$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 43sVspBaw4dD0s4yfgIuV5VWX0s9m+Qnr74RBEOnSMw= Subject key identifier: 03:3D:90:28:37:79:40:4A:3E:0D:F8:12:7A:E5:55:FA:B8:69:AD:F6 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019E1F7E9021B72723697ECF76547482D9EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1639 Signing time: Wed 13 May 2026 04:00:48 +0000 Manifest this update: Wed 13 May 2026 04:00:48 +0000 Manifest next update: Thu 14 May 2026 04:00:48 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 4: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 5: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 6: AECHdQkqzg3VccPRfvdj6dOEcf0.roa (hash: gvtx0Jiys/YkGy3DMTtr3aUtbYmqqIES9vFl0maNE1Q=) 7: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: UxHPlbtg8azSJdOQSV07s/YIeGAIjZBbSYXfBvEw68Y=) 8: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 9: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 10: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 11: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 12: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:7e:90:21:b7:27:23:69:7e:cf:76:54:74:82:d9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: May 13 04:00:48 2026 GMT Not After : May 14 04:00:48 2026 GMT Subject: CN=033d90283779404a3e0df8127ae555fab869adf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:fc:8b:00:27:34:5d:44:91:36:54:ea:c0: fb:49:bd:fe:13:d1:f8:f5:6a:a9:fd:d1:51:e5:21: 7d:54:4f:c1:ce:35:57:ab:24:86:b1:90:4b:11:92: 78:3e:f8:27:42:a2:22:8a:f8:19:7e:3b:fd:6e:69: 64:81:57:38:37:b5:5b:07:a1:73:1d:fb:52:df:47: 07:3e:56:47:76:ef:35:4c:31:d2:32:d2:21:ee:41: df:44:2a:b2:30:58:33:0e:bd:0f:07:e7:e1:4c:a0: 48:e0:0e:7d:fe:48:f6:23:21:8a:35:b2:45:2a:24: 59:dc:16:ab:19:0b:fe:67:da:df:71:35:73:6b:67: 15:a1:94:31:0b:5b:3e:72:e6:58:0a:9e:54:df:c5: 19:95:21:b2:41:82:e4:5d:42:c0:0c:ec:72:a6:4b: 0b:90:7a:4b:b8:71:da:cb:70:b6:b4:b8:e5:99:93: 2e:f8:85:b8:c6:16:27:0f:43:41:7e:f8:58:8a:43: aa:10:db:00:03:dc:19:af:e8:ec:c6:65:7f:c7:c1: 81:4e:2e:8f:ea:b9:5c:81:7c:b4:bf:d9:ea:bf:48: a0:fc:3f:17:40:83:ca:75:78:37:e8:53:95:6b:7e: 22:69:64:43:5e:b0:bd:3c:fe:67:be:34:53:71:2a: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3D:90:28:37:79:40:4A:3E:0D:F8:12:7A:E5:55:FA:B8:69:AD:F6 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e4:cb:8b:b4:fc:d6:bf:87:04:a9:95:42:0a:50:37:1a:b2: 7a:75:e8:f8:38:dc:06:0d:ef:5e:65:16:bb:09:ed:14:d5:3f: d7:dd:c1:c1:08:7b:10:6b:36:fd:37:c4:50:09:f0:2d:c3:d7: c9:18:ce:f8:90:28:90:60:ac:92:1c:fe:8f:ea:98:59:2d:e4: 04:cc:ae:c2:a8:21:de:cc:03:62:39:44:b1:fd:e9:d0:d3:a6: d5:99:10:48:81:26:01:5b:b6:ea:e6:d8:e7:54:f6:81:64:08: 35:38:09:ff:60:81:81:43:19:04:a9:28:5d:b2:11:94:33:85: 5d:0b:76:43:89:43:55:73:3e:f6:22:e2:5f:e7:8f:e8:bf:fc: 7d:2d:d3:d6:ac:1e:47:e7:64:ff:76:ac:0c:c0:e2:27:85:29: ec:92:b3:38:86:36:7f:1a:d9:5c:d3:db:bd:da:6f:12:a4:72: 62:e3:11:27:2b:dc:ff:76:87:0f:81:34:e9:e4:43:fb:c9:e7: a4:71:dd:15:e2:d9:b9:09:e7:50:a6:99:f6:6e:54:9b:2c:34: 64:c1:5b:d6:bc:1a:9d:08:14:27:10:3f:d2:57:ab:da:d2:a7: 41:d5:14:0c:c3:a2:d6:5c:a3:2c:7c:06:c5:2a:ab:e0:26:0a: 51:70:20:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ffpAhtycjaX7PdlR0gtnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwNTEzMDQwMDQ4WhcNMjYwNTE0MDQwMDQ4WjAzMTEwLwYDVQQD EygwMzNkOTAyODM3Nzk0MDRhM2UwZGY4MTI3YWU1NTVmYWI4NjlhZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5r8iwAnNF1EkTZU6sD7Sb3+E9H4 9Wqp/dFR5SF9VE/BzjVXqySGsZBLEZJ4PvgnQqIiivgZfjv9bmlkgVc4N7VbB6Fz HftS30cHPlZHdu81TDHSMtIh7kHfRCqyMFgzDr0PB+fhTKBI4A59/kj2IyGKNbJF KiRZ3BarGQv+Z9rfcTVza2cVoZQxC1s+cuZYCp5U38UZlSGyQYLkXULADOxypksL kHpLuHHay3C2tLjlmZMu+IW4xhYnD0NBfvhYikOqENsAA9wZr+jsxmV/x8GBTi6P 6rlcgXy0v9nqv0ig/D8XQIPKdXg36FOVa34iaWRDXrC9PP5nvjRTcSodRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM9kCg3eUBKPg34EnrlVfq4aa32MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuTLi7T8 1r+HBKmVQgpQNxqyenXo+DjcBg3vXmUWuwntFNU/193BwQh7EGs2/TfEUAnwLcPX yRjO+JAokGCskhz+j+qYWS3kBMyuwqgh3swDYjlEsf3p0NOm1ZkQSIEmAVu26ubY 51T2gWQINTgJ/2CBgUMZBKkoXbIRlDOFXQt2Q4lDVXM+9iLiX+eP6L/8fS3T1qwe R+dk/3asDMDiJ4Up7JKzOIY2fxrZXNPbvdpvEqRyYuMRJyvc/3aHD4E06eRD+8nn pHHdFeLZuQnnUKaZ9m5Umyw0ZMFb1rwanQgUJxA/0ler2tKnQdUUDMOi1lyjLHwG xSqr4CYKUXAgMg== -----END CERTIFICATE-----Generated at Wed May 13 09:33:16 2026 by rpki-client