$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: jpEj0qbWs1mKfpUG+9s1FItIkQha4oEKGSFkgjqfhAk= Subject key identifier: CB:C5:FF:04:A5:4E:48:BA:B7:1A:27:C8:1C:D6:46:38:86:C9:10:21 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 0197CC4D3DB384A9641E84766EB827C8D72E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 15C4 Signing time: Wed 02 Jul 2025 18:01:43 +0000 Manifest this update: Wed 02 Jul 2025 18:01:43 +0000 Manifest next update: Thu 03 Jul 2025 18:01:43 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: gMOwF2mtPRPPpZ-NEq9tmTPMYvM.roa (hash: 9I06ya03N63sQNTiVWhF2hYWAac083jSJyEUOO+Wtd8=) 12: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: TWkIqE44hQMU9xkVXwBmb6mQFv8ssLqnP9SoLJnEwcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 18:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:4d:3d:b3:84:a9:64:1e:84:76:6e:b8:27:c8:d7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jul 2 18:01:43 2025 GMT Not After : Jul 3 18:01:43 2025 GMT Subject: CN=cbc5ff04a54e48bab71a27c81cd6463886c91021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:3f:f6:3e:bd:cd:91:0c:3e:57:05:43:b5: 6c:9b:5c:41:66:df:3f:a6:42:87:2f:d6:c9:29:30: 69:18:81:19:c3:3a:b7:bb:7d:00:80:63:cf:54:8b: 27:e3:9e:45:f2:90:d1:4c:a0:34:5b:c9:f2:52:0e: ea:39:37:e8:74:7d:a8:d9:26:b0:de:51:8d:ba:e8: 8a:f2:ac:22:c2:56:c7:d8:52:54:b6:d1:86:91:f6: 61:36:fe:0e:86:f9:df:32:50:ae:54:d2:7d:53:99: 8f:25:11:59:1a:91:9f:33:fd:68:05:5b:f2:a6:19: 27:02:40:27:20:b6:4b:14:18:0e:46:33:04:46:90: ab:85:32:3f:f1:0a:71:98:4e:42:72:8b:d6:20:ef: 98:06:37:78:eb:ee:6d:52:e0:05:f4:86:68:d7:f3: 8c:83:98:c1:2d:57:c0:7b:c5:53:80:05:f7:8d:b6: 68:1a:f7:0f:aa:e9:5a:f8:24:bd:96:71:ed:71:d7: ed:4e:62:28:e8:1f:d7:b5:95:75:83:10:b4:42:b7: 88:7c:36:24:64:dc:42:da:be:fb:77:a3:28:e8:17: a6:6e:0a:8b:cc:f7:8f:33:ae:fb:b2:de:3d:3b:18: 5b:ed:39:d2:ef:bc:13:f8:ed:cf:bc:2d:24:37:58: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C5:FF:04:A5:4E:48:BA:B7:1A:27:C8:1C:D6:46:38:86:C9:10:21 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6c:70:28:f8:39:f6:7e:65:2a:26:b3:34:1d:f7:ba:22:36: f5:cc:2e:ff:9d:5b:d9:d4:3d:e8:16:45:9f:9b:81:e8:ba:4e: e7:2b:88:d9:f3:c3:62:21:0b:38:06:84:39:a5:82:49:14:d0: d5:87:cb:43:21:75:fe:6f:d4:c4:68:5f:d6:68:65:71:22:c8: f0:28:fc:75:e4:c0:67:c3:e0:a7:db:dc:e4:fd:e6:c1:83:d9: 23:d6:6d:e9:49:84:c7:77:b2:39:51:d2:b9:7f:43:c5:df:ec: 7f:7d:aa:2f:a2:d3:58:fd:bd:da:c2:41:91:a0:e3:85:45:24: dd:9d:04:63:de:a3:4d:20:74:d5:98:e7:fb:7a:8a:66:4f:b3: b6:13:c6:6f:65:ed:39:57:ec:57:43:58:70:97:2c:84:0b:43: fe:14:ac:ca:d6:df:47:84:79:81:4f:0b:01:76:af:27:1a:02: ab:81:c0:a5:dc:d3:be:08:8b:a1:5c:9c:80:c9:de:52:ac:7f: f6:76:63:d4:05:69:8c:81:74:e8:14:7f:4e:ba:40:fc:a6:5c: c1:44:dc:47:9c:a5:e2:04:bb:20:cc:4c:11:84:52:92:0c:64: 8f:d9:74:9e:5d:14:d8:af:8d:28:78:e7:4d:1c:17:15:af:07: 23:56:a4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfMTT2zhKlkHoR2brgnyNcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwNzAyMTgwMTQzWhcNMjUwNzAzMTgwMTQzWjAzMTEwLwYDVQQD EyhjYmM1ZmYwNGE1NGU0OGJhYjcxYTI3YzgxY2Q2NDYzODg2YzkxMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyM/9j69zZEMPlcFQ7Vsm1xBZt8/ pkKHL9bJKTBpGIEZwzq3u30AgGPPVIsn455F8pDRTKA0W8nyUg7qOTfodH2o2Saw 3lGNuuiK8qwiwlbH2FJUttGGkfZhNv4OhvnfMlCuVNJ9U5mPJRFZGpGfM/1oBVvy phknAkAnILZLFBgORjMERpCrhTI/8QpxmE5CcovWIO+YBjd46+5tUuAF9IZo1/OM g5jBLVfAe8VTgAX3jbZoGvcPqula+CS9lnHtcdftTmIo6B/XtZV1gxC0QreIfDYk ZNxC2r77d6Mo6BembgqLzPePM677st49Oxhb7TnS77wT+O3PvC0kN1gOjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvF/wSlTki6txonyBzWRjiGyRAhMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmxwKPg5 9n5lKiazNB33uiI29cwu/51b2dQ96BZFn5uB6LpO5yuI2fPDYiELOAaEOaWCSRTQ 1YfLQyF1/m/UxGhf1mhlcSLI8Cj8deTAZ8Pgp9vc5P3mwYPZI9Zt6UmEx3eyOVHS uX9Dxd/sf32qL6LTWP292sJBkaDjhUUk3Z0EY96jTSB01Zjn+3qKZk+zthPGb2Xt OVfsV0NYcJcshAtD/hSsytbfR4R5gU8LAXavJxoCq4HApdzTvgiLoVycgMneUqx/ 9nZj1AVpjIF06BR/TrpA/KZcwUTcR5yl4gS7IMxMEYRSkgxkj9l0nl0U2K+NKHjn TRwXFa8HI1ak/g== -----END CERTIFICATE-----Generated at Wed Jul 2 21:26:13 2025 by rpki-client