$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 7kc77501O1Y7XvwASXHSDPoKxmQqJmUtyF7OOVR4cL8= Subject key identifier: 59:55:94:B5:F5:D9:5C:AB:6C:7F:23:D0:E2:FA:AB:8B:D0:43:B1:AB Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019CABD941D31BA226934EDB189F9FD2CB21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1576 Signing time: Mon 02 Mar 2026 00:01:07 +0000 Manifest this update: Mon 02 Mar 2026 00:01:07 +0000 Manifest next update: Tue 03 Mar 2026 00:01:07 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 3aV_UzeZWkVLYdBcdJhGvghnl4c.roa (hash: zIZrgZNehbD7uBxLcLO/tdVtklU882uJK8x5m1rGUnw=) 4: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 5: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: v8j4IJG+dpcJpkGh+khCh4tjZSU4su1Pmc9q0xE/5wI=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 11: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 12: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 13: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 14: zVLW9HFt-3z2M7Ja19rIMJwG2_Y.roa (hash: /CaIYvptsHDUu9JqgaUmQ5T95opFTVpgVggOdpKaM0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:41:d3:1b:a2:26:93:4e:db:18:9f:9f:d2:cb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Mar 2 00:01:07 2026 GMT Not After : Mar 3 00:01:07 2026 GMT Subject: CN=595594b5f5d95cab6c7f23d0e2faab8bd043b1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:99:20:6a:2e:71:b9:03:f2:fe:e8:de:5b: d6:df:f8:27:c0:42:ff:65:c2:03:12:47:f7:ff:da: 35:c4:be:51:a9:6c:6a:5e:b3:b7:eb:39:4a:96:c8: b8:70:11:c1:4b:f0:77:74:98:9b:da:b5:91:63:25: f2:6e:cb:9b:34:26:76:52:dc:5d:81:ce:a6:4c:ac: 3b:54:85:60:08:0e:6d:11:a9:fb:0f:c3:2e:3c:81: e9:3c:d9:fe:ba:f0:14:2e:e2:5b:af:7a:d1:c6:df: 2a:22:0c:b3:38:bc:2c:10:b2:77:ee:56:3a:4f:5d: c1:cc:90:fb:81:a6:a5:41:f5:23:47:0d:44:0f:ed: 28:50:90:21:f6:44:19:04:5e:57:3a:f3:79:da:3a: e6:ff:ea:e3:2f:a5:6c:b1:e8:5a:c0:94:0a:45:f9: a2:76:dd:6d:b3:24:06:79:9c:9c:74:e0:7e:6d:c8: b1:83:5f:9c:42:08:a1:7f:83:64:3e:c2:e7:bf:4a: d0:2b:60:dc:3c:e4:b5:1f:83:ec:48:98:02:30:1f: 79:32:e0:25:40:21:42:b8:3a:64:8e:53:23:1f:04: 45:09:ee:11:e3:34:91:41:1e:a7:f5:c0:a4:f1:c8: 82:a9:60:db:eb:f7:00:06:93:b2:d1:c6:0d:19:d4: 90:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:94:B5:F5:D9:5C:AB:6C:7F:23:D0:E2:FA:AB:8B:D0:43:B1:AB X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3b:ee:ea:ea:03:b3:0c:90:a0:78:86:ba:d0:3b:dd:2d:68: f2:ad:c1:75:be:60:18:89:dc:a7:25:b5:89:3c:7d:b7:54:51: 13:8b:ad:ba:12:4e:ef:b0:b4:f2:7e:55:80:6a:c0:48:71:6a: 74:dd:19:df:48:9a:c3:c5:46:6d:f2:2f:e5:d4:b8:62:f5:5d: a5:5f:9d:e4:cf:be:82:cb:a9:2f:51:27:89:de:eb:f0:6c:78: 46:67:81:5c:ae:d6:04:52:d1:54:c6:6d:bf:5c:48:a8:f6:ab: f0:96:e2:dd:6c:ba:0c:52:18:48:36:bb:55:31:ef:32:06:c0: 33:d4:83:59:54:e0:2e:e7:a3:8f:d1:92:39:db:bc:d1:3d:c5: 35:40:e8:f1:6a:81:c6:91:74:bd:b8:c0:0c:93:df:b7:79:d3: c7:a6:30:0d:73:1b:a8:b1:b6:14:b2:82:f4:be:3f:a4:27:e3: 97:66:08:59:5e:f1:df:43:37:c2:99:4c:44:89:d4:e7:d4:aa: 0e:81:53:7b:96:65:84:df:02:64:5e:d0:c7:4b:fb:3e:b8:b9: c9:64:c9:c9:9c:65:c5:0b:8b:e7:5d:97:ed:01:c2:ad:b5:19: 06:ef:48:c0:4a:54:2f:91:d0:cf:22:b7:b6:47:28:24:77:d9: b2:15:57:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2UHTG6Imk07bGJ+f0sshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMzAyMDAwMTA3WhcNMjYwMzAzMDAwMTA3WjAzMTEwLwYDVQQD Eyg1OTU1OTRiNWY1ZDk1Y2FiNmM3ZjIzZDBlMmZhYWI4YmQwNDNiMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPmZIGoucbkD8v7o3lvW3/gnwEL/ ZcIDEkf3/9o1xL5RqWxqXrO36zlKlsi4cBHBS/B3dJib2rWRYyXybsubNCZ2Utxd gc6mTKw7VIVgCA5tEan7D8MuPIHpPNn+uvAULuJbr3rRxt8qIgyzOLwsELJ37lY6 T13BzJD7gaalQfUjRw1ED+0oUJAh9kQZBF5XOvN52jrm/+rjL6VssehawJQKRfmi dt1tsyQGeZycdOB+bcixg1+cQgihf4NkPsLnv0rQK2DcPOS1H4PsSJgCMB95MuAl QCFCuDpkjlMjHwRFCe4R4zSRQR6n9cCk8ciCqWDb6/cABpOy0cYNGdSQ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlVlLX12VyrbH8j0OL6q4vQQ7GrMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTvu6uoD swyQoHiGutA73S1o8q3Bdb5gGIncpyW1iTx9t1RRE4utuhJO77C08n5VgGrASHFq dN0Z30iaw8VGbfIv5dS4YvVdpV+d5M++gsupL1Enid7r8Gx4RmeBXK7WBFLRVMZt v1xIqPar8Jbi3Wy6DFIYSDa7VTHvMgbAM9SDWVTgLuejj9GSOdu80T3FNUDo8WqB xpF0vbjADJPft3nTx6YwDXMbqLG2FLKC9L4/pCfjl2YIWV7x30M3wplMRInU59Sq DoFTe5ZlhN8CZF7Qx0v7Pri5yWTJyZxlxQuL512X7QHCrbUZBu9IwEpUL5HQzyK3 tkcoJHfZshVXKw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:16 2026 by rpki-client