$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: YoP/xCl2QAgnOJRZoqEbkPxU7iXc0mfAf6ef5kFvMao= Subject key identifier: 84:74:25:3A:F5:00:A0:14:E1:FD:D4:BA:35:C6:6C:B4:BA:EF:23:AD Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 01987A524C0D9B09B35669159C5C5870F407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1621 Signing time: Tue 05 Aug 2025 13:01:10 +0000 Manifest this update: Tue 05 Aug 2025 13:01:10 +0000 Manifest next update: Wed 06 Aug 2025 13:01:10 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: ewy+bHV+e4J/dbY9rmH1jNAMBMzfzwmkzdUG76qvXZ4=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:52:4c:0d:9b:09:b3:56:69:15:9c:5c:58:70:f4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Aug 5 13:01:10 2025 GMT Not After : Aug 6 13:01:10 2025 GMT Subject: CN=8474253af500a014e1fdd4ba35c66cb4baef23ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:eb:e5:dd:12:da:87:ef:73:ea:bf:52:29: 96:bf:4b:9c:22:6e:8b:56:7c:eb:b6:3f:20:3e:e0: 40:65:7b:83:1b:70:f7:33:21:68:bf:68:aa:5b:68: 71:a3:c5:99:1b:41:99:49:d7:e6:39:a3:e5:e0:00: 42:b6:35:fb:05:c4:92:7f:56:d8:52:04:ad:ba:bf: 1f:d0:48:90:73:46:fd:e4:ae:c0:bf:78:d7:95:2d: 8b:77:28:88:02:ee:18:b6:8e:fd:66:92:9b:e3:7e: f0:0c:5b:cb:94:d7:d2:a1:f5:27:7d:8d:e5:88:c5: 82:a6:53:60:52:e4:2d:3a:fa:84:6c:93:66:80:69: f2:84:f5:bf:26:58:df:65:62:04:e5:6d:ad:e6:2b: 06:6f:61:4b:71:71:29:cc:9a:45:ba:f5:50:cc:70: b5:43:0e:1f:02:7d:4d:c4:33:ba:36:d8:1a:68:58: a0:67:06:7b:fc:59:ab:10:ac:70:6c:fa:a6:87:66: 8d:cb:9a:44:79:e3:c0:d3:ad:77:a4:24:06:ad:95: 2a:93:ca:ee:1a:bc:52:4b:f4:c7:e3:52:dd:8a:86: 06:ee:50:b7:90:76:25:b8:2d:75:91:c2:7f:33:d9: eb:26:1c:0b:64:1f:64:44:92:cf:61:87:0b:2e:00: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:74:25:3A:F5:00:A0:14:E1:FD:D4:BA:35:C6:6C:B4:BA:EF:23:AD X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3e:f9:46:52:84:6b:d6:98:0e:81:22:0a:b5:fd:23:fc:4d: 5f:94:d3:f1:c5:36:c0:9c:0f:b5:65:07:43:dd:73:21:78:f2: 72:06:26:49:40:b8:86:be:f0:bb:a7:49:5b:5d:6d:03:ee:d8: 2b:2f:55:39:61:9d:bc:2f:f6:cd:4a:aa:b7:a9:e1:8e:7b:57: c3:e8:84:11:23:d4:8a:a9:d3:2c:f5:96:9c:0a:ff:2d:bd:71: c1:10:08:93:3c:be:df:f3:dd:91:9c:4b:20:23:ff:15:38:56: 18:81:fc:38:bb:2a:67:90:97:6f:42:19:dd:d0:58:ec:88:4f: 51:5b:21:21:f1:47:82:9f:01:0b:6d:e5:8f:e1:bb:c3:c4:30: 95:ab:55:51:21:ee:b1:33:43:fa:d5:5c:3c:5e:bb:dd:54:21: f6:8b:36:30:7c:52:ed:e9:3b:ea:e8:6d:2c:c2:fd:66:15:e4: d4:61:77:70:00:03:46:12:d3:8d:3e:43:04:28:e8:1f:df:e8: 65:e6:b5:b5:cf:ef:56:08:1c:26:a8:6b:dc:aa:93:e5:81:b6: 0d:e8:e9:cf:b6:57:7c:b5:0b:26:56:b7:a0:b3:7e:50:10:1b: 5d:66:9c:a6:8f:1b:45:f4:d7:6b:5e:e0:01:c8:7d:fc:38:41: 00:5b:eb:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6UkwNmwmzVmkVnFxYcPQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwODA1MTMwMTEwWhcNMjUwODA2MTMwMTEwWjAzMTEwLwYDVQQD Eyg4NDc0MjUzYWY1MDBhMDE0ZTFmZGQ0YmEzNWM2NmNiNGJhZWYyM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzvr5d0S2ofvc+q/UimWv0ucIm6L Vnzrtj8gPuBAZXuDG3D3MyFov2iqW2hxo8WZG0GZSdfmOaPl4ABCtjX7BcSSf1bY UgStur8f0EiQc0b95K7Av3jXlS2LdyiIAu4Yto79ZpKb437wDFvLlNfSofUnfY3l iMWCplNgUuQtOvqEbJNmgGnyhPW/JljfZWIE5W2t5isGb2FLcXEpzJpFuvVQzHC1 Qw4fAn1NxDO6NtgaaFigZwZ7/FmrEKxwbPqmh2aNy5pEeePA0613pCQGrZUqk8ru GrxSS/TH41LdioYG7lC3kHYluC11kcJ/M9nrJhwLZB9kRJLPYYcLLgDPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR0JTr1AKAU4f3UujXGbLS67yOtMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvD75RlKE a9aYDoEiCrX9I/xNX5TT8cU2wJwPtWUHQ91zIXjycgYmSUC4hr7wu6dJW11tA+7Y Ky9VOWGdvC/2zUqqt6nhjntXw+iEESPUiqnTLPWWnAr/Lb1xwRAIkzy+3/PdkZxL ICP/FThWGIH8OLsqZ5CXb0IZ3dBY7IhPUVshIfFHgp8BC23lj+G7w8QwlatVUSHu sTND+tVcPF673VQh9os2MHxS7ek76uhtLML9ZhXk1GF3cAADRhLTjT5DBCjoH9/o Zea1tc/vVggcJqhr3KqT5YG2Dejpz7ZXfLULJla3oLN+UBAbXWacpo8bRfTXa17g Ach9/DhBAFvrNQ== -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:20 2025 by rpki-client