$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: Y5NVupqJ92EF5yzC+xp+M2PGH2WcRKAKq6iRSk6W93c= Subject key identifier: 51:E4:17:74:55:18:A5:35:12:74:60:7C:A6:59:04:4B:51:0E:EC:EB Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019F90231FA3687541D19273F30510AC942A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 16FA Signing time: Thu 23 Jul 2026 18:00:48 +0000 Manifest this update: Thu 23 Jul 2026 18:00:48 +0000 Manifest next update: Fri 24 Jul 2026 18:00:48 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 3: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 4: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 5: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: FACaoOyte1FX02y5cz8HtQZF5wTX407KUTrlo4U3LC0=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: cI3avh87O39OTH2EDCZqQutH5Ns.roa (hash: PWvhR3t5RRJ4KX9H65mhTT6EDfYi6lc1qIh3TLRHz2Y=) 11: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 12: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 15: yDHywWsdIhBQgVuHLGKPzw5EM7U.roa (hash: 9Ahh7dFFmiQE0dfQuEmxqO0TQHF9u86//wZZySbZLs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:1f:a3:68:75:41:d1:92:73:f3:05:10:ac:94:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jul 23 18:00:48 2026 GMT Not After : Jul 24 18:00:48 2026 GMT Subject: CN=51e417745518a5351274607ca659044b510eeceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:dc:62:71:09:41:5d:4c:68:e0:95:b3:62: 7f:bf:b4:d3:55:2c:bb:59:9d:17:6d:bd:ec:fd:55: a8:45:44:fc:67:33:b1:69:74:58:71:db:cc:0d:7f: ef:4c:d4:54:61:bd:bd:b4:e6:64:b8:5c:e1:6d:bb: 30:1d:ee:f7:cd:c0:91:25:73:46:01:c4:08:b6:fd: b4:cc:be:11:07:b0:fc:69:e3:fe:bb:99:46:64:e7: 7e:b8:5b:11:ad:02:b3:d4:91:e7:11:54:07:f6:37: 40:8f:4d:01:64:8f:e1:29:4e:59:86:19:b5:b6:17: 03:a3:43:77:06:ec:de:dd:dc:ce:ad:18:6b:df:00: 3d:6a:11:db:e9:59:e6:88:1a:87:74:6b:9a:3d:ec: b6:55:30:37:3f:40:10:34:17:0b:71:0a:0f:3f:44: c7:e8:61:6d:3f:de:d5:85:7e:e8:7d:66:8e:1d:9d: 70:38:f1:a0:d5:01:3f:c5:d6:38:a9:bb:fb:e8:49: a5:83:e4:e6:85:f5:a0:ee:a4:f9:99:af:8e:57:63: d7:f9:dc:34:35:65:32:0b:05:6a:b5:0b:12:af:8c: 79:cc:3f:88:8a:d7:83:c9:7a:a0:32:59:00:c7:4b: 60:5b:65:05:8e:ea:99:e5:fe:d1:fb:50:27:3c:a5: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:17:74:55:18:A5:35:12:74:60:7C:A6:59:04:4B:51:0E:EC:EB X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a8:e8:98:92:a2:80:59:67:f7:7b:7c:24:9c:1a:2f:d5:9e: c3:73:93:df:f3:d4:66:54:df:b0:17:8a:9c:af:eb:7f:12:e9: 84:01:ee:35:59:51:cc:8a:33:8d:b8:cc:84:8f:c3:78:d1:a2: 9e:c9:d4:72:b7:0d:34:e3:22:87:8c:fb:e7:b2:cb:e6:a7:87: 8d:29:9a:37:4f:22:58:79:8f:a8:38:6f:de:1d:12:80:41:69: b7:39:13:6e:4f:2e:72:54:c9:f8:9f:a7:98:d6:64:40:00:19: 00:8d:98:0d:f8:12:ec:be:37:f5:2b:a1:67:9b:6b:ed:3c:07: 10:35:55:7e:86:49:b9:ba:e2:3d:91:a9:02:c3:f1:d2:0f:f9: dd:53:7d:90:8b:38:b2:30:92:4d:f6:cb:d5:0c:62:4c:69:0a: 2d:b1:01:31:96:ab:25:d2:9e:e1:44:d3:4c:f6:5b:35:c7:fd: e8:5c:ee:ca:5d:2d:a6:84:51:e6:f4:ec:70:42:f2:0b:9d:7c: 4d:36:e4:18:2f:ce:72:99:51:7f:8d:5e:63:27:81:fc:6b:f1: 29:e8:4f:08:09:cf:df:32:c3:c7:98:32:cc:d5:6b:b9:4f:1b: 53:36:db:91:b3:41:c7:e6:57:6e:8f:2f:9a:f0:32:48:47:e2: 1d:6e:7c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIx+jaHVB0ZJz8wUQrJQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwNzIzMTgwMDQ4WhcNMjYwNzI0MTgwMDQ4WjAzMTEwLwYDVQQD Eyg1MWU0MTc3NDU1MThhNTM1MTI3NDYwN2NhNjU5MDQ0YjUxMGVlY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsvcYnEJQV1MaOCVs2J/v7TTVSy7 WZ0Xbb3s/VWoRUT8ZzOxaXRYcdvMDX/vTNRUYb29tOZkuFzhbbswHe73zcCRJXNG AcQItv20zL4RB7D8aeP+u5lGZOd+uFsRrQKz1JHnEVQH9jdAj00BZI/hKU5Zhhm1 thcDo0N3Buze3dzOrRhr3wA9ahHb6VnmiBqHdGuaPey2VTA3P0AQNBcLcQoPP0TH 6GFtP97VhX7ofWaOHZ1wOPGg1QE/xdY4qbv76Emlg+TmhfWg7qT5ma+OV2PX+dw0 NWUyCwVqtQsSr4x5zD+IiteDyXqgMlkAx0tgW2UFjuqZ5f7R+1AnPKXlhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHkF3RVGKU1EnRgfKZZBEtRDuzrMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqjomJKi gFln93t8JJwaL9Wew3OT3/PUZlTfsBeKnK/rfxLphAHuNVlRzIozjbjMhI/DeNGi nsnUcrcNNOMih4z757LL5qeHjSmaN08iWHmPqDhv3h0SgEFptzkTbk8uclTJ+J+n mNZkQAAZAI2YDfgS7L439SuhZ5tr7TwHEDVVfoZJubriPZGpAsPx0g/53VN9kIs4 sjCSTfbL1QxiTGkKLbEBMZarJdKe4UTTTPZbNcf96Fzuyl0tpoRR5vTscELyC518 TTbkGC/OcplRf41eYyeB/GvxKehPCAnP3zLDx5gyzNVruU8bUzbbkbNBx+ZXbo8v mvAySEfiHW58EA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:19:39 2026 by rpki-client