$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: 2iC+aJ9n2AywNbTqr4SXVYfgI+XQ5A7POmXlJkls4yY= Subject key identifier: 28:03:96:F9:12:BA:40:44:D0:42:F9:B9:BD:AF:AD:C5:6C:64:F5:26 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01976A3C817A22E85D9863E86033024C4324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 11D7 Signing time: Fri 13 Jun 2025 17:00:39 +0000 Manifest this update: Fri 13 Jun 2025 17:00:39 +0000 Manifest next update: Sat 14 Jun 2025 17:00:39 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: znZEVMdGy0Y6Kf4NFHp33tZAhxVzJY6wkufJ23LHY24=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6a:3c:81:7a:22:e8:5d:98:63:e8:60:33:02:4c:43:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jun 13 17:00:39 2025 GMT Not After : Jun 14 17:00:39 2025 GMT Subject: CN=280396f912ba4044d042f9b9bdafadc56c64f526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:a1:43:67:94:28:2a:a7:dc:29:9c:80:34: e7:f5:f1:e6:ff:07:0e:ff:4d:16:fa:7f:5f:a1:4d: 23:64:35:60:d0:bb:d1:8d:83:aa:94:ca:56:5a:ac: 98:9b:1e:71:79:46:dc:df:a7:61:43:06:85:66:f6: f4:6b:1b:6b:86:56:3e:1b:67:3d:1c:fb:f6:b8:b5: 08:11:c4:ae:54:10:87:b2:ef:1e:46:33:e7:52:c2: d3:4e:ba:61:80:26:9e:4d:58:c5:00:08:56:19:b8: 83:28:b1:36:00:82:d1:31:78:e4:b2:ee:06:a6:72: c1:98:73:df:9a:e5:6f:a8:10:8d:91:01:37:e8:90: 05:cb:22:75:10:cb:6b:8c:35:08:9c:03:ef:bd:26: 26:d9:f4:f2:b0:15:08:65:46:e2:7c:c0:49:e9:b1: 80:45:4e:9d:39:b7:48:50:c0:2b:ec:41:7b:b5:51: 60:bf:3e:e5:63:92:3c:af:db:50:7f:1b:04:b0:5b: eb:e8:8b:f9:9f:b2:de:82:09:0b:e0:23:ef:56:12: 10:c4:bd:20:ff:f0:d2:e8:c7:20:3a:b3:f0:a6:bf: 65:72:c7:41:55:4b:71:d7:60:a5:18:39:df:ee:bf: 4b:2b:b3:ac:fd:8f:6e:41:5b:ca:fd:5a:6b:48:47: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:96:F9:12:BA:40:44:D0:42:F9:B9:BD:AF:AD:C5:6C:64:F5:26 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:13:7a:3c:75:08:32:c3:80:b4:5c:d4:18:22:69:85:41:2c: 1a:8a:af:41:c6:fb:b1:7e:d8:64:45:4b:59:8f:4c:f9:97:88: a8:5b:78:ee:c4:f6:b2:7d:cb:5d:51:e4:10:83:a0:71:ed:03: 1b:0f:35:88:9e:2e:59:b8:eb:bd:8b:0b:ec:25:60:da:4f:96: a3:7d:7a:91:f7:65:f2:8c:1c:0e:4d:20:7c:7c:8c:39:55:e7: d8:f4:85:57:7c:9b:5e:6f:47:ee:c1:5b:47:75:ac:fa:97:93: d7:9d:81:1e:20:17:5b:c7:c7:08:be:02:07:dc:68:a5:b5:8d: 73:57:c2:e2:d5:14:5d:d4:6e:29:dd:df:06:7c:2a:a6:2e:9e: bf:68:b0:72:ff:2e:59:59:52:10:74:1c:ec:1b:85:97:e5:94: e8:a9:80:ac:dd:d5:4f:29:c5:d9:a0:ec:4d:08:3c:95:d4:c8: 30:18:11:a1:0a:e2:8c:a9:33:3e:b0:c5:03:ac:a7:ca:09:08: 81:08:9e:97:95:5e:85:b5:3c:92:a7:75:80:00:2c:b1:fe:95: 44:26:0d:ce:5b:2d:f3:1c:81:59:6e:43:1c:29:9e:92:ee:53: c9:8b:75:a6:d5:db:81:6a:19:47:e1:73:af:8e:b6:67:c0:75: 9c:62:49:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdqPIF6IuhdmGPoYDMCTEMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNjEzMTcwMDM5WhcNMjUwNjE0MTcwMDM5WjAzMTEwLwYDVQQD EygyODAzOTZmOTEyYmE0MDQ0ZDA0MmY5YjliZGFmYWRjNTZjNjRmNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ihQ2eUKCqn3CmcgDTn9fHm/wcO /00W+n9foU0jZDVg0LvRjYOqlMpWWqyYmx5xeUbc36dhQwaFZvb0axtrhlY+G2c9 HPv2uLUIEcSuVBCHsu8eRjPnUsLTTrphgCaeTVjFAAhWGbiDKLE2AILRMXjksu4G pnLBmHPfmuVvqBCNkQE36JAFyyJ1EMtrjDUInAPvvSYm2fTysBUIZUbifMBJ6bGA RU6dObdIUMAr7EF7tVFgvz7lY5I8r9tQfxsEsFvr6Iv5n7LeggkL4CPvVhIQxL0g //DS6McgOrPwpr9lcsdBVUtx12ClGDnf7r9LK7Os/Y9uQVvK/VprSEfNKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgDlvkSukBE0EL5ub2vrcVsZPUmMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRN6PHUI MsOAtFzUGCJphUEsGoqvQcb7sX7YZEVLWY9M+ZeIqFt47sT2sn3LXVHkEIOgce0D Gw81iJ4uWbjrvYsL7CVg2k+Wo316kfdl8owcDk0gfHyMOVXn2PSFV3ybXm9H7sFb R3Ws+peT152BHiAXW8fHCL4CB9xopbWNc1fC4tUUXdRuKd3fBnwqpi6ev2iwcv8u WVlSEHQc7BuFl+WU6KmArN3VTynF2aDsTQg8ldTIMBgRoQrijKkzPrDFA6ynygkI gQiel5VehbU8kqd1gAAssf6VRCYNzlst8xyBWW5DHCmeku5TyYt1ptXbgWoZR+Fz r462Z8B1nGJJCA== -----END CERTIFICATE-----Generated at Fri Jun 13 19:46:28 2025 by rpki-client