$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: BsfqpsnbzNFz76ctbQq0kINNq5Oy1WuHAgWhiuDkbk4= Subject key identifier: 10:98:10:98:F5:5C:E6:FC:0F:40:55:0F:65:1C:1E:F9:43:65:AE:DC Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019E292691F11DC5A7C504293A9A502043AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 163E Signing time: Fri 15 May 2026 01:00:53 +0000 Manifest this update: Fri 15 May 2026 01:00:53 +0000 Manifest next update: Sat 16 May 2026 01:00:53 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 4: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 5: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 6: AECHdQkqzg3VccPRfvdj6dOEcf0.roa (hash: gvtx0Jiys/YkGy3DMTtr3aUtbYmqqIES9vFl0maNE1Q=) 7: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: 6uB8LrrDOU1ndb/hkn+lLYF3G2Csjl+k61AaZKnZpbU=) 8: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 9: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 10: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 11: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 12: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:26:91:f1:1d:c5:a7:c5:04:29:3a:9a:50:20:43:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: May 15 01:00:53 2026 GMT Not After : May 16 01:00:53 2026 GMT Subject: CN=10981098f55ce6fc0f40550f651c1ef94365aedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:27:1d:0b:2b:b5:55:ff:99:cd:97:6c:b7: 09:bf:0d:6b:5c:18:03:1b:06:71:56:db:3f:f1:cd: b3:fc:fe:a2:c4:db:8a:17:98:bb:5f:b6:e9:85:87: c8:3c:42:46:13:bd:e3:52:99:4d:4e:24:d5:4a:bf: 34:4b:3b:eb:9e:36:03:3b:e7:81:d6:44:9d:4f:02: f8:7b:a3:fd:31:02:99:4d:25:21:1f:37:bf:b8:d0: c9:54:f8:88:16:b7:dc:24:2d:94:91:26:d8:00:b0: d6:8a:a7:96:d2:f1:38:62:04:fb:e8:d8:b4:45:86: dc:4c:af:23:1d:6a:94:22:db:ae:b2:5a:ca:35:43: 09:0d:95:5b:47:ee:62:60:ac:95:d3:b5:6c:09:6b: f9:8a:ac:86:ea:c8:db:a4:80:c1:37:76:4a:87:2f: 7f:58:74:9d:a0:1b:9a:90:42:69:21:13:0a:2b:35: 97:34:63:7b:59:fe:39:ab:00:cc:1d:a0:f5:43:46: dc:a1:39:fc:fe:b6:81:8d:ab:2a:06:b8:99:9a:57: 96:6f:9d:76:96:25:e5:95:90:ad:6c:62:fc:97:79: 60:89:96:34:2e:59:f6:fd:aa:e4:2c:c5:8c:2d:8c: 16:fa:49:c6:0a:01:e8:a9:36:de:48:1c:12:af:d7: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:10:98:F5:5C:E6:FC:0F:40:55:0F:65:1C:1E:F9:43:65:AE:DC X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4b:63:67:fa:f1:a8:3a:20:34:6a:0a:45:61:b5:47:6f:c2: ce:2a:2d:54:a1:d7:49:da:a8:c1:e4:8d:2d:8c:e4:00:59:95: 84:ea:21:17:22:b3:28:b8:cd:fe:0d:7a:0a:65:f3:c9:c4:cc: 57:cf:b4:13:a4:b0:99:8a:e6:85:c0:7a:f5:f7:f2:46:e0:d1: 0a:aa:7a:b5:07:dd:cb:f2:5f:46:67:5e:ea:0f:5d:27:d9:99: 7c:a2:0b:ae:d6:83:1c:e4:c8:03:c0:30:12:1c:24:56:ba:0d: ce:61:1c:44:6e:4e:fd:3e:5c:d0:d7:c1:3a:6b:4d:71:a6:11: 38:de:37:d5:4a:bd:d4:1b:05:51:22:e6:28:94:b3:32:74:6d: 96:0f:d4:04:05:9c:30:4a:a5:cf:85:3b:e2:27:e2:24:ea:b7: 06:66:5d:c4:80:18:2f:2c:1c:ac:06:01:66:07:d7:8d:65:f1: 0b:5d:ed:e2:52:1f:5c:9a:9a:db:d6:56:bb:20:f8:b6:0b:06: dc:fa:10:55:53:21:64:68:af:22:f7:41:4d:ff:8d:f6:a8:c8: c3:e7:98:0a:e9:47:38:e6:61:81:78:f9:a4:5d:e3:89:52:e5: e1:06:65:fd:a6:6a:4c:3e:ec:75:92:d5:b9:76:57:1b:26:3d: f6:04:d1:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4pJpHxHcWnxQQpOppQIEOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwNTE1MDEwMDUzWhcNMjYwNTE2MDEwMDUzWjAzMTEwLwYDVQQD EygxMDk4MTA5OGY1NWNlNmZjMGY0MDU1MGY2NTFjMWVmOTQzNjVhZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriUnHQsrtVX/mc2XbLcJvw1rXBgD GwZxVts/8c2z/P6ixNuKF5i7X7bphYfIPEJGE73jUplNTiTVSr80SzvrnjYDO+eB 1kSdTwL4e6P9MQKZTSUhHze/uNDJVPiIFrfcJC2UkSbYALDWiqeW0vE4YgT76Ni0 RYbcTK8jHWqUItuuslrKNUMJDZVbR+5iYKyV07VsCWv5iqyG6sjbpIDBN3ZKhy9/ WHSdoBuakEJpIRMKKzWXNGN7Wf45qwDMHaD1Q0bcoTn8/raBjasqBriZmleWb512 liXllZCtbGL8l3lgiZY0Lln2/arkLMWMLYwW+knGCgHoqTbeSBwSr9dnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCYEJj1XOb8D0BVD2UcHvlDZa7cMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUtjZ/rx qDogNGoKRWG1R2/CziotVKHXSdqoweSNLYzkAFmVhOohFyKzKLjN/g16CmXzycTM V8+0E6SwmYrmhcB69ffyRuDRCqp6tQfdy/JfRmde6g9dJ9mZfKILrtaDHOTIA8Aw EhwkVroNzmEcRG5O/T5c0NfBOmtNcaYRON431Uq91BsFUSLmKJSzMnRtlg/UBAWc MEqlz4U74ifiJOq3BmZdxIAYLywcrAYBZgfXjWXxC13t4lIfXJqa29ZWuyD4tgsG 3PoQVVMhZGivIvdBTf+N9qjIw+eYCulHOOZhgXj5pF3jiVLl4QZl/aZqTD7sdZLV uXZXGyY99gTRJQ== -----END CERTIFICATE-----Generated at Fri May 15 07:03:18 2026 by rpki-client