$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: aX3ZrWAx6yffaXECqhSGBrEWdCOU7Hg/eEZlk5Zl6P0= Subject key identifier: FA:74:88:73:27:FA:0F:47:68:1E:0E:5F:C5:6C:94:12:60:E2:F0:A1 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 0198D5F1654002AF27A991A9B909E74519B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1378 Signing time: Sat 23 Aug 2025 08:00:23 +0000 Manifest this update: Sat 23 Aug 2025 08:00:23 +0000 Manifest next update: Sun 24 Aug 2025 08:00:23 +0000 Files and hashes: 1: 0mUEdLJyCtB-8V_B-TcYPs8bnlI.roa (hash: vf8QhP1MDK9+Rj/1zatnHVCOXq4wFBMmhXEA4d/vdpo=) 2: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 3: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 4: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: uoTVWwCEqyApcZ+BA7O/UVW1MF5Gkqw+JmssdrztNcs=) 6: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 7: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:65:40:02:af:27:a9:91:a9:b9:09:e7:45:19:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Aug 23 08:00:23 2025 GMT Not After : Aug 24 08:00:23 2025 GMT Subject: CN=fa74887327fa0f47681e0e5fc56c941260e2f0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:66:8a:57:75:3a:3f:13:77:f7:fa:0f:33: db:63:4f:57:6d:55:4e:69:ef:d4:ce:22:c5:13:e4: 8c:35:10:02:9b:d9:cf:51:1a:49:98:ea:86:7d:7f: fc:30:6a:1d:6d:64:ac:53:31:37:1a:2b:2a:1a:6c: be:37:ab:2a:27:d2:52:97:98:3c:87:f7:b3:86:80: b3:ae:76:02:3d:43:31:91:ae:f7:97:e4:a4:a3:31: 5d:95:07:8b:08:7d:42:29:72:3d:2c:0e:87:e7:31: 6c:87:af:05:bb:27:3f:8d:81:15:58:30:fe:62:46: 4c:be:3d:ed:f0:79:5e:3a:37:97:1c:d5:88:71:ea: 02:fa:3b:2f:1c:aa:ca:5f:79:5c:d9:fd:cb:9b:36: d8:5d:03:5c:36:59:c1:68:22:38:32:19:20:29:b4: e0:a0:0f:93:4d:db:98:27:25:23:2d:45:aa:73:e3: 70:9a:84:fd:21:af:d1:32:30:d7:8e:4f:e0:d5:8e: ce:56:ce:55:8d:51:8c:ed:e0:61:12:0c:96:32:83: 3d:3c:0d:b7:cf:93:bb:dc:ba:52:d2:43:ca:07:ad: 0b:71:52:c8:b7:43:31:8d:4b:a4:93:b1:ed:24:ef: 6b:65:53:bb:58:86:31:80:80:8a:c5:79:b3:d1:42: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:74:88:73:27:FA:0F:47:68:1E:0E:5F:C5:6C:94:12:60:E2:F0:A1 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2f:d9:0f:a7:13:17:8a:1b:06:59:0e:79:44:ec:a5:64:94: 0f:e5:04:56:49:ad:41:36:00:b7:3b:19:85:74:63:15:ef:ae: 58:c0:74:85:74:e8:2b:21:64:a7:2f:30:31:36:37:60:20:9b: 22:b5:81:5d:c0:f6:81:5b:1c:d2:55:58:a0:90:40:71:a8:e3: 0d:d8:2a:0e:e9:1a:95:43:72:a2:41:2c:65:8f:f4:26:70:5b: 9f:d3:6e:5f:3a:3e:06:af:e6:25:33:ae:d5:8e:b6:2b:94:ee: c8:f5:cf:be:d1:07:99:17:89:c2:1a:a8:4c:6d:cb:75:ee:20: fd:c3:0f:15:97:26:b7:6a:26:90:f9:52:32:b9:4d:1c:fb:9e: 56:ab:2e:19:ab:b7:3d:c0:7d:4e:80:56:2c:bc:52:b7:cb:a5: 57:c1:ef:de:e4:a6:9f:2a:01:c2:e8:ff:57:1a:16:3e:41:b8: 2a:96:8c:ac:51:3b:55:a4:6c:fb:94:ca:53:20:84:48:6d:2d: 90:18:1b:7d:9a:52:ca:35:66:ec:f0:1c:c7:e3:76:d0:52:ad: da:2a:69:d9:0f:fe:e3:88:00:f7:5b:00:6f:ca:27:0c:8a:d0: 6b:4f:01:38:64:ff:b1:91:49:8c:ac:85:fb:2e:ac:06:4a:5e: 53:41:f4:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8WVAAq8nqZGpuQnnRRm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwODIzMDgwMDIzWhcNMjUwODI0MDgwMDIzWjAzMTEwLwYDVQQD EyhmYTc0ODg3MzI3ZmEwZjQ3NjgxZTBlNWZjNTZjOTQxMjYwZTJmMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaFmild1Oj8Td/f6DzPbY09XbVVO ae/UziLFE+SMNRACm9nPURpJmOqGfX/8MGodbWSsUzE3GisqGmy+N6sqJ9JSl5g8 h/ezhoCzrnYCPUMxka73l+SkozFdlQeLCH1CKXI9LA6H5zFsh68Fuyc/jYEVWDD+ YkZMvj3t8HleOjeXHNWIceoC+jsvHKrKX3lc2f3LmzbYXQNcNlnBaCI4MhkgKbTg oA+TTduYJyUjLUWqc+NwmoT9Ia/RMjDXjk/g1Y7OVs5VjVGM7eBhEgyWMoM9PA23 z5O73LpS0kPKB60LcVLIt0MxjUukk7HtJO9rZVO7WIYxgICKxXmz0ULQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp0iHMn+g9HaB4OX8VslBJg4vChMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS/ZD6cT F4obBlkOeUTspWSUD+UEVkmtQTYAtzsZhXRjFe+uWMB0hXToKyFkpy8wMTY3YCCb IrWBXcD2gVsc0lVYoJBAcajjDdgqDukalUNyokEsZY/0JnBbn9NuXzo+Bq/mJTOu 1Y62K5TuyPXPvtEHmReJwhqoTG3Lde4g/cMPFZcmt2omkPlSMrlNHPueVqsuGau3 PcB9ToBWLLxSt8ulV8Hv3uSmnyoBwuj/VxoWPkG4KpaMrFE7VaRs+5TKUyCESG0t kBgbfZpSyjVm7PAcx+N20FKt2ipp2Q/+44gA91sAb8onDIrQa08BOGT/sZFJjKyF +y6sBkpeU0H0Fg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:11:07 2025 by rpki-client