$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: WBZHJ2X8IniCNfWekrksdL5I+QRL3+5BxLUR4ZI8woI= Subject key identifier: 8B:84:4A:FD:B5:82:E8:E0:27:E0:A0:83:CE:E8:EF:7F:0A:8F:56:A4 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019F11C05437F05FB68BD908D70CD6FD850D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 16B8 Signing time: Mon 29 Jun 2026 05:00:44 +0000 Manifest this update: Mon 29 Jun 2026 05:00:44 +0000 Manifest next update: Tue 30 Jun 2026 05:00:44 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 4: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 5: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 6: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 7: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: 21VGBWNtQd34LqrwuF0K6I6w37Cz3fNdKhhTwlonCNY=) 8: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 9: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 10: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 11: cI3avh87O39OTH2EDCZqQutH5Ns.roa (hash: PWvhR3t5RRJ4KX9H65mhTT6EDfYi6lc1qIh3TLRHz2Y=) 12: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 13: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 14: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 15: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:c0:54:37:f0:5f:b6:8b:d9:08:d7:0c:d6:fd:85:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jun 29 05:00:44 2026 GMT Not After : Jun 30 05:00:44 2026 GMT Subject: CN=8b844afdb582e8e027e0a083cee8ef7f0a8f56a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:69:92:39:41:f6:b9:dd:b5:46:30:98:a2: 97:00:34:29:5a:30:5c:e6:be:3f:57:94:e4:19:76: db:d4:00:51:0a:11:7d:65:dd:30:a6:9a:b4:ad:36: 30:0e:aa:72:8f:3a:63:ea:bb:bb:9f:d2:c8:5f:78: 87:b7:43:c0:42:fd:6f:35:50:ea:2a:c4:2c:97:c6: ca:54:4f:90:2f:6e:86:b9:26:3c:a1:bf:0c:49:fb: 76:09:f7:f9:06:46:49:fd:01:4b:00:38:9c:d8:35: 00:59:a3:55:e9:f9:e7:30:75:9d:37:5c:0a:5a:27: 34:90:89:8c:c8:27:ad:8b:8f:dd:32:97:7b:31:dd: fd:6e:0f:35:a9:42:78:9f:dc:e3:b3:ca:47:d2:eb: 10:e9:dc:cb:86:1f:a2:03:76:e6:d3:37:b0:26:c6: dc:a9:e6:8d:3e:c3:50:96:ab:d9:90:d8:14:92:fd: 7d:df:9c:72:e0:82:5a:24:52:08:65:ca:97:a6:d2: ec:06:32:2e:ea:54:4c:b4:d2:26:cb:d6:11:a3:86: c1:3f:6f:2b:1a:e2:4b:c7:ff:37:7d:f9:8f:11:2c: bd:6a:b8:e7:48:9c:96:c4:7a:d5:ad:09:5f:2d:e5: 7e:cc:b2:cb:a8:69:c7:6b:12:fd:50:7c:77:88:d0: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:4A:FD:B5:82:E8:E0:27:E0:A0:83:CE:E8:EF:7F:0A:8F:56:A4 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b4:c3:f6:ad:f0:c8:63:38:07:14:f6:f6:66:8a:e6:08:59: d9:98:81:b9:c9:b3:8f:02:c7:76:6b:46:20:d2:37:19:0a:f0: d0:24:b5:40:31:f4:27:7e:25:b2:a8:dd:42:75:31:06:14:37: a5:cc:71:3f:f4:13:45:c7:e4:b4:30:bc:ee:a7:fd:58:dc:33: a7:42:7b:ac:70:21:33:29:e7:bb:52:28:14:77:89:fb:c7:d0: f1:6e:d3:0b:4b:62:6c:b9:b3:f9:c1:fd:5a:d1:2f:b7:f6:f9: af:2f:04:80:59:a7:d6:c9:9d:74:16:6e:2a:54:f4:32:b1:77: e5:54:1d:c3:b9:a8:37:92:6e:de:ee:cb:45:86:d3:16:d9:1f: 57:fa:61:ac:92:46:69:73:fa:7d:ec:a9:03:1f:0f:3f:f2:27: 4e:03:76:26:33:2c:b8:e0:9f:89:78:09:02:f8:d6:80:40:50: a6:3e:54:22:94:92:31:42:02:75:65:e1:53:ab:f8:10:52:00: 4f:1a:b3:0c:3c:54:5c:d2:b8:b2:4d:13:6a:41:90:ae:79:35: f9:ae:2d:ea:53:f9:d1:ef:f1:eb:0d:63:4a:05:2a:59:a2:0b: 69:d3:5c:9a:29:34:9d:89:2b:ab:c8:0a:e0:aa:20:bb:ad:24: 58:fe:3d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8RwFQ38F+2i9kI1wzW/YUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwNjI5MDUwMDQ0WhcNMjYwNjMwMDUwMDQ0WjAzMTEwLwYDVQQD Eyg4Yjg0NGFmZGI1ODJlOGUwMjdlMGEwODNjZWU4ZWY3ZjBhOGY1NmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ilpkjlB9rndtUYwmKKXADQpWjBc 5r4/V5TkGXbb1ABRChF9Zd0wppq0rTYwDqpyjzpj6ru7n9LIX3iHt0PAQv1vNVDq KsQsl8bKVE+QL26GuSY8ob8MSft2Cff5BkZJ/QFLADic2DUAWaNV6fnnMHWdN1wK Wic0kImMyCeti4/dMpd7Md39bg81qUJ4n9zjs8pH0usQ6dzLhh+iA3bm0zewJsbc qeaNPsNQlqvZkNgUkv1935xy4IJaJFIIZcqXptLsBjIu6lRMtNImy9YRo4bBP28r GuJLx/83ffmPESy9arjnSJyWxHrVrQlfLeV+zLLLqGnHaxL9UHx3iNAHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuESv21gujgJ+Cgg87o738Kj1akMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbTD9q3w yGM4BxT29maK5ghZ2ZiBucmzjwLHdmtGINI3GQrw0CS1QDH0J34lsqjdQnUxBhQ3 pcxxP/QTRcfktDC87qf9WNwzp0J7rHAhMynnu1IoFHeJ+8fQ8W7TC0tibLmz+cH9 WtEvt/b5ry8EgFmn1smddBZuKlT0MrF35VQdw7moN5Ju3u7LRYbTFtkfV/phrJJG aXP6feypAx8PP/InTgN2JjMsuOCfiXgJAvjWgEBQpj5UIpSSMUICdWXhU6v4EFIA TxqzDDxUXNK4sk0TakGQrnk1+a4t6lP50e/x6w1jSgUqWaILadNcmik0nYkrq8gK 4Kogu60kWP49Yg== -----END CERTIFICATE-----Generated at Mon Jun 29 11:45:34 2026 by rpki-client