$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: kJobO71trrddm64tT8pbV5fv/kTFTFd+P/Da5CGTKSg= Subject key identifier: 69:87:B7:CB:B4:AC:20:EF:26:A0:54:8A:12:C2:DB:90:75:CC:E1:CA Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 019A4D7450B6A3B463A61BFDF999969CB92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1713 Signing time: Tue 04 Nov 2025 06:00:59 +0000 Manifest this update: Tue 04 Nov 2025 06:00:59 +0000 Manifest next update: Wed 05 Nov 2025 06:00:59 +0000 Files and hashes: 1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 4: Y_tOtZgYIeYtzs_lYehaepicSa4.roa (hash: 0Ji9IYm411z+1YtZY+qouN/MNWctJRSug7dej+6mWcM=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 7: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 8: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: ZnkO5jf0hi87/hrXXu3qEHVWOEygV1Yp9qexWTJLojs=) 9: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 10: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:50:b6:a3:b4:63:a6:1b:fd:f9:99:96:9c:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Nov 4 06:00:59 2025 GMT Not After : Nov 5 06:00:59 2025 GMT Subject: CN=6987b7cbb4ac20ef26a0548a12c2db9075cce1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:5a:46:fb:b7:f0:6c:6f:f6:a2:79:d3:8f: 28:34:93:88:51:0b:67:65:fc:90:9f:42:85:a8:27: 4f:08:c1:da:82:3f:0a:fa:84:ce:96:72:59:0e:4b: e0:ed:39:22:d5:ed:37:dd:52:0a:ea:f7:63:06:87: 34:5c:27:b0:82:be:eb:84:39:3b:d2:cc:d2:6c:24: c4:85:dd:4d:17:aa:e3:32:66:74:f7:d8:61:6d:10: c7:42:12:0e:29:4f:32:8b:11:86:6e:11:bb:0b:be: a4:f0:13:8f:75:f2:f7:38:f8:e5:d1:14:11:af:87: f9:55:71:d8:79:89:d4:c4:c6:c0:33:df:27:c7:e7: 47:cb:7f:d9:0f:41:ef:65:d6:0d:a9:da:ce:3b:89: dd:e9:5b:35:16:3c:f1:2f:a1:4f:10:65:32:d2:d5: c5:fa:fd:4f:0f:bd:5f:15:8d:59:ff:c3:30:20:73: 6a:9c:1a:98:c4:40:d6:1b:3f:da:38:05:4e:93:3d: 35:c8:83:d0:19:c5:7c:ae:07:10:dd:c4:77:16:90: 40:fd:8b:1c:b7:cd:d8:23:44:34:2b:ac:d1:ef:fe: b1:73:47:bd:48:f9:dd:ea:26:48:46:48:81:66:39: 3a:96:72:8e:58:8e:47:c7:6f:5d:f8:03:ba:3d:5b: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:B7:CB:B4:AC:20:EF:26:A0:54:8A:12:C2:DB:90:75:CC:E1:CA X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2a:c1:c4:eb:75:7b:24:b6:7a:68:f5:cd:98:cb:a7:45:ed: 3c:2c:2c:6d:35:f5:2e:ed:73:ce:03:18:e9:7d:76:2c:98:d4: c4:c6:c7:65:3a:92:e5:e8:78:bf:81:84:a1:81:30:5c:85:bc: 33:5e:cf:42:a0:23:47:74:b9:0b:67:2d:83:a9:4b:23:39:21: fa:5b:06:d2:a6:5b:d4:41:ec:eb:22:a9:0e:ae:56:1e:23:19: ae:9f:1d:46:ae:f8:2f:ba:9c:eb:de:5c:de:ec:6b:92:9d:49: 08:dd:ac:84:2f:96:14:cc:41:66:ef:79:8a:02:c4:e3:fe:0d: bc:32:de:16:c1:eb:7f:ac:ef:47:20:5a:01:01:5e:58:10:9a: 74:16:70:d8:e3:01:54:5b:4c:4c:d0:8b:84:2e:5d:f6:8a:b1: c6:1e:c2:be:94:f0:47:5f:50:74:47:a1:ca:0f:ca:93:d6:eb: 3d:6c:7e:5b:09:26:4c:15:37:1b:f3:f6:1c:c7:ae:8a:db:37: f4:1a:5d:5b:4c:8b:1b:a9:5a:30:1e:4f:63:61:b4:dd:24:51: b3:5c:8c:58:57:51:4d:29:b6:50:3e:da:f6:aa:8c:11:ca:bf: 99:0e:f5:76:d5:65:9a:0d:41:69:8c:ea:60:1e:ac:8c:db:ac: 19:c0:87:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdFC2o7Rjphv9+ZmWnLksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD Eyg2OTg3YjdjYmI0YWMyMGVmMjZhMDU0OGExMmMyZGI5MDc1Y2NlMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEBaRvu38Gxv9qJ5048oNJOIUQtn ZfyQn0KFqCdPCMHagj8K+oTOlnJZDkvg7Tki1e033VIK6vdjBoc0XCewgr7rhDk7 0szSbCTEhd1NF6rjMmZ099hhbRDHQhIOKU8yixGGbhG7C76k8BOPdfL3OPjl0RQR r4f5VXHYeYnUxMbAM98nx+dHy3/ZD0HvZdYNqdrOO4nd6Vs1FjzxL6FPEGUy0tXF +v1PD71fFY1Z/8MwIHNqnBqYxEDWGz/aOAVOkz01yIPQGcV8rgcQ3cR3FpBA/Ysc t83YI0Q0K6zR7/6xc0e9SPnd6iZIRkiBZjk6lnKOWI5Hx29d+AO6PVtPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmHt8u0rCDvJqBUihLC25B1zOHKMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICrBxOt1 eyS2emj1zZjLp0XtPCwsbTX1Lu1zzgMY6X12LJjUxMbHZTqS5eh4v4GEoYEwXIW8 M17PQqAjR3S5C2ctg6lLIzkh+lsG0qZb1EHs6yKpDq5WHiMZrp8dRq74L7qc695c 3uxrkp1JCN2shC+WFMxBZu95igLE4/4NvDLeFsHrf6zvRyBaAQFeWBCadBZw2OMB VFtMTNCLhC5d9oqxxh7CvpTwR19QdEehyg/Kk9brPWx+WwkmTBU3G/P2HMeuits3 9BpdW0yLG6laMB5PY2G03SRRs1yMWFdRTSm2UD7a9qqMEcq/mQ71dtVlmg1BaYzq YB6sjNusGcCHRA== -----END CERTIFICATE-----Generated at Tue Nov 4 15:07:54 2025 by rpki-client