 18:01:30 2025 GMT Subject: CN=767a7a02199fbd3c2e00a66ef4418fe31b84f195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:48:cb:66:dc:03:03:d6:2c:76:fb:a0:1b: 5b:b4:1a:d5:00:0a:5f:42:81:1d:8a:bb:c9:bc:46: 16:62:64:b4:f5:46:b9:2a:8e:ad:42:e4:22:c1:98: c2:a3:14:2f:d0:b6:60:81:16:83:5a:ea:22:d4:11: db:d2:67:cb:7d:ee:e4:a8:a0:da:ef:c3:40:60:4c: 9a:f5:8b:f6:18:67:e2:bc:19:0f:72:42:33:66:b3: 3d:43:dd:f4:8d:10:8a:e2:9c:6e:a6:1b:f1:22:65: 7c:af:c5:ab:f2:de:79:bf:60:42:49:85:10:bd:9b: a6:77:75:e3:96:59:94:35:f1:83:d3:79:89:f7:2f: c4:0d:ee:6d:a8:4f:e8:3b:9b:27:d6:97:a2:44:69: 2d:ad:e7:dd:22:61:31:44:cb:f2:df:48:20:4c:b8: 8c:98:6d:06:f8:e8:ff:14:f4:e5:e7:c8:73:d5:27: 73:ac:09:dc:6a:1c:1f:ad:a7:7e:2b:9e:98:bb:f5: 4a:5c:61:58:e9:71:96:96:93:73:b1:b2:65:6a:2a: 14:bc:b2:61:a6:90:7a:7a:9d:fa:ef:9d:a1:0e:4f: 78:95:f0:d5:e8:0b:fa:a0:f8:77:df:28:1f:ff:ab: 46:e6:60:02:8d:c5:89:88:57:36:e7:c4:74:a6:53: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7A:7A:02:19:9F:BD:3C:2E:00:A6:6E:F4:41:8F:E3:1B:84:F1:95 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:85:64:f7:71:17:53:86:f7:f0:76:28:96:40:d8:89:c8:ce: c4:ab:db:35:24:61:37:26:78:dd:24:a7:c1:bf:52:bd:d5:9f: 08:d7:05:a5:a2:b6:55:f7:b8:02:3e:2c:ea:7f:4a:11:e4:c0: a4:85:08:dc:d7:91:13:8f:d0:20:a1:9e:20:03:ee:24:39:82: aa:81:87:df:3d:04:7d:3d:e7:76:fb:a1:09:1a:08:ba:f3:7d: 72:61:b8:cd:31:26:70:bf:59:99:45:3e:ac:ba:ec:9c:80:b1: 8e:f8:c3:30:69:02:6b:61:3f:92:4a:da:1d:67:10:b9:eb:62: ca:7e:b0:3a:54:8a:c1:ea:86:bc:7e:4a:77:5a:fc:c7:aa:59: cb:42:95:ac:4d:52:b8:a5:d8:f9:9f:88:8f:0e:7c:d8:57:88: c8:73:8f:1b:7a:9a:ee:7d:03:48:97:d0:50:f8:2e:ff:32:c8: 4f:65:88:1d:a6:ea:3c:0d:64:9c:de:eb:ef:e5:c6:aa:f8:34: c6:81:be:08:0e:68:6c:38:00:f3:41:7e:d4:b5:f4:94:91:e8: 25:aa:31:15:b7:ec:d1:4d:48:61:eb:1a:69:b8:a7:be:e8:78: 4d:f4:5d:48:ce:c2:f9:ea:74:b5:fc:ce:54:89:aa:26:64:c1: a3:e5:e9:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiAi55SzXFGySxcsWnhnz4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwODA2MTgwMTMwWhcNMjUwODA3MTgwMTMwWjAzMTEwLwYDVQQD Eyg3NjdhN2EwMjE5OWZiZDNjMmUwMGE2NmVmNDQxOGZlMzFiODRmMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4RIy2bcAwPWLHb7oBtbtBrVAApf QoEdirvJvEYWYmS09Ua5Ko6tQuQiwZjCoxQv0LZggRaDWuoi1BHb0mfLfe7kqKDa 78NAYEya9Yv2GGfivBkPckIzZrM9Q930jRCK4pxuphvxImV8r8Wr8t55v2BCSYUQ vZumd3XjllmUNfGD03mJ9y/EDe5tqE/oO5sn1peiRGktrefdImExRMvy30ggTLiM mG0G+Oj/FPTl58hz1SdzrAncahwfrad+K56Yu/VKXGFY6XGWlpNzsbJlaioUvLJh ppB6ep36752hDk94lfDV6Av6oPh33ygf/6tG5mACjcWJiFc258R0plPVPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ6egIZn708LgCmbvRBj+MbhPGVMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYVk93EX U4b38HYolkDYicjOxKvbNSRhNyZ43SSnwb9SvdWfCNcFpaK2Vfe4Aj4s6n9KEeTA pIUI3NeRE4/QIKGeIAPuJDmCqoGH3z0EfT3ndvuhCRoIuvN9cmG4zTEmcL9ZmUU+ rLrsnICxjvjDMGkCa2E/kkraHWcQuetiyn6wOlSKweqGvH5Kd1r8x6pZy0KVrE1S uKXY+Z+Ijw582FeIyHOPG3qa7n0DSJfQUPgu/zLIT2WIHabqPA1knN7r7+XGqvg0 xoG+CA5obDgA80F+1LX0lJHoJaoxFbfs0U1IYesaabinvuh4TfRdSM7C+ep0tfzO VImqJmTBo+Xp/w== -----END CERTIFICATE-----Generated at Thu Aug 7 00:43:38 2025 by rpki-client