$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: s/Rmey8naNugEOghdFWmBU7sD5QPGG78khzE8Qss1N0= Subject key identifier: E7:74:2B:7F:42:C5:2A:7B:78:95:F1:E8:1F:6A:F9:39:7E:D8:7A:EB Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 0199FBB36E89D1842FAB29DD4779D2D534D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 16E8 Signing time: Sun 19 Oct 2025 09:01:04 +0000 Manifest this update: Sun 19 Oct 2025 09:01:04 +0000 Manifest next update: Mon 20 Oct 2025 09:01:04 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: R2ZSqYnIg6A3ZrnAWdvXrTd4fUE.roa (hash: O7SlLNijkA8S/dhctG8xaw+pF4vgkSrZrlUPSUPxkJo=) 8: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 12: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 13: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: d67XWpV+VM0dK9dtSsO6C/2pBgFQbvBz24fKrMpR4iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:b3:6e:89:d1:84:2f:ab:29:dd:47:79:d2:d5:34:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Oct 19 09:01:04 2025 GMT Not After : Oct 20 09:01:04 2025 GMT Subject: CN=e7742b7f42c52a7b7895f1e81f6af9397ed87aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:14:31:0e:5d:9b:72:f1:ee:bb:31:7e:21: d0:8a:21:53:63:98:3f:d6:6a:5a:3b:2b:ee:01:d5: d1:55:c2:76:a2:01:f6:90:53:6d:5e:80:a6:d3:db: 61:27:89:cf:8d:7f:7f:cc:32:02:ac:22:4a:8f:6e: d9:76:67:15:e4:d5:05:0a:37:ca:e4:79:cd:8d:e3: 4f:9f:a9:02:41:15:e0:5a:7b:2a:59:36:17:ca:9a: 3c:9e:2f:03:6f:1f:9a:24:df:e6:ba:df:71:14:df: 3a:d5:5f:ee:5f:a7:0e:ad:82:bb:3a:43:6d:51:c8: 6b:1e:ef:17:d6:d7:5d:f6:8e:fe:ea:57:49:97:39: 0c:3f:53:82:80:cd:67:de:e2:4b:8b:c7:68:06:1d: 00:0e:32:5c:0a:11:d9:9d:44:a1:9a:f1:53:92:2a: 92:04:ac:6f:6f:76:e5:a5:c2:1b:9a:4c:7f:a9:ac: 78:4d:7d:38:aa:26:dd:a8:86:da:46:9e:ef:eb:40: f4:90:be:2c:04:79:00:d5:53:1c:34:73:07:40:14: c6:9e:70:5d:ae:d8:40:0b:0a:a5:71:18:17:28:d8: 13:13:2b:85:40:43:f6:db:a9:f7:bd:5d:b5:4e:23: 7c:c3:4e:b3:79:89:bb:ef:2f:25:da:b4:97:98:c5: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:74:2B:7F:42:C5:2A:7B:78:95:F1:E8:1F:6A:F9:39:7E:D8:7A:EB X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f7:58:69:3d:58:b3:5a:73:7c:92:80:03:01:37:9a:0d:30: c8:ef:50:86:bf:83:d3:e6:5c:2c:ca:ee:3d:e4:09:07:8c:bf: d3:96:a1:36:7b:eb:59:e7:2b:c5:bd:80:2c:60:2b:20:3a:ff: d5:f9:9c:5b:a1:97:77:39:e6:b7:6a:84:6c:e7:e6:94:6e:07: c1:94:1d:ce:1d:d3:70:51:72:60:b4:41:aa:b4:d7:38:79:7d: 00:93:e3:86:21:6a:f0:55:df:aa:83:f8:8b:24:34:81:7d:3e: 4a:c5:3b:8f:09:4b:3d:74:ce:09:83:2f:19:6a:03:89:57:15: 67:14:60:6e:dc:ba:fa:db:fb:45:b1:9b:e2:f7:bb:3c:5b:ed: 37:fd:d1:9e:5d:78:89:5d:43:6a:ef:d1:fc:59:5b:b3:44:54: 03:8f:5c:ef:c7:4e:86:ac:a4:d5:1d:15:24:25:1d:95:08:bd: d3:21:fa:85:74:f4:91:41:6d:af:3e:d5:54:b7:ba:ab:c5:68: f4:37:4a:36:97:a8:d3:d5:b0:f1:d7:52:57:7f:42:c0:f8:48: 94:d9:00:20:7e:5f:64:66:05:54:94:e9:18:69:2e:c0:56:3e: 01:47:4f:5b:8c:0c:29:ae:a6:b0:fd:61:70:9b:97:43:8e:45: 8e:c9:d3:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7s26J0YQvqyndR3nS1TTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD EyhlNzc0MmI3ZjQyYzUyYTdiNzg5NWYxZTgxZjZhZjkzOTdlZDg3YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZIUMQ5dm3Lx7rsxfiHQiiFTY5g/ 1mpaOyvuAdXRVcJ2ogH2kFNtXoCm09thJ4nPjX9/zDICrCJKj27ZdmcV5NUFCjfK 5HnNjeNPn6kCQRXgWnsqWTYXypo8ni8Dbx+aJN/mut9xFN861V/uX6cOrYK7OkNt UchrHu8X1tdd9o7+6ldJlzkMP1OCgM1n3uJLi8doBh0ADjJcChHZnUShmvFTkiqS BKxvb3blpcIbmkx/qax4TX04qibdqIbaRp7v60D0kL4sBHkA1VMcNHMHQBTGnnBd rthACwqlcRgXKNgTEyuFQEP226n3vV21TiN8w06zeYm77y8l2rSXmMWToQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd0K39CxSp7eJXx6B9q+Tl+2HrrMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvdYaT1Y s1pzfJKAAwE3mg0wyO9Qhr+D0+ZcLMruPeQJB4y/05ahNnvrWecrxb2ALGArIDr/ 1fmcW6GXdznmt2qEbOfmlG4HwZQdzh3TcFFyYLRBqrTXOHl9AJPjhiFq8FXfqoP4 iyQ0gX0+SsU7jwlLPXTOCYMvGWoDiVcVZxRgbty6+tv7RbGb4ve7PFvtN/3Rnl14 iV1Dau/R/Flbs0RUA49c78dOhqyk1R0VJCUdlQi90yH6hXT0kUFtrz7VVLe6q8Vo 9DdKNpeo09Ww8ddSV39CwPhIlNkAIH5fZGYFVJTpGGkuwFY+AUdPW4wMKa6msP1h cJuXQ45FjsnTJg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:18:34 2025 by rpki-client