$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: zCojyVhVeQd8HEBQAXXAQLqzRcaLx4f7cTyLkqM+hkk= Subject key identifier: E5:A4:1C:A4:EF:42:46:2B:B3:AA:5C:DC:2E:7A:6C:E0:45:91:DA:27 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 0198274751462B44C39C190C4684D3D00403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 19 Signing time: Sun 20 Jul 2025 10:00:41 +0000 Manifest this update: Sun 20 Jul 2025 10:00:41 +0000 Manifest next update: Mon 21 Jul 2025 10:00:41 +0000 Files and hashes: 1: BLL7KvTCffO6tp4kIOP_sSt6WzU.roa (hash: K2KxT9evveKUcS3Zp6W/L1otqyWrsiDb4Q4jrBUnW7c=) 2: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (hash: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=) 3: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (hash: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=) 4: TH3AhVbNZPfpfze9jk4P8EYhJRk.roa (hash: CvDuj4p8KBdrmQoz9VsmO+AYAN5CIQ+jW9RXbyF9x5g=) 5: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (hash: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=) 6: X1OJBmObFYHg6-TEw8S-Kw2Q7ic.roa (hash: Oyq+zf+xTb/nBsWGWwl35Zcj+K8DjFf57comG4rLZLc=) 7: Y8i3rrn4fUUiKvEOTWMIpo8Wdg0.roa (hash: lhJRliSxc8nIrWSQMwOkXfftJXTelhvnTEYCqHEODt0=) 8: Z1M_6TrqOd8wD9NKtj0iTyQonVc.roa (hash: aDWP4uHhbYWLYFp3XR/+E+EeJ5Rm4IXEZcu1iYff0qg=) 9: ZDayT6lDLS2GCPR-v8fqvcLoQK4.roa (hash: +ziQ7srcO8pPuSJWXnBHZoMe2FpncGGdN6aXUGmO+8s=) 10: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (hash: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=) 11: emjANyISkJRoOdzxCAt2kq4CVQE.roa (hash: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=) 12: gchhAVJFDCU8blLfh1bBR6nV7eE.roa (hash: i4UDZqnLoafc9IhMJrDyMFSOYLmIkEVFeY6p5LZlGi4=) 13: hLDp0R1tKZ1uQpk7clza_OXTeIc.roa (hash: 2IvvdqWOvjCen06JgJKZvx4rVETFnJduNU5B5/20Srw=) 14: hok1h3DBZfbszYTqi9gXzI5jkqU.roa (hash: Rrp79AM7R2rghKYLAtKfPleubz/8AHn7KNcJJOJ8/Y0=) 15: k3nz4zVDnUi6AYeJJc8B5EL8uIQ.roa (hash: KpAbMgMDHdAyfnvJyW/aRDyPdMpZx9EbM+CrASXLP+A=) 16: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (hash: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=) 17: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: uSHAR5MsijC39Fyk0duBP5Gx5W2u/hDtVvlffMl+5ZY=) 18: qYUhOlm7rxtE24ifggtJupvHC-U.roa (hash: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=) 19: z1lDJAYiSGQWP0hQT2qsq0NQckw.roa (hash: +w84SriAFLfwafgawze6gO/oCWYDdlLPo2xuwocy9KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:47:51:46:2b:44:c3:9c:19:0c:46:84:d3:d0:04:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jul 20 10:00:41 2025 GMT Not After : Jul 21 10:00:41 2025 GMT Subject: CN=e5a41ca4ef42462bb3aa5cdc2e7a6ce04591da27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:73:bd:d5:10:e4:85:ff:f0:e6:bb:2a:ce: 62:56:06:6c:9d:f8:bc:fa:cc:b3:eb:af:28:93:ff: c9:8d:7f:a8:0d:16:86:65:2c:ac:fe:fa:89:9d:cb: 