$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: oUQBi2vs5wbWcT/mGfBvy0OBLKPiPx+okcinFdeTsPA= Subject key identifier: F3:B7:FA:05:11:FF:44:FC:5D:00:DA:8C:31:E8:D9:73:D8:76:F4:01 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 0199FBEA77E328C2B44161D8EECCF86C4E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1411 Signing time: Sun 19 Oct 2025 10:01:11 +0000 Manifest this update: Sun 19 Oct 2025 10:01:11 +0000 Manifest next update: Mon 20 Oct 2025 10:01:11 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: ZF+wBgQGuLEC0VbGEQZrM5giJ+x7yoG4UJtw47w7nkw=) 5: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 6: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 7: Q9Q78d-jsiF5ILAqRcPi-38ptt8.roa (hash: YzBAYIWUa9/3ZSqBiY5Wy7QpsAq3KA1Xx1umoytO+nA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:77:e3:28:c2:b4:41:61:d8:ee:cc:f8:6c:4e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Oct 19 10:01:11 2025 GMT Not After : Oct 20 10:01:11 2025 GMT Subject: CN=f3b7fa0511ff44fc5d00da8c31e8d973d876f401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:d7:26:a8:d1:72:bd:1b:6b:25:71:ac:a2: e8:50:f4:11:31:77:24:a4:62:46:70:bd:0d:5b:56: b3:5b:9c:15:68:a3:41:97:a0:dd:42:2f:1d:d6:d2: 8c:81:54:94:fb:ec:17:be:16:67:a8:fb:ed:f1:cd: 26:1e:12:ba:56:34:7b:75:2d:14:cd:9b:3a:ea:eb: 06:9a:82:52:16:e9:6b:a9:8b:66:d3:06:9e:c3:e5: 18:27:6d:58:4a:e5:24:71:6a:ef:dc:e9:4c:04:41: 13:40:13:d4:92:ee:6e:41:94:e1:36:8c:ad:6c:e2: 0f:04:61:2a:01:aa:8f:01:e9:3e:7c:a9:5c:b6:f6: b0:2e:b7:fb:1b:a5:95:5d:6c:3d:1b:55:3d:c1:de: c0:d5:d7:ec:10:68:87:f7:3d:55:9c:22:12:b4:d6: ac:28:e9:13:37:65:9b:ed:2d:e2:0b:75:ab:51:99: d0:c5:69:8e:f4:0b:89:83:02:9c:50:83:66:bf:aa: 24:21:fd:c7:a7:66:05:6f:20:7a:9f:ff:70:fa:1d: 02:8b:4a:31:41:80:2b:1e:09:61:6f:fc:ea:3d:2a: 45:df:f7:2b:6e:89:e0:dd:b9:ed:63:92:4b:66:09: 7c:80:9f:c6:aa:9c:51:8a:71:63:29:3f:74:89:62: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B7:FA:05:11:FF:44:FC:5D:00:DA:8C:31:E8:D9:73:D8:76:F4:01 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:eb:c3:32:8a:43:51:c1:54:d5:a8:4e:9d:69:b1:a5:ae:6c: 20:cd:0b:b6:5e:d8:91:e0:d1:07:58:32:26:d1:83:de:fb:8d: d0:58:3e:e9:0c:24:9c:27:53:bc:bb:bd:66:8a:af:e8:07:ee: bc:56:82:e5:5f:a3:3c:2e:3f:76:95:05:c5:ac:0a:d9:b0:90: ac:51:68:ad:c8:4a:31:c3:d8:a2:3e:be:c1:d2:4d:3d:13:30: ed:5f:06:3a:bc:88:81:20:6a:3c:39:3a:d9:f1:e9:bf:28:86: 3c:93:90:29:07:9a:47:9d:ff:ba:1c:64:36:bb:ee:36:a2:93: 4b:69:f0:cc:05:55:08:ad:fd:37:81:ed:9f:bd:40:92:a4:8e: e4:57:a3:89:da:c4:3c:c3:1d:5b:0b:55:47:bf:1f:46:8f:43: e0:4e:f7:b2:0c:58:74:7c:07:88:a4:bf:6d:dd:fd:7a:b7:0e: 28:29:75:f6:f7:8f:5d:3b:43:a3:b1:bb:e4:12:05:63:42:1b: 43:99:d8:77:a8:e1:4f:80:80:11:79:2c:42:c9:83:65:78:d9: 9f:93:8c:74:f1:00:e4:5d:ca:01:45:e8:19:3f:ab:9b:c2:a4: ff:2c:73:29:38:2a:fd:fa:58:ca:1e:8d:b9:b3:9e:29:65:20: 1d:92:30:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76nfjKMK0QWHY7sz4bE5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUxMDE5MTAwMTExWhcNMjUxMDIwMTAwMTExWjAzMTEwLwYDVQQD EyhmM2I3ZmEwNTExZmY0NGZjNWQwMGRhOGMzMWU4ZDk3M2Q4NzZmNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQjXJqjRcr0bayVxrKLoUPQRMXck pGJGcL0NW1azW5wVaKNBl6DdQi8d1tKMgVSU++wXvhZnqPvt8c0mHhK6VjR7dS0U zZs66usGmoJSFulrqYtm0waew+UYJ21YSuUkcWrv3OlMBEETQBPUku5uQZThNoyt bOIPBGEqAaqPAek+fKlctvawLrf7G6WVXWw9G1U9wd7A1dfsEGiH9z1VnCIStNas KOkTN2Wb7S3iC3WrUZnQxWmO9AuJgwKcUINmv6okIf3Hp2YFbyB6n/9w+h0Ci0ox QYArHglhb/zqPSpF3/crbong3bntY5JLZgl8gJ/GqpxRinFjKT90iWJxAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO3+gUR/0T8XQDajDHo2XPYdvQBMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauvDMopD UcFU1ahOnWmxpa5sIM0Ltl7YkeDRB1gyJtGD3vuN0Fg+6QwknCdTvLu9Zoqv6Afu vFaC5V+jPC4/dpUFxawK2bCQrFForchKMcPYoj6+wdJNPRMw7V8GOryIgSBqPDk6 2fHpvyiGPJOQKQeaR53/uhxkNrvuNqKTS2nwzAVVCK39N4Htn71AkqSO5FejidrE PMMdWwtVR78fRo9D4E73sgxYdHwHiKS/bd39ercOKCl19vePXTtDo7G75BIFY0Ib Q5nYd6jhT4CAEXksQsmDZXjZn5OMdPEA5F3KAUXoGT+rm8Kk/yxzKTgq/fpYyh6N ubOeKWUgHZIwrQ== -----END CERTIFICATE-----Generated at Sun Oct 19 13:14:32 2025 by rpki-client