$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: t2pCVLKwPbGCrOadzKfqqiarEMFPNTgCTtzu+6KFtVY= Subject key identifier: 7D:EB:AF:D3:A8:57:14:EE:82:1F:C7:BB:93:80:DA:7E:21:A3:0E:6F Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019879082E80AD69E0FD9295E3108537F300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1345 Signing time: Tue 05 Aug 2025 07:00:35 +0000 Manifest this update: Tue 05 Aug 2025 07:00:35 +0000 Manifest next update: Wed 06 Aug 2025 07:00:35 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: dYIiLYMkQ9v5s1JsM6E9q1uYNV36jnxbVkgK5XFbN4A=) 6: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 7: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 8: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 9: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 10: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 11: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 12: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 13: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:08:2e:80:ad:69:e0:fd:92:95:e3:10:85:37:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Aug 5 07:00:35 2025 GMT Not After : Aug 6 07:00:35 2025 GMT Subject: CN=7debafd3a85714ee821fc7bb9380da7e21a30e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:32:05:d2:b1:7d:e3:cb:c2:63:ff:b4:c7: e4:c7:3d:dc:02:ec:7c:0b:46:39:da:5a:12:35:f1: 81:58:54:e9:74:21:4f:d2:3a:fa:b9:20:c6:93:51: f4:19:60:da:89:ee:2b:d3:3d:ab:6d:9a:14:35:fa: 5c:b6:32:57:0b:b1:fc:e7:9e:8b:f4:3d:52:84:52: 82:d2:02:ec:c6:81:12:74:54:13:2a:bc:4d:15:ee: ee:21:b5:4a:73:47:25:be:25:34:bf:06:0a:7d:28: 7e:87:1c:f3:9c:d2:4d:ec:c3:bb:98:d5:e9:4c:f7: 48:d3:4f:b8:94:03:5f:84:61:14:9b:e6:56:9e:6b: 92:0c:f5:b9:6d:ec:ae:dc:59:30:04:93:f9:6a:0c: dd:35:1e:b4:79:8a:fd:66:53:da:fe:46:0f:2c:7e: df:78:b8:ce:e8:8c:9a:2a:3b:1a:7c:5c:b9:b0:96: e9:7a:b7:21:fa:d6:41:29:06:e8:64:5d:82:a6:48: 07:e8:4f:22:1a:19:61:fa:3d:61:96:5d:be:53:a7: 24:d0:92:a1:fe:e7:53:2b:f0:6d:01:2a:ee:04:f4: 3b:aa:03:9a:0c:f5:31:c0:b0:dc:7e:03:b9:7b:7e: 60:04:01:8e:3d:62:5e:bb:50:d3:90:85:32:7c:a9: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:AF:D3:A8:57:14:EE:82:1F:C7:BB:93:80:DA:7E:21:A3:0E:6F X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c6:0c:90:bc:d5:5e:b4:7b:22:9c:52:de:b2:63:d6:af:e5: 34:01:ca:d0:92:41:26:c0:e5:bf:90:b0:e8:5a:0e:e4:00:aa: cb:f7:ba:72:af:f6:fb:69:6b:23:22:a8:90:87:bc:8d:7a:4a: d9:40:8c:2a:03:ee:d3:c8:8c:90:52:fd:6f:6f:68:fc:f0:53: 39:a2:f3:6b:59:bd:ba:d9:69:05:10:53:66:09:b2:46:f6:a0: 4d:7a:86:3a:61:2b:52:74:38:04:cd:03:e9:7e:f8:75:2b:b1: 82:9f:0e:ae:15:6c:ba:73:37:2c:7a:69:14:88:52:9c:00:4e: 56:97:49:cf:95:ee:ba:b3:d7:10:1a:e1:fe:84:8e:1e:b2:a1: 28:2f:d7:93:ef:c4:bc:32:64:0e:18:2b:4c:ee:f4:fd:ae:25: be:06:5d:c6:2f:1c:fa:63:1f:b3:0a:c4:cd:82:80:14:52:af: 83:ee:d5:6f:8d:8e:7f:fb:fb:15:8a:9f:97:85:bd:b4:ad:cf: 73:14:ec:37:bb:83:9e:2f:6a:ab:a4:2b:36:80:9e:e4:37:ab: 36:7c:91:bb:65:d9:a4:ce:49:a4:e1:41:fe:c9:5e:2f:53:32: dc:86:d6:03:c7:e0:b3:94:49:30:c9:8c:39:08:3a:55:91:12: 1f:71:aa:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5CC6ArWng/ZKV4xCFN/MAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwODA1MDcwMDM1WhcNMjUwODA2MDcwMDM1WjAzMTEwLwYDVQQD Eyg3ZGViYWZkM2E4NTcxNGVlODIxZmM3YmI5MzgwZGE3ZTIxYTMwZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9QyBdKxfePLwmP/tMfkxz3cAux8 C0Y52loSNfGBWFTpdCFP0jr6uSDGk1H0GWDaie4r0z2rbZoUNfpctjJXC7H8556L 9D1ShFKC0gLsxoESdFQTKrxNFe7uIbVKc0clviU0vwYKfSh+hxzznNJN7MO7mNXp TPdI00+4lANfhGEUm+ZWnmuSDPW5beyu3FkwBJP5agzdNR60eYr9ZlPa/kYPLH7f eLjO6IyaKjsafFy5sJbperch+tZBKQboZF2CpkgH6E8iGhlh+j1hll2+U6ck0JKh /udTK/BtASruBPQ7qgOaDPUxwLDcfgO5e35gBAGOPWJeu1DTkIUyfKnF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3rr9OoVxTugh/Hu5OA2n4how5vMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcYMkLzV XrR7IpxS3rJj1q/lNAHK0JJBJsDlv5Cw6FoO5ACqy/e6cq/2+2lrIyKokIe8jXpK 2UCMKgPu08iMkFL9b29o/PBTOaLza1m9utlpBRBTZgmyRvagTXqGOmErUnQ4BM0D 6X74dSuxgp8OrhVsunM3LHppFIhSnABOVpdJz5XuurPXEBrh/oSOHrKhKC/Xk+/E vDJkDhgrTO70/a4lvgZdxi8c+mMfswrEzYKAFFKvg+7Vb42Of/v7FYqfl4W9tK3P cxTsN7uDni9qq6QrNoCe5DerNnyRu2XZpM5JpOFB/sleL1My3IbWA8fgs5RJMMmM OQg6VZESH3GqMg== -----END CERTIFICATE-----Generated at Tue Aug 5 16:41:22 2025 by rpki-client