2e:55:8a:70:32:0e:87:13:fd:7d:90:7e:45:e4:3c: 7a:17:d2:dd:10:c2:62:b0:ba:42:07:97:6c:4e:a2: 1f:47:0c:67:ad:3c:d5:60:c7:83:e6:c0:6d:8b:dc: d4:16:c5:71:7c:6d:61:56:cb:46:72:bf:d2:2a:45: f9:40:0d:3c:00:ea:81:e2:21:17:3d:80:c5:02:3a: 87:77:c6:d5:75:72:8c:31:c9:0c:5a:70:bc:d5:35: a9:b7:2b:d0:7e:55:08:d4:73:d7:91:58:e2:6d:c8: b3:e9:20:fd:ec:a7:63:c7:ed:c5:8b:eb:24:b4:8d: 9a:a0:4e:2c:2e:c7:f3:72:d6:d2:9f:71:d6:c0:25: e8:1f:f1:ee:24:7e:94:a4:3a:63:d8:98:db:5e:15: d2:68:74:37:fe:ab:54:cb:0b:a3:e0:33:e8:3c:81: 8a:a0:fe:34:66:ab:aa:2d:59:c1:21:95:3c:ab:ce: fe:a5:00:73:08:1e:d8:69:3f:09:24:6f:e0:2e:fe: 3d:3b:82:81:c0:fe:00:06:11:f6:ca:ea:c5:a5:9d: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A4:1C:A4:EF:42:46:2B:B3:AA:5C:DC:2E:7A:6C:E0:45:91:DA:27 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b5:fd:77:99:82:19:bd:e4:d7:45:79:14:83:b3:97:f5:df: 44:ea:68:29:b9:7c:2b:d7:c3:c1:37:10:fb:75:e8:60:bb:4f: 02:34:66:3a:d2:44:a6:18:bb:f1:ec:ae:1b:cb:43:ae:48:80: 0f:1b:20:eb:b4:04:84:8c:c1:78:4a:9a:75:bd:02:4f:0b:af: 1b:4e:76:ab:90:3b:a6:6c:e6:1b:60:44:98:ec:92:f7:4e:b4: a2:3b:c5:0f:3f:cf:b7:a6:14:6b:f7:94:71:5b:cf:35:bc:34: 4e:db:d6:02:3a:ff:91:a0:6d:d7:a1:86:15:87:53:5b:c5:84: 12:67:8e:eb:a0:a9:03:c7:43:3c:5d:3f:f9:30:a7:fb:63:14: 6c:3b:0c:eb:f2:56:f7:f0:b7:d0:06:ab:e1:9b:e6:aa:7b:06: 6d:b4:14:ad:d6:21:0e:48:40:df:82:29:13:a9:cf:ab:e7:04: 5e:d1:dd:ab:7a:83:5a:fe:67:03:e3:8c:65:6a:c8:42:83:f9: 91:a2:e7:15:f3:8e:50:18:03:ef:b9:a0:eb:52:e1:00:bf:eb: 47:d1:9a:93:14:2e:ba:f2:88:36:b6:5b:86:34:af:22:53:66: 69:7c:1a:13:a5:ea:24:03:d6:fd:7c:0d:36:f7:e9:34:d7:a7: 94:dc:4a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnR1FGK0TDnBkMRoTT0AQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUwNzIwMTAwMDQxWhcNMjUwNzIxMTAwMDQxWjAzMTEwLwYDVQQD EyhlNWE0MWNhNGVmNDI0NjJiYjNhYTVjZGMyZTdhNmNlMDQ1OTFkYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2RzvdUQ5IX/8Oa7Ks5iVgZsnfi8 +syz668ok//JjX+oDRaGZSys/vqJncsuVYpwMg6HE/19kH5F5Dx6F9LdEMJisLpC B5dsTqIfRwxnrTzVYMeD5sBti9zUFsVxfG1hVstGcr/SKkX5QA08AOqB4iEXPYDF AjqHd8bVdXKMMckMWnC81TWptyvQflUI1HPXkVjibciz6SD97Kdjx+3Fi+sktI2a oE4sLsfzctbSn3HWwCXoH/HuJH6UpDpj2JjbXhXSaHQ3/qtUywuj4DPoPIGKoP40 ZquqLVnBIZU8q87+pQBzCB7YaT8JJG/gLv49O4KBwP4ABhH2yurFpZ00jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWkHKTvQkYrs6pc3C56bOBFkdonMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLX9d5mC Gb3k10V5FIOzl/XfROpoKbl8K9fDwTcQ+3XoYLtPAjRmOtJEphi78eyuG8tDrkiA Dxsg67QEhIzBeEqadb0CTwuvG052q5A7pmzmG2BEmOyS9060ojvFDz/Pt6YUa/eU cVvPNbw0TtvWAjr/kaBt16GGFYdTW8WEEmeO66CpA8dDPF0/+TCn+2MUbDsM6/JW 9/C30Aar4ZvmqnsGbbQUrdYhDkhA34IpE6nPq+cEXtHdq3qDWv5nA+OMZWrIQoP5 kaLnFfOOUBgD77mg61LhAL/rR9GakxQuuvKINrZbhjSvIlNmaXwaE6XqJAPW/XwN NvfpNNenlNxK6A== -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:29 2025 by rpki-client