$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: GIFZkOnm7CgLmHvyTnTeWqooS7BPyUddHAm9ttePbjA= Subject key identifier: 29:5E:9C:5A:30:35:6D:41:5F:B5:C8:9A:41:D2:00:60:81:26:63:03 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 01A16F12C8282AA8A9CF3E0C685ADC8DBE50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 17F2 Signing time: Sat 24 Oct 2026 18:01:04 +0000 Manifest this update: Sat 24 Oct 2026 18:01:04 +0000 Manifest next update: Sun 25 Oct 2026 18:01:04 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 3: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 4: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 5: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: kYMMgZeMjIS/+er+YHfbugOLv1qEKyQj1mWAMzONYAs=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: cI3avh87O39OTH2EDCZqQutH5Ns.roa (hash: PWvhR3t5RRJ4KX9H65mhTT6EDfYi6lc1qIh3TLRHz2Y=) 11: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 12: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 15: yDHywWsdIhBQgVuHLGKPzw5EM7U.roa (hash: 9Ahh7dFFmiQE0dfQuEmxqO0TQHF9u86//wZZySbZLs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6f:12:c8:28:2a:a8:a9:cf:3e:0c:68:5a:dc:8d:be:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Oct 24 18:01:04 2026 GMT Not After : Oct 25 18:01:04 2026 GMT Subject: CN=295e9c5a30356d415fb5c89a41d2006081266303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:92:35:b8:84:2c:5a:6b:ba:6b:b7:89:4e: 4a:f3:fe:ae:07:d0:c1:18:1d:c1:20:5d:73:c1:2d: 43:c9:05:fa:63:3d:95:85:d4:e6:ae:44:20:cb:41: 3f:ae:9a:f6:02:f4:d3:aa:2a:1a:11:14:45:51:3e: c3:02:4f:a9:0f:2f:a1:4b:dc:6c:ce:16:92:fc:5e: b8:c2:12:ed:c1:f2:ad:cf:45:50:1b:a4:2d:74:45: 6f:24:20:b0:e2:a8:0f:10:17:a9:3a:73:a3:e1:b0: 8f:b6:81:b0:8e:dd:78:bc:97:1a:d9:87:75:c6:07: 00:b3:99:ae:2f:5c:6c:e2:7f:65:1d:a2:fe:a5:10: de:85:4d:69:96:83:22:06:be:dd:55:7f:67:a7:05: 39:45:16:3a:2e:05:31:a4:c9:d9:e1:10:a8:8f:d8: a6:09:c5:ae:c5:d3:09:9d:91:85:d5:0f:be:7a:96: 7c:c9:24:bc:42:03:26:c7:a1:46:48:10:64:57:51: 04:83:95:50:d4:78:b4:73:79:3c:5e:6c:0e:49:42: a1:ca:3f:be:59:a6:c4:df:b4:c0:d4:64:c5:47:35: 17:8d:93:b3:12:35:26:2c:a2:ee:7b:0c:bf:f4:f3: 62:61:c9:e8:b5:35:2d:d2:56:dd:01:9a:b2:ca:26: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:9C:5A:30:35:6D:41:5F:B5:C8:9A:41:D2:00:60:81:26:63:03 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4e:5a:bd:5f:d6:bb:6e:5f:0c:81:3d:32:b8:68:ef:39:68: 02:02:50:33:b7:bb:19:d7:2e:f3:8d:ce:bb:da:73:f4:fa:b0: b4:06:7e:32:49:db:71:4b:9d:b6:da:29:b3:6c:59:24:d9:69: 0c:ef:c6:ce:e2:8b:cd:4e:c4:c0:fe:55:8f:29:8a:10:6c:7e: 95:fe:47:12:1e:5b:cc:77:53:46:ae:36:47:dc:20:94:0b:ed: 84:94:a6:b4:c9:52:2a:16:b6:53:81:3d:d4:2b:e8:85:1b:eb: 3c:be:45:4f:91:4c:fb:7d:5c:84:28:6c:1a:37:4e:76:9b:44: fe:69:0e:6a:eb:ee:ef:62:82:d0:c6:d4:2d:76:21:17:76:fb: a0:a9:f8:9d:7f:bf:7e:e8:73:59:bc:4c:c0:6e:50:de:9d:c7: c4:ed:25:58:12:74:90:7d:fb:06:5e:2b:83:39:80:36:27:53: 23:5d:e1:ba:17:e3:a0:5e:02:1b:d5:4f:0b:5d:11:5d:54:65: 87:ac:6b:15:a2:c9:69:71:f4:84:8e:61:23:2b:1b:6e:b5:98: 4e:3f:a4:ba:cd:83:99:c8:c6:f8:cf:05:4a:0b:9e:5c:0e:c5: 45:c5:d2:aa:b9:14:42:d7:49:4e:61:60:55:30:ae:02:93:ee: c6:08:87:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFvEsgoKqipzz4MaFrcjb5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYxMDI0MTgwMTA0WhcNMjYxMDI1MTgwMTA0WjAzMTEwLwYDVQQD EygyOTVlOWM1YTMwMzU2ZDQxNWZiNWM4OWE0MWQyMDA2MDgxMjY2MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAKSNbiELFprumu3iU5K8/6uB9DB GB3BIF1zwS1DyQX6Yz2VhdTmrkQgy0E/rpr2AvTTqioaERRFUT7DAk+pDy+hS9xs zhaS/F64whLtwfKtz0VQG6QtdEVvJCCw4qgPEBepOnOj4bCPtoGwjt14vJca2Yd1 xgcAs5muL1xs4n9lHaL+pRDehU1ploMiBr7dVX9npwU5RRY6LgUxpMnZ4RCoj9im CcWuxdMJnZGF1Q++epZ8ySS8QgMmx6FGSBBkV1EEg5VQ1Hi0c3k8XmwOSUKhyj++ WabE37TA1GTFRzUXjZOzEjUmLKLuewy/9PNiYcnotTUt0lbdAZqyyiac1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClenFowNW1BX7XImkHSAGCBJmMDMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE5avV/W u25fDIE9Mrho7zloAgJQM7e7Gdcu843Ou9pz9PqwtAZ+MknbcUudttops2xZJNlp DO/GzuKLzU7EwP5VjymKEGx+lf5HEh5bzHdTRq42R9wglAvthJSmtMlSKha2U4E9 1CvohRvrPL5FT5FM+31chChsGjdOdptE/mkOauvu72KC0MbULXYhF3b7oKn4nX+/ fuhzWbxMwG5Q3p3HxO0lWBJ0kH37Bl4rgzmANidTI13huhfjoF4CG9VPC10RXVRl h6xrFaLJaXH0hI5hIysbbrWYTj+kus2DmcjG+M8FSgueXA7FRcXSqrkUQtdJTmFg VTCuApPuxgiHJQ== -----END CERTIFICATE-----Generated at Sun Oct 25 03:10:45 2026 by rpki-client