$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: Ophc8KCvZEeEQoYQKzM4MefJ5vV72PGH7rYsh34PR6M= Subject key identifier: 59:22:0E:68:0D:9E:32:94:6B:B2:B8:76:63:F0:9B:BA:32:BA:E1:E4 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019873071CEEABB5C4EF3F0C528E160EBDDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 1183 Signing time: Mon 04 Aug 2025 03:01:42 +0000 Manifest this update: Mon 04 Aug 2025 03:01:42 +0000 Manifest next update: Tue 05 Aug 2025 03:01:42 +0000 Files and hashes: 1: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 2: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 3: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 4: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 5: 8TJR1HyAwg6k7vxm3-38XYPiUhs.roa (hash: UlmTtzmR+/FZGoYwPXPmvRp8bd7Kee7FHaH8ivwDixM=) 6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 7: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 8: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 9: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 10: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 11: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 12: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 13: ol5y8u_4G20fft_xzP2ULA8gimg.roa (hash: RSgj/k0UnHxK8vwqn89GdKZy49c0En9JMURDQ/SJ3jQ=) 14: oo68fdLP_MI4Rwlcq0C2I-y_K9g.roa (hash: UGZ9aKbm2nLCSA0ehujHTDQj51oKQ6d9RZi7a5m0ANs=) 15: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 16: pXb2BHcIMWoEt176mDnHX2eUQwo.roa (hash: c80j1v8Q2KRhUOiHX3xcSk3hTBR2+iNkEM9MIAJzxDc=) 17: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: ioVIHtfxxQDRqhMcrSBgR7GvbcudgKBFOQqLJW1XG3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:07:1c:ee:ab:b5:c4:ef:3f:0c:52:8e:16:0e:bd:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Aug 4 03:01:42 2025 GMT Not After : Aug 5 03:01:42 2025 GMT Subject: CN=59220e680d9e32946bb2b87663f09bba32bae1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:ae:89:68:c0:48:cb:23:64:aa:d4:b8:d1: d5:f0:75:8e:2d:70:b1:a0:32:53:8b:b4:61:52:20: 5d:ac:a1:a2:f1:54:2b:b7:7e:9b:b4:bf:35:d2:d2: d9:4f:b2:89:92:c7:94:72:0f:e4:c7:b6:c3:8f:0a: 35:e5:d7:95:60:d6:c1:b9:2c:e5:e2:96:e2:a3:ad: b9:e4:58:ce:41:bf:cb:60:ee:3a:4a:92:46:65:7b: 2f:b8:3c:a5:c3:9e:0c:0c:f7:35:dc:82:a2:02:39: d8:7f:d5:4f:ba:b4:1b:e0:cd:37:d8:67:15:09:c5: aa:40:46:b6:00:b4:93:1e:8e:2d:b4:66:16:3f:08: b9:44:0f:46:22:de:d9:24:3b:d1:96:e7:85:11:43: 85:d3:b8:3a:0d:5f:f5:cc:35:e3:76:97:2b:dd:ec: ce:d9:2b:ef:57:33:f9:09:fc:4f:61:8e:d6:b4:a6: 4f:b6:e6:ac:47:72:d6:9d:40:67:0e:dd:18:cb:88: 83:41:c9:8c:62:a2:58:ff:00:f4:56:77:e0:98:2a: 72:0a:dd:45:26:ac:bf:5d:7b:b3:0f:75:9d:ce:7d: 39:ac:8e:2a:a3:64:1f:59:1c:37:3b:91:1f:9a:78: 0e:d8:fa:e2:94:2a:19:80:3e:ce:c2:51:28:89:6b: e2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:0E:68:0D:9E:32:94:6B:B2:B8:76:63:F0:9B:BA:32:BA:E1:E4 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e1:29:65:a6:e8:4a:dd:0e:d6:90:b9:c1:ad:42:db:73:0c: c9:6f:c6:c1:3a:37:77:b4:da:7d:72:c8:f8:28:ca:5d:c2:2a: 06:10:89:f4:3a:ef:67:93:44:3f:81:40:e1:bc:cb:7d:13:11: bc:14:08:dd:d2:36:c2:99:74:4e:1b:42:d0:cf:86:26:55:2f: 16:c2:36:52:b7:e6:5d:7b:f3:22:72:d6:51:89:46:d6:91:02: 2e:ed:5a:41:5c:95:ec:69:9d:43:18:ce:10:97:36:01:77:32: ff:db:e8:e5:ac:c1:a1:ad:93:57:96:16:3c:ae:36:3d:8a:62: 24:7a:12:d7:dc:f0:58:15:40:61:cc:bc:46:5f:50:87:06:5b: 69:01:cb:5c:88:f1:5b:19:bd:c7:ac:32:02:0d:f5:3a:38:94: ac:bc:2b:50:fe:20:83:75:e0:94:31:1a:d5:92:48:67:cf:12: 5e:cc:c0:8f:2f:88:68:dd:7c:e3:81:69:c7:a2:93:58:ca:1f: ad:a1:d9:3e:e4:66:74:08:2f:55:09:12:af:4d:af:b0:b9:e8: b4:f5:9a:48:a1:06:b3:3f:18:32:3d:a6:cd:2e:e0:dc:c5:97: 44:1e:6b:13:8f:be:76:d8:a9:cc:ff:d2:63:85:69:a9:9d:56: aa:c9:9f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzBxzuq7XE7z8MUo4WDr3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwODA0MDMwMTQyWhcNMjUwODA1MDMwMTQyWjAzMTEwLwYDVQQD Eyg1OTIyMGU2ODBkOWUzMjk0NmJiMmI4NzY2M2YwOWJiYTMyYmFlMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLOuiWjASMsjZKrUuNHV8HWOLXCx oDJTi7RhUiBdrKGi8VQrt36btL810tLZT7KJkseUcg/kx7bDjwo15deVYNbBuSzl 4pbio6255FjOQb/LYO46SpJGZXsvuDylw54MDPc13IKiAjnYf9VPurQb4M032GcV CcWqQEa2ALSTHo4ttGYWPwi5RA9GIt7ZJDvRlueFEUOF07g6DV/1zDXjdpcr3ezO 2SvvVzP5CfxPYY7WtKZPtuasR3LWnUBnDt0Yy4iDQcmMYqJY/wD0VnfgmCpyCt1F Jqy/XXuzD3Wdzn05rI4qo2QfWRw3O5EfmngO2PrilCoZgD7OwlEoiWviAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkiDmgNnjKUa7K4dmPwm7oyuuHkMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuEpZabo St0O1pC5wa1C23MMyW/GwTo3d7TafXLI+CjKXcIqBhCJ9DrvZ5NEP4FA4bzLfRMR vBQI3dI2wpl0ThtC0M+GJlUvFsI2UrfmXXvzInLWUYlG1pECLu1aQVyV7GmdQxjO EJc2AXcy/9vo5azBoa2TV5YWPK42PYpiJHoS19zwWBVAYcy8Rl9QhwZbaQHLXIjx Wxm9x6wyAg31OjiUrLwrUP4gg3XglDEa1ZJIZ88SXszAjy+IaN1844Fpx6KTWMof raHZPuRmdAgvVQkSr02vsLnotPWaSKEGsz8YMj2mzS7g3MWXRB5rE4++dtipzP/S Y4VpqZ1WqsmfLQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:22 2025 by rpki-client