$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: HWVuxHwpXYV9f1duJR7PrriBDXzLTMV1v2HuU1o6JH8= Subject key identifier: 24:72:30:E3:3A:47:14:0F:4C:3D:86:AB:3B:84:AA:3C:A2:B4:26:14 Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 01976DE25BBF00EB8B9CFC7AF6DF70BA9C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1596 Signing time: Sat 14 Jun 2025 10:00:40 +0000 Manifest this update: Sat 14 Jun 2025 10:00:40 +0000 Manifest next update: Sun 15 Jun 2025 10:00:40 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: E4cAzNcP3cOCRV8s+wAdtr88aiYj6LJN88KlLT7UiVc=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:e2:5b:bf:00:eb:8b:9c:fc:7a:f6:df:70:ba:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Jun 14 10:00:40 2025 GMT Not After : Jun 15 10:00:40 2025 GMT Subject: CN=247230e33a47140f4c3d86ab3b84aa3ca2b42614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:6e:95:2f:df:e8:70:ff:4c:8c:2b:8d:57: de:68:3d:19:35:97:86:fa:fc:af:2e:2e:ea:41:c5: e6:e2:a9:27:e3:31:2d:78:b9:7b:89:13:34:f6:94: 20:8f:25:4a:2a:b3:ed:56:26:8c:42:10:d6:c8:d5: 83:d0:29:ca:fe:65:06:56:3a:00:81:41:d4:05:0b: 64:f7:c8:2d:36:32:0f:a7:7b:59:6d:d0:82:79:57: 93:2a:dc:96:7c:d1:2a:10:3c:05:90:fb:da:a1:70: f5:4b:b9:7f:26:85:12:87:78:3c:6e:08:67:b4:b0: cc:04:1c:57:47:74:da:17:79:71:ba:e3:49:84:a3: 8b:a1:7b:ce:7b:02:6d:1b:67:7c:3a:0a:2e:05:36: b5:df:ab:8a:32:9b:e3:cc:35:bb:e1:5c:db:9e:5f: 7c:18:d9:33:88:2e:d7:40:a1:9d:ed:90:1b:7d:92: 0e:53:d0:22:40:8d:f1:1c:35:91:cb:07:91:72:fd: bd:bc:c3:db:e1:b1:cf:a9:2e:05:da:2d:84:30:f2: 90:d1:fa:6c:80:db:30:19:2f:d4:a1:17:76:ce:d9: b5:0b:1a:e7:30:fd:6c:e7:c3:76:98:a9:c2:6c:3f: 6a:5c:88:d8:c0:0a:83:17:e4:73:53:84:ec:a5:e7: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:72:30:E3:3A:47:14:0F:4C:3D:86:AB:3B:84:AA:3C:A2:B4:26:14 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:be:f3:46:cb:3e:3c:d1:bf:c0:cb:cf:10:3f:3c:46:42:59: da:96:6a:ed:10:cc:aa:1e:e6:ce:be:63:d9:53:38:ba:21:c0: 39:73:bc:d0:0d:32:27:af:b8:f7:de:b2:6e:e7:8f:a6:28:84: f7:e0:01:02:0a:c8:65:91:04:61:c4:8e:32:1e:0a:91:00:57: 22:d6:e5:88:e6:39:d5:b3:4b:7b:f1:ff:b3:42:75:1b:31:87: d4:e3:ad:11:11:b7:c2:d1:21:79:c9:e4:96:93:22:2b:89:3c: 81:09:ea:52:dd:4c:00:9c:a7:12:fb:9f:b1:23:48:bb:88:99: d1:af:ec:cf:45:d4:ae:8c:5d:e7:60:4e:90:0f:22:78:32:53: df:a5:b9:12:77:f2:7e:0c:ad:49:76:13:93:40:74:59:2f:cc: 4a:e3:64:55:c5:52:4f:21:13:ff:e2:e5:43:dc:63:a7:5c:ad: 9e:f2:97:d7:03:3c:e3:b9:59:a5:59:2f:60:d0:03:0c:c5:2a: e2:e9:18:0c:bf:96:6e:9e:17:a4:dd:70:81:8f:99:b8:56:7c: ba:e3:f5:a4:52:66:1d:06:99:1a:e2:7f:a2:b5:c2:ee:a6:3f: 17:50:dd:ca:06:47:6b:a2:48:08:4d:ab:69:fa:de:cd:9e:84: e5:6f:8a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdt4lu/AOuLnPx69t9wupw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNjE0MTAwMDQwWhcNMjUwNjE1MTAwMDQwWjAzMTEwLwYDVQQD EygyNDcyMzBlMzNhNDcxNDBmNGMzZDg2YWIzYjg0YWEzY2EyYjQyNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0pulS/f6HD/TIwrjVfeaD0ZNZeG +vyvLi7qQcXm4qkn4zEteLl7iRM09pQgjyVKKrPtViaMQhDWyNWD0CnK/mUGVjoA gUHUBQtk98gtNjIPp3tZbdCCeVeTKtyWfNEqEDwFkPvaoXD1S7l/JoUSh3g8bghn tLDMBBxXR3TaF3lxuuNJhKOLoXvOewJtG2d8OgouBTa136uKMpvjzDW74Vzbnl98 GNkziC7XQKGd7ZAbfZIOU9AiQI3xHDWRyweRcv29vMPb4bHPqS4F2i2EMPKQ0fps gNswGS/UoRd2ztm1CxrnMP1s58N2mKnCbD9qXIjYwAqDF+RzU4TspecmTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRyMOM6RxQPTD2GqzuEqjyitCYUMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr7zRss+ PNG/wMvPED88RkJZ2pZq7RDMqh7mzr5j2VM4uiHAOXO80A0yJ6+4996ybuePpiiE 9+ABAgrIZZEEYcSOMh4KkQBXItbliOY51bNLe/H/s0J1GzGH1OOtERG3wtEhecnk lpMiK4k8gQnqUt1MAJynEvufsSNIu4iZ0a/sz0XUroxd52BOkA8ieDJT36W5Enfy fgytSXYTk0B0WS/MSuNkVcVSTyET/+LlQ9xjp1ytnvKX1wM847lZpVkvYNADDMUq 4ukYDL+Wbp4XpN1wgY+ZuFZ8uuP1pFJmHQaZGuJ/orXC7qY/F1DdygZHa6JICE2r afrezZ6E5W+Kag== -----END CERTIFICATE-----Generated at Sat Jun 14 20:23:16 2025 by rpki-client