$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: whAiUIdVTjdPSnu/6xhNtYC/vGRFIckoQmY8v17yDl8= Subject key identifier: 80:99:69:D3:AF:98:B9:9C:D8:80:87:CC:94:42:83:4D:D6:A9:65:42 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 0196B823228AB2F707776D4A8EBCF06DCF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 125C Signing time: Sat 10 May 2025 03:00:32 +0000 Manifest this update: Sat 10 May 2025 03:00:32 +0000 Manifest next update: Sun 11 May 2025 03:00:32 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: OKfAXODB1QmuitnDyPKCPcQARDDiqSSNhHv9IWOtBng=) 6: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 7: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 8: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 9: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 10: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 11: mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa (hash: WKtl9/rCVdqattn0ipGNumFRIFTCx0VUypyRv/GA3Gw=) 12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:23:22:8a:b2:f7:07:77:6d:4a:8e:bc:f0:6d:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: May 10 03:00:32 2025 GMT Not After : May 11 03:00:32 2025 GMT Subject: CN=809969d3af98b99cd88087cc9442834dd6a96542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:65:2f:d6:76:06:b1:56:e4:7b:28:0d:2b: a6:f3:79:99:2b:ad:40:27:be:35:aa:51:1d:fc:bc: 7e:72:d7:d8:e4:56:1c:97:31:88:f3:7e:1e:a0:37: 6b:71:9d:9d:82:a4:18:1f:f4:f1:6d:16:6d:3d:0c: e5:c8:cb:9d:39:66:1a:c1:cb:ba:2b:a5:7a:39:d6: 71:c1:e0:fe:bc:b7:7e:3a:e8:68:42:8c:b4:6f:ac: a2:6e:ca:20:8f:a2:39:62:54:87:a3:5f:c2:6b:7a: 75:61:15:c2:54:48:fb:ad:2e:95:af:cc:fb:2e:70: 98:9b:56:9b:78:51:ec:36:2c:a0:96:51:bb:81:4d: d7:ea:02:c2:4d:3c:ef:d1:7f:40:73:7e:6a:50:f9: ea:19:03:24:1d:65:b5:07:1a:50:f1:aa:26:5d:01: 2d:39:31:b2:04:36:86:5e:5a:a4:6d:00:7e:9e:5e: 74:ed:22:1b:c8:52:eb:0e:07:9d:3a:74:69:b4:cf: 9f:77:5e:ff:af:63:92:61:73:8d:3a:db:0d:14:ef: 16:40:a9:58:69:04:54:84:ba:e0:37:a4:25:4b:90: 31:50:2b:d2:13:06:1d:12:76:e3:89:55:ca:3f:6d: df:68:5e:da:f9:51:21:a8:98:0e:08:4e:66:25:50: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:69:D3:AF:98:B9:9C:D8:80:87:CC:94:42:83:4D:D6:A9:65:42 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d3:b7:0f:33:cf:64:4a:fb:1e:66:b9:6b:5c:5c:fb:1f:42: b0:24:8f:be:ac:07:a4:ab:70:5b:92:0b:4c:81:a4:73:b6:88: b3:b1:33:29:78:05:7d:79:f8:20:39:e6:63:49:d1:3a:fe:ec: 1c:4c:48:ca:c7:6e:e5:ca:ed:f0:ac:da:dc:b6:11:10:94:4f: 98:a0:87:06:dd:c1:2b:82:bc:94:1f:84:a4:24:3f:c7:73:7a: 15:5f:f8:64:87:8d:88:f3:e3:2f:06:2f:c6:4a:b0:8b:e4:7c: 8a:cd:36:c1:e0:fd:f3:34:d5:1f:20:77:62:cd:04:0c:c2:81: 1f:4f:09:c1:b4:0e:04:8c:6c:48:66:9f:10:ed:fd:67:ca:3f: bf:7f:ad:3f:42:46:16:a8:50:8d:50:81:18:72:2b:84:31:b9: eb:81:02:46:13:d7:b6:d9:04:d1:24:10:45:e7:8e:22:72:eb: aa:f4:21:b8:8f:4d:05:dd:bc:21:31:db:4d:d9:53:84:e9:dd: 16:18:eb:d9:b8:28:08:e9:30:f7:d2:11:9d:e6:aa:3e:ac:ed: c5:93:b9:f6:30:0b:1c:0d:ea:dc:12:31:b0:d4:0d:10:b8:57: 93:59:08:cc:88:38:b4:54:2b:f3:58:77:1c:98:a9:51:cb:60: 0a:e7:b6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4IyKKsvcHd21Kjrzwbc92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwNTEwMDMwMDMyWhcNMjUwNTExMDMwMDMyWjAzMTEwLwYDVQQD Eyg4MDk5NjlkM2FmOThiOTljZDg4MDg3Y2M5NDQyODM0ZGQ2YTk2NTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2plL9Z2BrFW5HsoDSum83mZK61A J741qlEd/Lx+ctfY5FYclzGI834eoDdrcZ2dgqQYH/TxbRZtPQzlyMudOWYawcu6 K6V6OdZxweD+vLd+OuhoQoy0b6yibsogj6I5YlSHo1/Ca3p1YRXCVEj7rS6Vr8z7 LnCYm1abeFHsNiygllG7gU3X6gLCTTzv0X9Ac35qUPnqGQMkHWW1BxpQ8aomXQEt OTGyBDaGXlqkbQB+nl507SIbyFLrDgedOnRptM+fd17/r2OSYXONOtsNFO8WQKlY aQRUhLrgN6QlS5AxUCvSEwYdEnbjiVXKP23faF7a+VEhqJgOCE5mJVDdxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICZadOvmLmc2ICHzJRCg03WqWVCMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9O3DzPP ZEr7Hma5a1xc+x9CsCSPvqwHpKtwW5ILTIGkc7aIs7EzKXgFfXn4IDnmY0nROv7s HExIysdu5crt8Kza3LYREJRPmKCHBt3BK4K8lB+EpCQ/x3N6FV/4ZIeNiPPjLwYv xkqwi+R8is02weD98zTVHyB3Ys0EDMKBH08JwbQOBIxsSGafEO39Z8o/v3+tP0JG FqhQjVCBGHIrhDG564ECRhPXttkE0SQQReeOInLrqvQhuI9NBd28ITHbTdlThOnd Fhjr2bgoCOkw99IRneaqPqztxZO59jALHA3q3BIxsNQNELhXk1kIzIg4tFQr81h3 HJipUctgCue2/w== -----END CERTIFICATE-----Generated at Sat May 10 08:38:23 2025 by rpki-client