$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: HOxutpiPeCg1vIZu3noaQjB+QNkCPM8m1MrDrEa5W7E= Subject key identifier: F3:C2:F8:71:38:51:13:08:CC:FA:C4:C4:8B:87:FA:19:E1:E5:F3:70 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 01A06E3971741EF0BADA9ED3EB3ABD72D34B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 176D Signing time: Fri 04 Sep 2026 21:00:53 +0000 Manifest this update: Fri 04 Sep 2026 21:00:53 +0000 Manifest next update: Sat 05 Sep 2026 21:00:53 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 3: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 4: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 5: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: Ta/u4NdNHgV3olVm9CAS+sIHDy8/idU3F2nm0IaleTU=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: cI3avh87O39OTH2EDCZqQutH5Ns.roa (hash: PWvhR3t5RRJ4KX9H65mhTT6EDfYi6lc1qIh3TLRHz2Y=) 11: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 12: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 15: yDHywWsdIhBQgVuHLGKPzw5EM7U.roa (hash: 9Ahh7dFFmiQE0dfQuEmxqO0TQHF9u86//wZZySbZLs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:39:71:74:1e:f0:ba:da:9e:d3:eb:3a:bd:72:d3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Sep 4 21:00:53 2026 GMT Not After : Sep 5 21:00:53 2026 GMT Subject: CN=f3c2f87138511308ccfac4c48b87fa19e1e5f370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:fa:71:26:fa:b5:9d:f2:28:8d:2e:7d:ab: 6a:d0:96:a1:75:a1:df:27:5b:24:a5:61:c5:04:75: 7a:24:e1:eb:21:50:1d:9d:4f:db:87:44:8e:55:2a: b7:d3:d2:bb:7a:8e:fa:e5:2d:d3:a3:bd:c2:6c:3e: 3c:9b:05:47:cf:00:09:b2:17:02:04:3f:67:b1:05: c0:bf:8e:4a:ef:f0:8c:37:79:12:e9:bb:7e:18:d8: 41:d1:79:d5:81:f1:75:92:6f:5c:ff:7e:6c:b0:72: e0:c1:da:78:82:4d:2e:07:0a:fc:1c:29:53:c7:66: 73:a1:ff:2b:de:07:57:4a:cb:0e:7f:6f:8b:d6:dc: 09:09:29:a6:b5:9e:65:2b:30:f1:42:ef:30:4e:8b: 59:85:e9:4c:af:11:9a:18:d9:4f:4c:2d:b8:16:6f: ab:bc:52:38:5f:ea:84:b4:38:8c:68:91:45:d9:7a: cb:00:95:7f:03:8b:5d:65:3b:74:9f:a6:c4:3a:78: a3:cf:e8:ec:de:df:a4:d8:59:f1:48:5e:1a:72:e5: 92:51:ef:b2:6c:35:13:b2:70:15:f1:15:d8:f8:85: 0c:03:93:6f:92:ca:23:32:85:62:2d:a7:f7:81:84: 4f:46:13:ce:60:0a:fc:64:23:88:bc:05:ad:b0:92: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C2:F8:71:38:51:13:08:CC:FA:C4:C4:8B:87:FA:19:E1:E5:F3:70 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f6:76:0e:81:a4:04:21:cd:1a:e3:23:af:01:d7:ee:e6:9f: 5b:bf:bf:67:56:90:70:23:9e:59:59:a6:33:89:0e:2c:61:cb: 77:fd:8a:42:c7:76:c3:0f:e7:af:fc:06:63:9e:58:c1:c2:d9: db:bf:f7:1b:a2:3c:06:2d:54:3d:87:91:91:5d:a8:ec:d3:3d: 14:e3:7a:d4:1e:65:bf:60:b6:fe:bb:c4:54:64:c3:0f:1d:28: d9:74:f1:5a:06:34:42:ef:19:a1:df:6b:e8:db:ad:8f:1e:8a: 88:0a:df:f0:9b:cf:b1:38:81:51:10:8c:cd:1e:69:4a:a8:a3: 5f:75:24:53:69:c0:ad:c8:58:5e:2d:cb:2a:30:d3:68:39:81: 5c:27:79:0b:b9:52:18:6c:8b:e4:51:d7:5a:d6:e7:5f:40:18: 26:f2:5c:fb:e2:b8:80:74:4f:52:10:a4:e6:40:06:c9:a4:16: 9d:5f:a7:43:52:21:62:bc:b5:38:49:08:e2:13:85:96:92:ad: d9:f8:c3:2e:7c:b2:84:47:54:da:89:a6:9b:37:d4:a6:f4:a1: bd:d7:4b:16:86:52:d0:2a:3c:37:d6:38:a3:fb:d5:e8:35:6a: 56:cc:51:c2:c1:db:65:fc:d6:14:18:b2:db:5b:8f:51:c9:a8: 0f:c2:9d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBuOXF0HvC62p7T6zq9ctNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwOTA0MjEwMDUzWhcNMjYwOTA1MjEwMDUzWjAzMTEwLwYDVQQD EyhmM2MyZjg3MTM4NTExMzA4Y2NmYWM0YzQ4Yjg3ZmExOWUxZTVmMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/T6cSb6tZ3yKI0ufatq0JahdaHf J1skpWHFBHV6JOHrIVAdnU/bh0SOVSq309K7eo765S3To73CbD48mwVHzwAJshcC BD9nsQXAv45K7/CMN3kS6bt+GNhB0XnVgfF1km9c/35ssHLgwdp4gk0uBwr8HClT x2Zzof8r3gdXSssOf2+L1twJCSmmtZ5lKzDxQu8wTotZhelMrxGaGNlPTC24Fm+r vFI4X+qEtDiMaJFF2XrLAJV/A4tdZTt0n6bEOnijz+js3t+k2FnxSF4acuWSUe+y bDUTsnAV8RXY+IUMA5NvksojMoViLaf3gYRPRhPOYAr8ZCOIvAWtsJL7YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPC+HE4URMIzPrExIuH+hnh5fNwMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/Z2DoGk BCHNGuMjrwHX7uafW7+/Z1aQcCOeWVmmM4kOLGHLd/2KQsd2ww/nr/wGY55YwcLZ 27/3G6I8Bi1UPYeRkV2o7NM9FON61B5lv2C2/rvEVGTDDx0o2XTxWgY0Qu8Zod9r 6Nutjx6KiArf8JvPsTiBURCMzR5pSqijX3UkU2nArchYXi3LKjDTaDmBXCd5C7lS GGyL5FHXWtbnX0AYJvJc++K4gHRPUhCk5kAGyaQWnV+nQ1IhYry1OEkI4hOFlpKt 2fjDLnyyhEdU2ommmzfUpvShvddLFoZS0Co8N9Y4o/vV6DVqVsxRwsHbZfzWFBiy 21uPUcmoD8KdAg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:51:25 2026 by rpki-client