$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: J/95dVOyG6YLCNWhQ07bnXRxfIZGmzoaMAOqI3g+HBs= Subject key identifier: 5F:76:71:FA:4A:1D:7A:E2:65:FE:DE:02:5B:CC:53:E5:CD:68:D0:40 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 01977609D1CC95814E16058F2EF46D5D7F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 15AE Signing time: Mon 16 Jun 2025 00:00:44 +0000 Manifest this update: Mon 16 Jun 2025 00:00:44 +0000 Manifest next update: Tue 17 Jun 2025 00:00:44 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: 9wVlR8l05ZvYT3wv3xmr/pAxBjF+MUskDz4GX8uPIjk=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:09:d1:cc:95:81:4e:16:05:8f:2e:f4:6d:5d:7f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jun 16 00:00:44 2025 GMT Not After : Jun 17 00:00:44 2025 GMT Subject: CN=5f7671fa4a1d7ae265fede025bcc53e5cd68d040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:c1:46:36:89:45:d5:7e:0d:b2:16:3c:ad: 88:24:bc:5a:9a:60:3c:af:3f:ca:a4:ea:cd:e4:11: 2e:fa:e7:f6:48:3b:7a:7e:b9:f2:02:bb:f5:2d:fb: 73:0f:9d:55:41:4e:1e:7c:ab:c3:33:93:31:1c:5b: c9:db:90:dc:f1:00:36:8e:72:fa:15:4c:9f:57:62: 63:58:04:6d:83:8a:16:d3:fb:73:48:4c:68:3b:31: f1:52:06:a5:7a:8f:32:7b:cd:4c:8c:68:e6:22:98: 0f:42:6f:95:0c:9d:4e:00:13:ee:fd:72:0c:d6:2a: 74:b8:97:d4:c8:04:13:ab:20:32:a6:69:3c:ad:7a: c3:dd:7f:78:97:f0:91:97:e3:6d:c8:6c:29:e4:0b: 53:e5:b0:01:94:79:0f:2c:58:8c:2a:c3:74:48:c8: 2d:9d:1a:2c:df:87:f6:e6:35:17:71:4f:53:b0:a3: 50:e0:f6:d4:b6:51:4f:a8:09:83:92:0b:c2:a5:ac: db:32:96:d8:d3:f8:ba:3f:e9:14:83:7b:4d:5e:d5: fd:64:9e:58:c7:95:70:29:b7:87:da:15:dc:d2:2b: ab:93:eb:fb:d6:91:05:b3:e7:77:65:c5:4d:c9:65: 7f:c1:d5:93:a5:ca:e7:47:34:1a:f6:f6:b1:58:13: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:76:71:FA:4A:1D:7A:E2:65:FE:DE:02:5B:CC:53:E5:CD:68:D0:40 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:dc:1d:86:c9:55:d7:fd:be:e2:09:33:6b:fe:70:16:59: b9:a3:a8:64:d7:cc:bb:09:e3:33:f4:94:8f:68:a3:57:75:b3: b8:97:3b:0b:3c:e2:bc:3a:55:dd:ae:e3:58:2c:4c:7c:b5:ab: 06:ec:78:50:a1:71:5b:a3:45:20:21:0b:79:ed:1d:f8:64:a5: 35:5d:61:80:36:39:97:31:01:0f:3a:fc:01:d7:92:c0:a4:4b: 00:7e:3a:8b:9c:aa:54:37:4c:0a:70:4c:0b:cf:84:3b:2a:d5: f2:a3:47:81:f4:fd:b4:5d:cf:1c:2b:42:a9:16:39:39:6f:35: 02:7a:68:4c:1a:fb:7c:f2:1a:0d:ae:c4:74:1a:27:33:fc:8e: 06:31:f1:82:d2:c3:12:79:4a:97:53:5b:16:70:a6:ee:81:68: 58:33:55:a8:cf:e4:5c:2c:57:39:4f:83:83:c4:26:a2:7a:2c: 99:f1:e3:4e:2f:f9:2c:60:d9:2c:8c:b8:28:38:ad:99:38:14: c6:04:5b:8f:60:a3:26:68:98:c2:a2:15:0a:9e:41:39:79:11: ba:cb:9e:72:96:1f:68:e6:7b:a7:3e:e5:5e:1d:57:d1:36:bc: 01:78:55:77:45:7b:e5:31:b2:0f:b7:73:e1:11:c1:95:8b:df: 18:52:d2:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2CdHMlYFOFgWPLvRtXX+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwNjE2MDAwMDQ0WhcNMjUwNjE3MDAwMDQ0WjAzMTEwLwYDVQQD Eyg1Zjc2NzFmYTRhMWQ3YWUyNjVmZWRlMDI1YmNjNTNlNWNkNjhkMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY3BRjaJRdV+DbIWPK2IJLxammA8 rz/KpOrN5BEu+uf2SDt6frnyArv1LftzD51VQU4efKvDM5MxHFvJ25Dc8QA2jnL6 FUyfV2JjWARtg4oW0/tzSExoOzHxUgaleo8ye81MjGjmIpgPQm+VDJ1OABPu/XIM 1ip0uJfUyAQTqyAypmk8rXrD3X94l/CRl+NtyGwp5AtT5bABlHkPLFiMKsN0SMgt nRos34f25jUXcU9TsKNQ4PbUtlFPqAmDkgvCpazbMpbY0/i6P+kUg3tNXtX9ZJ5Y x5VwKbeH2hXc0iurk+v71pEFs+d3ZcVNyWV/wdWTpcrnRzQa9vaxWBP9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF92cfpKHXriZf7eAlvMU+XNaNBAMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkfcHYbJ Vdf9vuIJM2v+cBZZuaOoZNfMuwnjM/SUj2ijV3WzuJc7CzzivDpV3a7jWCxMfLWr Bux4UKFxW6NFICELee0d+GSlNV1hgDY5lzEBDzr8AdeSwKRLAH46i5yqVDdMCnBM C8+EOyrV8qNHgfT9tF3PHCtCqRY5OW81AnpoTBr7fPIaDa7EdBonM/yOBjHxgtLD EnlKl1NbFnCm7oFoWDNVqM/kXCxXOU+Dg8QmonosmfHjTi/5LGDZLIy4KDitmTgU xgRbj2CjJmiYwqIVCp5BOXkRusuecpYfaOZ7pz7lXh1X0Ta8AXhVd0V75TGyD7dz 4RHBlYvfGFLSFg== -----END CERTIFICATE-----Generated at Mon Jun 16 05:19:22 2025 by rpki-client