$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: P+oN4uwij8xA/4PrRCarnNiPcXCcKpMEGdQ/+7cz5uk= Subject key identifier: 4B:9C:52:27:95:D8:9C:C5:C5:DC:A3:30:04:B5:6F:3F:6A:91:8B:ED Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01988DA1D8D3FDECC40F78821CCAA992EB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1629 Signing time: Sat 09 Aug 2025 07:00:50 +0000 Manifest this update: Sat 09 Aug 2025 07:00:50 +0000 Manifest next update: Sun 10 Aug 2025 07:00:50 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 12: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: lutJBk7JQNXLpGAg8t9DXUxHyvwQDmPeoNSGJlRFC5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8d:a1:d8:d3:fd:ec:c4:0f:78:82:1c:ca:a9:92:eb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Aug 9 07:00:50 2025 GMT Not After : Aug 10 07:00:50 2025 GMT Subject: CN=4b9c522795d89cc5c5dca33004b56f3f6a918bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:85:af:37:47:24:cd:ae:58:24:f7:fd:ac: 4a:d9:ad:2c:6e:cd:f0:f9:09:8b:1c:95:89:01:bd: a6:d7:fe:0d:7d:84:56:e2:f6:d1:7b:6c:9b:a6:0a: 13:32:05:e9:56:a1:9b:c3:e0:e9:92:72:0f:52:7a: 8a:7a:db:07:d7:10:2d:e7:f2:27:a3:06:1f:7b:bd: 77:55:da:22:c3:b6:27:05:11:60:a3:51:f1:a8:17: 34:4b:23:08:ed:15:83:a7:88:56:54:1a:08:82:c4: 73:24:5e:15:f4:d5:cd:53:0c:7b:59:f6:b8:34:38: 45:7e:e3:c8:f8:03:56:d5:11:25:96:81:42:c1:c8: 5c:aa:e3:f2:7d:f4:6c:65:5b:29:ff:f9:99:e3:1d: 73:2c:cb:35:01:94:d4:d1:60:1b:6e:06:bf:7c:29: cd:97:60:be:8f:63:0e:1f:e7:dd:40:69:5d:5e:15: 21:de:35:4f:ff:fa:ae:bf:e9:55:e9:88:60:61:c9: 2a:80:61:e5:c6:90:47:9e:2c:33:4c:64:64:37:70: 07:41:44:7e:bb:26:b9:00:25:15:23:b3:62:59:27: bd:4f:33:db:56:96:45:6a:c3:95:71:2e:58:a4:76: ce:4f:16:91:51:ba:2d:68:f6:bd:fe:82:12:7d:b1: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:52:27:95:D8:9C:C5:C5:DC:A3:30:04:B5:6F:3F:6A:91:8B:ED X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:81:af:02:58:3b:4b:76:56:8a:86:ec:b3:4e:f2:d0:95:ea: 9d:ba:35:33:f3:ee:61:0d:bf:4d:ce:0b:8b:cd:36:49:4d:fe: 24:05:43:08:c5:5c:83:38:b8:65:04:a3:a1:b9:01:c4:e0:b2: 14:75:da:3f:bd:62:f0:db:b9:a2:d2:ef:82:7c:ce:72:b4:dd: fe:20:73:15:5c:fd:2a:28:d2:c4:a8:09:59:ca:21:2e:bd:ba: 5a:8d:03:8d:c4:2f:1b:60:59:eb:52:6e:0d:4e:fc:57:cb:5e: e3:a5:ba:bd:e2:63:dd:e3:22:54:23:85:81:a8:e0:5c:61:db: 13:37:28:12:17:4d:88:ed:ff:d5:ce:89:53:5b:b4:e3:45:b6: af:c2:b9:e2:ce:7c:d7:bc:70:66:a2:4a:b1:3d:7c:79:5b:17: 1e:01:81:56:ae:3b:83:81:4a:1f:4a:81:5a:3a:51:c7:7c:ef: 7e:7b:c4:0a:7a:7e:24:02:76:c9:3d:86:78:d2:7d:ee:53:52: 38:70:81:d2:24:3e:67:83:f4:d9:f0:ea:33:14:a0:76:33:2f: 03:6a:eb:80:06:48:94:8b:a4:43:52:48:5c:b5:51:61:8c:41: 21:8a:9c:7d:b1:02:0a:79:a5:ad:90:0d:bb:e5:e8:ec:29:e2: 98:e3:a0:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiNodjT/ezED3iCHMqpkuscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwODA5MDcwMDUwWhcNMjUwODEwMDcwMDUwWjAzMTEwLwYDVQQD Eyg0YjljNTIyNzk1ZDg5Y2M1YzVkY2EzMzAwNGI1NmYzZjZhOTE4YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/eFrzdHJM2uWCT3/axK2a0sbs3w +QmLHJWJAb2m1/4NfYRW4vbRe2ybpgoTMgXpVqGbw+DpknIPUnqKetsH1xAt5/In owYfe713Vdoiw7YnBRFgo1HxqBc0SyMI7RWDp4hWVBoIgsRzJF4V9NXNUwx7Wfa4 NDhFfuPI+ANW1RElloFCwchcquPyffRsZVsp//mZ4x1zLMs1AZTU0WAbbga/fCnN l2C+j2MOH+fdQGldXhUh3jVP//quv+lV6YhgYckqgGHlxpBHniwzTGRkN3AHQUR+ uya5ACUVI7NiWSe9TzPbVpZFasOVcS5YpHbOTxaRUbotaPa9/oISfbGyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEucUieV2JzFxdyjMAS1bz9qkYvtMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYGvAlg7 S3ZWiobss07y0JXqnbo1M/PuYQ2/Tc4Li802SU3+JAVDCMVcgzi4ZQSjobkBxOCy FHXaP71i8Nu5otLvgnzOcrTd/iBzFVz9KijSxKgJWcohLr26Wo0DjcQvG2BZ61Ju DU78V8te46W6veJj3eMiVCOFgajgXGHbEzcoEhdNiO3/1c6JU1u040W2r8K54s58 17xwZqJKsT18eVsXHgGBVq47g4FKH0qBWjpRx3zvfnvECnp+JAJ2yT2GeNJ97lNS OHCB0iQ+Z4P02fDqMxSgdjMvA2rrgAZIlIukQ1JIXLVRYYxBIYqcfbECCnmlrZAN u+Xo7CnimOOgEQ== -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:34 2025 by rpki-client