$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: EPSZgJhFoydbey2vUY2k9glliFP9N6FYzL3TdbO9m5s= Subject key identifier: 1C:CF:EA:00:AE:E7:DB:D4:96:DB:D2:D7:80:A1:0D:93:DF:48:A8:95 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 0198D8F28F78FD06D2822E3CE0F0F908496D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1650 Signing time: Sat 23 Aug 2025 22:00:31 +0000 Manifest this update: Sat 23 Aug 2025 22:00:31 +0000 Manifest next update: Sun 24 Aug 2025 22:00:31 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 12: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: OYhHGm5OmbBinMVqB+xAdSDcuT811LYTvFNpdyo0qXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 17:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d8:f2:8f:78:fd:06:d2:82:2e:3c:e0:f0:f9:08:49:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Aug 23 22:00:31 2025 GMT Not After : Aug 24 22:00:31 2025 GMT Subject: CN=1ccfea00aee7dbd496dbd2d780a10d93df48a895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:64:d1:bf:bd:96:87:7e:a6:40:fd:62:19: 55:59:c0:3b:d5:e2:34:8d:1b:5f:91:69:41:ab:d8: 4c:d8:47:0d:e6:2c:12:13:00:e9:06:24:d9:f0:e5: 83:16:5b:b1:65:c6:f4:f8:e4:b3:b0:06:7a:0d:75: 60:6c:74:3f:c0:f0:e3:56:07:92:bd:ff:ea:89:a2: 90:c8:e3:c9:15:ba:e1:2a:ca:6f:5e:8f:e2:51:c8: 81:40:3a:23:87:d5:76:8b:57:cd:36:3d:81:a4:d0: ab:8f:4b:3f:ab:10:37:2c:f8:6b:5b:4b:e8:aa:c7: cb:ab:e6:68:d3:1f:ca:a8:a6:aa:c1:74:06:71:83: 59:5d:23:d6:3a:6c:b4:0d:d3:08:c4:a5:a7:5d:00: 2a:99:ef:a5:f8:65:df:83:af:a5:0e:01:1a:04:32: 96:f6:72:45:1e:23:9b:51:63:0b:7b:58:4f:c0:a6: 45:d9:bc:4f:c5:3d:b6:fd:d6:bd:0c:1e:2b:69:25: 7d:0e:71:65:33:ea:f7:f6:8e:cb:ee:09:b6:5e:29: 1f:33:50:92:72:d6:ca:04:26:47:6b:6d:21:a8:e2: f9:d1:80:fe:f9:76:e0:13:b5:16:27:59:12:a7:be: 52:0f:45:c6:af:02:b2:fb:ad:86:bd:b9:61:5e:50: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:EA:00:AE:E7:DB:D4:96:DB:D2:D7:80:A1:0D:93:DF:48:A8:95 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:a6:77:03:98:04:e9:30:38:92:9d:3b:2a:f2:60:d9:91: a3:97:10:c1:cc:ca:30:c2:17:e8:ec:b6:95:8b:02:69:3e:2f: 87:61:cd:40:24:e7:7f:17:17:5e:32:e1:6c:ea:ac:91:f3:7c: f5:5e:eb:a2:64:e2:26:57:4f:45:77:6e:94:e2:c0:45:99:81: e2:cc:02:5a:1e:1d:d9:a6:29:d7:c5:4e:87:48:38:a9:d3:6e: 1f:9a:0b:d0:a5:cd:72:7f:9f:b4:0f:5a:dd:25:bd:b3:fd:75: 04:f4:9d:21:d8:d2:aa:90:fc:46:92:23:71:72:11:85:d1:1b: 36:55:36:10:07:12:0d:cc:1a:84:14:5f:38:9d:86:30:77:73: dd:a0:1d:7b:8c:4d:2c:3e:64:60:20:95:cf:fc:02:44:f3:b9: 04:e7:b2:cd:73:62:e9:40:e2:51:26:1a:99:df:30:82:2f:c2: 67:5d:e8:33:de:09:64:20:2a:90:9c:5f:75:3c:9a:68:bd:99: 02:a1:74:d7:51:13:64:87:06:1d:8f:57:58:8f:37:fd:7f:74: b6:0f:38:fc:50:03:f3:9a:ae:ee:78:bd:da:2f:1f:f2:6c:69: 8c:9b:ca:6f:63:92:c7:83:03:59:4c:06:24:a4:56:6f:2b:80: 67:32:9e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjY8o94/QbSgi484PD5CEltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwODIzMjIwMDMxWhcNMjUwODI0MjIwMDMxWjAzMTEwLwYDVQQD EygxY2NmZWEwMGFlZTdkYmQ0OTZkYmQyZDc4MGExMGQ5M2RmNDhhODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJhk0b+9lod+pkD9YhlVWcA71eI0 jRtfkWlBq9hM2EcN5iwSEwDpBiTZ8OWDFluxZcb0+OSzsAZ6DXVgbHQ/wPDjVgeS vf/qiaKQyOPJFbrhKspvXo/iUciBQDojh9V2i1fNNj2BpNCrj0s/qxA3LPhrW0vo qsfLq+Zo0x/KqKaqwXQGcYNZXSPWOmy0DdMIxKWnXQAqme+l+GXfg6+lDgEaBDKW 9nJFHiObUWMLe1hPwKZF2bxPxT22/da9DB4raSV9DnFlM+r39o7L7gm2XikfM1CS ctbKBCZHa20hqOL50YD++XbgE7UWJ1kSp75SD0XGrwKy+62GvblhXlA1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzP6gCu59vUltvS14ChDZPfSKiVMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExWmdwOY BOkwOJKdOyryYNmRo5cQwczKMMIX6Oy2lYsCaT4vh2HNQCTnfxcXXjLhbOqskfN8 9V7romTiJldPRXdulOLARZmB4swCWh4d2aYp18VOh0g4qdNuH5oL0KXNcn+ftA9a 3SW9s/11BPSdIdjSqpD8RpIjcXIRhdEbNlU2EAcSDcwahBRfOJ2GMHdz3aAde4xN LD5kYCCVz/wCRPO5BOeyzXNi6UDiUSYamd8wgi/CZ13oM94JZCAqkJxfdTyaaL2Z AqF011ETZIcGHY9XWI83/X90tg84/FAD85qu7ni92i8f8mxpjJvKb2OSx4MDWUwG JKRWbyuAZzKeHQ== -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:28 2025 by rpki-client