$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: OQ1kREN8m3U2GecqUqUbY09cn32FYsA1SI39HckltkQ= Subject key identifier: 4D:33:E3:C2:43:4A:EE:EF:1E:27:86:54:86:3F:85:AF:7D:EE:BD:71 Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 0197B745A80DE47EEF89675860707F3418CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 15BC Signing time: Sat 28 Jun 2025 16:01:24 +0000 Manifest this update: Sat 28 Jun 2025 16:01:24 +0000 Manifest next update: Sun 29 Jun 2025 16:01:24 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: nTV4Y0h7gGM1+/+Q0b4774Fp4SifuLuwKAmhnfxBfAg=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:a8:0d:e4:7e:ef:89:67:58:60:70:7f:34:18:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Jun 28 16:01:24 2025 GMT Not After : Jun 29 16:01:24 2025 GMT Subject: CN=4d33e3c2434aeeef1e278654863f85af7deebd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:ef:a9:e7:b8:7e:dd:a0:dc:e2:e9:69:6a: e3:73:a6:0b:0d:53:20:b5:ec:ea:af:45:94:22:c2: e3:a3:e3:ea:3d:b6:df:31:86:ea:33:d4:70:f8:67: e8:28:5a:df:75:7c:10:cd:9e:df:01:ad:e1:ce:d5: dd:16:fd:41:bc:6a:94:10:9d:98:9c:84:6e:c2:aa: bd:3c:7c:b6:4a:7b:2d:7f:30:43:3b:3c:81:da:80: 81:1b:12:7d:9e:f7:5f:23:48:c9:47:bf:b0:e4:25: fd:d6:b8:31:50:ab:f8:08:f0:3c:e0:f1:b8:ce:88: 13:d6:92:a8:ef:ef:f5:c3:a5:86:a7:ca:fd:e0:8c: 7c:68:1e:c8:a8:5e:38:3a:ce:cb:de:97:1a:93:cb: 34:c1:34:72:ee:b5:2e:1a:5b:59:24:49:e0:53:30: 81:ea:4e:b7:b4:7a:39:06:8e:3a:c0:5f:78:58:6b: d8:89:0e:41:c3:97:81:c8:f2:79:05:7c:f2:e6:a7: c1:bb:f2:03:c9:9e:99:45:ba:87:f0:b5:4d:df:c4: 58:63:a4:ed:90:44:d2:7b:99:b3:d1:c7:a2:77:6a: 1a:8a:b0:c0:c3:78:63:81:1a:2a:34:04:d2:a6:6d: 91:36:f8:fb:99:7b:80:d4:49:78:5f:1a:6a:32:96: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:33:E3:C2:43:4A:EE:EF:1E:27:86:54:86:3F:85:AF:7D:EE:BD:71 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ac:2a:26:cc:71:95:c9:26:0c:4d:a1:94:2f:b5:81:da:dd: 34:7d:c0:6f:89:e6:31:77:33:28:a3:fb:fe:4f:ce:94:55:82: 2d:97:92:c6:d4:36:46:cf:63:65:33:ec:68:e9:d5:39:5c:23: 68:73:2e:86:17:0c:ab:88:6a:43:bf:24:31:b8:84:8a:aa:5d: 13:f4:b7:4f:f4:6f:63:fa:39:88:9c:d6:74:4b:0b:36:b6:58: 01:cd:1e:4d:83:90:6d:a7:65:ad:57:5c:aa:cf:2c:11:11:65: bd:84:f3:be:52:d9:fd:79:c6:20:93:c6:ba:b1:74:72:0c:c0: 9d:83:e4:9b:2e:7c:ae:bb:9c:4a:15:65:6c:5b:40:70:79:23: 55:07:2b:4d:60:05:d7:9a:94:27:fc:08:b6:cc:13:cf:1e:b4: bd:31:d8:cc:c0:df:d6:e8:88:57:d8:0e:6c:46:ee:99:1e:de: 31:2c:7a:6a:68:fa:b0:b7:ad:45:5c:6a:59:37:74:76:6c:f4: a4:4a:f9:e8:46:08:a5:84:93:ff:a3:19:0b:65:92:2a:51:74: 8a:0b:e9:19:bd:17:ea:c4:a6:f6:da:da:e6:25:b7:2f:d6:59: 8c:ea:ae:21:cd:cb:d9:41:30:2c:d4:2b:e6:a9:88:ad:3a:3d: 86:51:8f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RagN5H7viWdYYHB/NBjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNjI4MTYwMTI0WhcNMjUwNjI5MTYwMTI0WjAzMTEwLwYDVQQD Eyg0ZDMzZTNjMjQzNGFlZWVmMWUyNzg2NTQ4NjNmODVhZjdkZWViZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5vvqee4ft2g3OLpaWrjc6YLDVMg tezqr0WUIsLjo+PqPbbfMYbqM9Rw+GfoKFrfdXwQzZ7fAa3hztXdFv1BvGqUEJ2Y nIRuwqq9PHy2SnstfzBDOzyB2oCBGxJ9nvdfI0jJR7+w5CX91rgxUKv4CPA84PG4 zogT1pKo7+/1w6WGp8r94Ix8aB7IqF44Os7L3pcak8s0wTRy7rUuGltZJEngUzCB 6k63tHo5Bo46wF94WGvYiQ5Bw5eByPJ5BXzy5qfBu/IDyZ6ZRbqH8LVN38RYY6Tt kETSe5mz0ceid2oairDAw3hjgRoqNATSpm2RNvj7mXuA1El4XxpqMpYuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0z48JDSu7vHieGVIY/ha997r1xMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqwqJsxx lckmDE2hlC+1gdrdNH3Ab4nmMXczKKP7/k/OlFWCLZeSxtQ2Rs9jZTPsaOnVOVwj aHMuhhcMq4hqQ78kMbiEiqpdE/S3T/RvY/o5iJzWdEsLNrZYAc0eTYOQbadlrVdc qs8sERFlvYTzvlLZ/XnGIJPGurF0cgzAnYPkmy58rrucShVlbFtAcHkjVQcrTWAF 15qUJ/wItswTzx60vTHYzMDf1uiIV9gObEbumR7eMSx6amj6sLetRVxqWTd0dmz0 pEr56EYIpYST/6MZC2WSKlF0igvpGb0X6sSm9tra5iW3L9ZZjOquIc3L2UEwLNQr 5qmIrTo9hlGPHw== -----END CERTIFICATE-----Generated at Sat Jun 28 22:37:44 2025 by rpki-client