$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: JWikipyIXOma2B/lUS4efmxaxI+v89c2u9HmpMbo5dE= Subject key identifier: A5:30:0A:8F:38:31:0C:97:D9:6E:2C:54:18:96:44:BD:BF:FE:56:F9 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 01983570CAB782534ECCCB46481A8C3ED903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1322 Signing time: Wed 23 Jul 2025 04:00:41 +0000 Manifest this update: Wed 23 Jul 2025 04:00:41 +0000 Manifest next update: Thu 24 Jul 2025 04:00:41 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: Mag34s4Mdip6dourm4DROtZWA/Y/SfgIYvWl3xREwq4=) 6: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 7: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 8: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 9: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 10: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 11: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 12: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 13: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:70:ca:b7:82:53:4e:cc:cb:46:48:1a:8c:3e:d9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jul 23 04:00:41 2025 GMT Not After : Jul 24 04:00:41 2025 GMT Subject: CN=a5300a8f38310c97d96e2c54189644bdbffe56f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:bf:5c:27:5d:67:86:c3:d3:00:99:ef:90: 82:35:75:b6:07:9c:c7:e5:b2:e0:96:65:e1:32:eb: d6:08:a6:c3:b5:10:da:cf:35:cb:09:cd:95:2f:33: 3b:2f:35:4c:01:22:7b:33:92:71:84:dd:f3:7a:89: db:92:64:b2:11:66:8f:55:57:63:c2:8b:7e:3a:70: 75:dd:56:65:2f:66:62:5d:25:3f:81:ab:3b:7e:75: 57:5b:08:3f:28:51:81:a9:3f:9e:94:d8:3f:90:47: e0:bc:9f:50:d1:ca:b4:0a:c0:48:11:ef:0b:b3:66: e3:11:99:07:27:11:e7:ee:d1:92:9b:cc:ec:f6:29: 82:a2:5b:49:f9:27:a1:02:dc:b5:3e:9c:fc:a8:02: 94:56:03:3d:b2:1d:d3:87:ff:e7:74:81:32:e6:80: dd:ad:70:13:2e:b9:5f:d7:d6:61:87:87:94:10:ea: 97:3c:d2:da:03:c0:16:bd:16:be:c3:6a:55:32:2e: 0c:e4:bc:07:03:16:38:44:2a:22:96:2c:c8:fd:83: 29:e8:f6:75:a9:61:a4:6c:9b:93:84:31:74:18:04: 2f:20:f1:f1:ed:7a:2b:8c:b9:46:44:6f:eb:4b:91: 6c:d9:8b:f3:df:e5:8a:1b:63:90:6c:88:c9:e9:59: 44:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:30:0A:8F:38:31:0C:97:D9:6E:2C:54:18:96:44:BD:BF:FE:56:F9 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ea:8c:3b:0b:71:41:5c:91:49:9e:00:69:f7:3a:7c:78:b8: 34:88:89:0d:ed:8b:0b:ca:f9:32:93:db:92:cc:3f:71:43:30: 94:76:c2:32:50:08:1b:56:d3:01:42:98:b7:89:a2:2d:33:00: d6:21:60:3e:40:b0:d1:f4:fc:ed:7a:64:a6:ae:ab:46:4a:53: a4:7a:3d:27:79:28:01:4d:a2:89:dd:bf:0c:e7:19:34:6b:f3: b5:2e:68:4d:1c:b4:eb:62:7d:19:b1:56:d2:90:2e:ae:16:cf: 42:96:2b:96:a8:e2:97:c3:63:4d:2d:a3:c0:c9:de:00:f0:ac: ac:16:d6:df:7d:70:10:d1:4a:f5:32:03:b8:3d:ad:f4:f0:d4: 6a:fb:aa:18:52:0c:02:b9:04:44:c5:c2:b0:a5:98:32:76:a8: 38:1f:f1:32:38:c7:93:17:ff:a3:bf:41:36:cd:f8:7f:1e:d4: 90:35:0a:6e:f7:67:3d:20:37:1c:c0:7f:6f:3c:22:e4:f1:b2: d2:83:ac:af:98:94:4b:35:27:6e:51:df:70:47:9f:aa:f4:21: e5:a3:ff:a5:e3:a8:0a:f4:cc:b3:88:86:2e:42:a0:61:31:53: 4b:0a:58:b4:a3:4b:d3:7b:0d:c8:6e:5c:db:83:74:13:61:08: 2c:a5:78:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cMq3glNOzMtGSBqMPtkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwNzIzMDQwMDQxWhcNMjUwNzI0MDQwMDQxWjAzMTEwLwYDVQQD EyhhNTMwMGE4ZjM4MzEwYzk3ZDk2ZTJjNTQxODk2NDRiZGJmZmU1NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlW/XCddZ4bD0wCZ75CCNXW2B5zH 5bLglmXhMuvWCKbDtRDazzXLCc2VLzM7LzVMASJ7M5JxhN3zeonbkmSyEWaPVVdj wot+OnB13VZlL2ZiXSU/gas7fnVXWwg/KFGBqT+elNg/kEfgvJ9Q0cq0CsBIEe8L s2bjEZkHJxHn7tGSm8zs9imColtJ+SehAty1Ppz8qAKUVgM9sh3Th//ndIEy5oDd rXATLrlf19Zhh4eUEOqXPNLaA8AWvRa+w2pVMi4M5LwHAxY4RCoilizI/YMp6PZ1 qWGkbJuThDF0GAQvIPHx7XorjLlGRG/rS5Fs2Yvz3+WKG2OQbIjJ6VlEQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUwCo84MQyX2W4sVBiWRL2//lb5MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOqMOwtx QVyRSZ4Aafc6fHi4NIiJDe2LC8r5MpPbksw/cUMwlHbCMlAIG1bTAUKYt4miLTMA 1iFgPkCw0fT87Xpkpq6rRkpTpHo9J3koAU2iid2/DOcZNGvztS5oTRy062J9GbFW 0pAurhbPQpYrlqjil8NjTS2jwMneAPCsrBbW331wENFK9TIDuD2t9PDUavuqGFIM ArkERMXCsKWYMnaoOB/xMjjHkxf/o79BNs34fx7UkDUKbvdnPSA3HMB/bzwi5PGy 0oOsr5iUSzUnblHfcEefqvQh5aP/peOoCvTMs4iGLkKgYTFTSwpYtKNL03sNyG5c 24N0E2EILKV4yg== -----END CERTIFICATE-----Generated at Wed Jul 23 12:09:46 2025 by rpki-client