$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 3I6u2blRk6GE42T/StcRy3T94jpNr2J1fc8Jnq/tqnw= Subject key identifier: 64:24:F4:71:A4:C6:6C:7E:A3:82:F0:87:EA:34:AB:AD:69:60:56:3C Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 01A0DC4D878A941B259AEF206B4221FD5162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 17A6 Signing time: Sat 26 Sep 2026 06:01:03 +0000 Manifest this update: Sat 26 Sep 2026 06:01:03 +0000 Manifest next update: Sun 27 Sep 2026 06:01:03 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 3: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 4: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 5: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: veP4pvz/oAb5QrQcy5TgOvtXXDsihgmGz1ejQNHrSgo=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: cI3avh87O39OTH2EDCZqQutH5Ns.roa (hash: PWvhR3t5RRJ4KX9H65mhTT6EDfYi6lc1qIh3TLRHz2Y=) 11: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 12: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 15: yDHywWsdIhBQgVuHLGKPzw5EM7U.roa (hash: 9Ahh7dFFmiQE0dfQuEmxqO0TQHF9u86//wZZySbZLs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:4d:87:8a:94:1b:25:9a:ef:20:6b:42:21:fd:51:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Sep 26 06:01:03 2026 GMT Not After : Sep 27 06:01:03 2026 GMT Subject: CN=6424f471a4c66c7ea382f087ea34abad6960563c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:29:6a:da:6a:67:f5:af:f1:fc:05:9d:77: a3:38:ed:f7:60:24:f5:d8:b2:92:f0:9b:16:b0:9f: 26:d1:c3:f1:83:b1:97:5a:fa:a0:26:6b:e9:ea:67: 41:7d:75:e1:55:39:b1:04:3b:e8:7a:2b:ff:7c:5a: 55:18:42:99:5c:cb:e1:d9:3d:9c:d1:ae:92:89:3d: 43:1a:8d:9e:08:62:5b:15:c9:78:85:01:42:43:df: fd:43:29:23:10:4c:ed:54:51:d0:be:3b:29:41:fa: e1:58:3d:56:6f:45:e4:bd:e0:ab:b9:62:43:04:cf: de:40:42:a4:6f:11:2a:b1:4b:21:0c:c8:81:e8:c8: d8:a9:95:4f:fc:2f:01:b2:46:11:07:79:c2:c4:4d: 78:9f:11:af:75:db:09:c1:fa:60:e5:cc:36:3f:48: 83:77:f1:35:32:94:0d:bf:63:f2:13:59:9e:4a:3f: 2c:3a:b4:d1:94:68:d4:97:21:0f:52:1e:43:38:11: b8:1f:45:b0:02:30:3b:8c:cc:5d:8a:49:60:43:5d: 6b:4b:5c:80:aa:84:e4:7b:1c:41:46:45:6a:2a:88: 39:7e:ac:ff:9f:54:c9:9a:c9:31:6a:29:f5:16:e9: 7d:85:c4:70:5a:0e:d5:b2:c2:e8:d4:04:c8:93:f1: 32:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:24:F4:71:A4:C6:6C:7E:A3:82:F0:87:EA:34:AB:AD:69:60:56:3C X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:da:71:10:73:50:64:73:d2:4d:6b:72:a2:a8:c6:b4:ea:48: 2b:8b:18:f8:e3:3c:6d:fb:06:1e:fe:9e:d7:10:4c:b6:50:bc: ab:6c:35:9c:22:55:21:3d:53:b0:f3:5c:7a:27:6e:17:38:82: d2:cd:0a:7e:ab:23:2a:41:81:94:4c:1b:f5:32:73:35:fc:09: 55:31:02:0f:e7:ac:95:c2:b1:9d:23:e3:f3:60:bd:49:3a:7e: 22:33:27:f0:75:b8:80:5c:0b:bb:ec:0d:9d:56:f6:f4:9d:6d: 14:10:73:70:cd:86:61:ce:de:21:a1:d4:77:88:89:0b:7a:7d: 53:db:a9:83:31:7b:e9:df:dd:13:e8:5b:05:cd:3c:3f:f0:c0: 9d:a8:09:27:65:12:13:9b:80:23:50:b9:a7:f6:7f:d5:29:ea: fc:72:a7:a3:86:0c:a4:d1:da:14:96:46:1c:9c:f3:db:88:15: 89:68:a1:86:81:94:01:71:f6:d7:c6:38:41:c2:03:11:b6:b9: 3a:5a:bb:2c:cf:e7:20:c2:20:0e:a8:56:57:42:b4:74:fa:a8: 31:85:58:15:41:6f:48:ef:3a:f1:d6:20:d9:c3:6d:f9:21:4a: 53:45:c0:82:dc:47:cb:5d:d3:50:df:d2:20:27:ad:ce:f4:65: 48:b0:c1:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcTYeKlBslmu8ga0Ih/VFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwOTI2MDYwMTAzWhcNMjYwOTI3MDYwMTAzWjAzMTEwLwYDVQQD Eyg2NDI0ZjQ3MWE0YzY2YzdlYTM4MmYwODdlYTM0YWJhZDY5NjA1NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj4patpqZ/Wv8fwFnXejOO33YCT1 2LKS8JsWsJ8m0cPxg7GXWvqgJmvp6mdBfXXhVTmxBDvoeiv/fFpVGEKZXMvh2T2c 0a6SiT1DGo2eCGJbFcl4hQFCQ9/9QykjEEztVFHQvjspQfrhWD1Wb0XkveCruWJD BM/eQEKkbxEqsUshDMiB6MjYqZVP/C8BskYRB3nCxE14nxGvddsJwfpg5cw2P0iD d/E1MpQNv2PyE1meSj8sOrTRlGjUlyEPUh5DOBG4H0WwAjA7jMxdiklgQ11rS1yA qoTkexxBRkVqKog5fqz/n1TJmskxain1Ful9hcRwWg7VssLo1ATIk/EyqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQk9HGkxmx+o4Lwh+o0q61pYFY8MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtpxEHNQ ZHPSTWtyoqjGtOpIK4sY+OM8bfsGHv6e1xBMtlC8q2w1nCJVIT1TsPNceiduFziC 0s0KfqsjKkGBlEwb9TJzNfwJVTECD+eslcKxnSPj82C9STp+IjMn8HW4gFwLu+wN nVb29J1tFBBzcM2GYc7eIaHUd4iJC3p9U9upgzF76d/dE+hbBc08P/DAnagJJ2US E5uAI1C5p/Z/1Snq/HKno4YMpNHaFJZGHJzz24gViWihhoGUAXH218Y4QcIDEba5 Olq7LM/nIMIgDqhWV0K0dPqoMYVYFUFvSO868dYg2cNt+SFKU0XAgtxHy13TUN/S ICetzvRlSLDBGA== -----END CERTIFICATE-----Generated at Sat Sep 26 13:04:28 2026 by rpki-client