$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: zvhXYNrx/I54RjDP87E2AYR4BNRoYNAQIA/p9fee7aY= Subject key identifier: BB:04:24:4F:C9:69:3A:2E:3A:C7:48:23:40:03:BF:81:94:53:59:60 Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 01984250A51D674AE90991ED76DB4FDEB506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1604 Signing time: Fri 25 Jul 2025 16:00:38 +0000 Manifest this update: Fri 25 Jul 2025 16:00:38 +0000 Manifest next update: Sat 26 Jul 2025 16:00:38 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: 4lROKpWAmHqLiIT2taalQQoyI2CwayuW1Zzfus1uvrc=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:42:50:a5:1d:67:4a:e9:09:91:ed:76:db:4f:de:b5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Jul 25 16:00:38 2025 GMT Not After : Jul 26 16:00:38 2025 GMT Subject: CN=bb04244fc9693a2e3ac748234003bf8194535960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:63:3b:b0:2e:50:e7:40:ee:c6:4f:df:5e: 98:19:cd:87:e2:c7:2d:4b:78:14:60:a6:93:99:66: e9:7f:c2:fe:59:6c:29:c5:bf:9b:28:71:97:db:bd: 97:69:ae:aa:00:0b:c1:95:94:99:1f:3a:0d:7b:b3: c4:33:b3:33:6f:af:79:cd:c5:3f:df:92:b4:86:99: 6a:b6:33:27:ff:fa:5b:f3:46:2d:a9:d4:28:f8:05: 8c:6f:86:5d:30:fb:23:12:7e:39:6d:63:3a:76:cf: 12:70:9a:89:eb:45:8f:60:ae:dd:48:a9:ad:82:17: 9b:48:3c:e7:b1:f9:31:4f:44:18:7d:d3:53:33:9c: c0:11:50:75:83:29:4a:24:ee:78:37:ee:04:2f:0e: 59:25:39:0c:87:dd:4d:05:26:52:98:23:ef:0c:51: ff:82:a8:a5:54:f8:43:84:d2:d0:9b:c0:e7:b1:f8: af:88:37:7d:b2:dc:6c:39:04:df:2a:83:5f:db:77: 9a:6e:a2:c8:ca:1f:17:8f:19:40:24:e6:40:96:64: 24:46:56:a5:13:81:30:77:24:95:89:7c:90:50:32: 2f:7d:9a:17:63:1a:ef:c9:bc:8a:a4:40:90:ef:62: 18:e7:33:5d:7b:bd:d9:2c:cc:8c:9d:90:ac:25:34: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:24:4F:C9:69:3A:2E:3A:C7:48:23:40:03:BF:81:94:53:59:60 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:42:24:fa:9b:0c:0d:8f:58:08:fa:02:1f:e5:11:f5:a4: 76:2a:74:eb:b8:c8:01:2a:43:68:31:e5:e6:5c:4a:cf:22:6c: fa:d5:8c:c8:b4:6e:a2:c3:16:fb:4e:e4:9e:f8:ed:49:d3:a4: 32:b9:e4:6c:0f:6d:39:35:f0:5f:a5:3c:8a:07:1e:28:aa:dd: 21:07:a7:41:54:81:ba:68:04:84:ec:6c:44:45:c1:8a:f2:ef: e0:b0:bb:a2:08:56:b2:b5:48:84:d1:ac:a9:37:fc:ae:60:f3: 5a:57:e4:a1:60:fb:09:de:fd:51:e1:4e:5c:7b:b9:4b:81:69: 69:82:6b:6f:b8:dc:ea:37:6b:ea:f5:5c:6d:af:f1:76:80:cc: a2:63:34:06:53:1a:31:9c:e1:8a:10:c4:2c:f7:8f:2d:22:79: d2:51:2a:50:86:59:1c:1e:fb:99:a5:ec:24:23:d3:d6:1c:a0: de:c0:ea:bb:71:48:ea:d4:77:92:9c:bf:2f:0d:57:ad:a8:eb: 47:f8:22:f3:e6:f5:ba:d5:8f:76:77:ca:cf:2c:67:d1:80:3e: a6:c8:b6:9c:8c:09:0f:2d:f7:1e:45:fe:d5:55:08:e2:03:76: be:1e:03:99:1c:3c:c4:e2:74:86:f5:b2:ad:16:a7:77:21:ba: 29:8f:9b:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhCUKUdZ0rpCZHtdttP3rUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNzI1MTYwMDM4WhcNMjUwNzI2MTYwMDM4WjAzMTEwLwYDVQQD EyhiYjA0MjQ0ZmM5NjkzYTJlM2FjNzQ4MjM0MDAzYmY4MTk0NTM1OTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKljO7AuUOdA7sZP316YGc2H4sct S3gUYKaTmWbpf8L+WWwpxb+bKHGX272Xaa6qAAvBlZSZHzoNe7PEM7Mzb695zcU/ 35K0hplqtjMn//pb80YtqdQo+AWMb4ZdMPsjEn45bWM6ds8ScJqJ60WPYK7dSKmt ghebSDznsfkxT0QYfdNTM5zAEVB1gylKJO54N+4ELw5ZJTkMh91NBSZSmCPvDFH/ gqilVPhDhNLQm8DnsfiviDd9stxsOQTfKoNf23eabqLIyh8XjxlAJOZAlmQkRlal E4EwdySViXyQUDIvfZoXYxrvybyKpECQ72IY5zNde73ZLMyMnZCsJTQq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsEJE/JaTouOsdII0ADv4GUU1lgMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNVCJPqb DA2PWAj6Ah/lEfWkdip067jIASpDaDHl5lxKzyJs+tWMyLRuosMW+07knvjtSdOk MrnkbA9tOTXwX6U8igceKKrdIQenQVSBumgEhOxsREXBivLv4LC7oghWsrVIhNGs qTf8rmDzWlfkoWD7Cd79UeFOXHu5S4FpaYJrb7jc6jdr6vVcba/xdoDMomM0BlMa MZzhihDELPePLSJ50lEqUIZZHB77maXsJCPT1hyg3sDqu3FI6tR3kpy/Lw1Xrajr R/gi8+b1utWPdnfKzyxn0YA+psi2nIwJDy33HkX+1VUI4gN2vh4DmRw8xOJ0hvWy rRandyG6KY+brg== -----END CERTIFICATE-----Generated at Sat Jul 26 00:42:46 2025 by rpki-client