$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: J9PhSX4SlcflplCotLeiJkYZ/6rORSMMoobhwdf8/lE= Subject key identifier: 65:A2:07:8B:C8:52:64:81:87:BB:42:89:FB:47:33:38:98:7D:99:F1 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019A1EACA4B7F91AC676F1D12B1321F42BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1423 Signing time: Sun 26 Oct 2025 04:00:21 +0000 Manifest this update: Sun 26 Oct 2025 04:00:21 +0000 Manifest next update: Mon 27 Oct 2025 04:00:21 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: lqz81NZ0WADMpaO8DK7sk7hBs0PzWieWjp75kPjSIBk=) 5: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 6: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 7: Q9Q78d-jsiF5ILAqRcPi-38ptt8.roa (hash: YzBAYIWUa9/3ZSqBiY5Wy7QpsAq3KA1Xx1umoytO+nA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:ac:a4:b7:f9:1a:c6:76:f1:d1:2b:13:21:f4:2b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Oct 26 04:00:21 2025 GMT Not After : Oct 27 04:00:21 2025 GMT Subject: CN=65a2078bc852648187bb4289fb473338987d99f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:5b:b8:36:c0:be:7d:ae:e5:e6:0c:4e:f8: 2a:fd:48:e2:98:03:b0:7b:49:bc:5b:c9:12:64:a8: 90:0d:eb:81:26:9f:6e:77:0b:9f:25:4a:2a:d1:91: 8d:b0:6a:a4:68:ef:82:b7:d1:c7:27:ce:58:09:ed: 85:47:5c:e1:9a:20:dc:46:53:fc:6f:72:5d:1c:d3: 02:13:94:18:c0:15:5d:23:b5:8e:22:8b:bd:79:6d: ec:b8:59:6c:e3:a2:58:4c:1f:fc:36:e7:07:4d:22: 29:a7:fe:66:0b:6f:bd:cc:df:cf:cb:e9:64:4b:b8: 99:72:db:48:3f:ff:37:bd:dc:70:1b:71:45:6f:46: 2c:ae:f4:f1:9b:1b:38:dc:f3:74:ab:3b:f8:a5:7a: 6c:65:d4:d3:49:c4:9a:6c:db:c8:56:a8:53:f1:1f: 20:d6:69:c9:49:b6:20:25:0d:92:ba:e8:89:cd:e4: b7:72:1d:7c:c2:cd:b7:0f:4c:47:f6:db:fa:38:36: 20:29:10:db:d8:05:3b:47:b7:dc:1e:cc:1a:10:35: 63:21:9d:93:3d:d3:01:19:e2:8c:e7:74:aa:d0:44: 1e:91:f8:63:67:eb:f3:43:57:9e:95:12:0d:87:a0: f1:07:4b:1b:48:00:8b:26:d8:de:a1:a4:12:6d:7d: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A2:07:8B:C8:52:64:81:87:BB:42:89:FB:47:33:38:98:7D:99:F1 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5d:8e:15:ae:b6:f6:83:78:37:d8:0e:67:aa:b2:ff:93:84: b8:b5:14:d3:8d:47:0d:99:a7:2f:75:1b:e4:0c:a1:89:03:d8: 0e:48:a2:4b:d4:61:e9:f4:b4:e9:1a:6b:ac:5b:cc:94:51:ec: 55:4b:76:4a:64:3c:64:b3:8d:d1:60:ad:50:29:0b:97:31:65: 09:18:db:ee:d7:68:9e:c9:85:4d:b8:a6:c7:05:22:29:4a:c3: d9:3d:5b:80:cb:79:e8:9c:fc:28:fc:90:51:6e:52:5f:7c:34: 54:fe:88:37:62:de:7a:ad:44:df:41:86:fc:67:90:34:af:39: 4e:7c:8e:df:31:63:7c:49:a5:6b:91:30:8b:23:17:2c:98:52: 12:c6:a5:69:a3:d8:b1:02:e7:de:ed:79:a8:5e:16:af:f3:6d: 39:4d:4f:ec:c4:21:8d:2c:c9:0b:07:58:89:c4:13:1c:e0:ac: 07:fe:7c:10:c1:d0:ac:76:32:36:8c:06:42:bc:2e:0b:eb:bb: 25:ef:f5:d6:d0:d8:83:cf:ac:1c:e4:7b:49:93:58:59:90:54: ca:1f:e0:8c:40:cc:7d:9c:6e:b5:79:40:9f:ee:43:45:05:1e: ef:29:a4:80:b2:32:76:3d:0a:59:55:d6:ef:46:ff:ad:76:6b: ec:68:60:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoerKS3+RrGdvHRKxMh9CveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUxMDI2MDQwMDIxWhcNMjUxMDI3MDQwMDIxWjAzMTEwLwYDVQQD Eyg2NWEyMDc4YmM4NTI2NDgxODdiYjQyODlmYjQ3MzMzODk4N2Q5OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU5buDbAvn2u5eYMTvgq/UjimAOw e0m8W8kSZKiQDeuBJp9udwufJUoq0ZGNsGqkaO+Ct9HHJ85YCe2FR1zhmiDcRlP8 b3JdHNMCE5QYwBVdI7WOIou9eW3suFls46JYTB/8NucHTSIpp/5mC2+9zN/Py+lk S7iZcttIP/83vdxwG3FFb0YsrvTxmxs43PN0qzv4pXpsZdTTScSabNvIVqhT8R8g 1mnJSbYgJQ2SuuiJzeS3ch18ws23D0xH9tv6ODYgKRDb2AU7R7fcHswaEDVjIZ2T PdMBGeKM53Sq0EQekfhjZ+vzQ1eelRINh6DxB0sbSACLJtjeoaQSbX1BuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWiB4vIUmSBh7tCiftHMziYfZnxMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa12OFa62 9oN4N9gOZ6qy/5OEuLUU041HDZmnL3Ub5AyhiQPYDkiiS9Rh6fS06RprrFvMlFHs VUt2SmQ8ZLON0WCtUCkLlzFlCRjb7tdonsmFTbimxwUiKUrD2T1bgMt56Jz8KPyQ UW5SX3w0VP6IN2Leeq1E30GG/GeQNK85TnyO3zFjfEmla5EwiyMXLJhSEsalaaPY sQLn3u15qF4Wr/NtOU1P7MQhjSzJCwdYicQTHOCsB/58EMHQrHYyNowGQrwuC+u7 Je/11tDYg8+sHOR7SZNYWZBUyh/gjEDMfZxutXlAn+5DRQUe7ymkgLIydj0KWVXW 70b/rXZr7GhgBw== -----END CERTIFICATE-----Generated at Sun Oct 26 11:13:51 2025 by rpki-client