$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: Xf/jStAvwdfb/jsLbj27fJEo78WtAM0rUNcNVpS2PZI= Subject key identifier: CC:12:19:A6:DC:DA:1E:3D:4D:4A:0E:A9:F9:E4:8E:A4:B3:33:6C:E6 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 0199270E05C3A2DF015E56F96A21869A43FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 13A2 Signing time: Mon 08 Sep 2025 02:00:54 +0000 Manifest this update: Mon 08 Sep 2025 02:00:54 +0000 Manifest next update: Tue 09 Sep 2025 02:00:54 +0000 Files and hashes: 1: 0mUEdLJyCtB-8V_B-TcYPs8bnlI.roa (hash: vf8QhP1MDK9+Rj/1zatnHVCOXq4wFBMmhXEA4d/vdpo=) 2: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 3: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 4: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: iAcGuVbnS+txf8MJYeg82wUlOCjPrhFNHz/CVKyw4RI=) 6: JiS1Tiph5HTmGNzZ0KtBUIEaf7A.roa (hash: Gom6zOjgSh5rBVSKZ2f6ZCcspQ3wfulcfmXimj0TCtQ=) 7: KtKxD1HbUkxdQbT12LynXd7iXTs.roa (hash: sI8vJTHX8+A6Ti8zSaEXzqBtKgPjjPc75g33e2ATpPA=) 8: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 9: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 10: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 11: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 12: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 13: r5RDCZVrjcs26zN2wJ5oPZzWcrE.roa (hash: ABN+n8WXzNyvhNn0KAYr1OZE1UelVHRBMWhRAYF1K1Q=) 14: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:0e:05:c3:a2:df:01:5e:56:f9:6a:21:86:9a:43:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Sep 8 02:00:54 2025 GMT Not After : Sep 9 02:00:54 2025 GMT Subject: CN=cc1219a6dcda1e3d4d4a0ea9f9e48ea4b3336ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4e:fa:a0:64:b4:7d:db:f0:ee:43:7d:38:fd: b6:fb:90:e6:33:39:46:12:5e:59:99:48:f6:11:74: 5f:17:1a:19:47:9d:ad:28:aa:c7:1b:1a:fd:16:90: 53:77:53:e6:3f:a8:3a:2f:4c:2a:13:2a:04:5f:ce: 76:43:fe:f7:82:fb:94:54:a5:47:15:cb:f9:39:f1: 76:4d:57:ea:af:91:b6:9a:ee:5b:a3:df:3f:93:00: d3:86:9f:0d:2f:cd:ef:ea:4e:73:59:c3:c6:94:22: 55:06:40:78:48:9b:d2:6e:f3:bb:31:f8:d9:a5:c4: 63:c7:9a:be:12:6b:86:84:43:75:d2:71:e6:87:e1: 33:d1:88:2b:ea:da:c2:66:f4:62:fb:8c:81:60:92: 9a:9b:77:1c:77:89:96:37:16:96:20:2f:03:6f:99: 7b:0b:d4:e4:97:4a:08:5d:00:55:72:60:4d:be:e3: 2b:90:da:52:8e:9e:21:b7:93:51:45:f7:97:6e:15: 0a:0d:ab:0a:a8:ee:fe:21:42:f1:2e:2f:f6:a9:0f: 1b:4a:a6:68:00:b1:0d:ab:ab:9f:ec:99:0c:21:8f: 08:68:eb:39:e4:37:03:f5:1f:68:50:70:89:e3:73: d5:8a:1c:72:49:34:cf:32:bb:c7:a2:b3:b9:3e:3f: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:19:A6:DC:DA:1E:3D:4D:4A:0E:A9:F9:E4:8E:A4:B3:33:6C:E6 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ea:a7:a9:d1:31:18:29:47:f2:b3:d7:e6:86:fd:56:d2:0c: 41:a0:af:70:61:91:1f:b6:03:f8:7f:95:73:b6:8e:f2:23:9f: c7:ec:54:2b:04:9c:79:47:d1:2b:44:4b:6b:7d:73:1e:9c:86: 76:c3:a7:ae:57:44:77:1f:7b:ca:80:35:9d:b7:13:84:1a:54: dc:6d:3a:89:2a:37:47:12:8f:e9:29:11:d8:1e:55:b1:91:1f: 38:5b:48:95:53:49:87:51:49:0c:21:88:90:1b:fc:bf:84:5a: d1:0c:b1:a3:62:ae:e1:cb:96:ae:0a:37:6a:f8:bd:e7:a2:cb: 56:bb:d4:90:6b:d8:68:ad:ce:1e:35:23:3b:38:b5:f4:ee:73: 27:39:c9:b5:b8:f4:14:b1:a6:d2:5a:fa:b9:b9:96:8b:df:1d: 4c:bb:34:4d:e8:99:30:99:e8:b3:e6:46:2e:f6:f1:6f:03:56: 9a:a2:99:65:b9:9f:7d:fe:ef:f4:ae:c3:b7:ea:e8:30:6f:d2: a3:03:5a:34:38:40:a1:88:96:9e:ea:50:dd:9f:46:55:c9:49: 42:d1:49:c2:81:53:9c:95:90:0e:8d:1a:40:a9:a4:aa:71:ed: 5a:7c:a6:dc:f7:15:59:52:65:15:76:56:8b:89:e5:e9:42:18: fd:7d:2a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZknDgXDot8BXlb5aiGGmkP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwOTA4MDIwMDU0WhcNMjUwOTA5MDIwMDU0WjAzMTEwLwYDVQQD EyhjYzEyMTlhNmRjZGExZTNkNGQ0YTBlYTlmOWU0OGVhNGIzMzM2Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E76oGS0fdvw7kN9OP22+5DmMzlG El5ZmUj2EXRfFxoZR52tKKrHGxr9FpBTd1PmP6g6L0wqEyoEX852Q/73gvuUVKVH Fcv5OfF2TVfqr5G2mu5bo98/kwDThp8NL83v6k5zWcPGlCJVBkB4SJvSbvO7MfjZ pcRjx5q+EmuGhEN10nHmh+Ez0Ygr6trCZvRi+4yBYJKam3ccd4mWNxaWIC8Db5l7 C9Tkl0oIXQBVcmBNvuMrkNpSjp4ht5NRRfeXbhUKDasKqO7+IULxLi/2qQ8bSqZo ALENq6uf7JkMIY8IaOs55DcD9R9oUHCJ43PVihxySTTPMrvHorO5Pj/PdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwSGabc2h49TUoOqfnkjqSzM2zmMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeqnqdEx GClH8rPX5ob9VtIMQaCvcGGRH7YD+H+Vc7aO8iOfx+xUKwSceUfRK0RLa31zHpyG dsOnrldEdx97yoA1nbcThBpU3G06iSo3RxKP6SkR2B5VsZEfOFtIlVNJh1FJDCGI kBv8v4Ra0Qyxo2Ku4cuWrgo3avi956LLVrvUkGvYaK3OHjUjOzi19O5zJznJtbj0 FLGm0lr6ubmWi98dTLs0TeiZMJnos+ZGLvbxbwNWmqKZZbmfff7v9K7Dt+roMG/S owNaNDhAoYiWnupQ3Z9GVclJQtFJwoFTnJWQDo0aQKmkqnHtWnym3PcVWVJlFXZW i4nl6UIY/X0qLg== -----END CERTIFICATE-----Generated at Mon Sep 8 08:06:58 2025 by rpki-client