$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: fenA/wHYmzHcFCFmOf0Ldf42Ais1DQCLyV4ym0A+Y+s= Subject key identifier: E7:B2:1A:CD:C9:68:B0:4D:39:21:27:1B:C2:7D:4B:56:E8:C5:A9:76 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019A4D745958F00BB8A5778EB0ABE7FC1A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1729 Signing time: Tue 04 Nov 2025 06:01:01 +0000 Manifest this update: Tue 04 Nov 2025 06:01:01 +0000 Manifest next update: Wed 05 Nov 2025 06:01:01 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: GCQqtakod1eJTRL6PjIZcoZqPbk.roa (hash: uw7TYrAKDmGLJeaKrdOqVzvHJTnCYwW9/8HncjUd7nU=) 4: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 5: W45mJSyGhgdQ9zewUY7p6fJs6uE.roa (hash: S0MJIivhJVi9GNKDX6t87ue94qt19adiwa5YUk9PVS4=) 6: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 7: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: Gs3YdO2TLjB8Iax7aHehtVyVGnamWuCp96sDSk7wdOk=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:59:58:f0:0b:b8:a5:77:8e:b0:ab:e7:fc:1a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Nov 4 06:01:01 2025 GMT Not After : Nov 5 06:01:01 2025 GMT Subject: CN=e7b21acdc968b04d3921271bc27d4b56e8c5a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:de:93:04:16:7a:77:70:b3:6f:2c:68:72: 8f:dc:a7:e7:4c:eb:6a:06:c0:9c:29:9f:af:29:84: ad:c5:63:f3:bd:c0:ab:04:32:87:b1:05:36:57:8d: 27:82:9f:bf:7a:3d:b9:e2:bc:a4:2d:d7:1e:9a:4c: 51:7f:06:47:f4:2e:43:ee:95:d0:73:eb:9e:7a:4d: b6:9e:51:4e:1d:95:be:0a:a7:23:9a:41:0e:ca:ab: 20:3d:58:34:43:5b:fa:ec:c4:d8:00:fc:9c:f7:11: ef:ac:cb:6e:bf:b3:93:38:ea:81:92:46:91:c8:0c: 80:a8:02:96:b2:9d:fa:8e:d9:8f:86:80:db:cd:cb: 96:55:c1:0f:b8:f3:e3:20:1d:26:b5:55:5a:0a:59: 67:4c:58:69:0c:ac:d8:96:18:78:12:64:71:21:da: eb:61:68:a6:36:54:80:d8:1d:10:25:1f:6b:8a:51: 5b:96:02:59:31:9a:16:13:ed:ec:34:20:c6:d3:4f: 98:21:6e:23:8f:03:4e:3e:9f:5f:7f:95:28:d0:c0: 9b:0c:22:1c:11:ac:19:10:7d:47:b5:cb:88:02:c0: 45:74:65:fd:7e:4c:40:6b:a6:41:a7:68:db:22:1a: ff:4d:d7:3a:6e:c9:bb:39:8e:92:df:5f:93:f1:f0: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B2:1A:CD:C9:68:B0:4D:39:21:27:1B:C2:7D:4B:56:E8:C5:A9:76 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:7f:54:01:d3:24:76:a4:92:4f:55:13:3d:35:be:e1:3a: 22:71:4f:d9:5b:31:23:d7:89:3b:f1:7f:40:2d:73:b9:85:84: 0e:93:2a:46:d9:65:9d:53:ef:1a:31:d8:ae:7d:0d:bd:86:2f: 16:6c:8e:6e:f7:3a:c2:ae:e0:a1:f6:77:0b:78:65:28:98:f3: e0:ab:6c:d8:aa:90:6d:90:34:65:e4:b0:bc:7d:e7:4e:69:bf: d3:12:d6:77:a6:de:d6:1c:ca:1b:a2:d4:a0:1c:4d:4c:5e:8d: 6e:2c:49:f4:00:00:7b:52:41:04:c0:e8:fb:78:27:68:b5:98: ff:1b:1e:0e:ad:29:d5:ee:6c:36:30:78:2c:dc:e8:08:67:1e: b2:7b:c3:a8:c8:e2:5d:04:80:23:0e:4b:8b:03:27:5a:f9:ce: 30:87:b4:23:da:55:12:41:1a:a7:58:00:c2:5c:75:5d:5f:44: 4c:37:3c:8c:f1:43:4f:be:99:a6:19:fa:56:d7:5f:f4:92:99: a1:d0:45:a1:b0:5e:b6:11:b9:ac:fb:40:e1:45:7d:19:7c:7b: be:5a:38:5c:6b:56:e5:ef:13:55:2c:a6:db:dd:77:09:1d:91: e2:05:d3:64:e7:4e:03:f4:63:2d:5f:93:aa:08:3e:ad:ef:d2: 56:24:57:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdFlY8Au4pXeOsKvn/BqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUxMTA0MDYwMTAxWhcNMjUxMTA1MDYwMTAxWjAzMTEwLwYDVQQD EyhlN2IyMWFjZGM5NjhiMDRkMzkyMTI3MWJjMjdkNGI1NmU4YzVhOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqULekwQWendws28saHKP3KfnTOtq BsCcKZ+vKYStxWPzvcCrBDKHsQU2V40ngp+/ej254rykLdcemkxRfwZH9C5D7pXQ c+ueek22nlFOHZW+CqcjmkEOyqsgPVg0Q1v67MTYAPyc9xHvrMtuv7OTOOqBkkaR yAyAqAKWsp36jtmPhoDbzcuWVcEPuPPjIB0mtVVaCllnTFhpDKzYlhh4EmRxIdrr YWimNlSA2B0QJR9rilFblgJZMZoWE+3sNCDG00+YIW4jjwNOPp9ff5Uo0MCbDCIc EawZEH1HtcuIAsBFdGX9fkxAa6ZBp2jbIhr/Tdc6bsm7OY6S31+T8fAo3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeyGs3JaLBNOSEnG8J9S1boxal2MB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXB/VAHT JHakkk9VEz01vuE6InFP2VsxI9eJO/F/QC1zuYWEDpMqRtllnVPvGjHYrn0NvYYv FmyObvc6wq7gofZ3C3hlKJjz4Kts2KqQbZA0ZeSwvH3nTmm/0xLWd6be1hzKG6LU oBxNTF6NbixJ9AAAe1JBBMDo+3gnaLWY/xseDq0p1e5sNjB4LNzoCGcesnvDqMji XQSAIw5LiwMnWvnOMIe0I9pVEkEap1gAwlx1XV9ETDc8jPFDT76Zphn6Vtdf9JKZ odBFobBethG5rPtA4UV9GXx7vlo4XGtW5e8TVSym2913CR2R4gXTZOdOA/RjLV+T qgg+re/SViRXYg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:40:56 2025 by rpki-client