$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: bjgQYnoWKm69piK4BrV4vGp0PHNKo3G0Ub7PjKdZkOU= Subject key identifier: 18:C3:EF:51:3B:89:07:E8:AE:F6:35:07:CB:D9:E5:4F:F7:2D:5B:8A Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 0198D5157D3E1778331124CE4CFA605E5913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1650 Signing time: Sat 23 Aug 2025 04:00:11 +0000 Manifest this update: Sat 23 Aug 2025 04:00:11 +0000 Manifest next update: Sun 24 Aug 2025 04:00:11 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: LnlTCXCXL2rHSbuWpCWvoKuOAXEa+166Ui1kzAcfPj4=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:7d:3e:17:78:33:11:24:ce:4c:fa:60:5e:59:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Aug 23 04:00:11 2025 GMT Not After : Aug 24 04:00:11 2025 GMT Subject: CN=18c3ef513b8907e8aef63507cbd9e54ff72d5b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5e:07:ca:01:6a:98:fd:21:d6:9e:b7:e8:2e: 56:ef:8d:37:ca:76:23:97:f1:1c:a5:69:26:b4:25: 26:7b:a1:50:17:47:fb:27:28:ba:56:7c:20:ed:a0: ce:30:c5:95:b1:6f:bf:09:bc:20:9e:1e:91:91:e7: 26:1e:b0:ed:bf:70:9c:24:ef:40:5e:50:b9:cd:7c: f2:18:2d:00:2e:b6:83:d5:4b:7e:75:52:9b:65:9c: b2:96:96:96:7c:9d:a1:34:3f:f2:9d:6c:24:c9:24: fd:56:b6:78:d6:0b:5e:8e:dd:58:49:a9:2b:b5:63: e5:6d:b8:2a:53:f1:fd:37:05:d7:a5:f2:6d:18:3a: b8:30:24:22:a1:6c:22:4d:24:f9:95:41:81:cb:63: 94:45:17:f2:8e:87:6e:fd:09:47:2d:f1:23:56:66: 4d:bb:6b:8e:77:9c:f9:33:7e:08:11:d0:c5:4d:51: 7e:32:2f:f3:05:6d:99:95:a9:7c:7f:00:07:a9:b7: 0c:a7:6f:f1:94:26:cb:18:de:9d:c7:9d:cd:ac:9b: e2:9a:58:26:5f:8d:98:2e:d0:b7:ed:37:b6:49:04: 71:51:a4:c0:69:45:4e:68:4c:bf:ac:07:ed:7f:40: 51:ac:c2:94:3f:75:81:50:58:5e:f9:b9:32:24:6d: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C3:EF:51:3B:89:07:E8:AE:F6:35:07:CB:D9:E5:4F:F7:2D:5B:8A X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ba:87:b3:84:f8:75:f6:c2:90:1c:0d:14:e0:88:27:88:9d: 71:c5:68:4c:fe:89:d9:8c:fc:cd:19:ca:5f:11:ee:6d:1a:81: d4:ca:a4:10:2f:04:c5:12:28:4d:61:29:44:17:fe:c6:e3:7e: 4c:4f:ed:50:08:14:a0:06:fa:1e:fc:89:c1:59:ec:41:3d:79: 61:72:83:91:1a:b6:19:4e:b6:d8:89:63:33:fb:80:d2:e8:6c: d4:cf:10:96:36:18:e3:48:a2:57:ed:81:3a:0c:e8:84:4b:57: c4:c8:32:af:89:47:58:50:fb:62:9c:17:69:ff:64:7c:11:f8: f5:ee:b0:f1:1e:94:b8:02:58:84:36:66:94:b5:5c:56:61:c0: 8e:e5:23:f1:e2:74:7f:69:6c:f3:02:28:44:76:e4:07:78:04: ba:c4:66:d2:42:57:fb:eb:9f:a7:a0:e4:ac:d9:c8:1e:17:dd: ef:05:c1:23:c0:f9:dd:bb:80:3b:f9:2b:cd:1f:f1:0f:e7:a3: 95:49:e5:7f:3e:74:55:1a:32:a1:5f:22:19:88:97:56:62:48: c6:b3:15:d4:6a:40:4c:7b:13:0c:ed:d1:fd:65:7d:d9:79:81: be:6b:18:19:7a:74:38:1c:67:9c:20:dd:16:96:c0:eb:6a:09: 37:a7:c7:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFX0+F3gzESTOTPpgXlkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwODIzMDQwMDExWhcNMjUwODI0MDQwMDExWjAzMTEwLwYDVQQD EygxOGMzZWY1MTNiODkwN2U4YWVmNjM1MDdjYmQ5ZTU0ZmY3MmQ1YjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l4HygFqmP0h1p636C5W7403ynYj l/EcpWkmtCUme6FQF0f7Jyi6Vnwg7aDOMMWVsW+/Cbwgnh6RkecmHrDtv3CcJO9A XlC5zXzyGC0ALraD1Ut+dVKbZZyylpaWfJ2hND/ynWwkyST9VrZ41gtejt1YSakr tWPlbbgqU/H9NwXXpfJtGDq4MCQioWwiTST5lUGBy2OURRfyjodu/QlHLfEjVmZN u2uOd5z5M34IEdDFTVF+Mi/zBW2Zlal8fwAHqbcMp2/xlCbLGN6dx53NrJvimlgm X42YLtC37Te2SQRxUaTAaUVOaEy/rAftf0BRrMKUP3WBUFhe+bkyJG1+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjD71E7iQforvY1B8vZ5U/3LVuKMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrqHs4T4 dfbCkBwNFOCIJ4idccVoTP6J2Yz8zRnKXxHubRqB1MqkEC8ExRIoTWEpRBf+xuN+ TE/tUAgUoAb6HvyJwVnsQT15YXKDkRq2GU622IljM/uA0uhs1M8QljYY40iiV+2B OgzohEtXxMgyr4lHWFD7YpwXaf9kfBH49e6w8R6UuAJYhDZmlLVcVmHAjuUj8eJ0 f2ls8wIoRHbkB3gEusRm0kJX++ufp6DkrNnIHhfd7wXBI8D53buAO/krzR/xD+ej lUnlfz50VRoyoV8iGYiXVmJIxrMV1GpATHsTDO3R/WV92XmBvmsYGXp0OBxnnCDd FpbA62oJN6fHcQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:18 2025 by rpki-client