$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: mpJSMOh4ipna7yR0iwc/jRr2sJSjvS2bMCQlxyps9fY= Subject key identifier: 26:65:E5:2A:AC:C3:15:4B:63:18:C2:DA:6F:6C:80:B5:D1:9C:D0:58 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01994EC0923C9867E1E6CD917CF3BA9B9344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 168D Signing time: Mon 15 Sep 2025 19:01:07 +0000 Manifest this update: Mon 15 Sep 2025 19:01:07 +0000 Manifest next update: Tue 16 Sep 2025 19:01:07 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 12: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: kYfodEkeEagrx9RQ68cRVmcjgo3oY72C7A8HyanRyCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4e:c0:92:3c:98:67:e1:e6:cd:91:7c:f3:ba:9b:93:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Sep 15 19:01:07 2025 GMT Not After : Sep 16 19:01:07 2025 GMT Subject: CN=2665e52aacc3154b6318c2da6f6c80b5d19cd058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:8f:85:bb:45:7d:54:d6:0b:cd:65:16:68: 2b:cd:6d:05:1b:b6:64:66:d5:d9:40:2f:82:8e:de: 43:41:21:e4:ce:3b:bc:53:bc:de:b8:5a:e6:1d:0e: 42:5f:72:f5:73:c5:6d:2d:4b:6f:da:c9:29:15:ec: 17:f0:a5:93:aa:84:7b:d1:5c:30:d7:5f:9f:b2:44: 5b:88:87:f4:ea:ed:0f:33:7d:3b:c2:45:1f:70:09: fa:8b:01:5d:13:8b:da:d0:f8:66:62:71:77:b0:17: 8f:c3:7a:3c:bf:e2:7c:c8:35:f6:dc:fd:8c:04:58: 32:23:bc:d5:a5:29:3c:c3:a3:06:98:2d:59:a5:e9: 7d:5e:fb:e3:2f:d0:a2:a1:00:ec:ba:a2:f4:a5:29: f1:6d:5b:ad:cd:51:8d:a4:1d:b2:86:6e:77:56:89: 02:49:31:30:b3:ec:54:19:43:da:c0:dc:1a:e7:17: 85:43:68:1d:75:99:55:43:af:91:1b:1a:06:f4:8f: 0c:33:9f:af:ec:7f:7a:25:68:3f:17:3a:46:4f:6e: b1:26:a3:aa:7f:fa:a9:b0:40:f0:46:95:72:cf:fa: 07:66:33:a8:ea:ac:96:ac:97:6c:4a:13:4a:fd:65: 02:62:d9:08:76:df:c7:de:54:08:3f:33:14:e7:8e: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:65:E5:2A:AC:C3:15:4B:63:18:C2:DA:6F:6C:80:B5:D1:9C:D0:58 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b4:71:fb:83:21:8a:3f:15:86:ba:11:0b:19:24:ca:b6:48: 75:44:89:f6:42:f8:86:89:d6:6b:99:ed:33:e3:82:c9:c3:20: 7f:97:5b:ab:de:b9:b1:9c:e1:92:be:a1:21:12:f9:ef:5f:40: 25:91:0b:2d:e3:e2:53:cc:aa:78:59:dc:2f:a1:f1:e0:2d:68: 37:37:b5:39:a4:0b:28:97:5a:19:62:a5:33:74:b0:26:21:e2: 19:bf:5d:3e:54:87:21:3d:c1:14:6d:7b:e7:6a:c4:25:ce:ba: 2f:ef:ae:e2:12:87:91:7c:6e:17:b5:34:09:0c:0e:b3:59:cc: 4a:42:0e:e6:b6:4a:38:0e:6e:79:4e:15:e2:2f:f7:de:09:83: c5:dd:a8:6e:df:6e:9d:0b:43:61:8b:d9:8f:30:c2:a1:9c:9e: 2b:2a:6b:b7:2f:60:87:b1:44:80:47:17:53:f3:2d:95:50:21: 9e:05:cd:5d:f3:95:39:f2:9b:1a:f8:29:43:f5:85:0d:39:0d: 9f:21:e4:ac:3f:bf:26:a0:a9:c8:7c:21:d5:f0:bd:0e:93:e9: 2c:43:a1:94:e9:dc:89:02:21:9a:b3:f6:ca:e5:02:63:d8:d6: ef:07:42:1e:aa:12:45:e4:ce:10:0e:7c:55:df:9a:fb:11:72: 45:83:c6:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlOwJI8mGfh5s2RfPO6m5NEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwOTE1MTkwMTA3WhcNMjUwOTE2MTkwMTA3WjAzMTEwLwYDVQQD EygyNjY1ZTUyYWFjYzMxNTRiNjMxOGMyZGE2ZjZjODBiNWQxOWNkMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMiPhbtFfVTWC81lFmgrzW0FG7Zk ZtXZQC+Cjt5DQSHkzju8U7zeuFrmHQ5CX3L1c8VtLUtv2skpFewX8KWTqoR70Vww 11+fskRbiIf06u0PM307wkUfcAn6iwFdE4va0PhmYnF3sBePw3o8v+J8yDX23P2M BFgyI7zVpSk8w6MGmC1Zpel9XvvjL9CioQDsuqL0pSnxbVutzVGNpB2yhm53VokC STEws+xUGUPawNwa5xeFQ2gddZlVQ6+RGxoG9I8MM5+v7H96JWg/FzpGT26xJqOq f/qpsEDwRpVyz/oHZjOo6qyWrJdsShNK/WUCYtkIdt/H3lQIPzMU544liwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZl5SqswxVLYxjC2m9sgLXRnNBYMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLRx+4Mh ij8VhroRCxkkyrZIdUSJ9kL4honWa5ntM+OCycMgf5dbq965sZzhkr6hIRL5719A JZELLePiU8yqeFncL6Hx4C1oNze1OaQLKJdaGWKlM3SwJiHiGb9dPlSHIT3BFG17 52rEJc66L++u4hKHkXxuF7U0CQwOs1nMSkIO5rZKOA5ueU4V4i/33gmDxd2obt9u nQtDYYvZjzDCoZyeKyprty9gh7FEgEcXU/MtlVAhngXNXfOVOfKbGvgpQ/WFDTkN nyHkrD+/JqCpyHwh1fC9DpPpLEOhlOnciQIhmrP2yuUCY9jW7wdCHqoSReTOEA58 Vd+a+xFyRYPG7g== -----END CERTIFICATE-----Generated at Tue Sep 16 04:23:07 2025 by rpki-client