$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: o6I2eiC2HnVgmjTZ20KzPbOTs+BuAWl6Iuf5PXG9tGM= Subject key identifier: 92:2E:22:AC:C2:3E:4C:55:AD:22:B1:F4:42:6F:47:B3:C6:73:C3:CA Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 0198462D94A9561FBF8C4A460F73D9ACDB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1604 Signing time: Sat 26 Jul 2025 10:00:48 +0000 Manifest this update: Sat 26 Jul 2025 10:00:48 +0000 Manifest next update: Sun 27 Jul 2025 10:00:48 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 12: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: 7RUYG3X6LCtEAEJCdg3mqHi1k7Z9tcvT6w5a1iZizCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:46:2d:94:a9:56:1f:bf:8c:4a:46:0f:73:d9:ac:db:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jul 26 10:00:48 2025 GMT Not After : Jul 27 10:00:48 2025 GMT Subject: CN=922e22acc23e4c55ad22b1f4426f47b3c673c3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:ad:ee:02:47:98:e3:0c:ab:75:6b:0b:0d: e1:49:35:81:c4:9c:e9:92:33:28:dd:c0:9a:23:75: 1c:e5:21:83:60:fc:22:79:b1:cc:cb:5d:de:7a:de: 88:92:df:f4:06:ef:bd:43:d6:e4:93:e1:41:6e:4f: 66:86:5c:48:05:64:e6:14:b5:52:79:25:3a:e2:2f: a6:2c:f5:c2:a4:1a:22:62:2f:13:12:9a:f3:01:ac: bf:9f:82:03:7d:32:49:8d:a8:e4:4e:86:14:c1:81: 44:8b:37:96:4e:72:96:01:3a:04:1a:a4:5d:c2:23: df:04:ed:dd:a7:d7:ae:96:ce:65:a2:8f:55:49:74: 3c:f1:a1:a5:42:ec:73:3a:a4:f9:0e:17:c1:6a:cc: f4:08:48:fa:eb:35:89:5c:83:ac:92:e8:11:fa:e0: c8:fb:a5:b1:60:5e:5d:d5:cb:ea:67:71:9a:18:f5: 72:27:3d:9d:1f:48:86:8a:1c:11:8a:ff:e1:96:91: ae:c7:0b:68:42:82:fe:a7:a2:e3:77:37:4c:d3:33: 49:36:45:46:14:84:f6:c9:74:e6:43:b1:a1:e9:2a: 89:89:ad:39:63:49:1d:5d:51:7c:ec:9d:80:b4:67: 9e:86:98:53:33:4b:73:4c:39:3a:14:a4:02:78:76: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:22:AC:C2:3E:4C:55:AD:22:B1:F4:42:6F:47:B3:C6:73:C3:CA X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:85:7f:2f:94:9a:8f:5f:8d:e6:7b:d9:81:6b:0d:38:4f:c8: 24:d8:fc:20:48:d8:99:3a:eb:25:36:ee:13:59:66:bc:82:7b: 86:9d:4a:7f:03:23:70:c9:28:f2:db:b9:da:0c:31:3d:62:52: 8d:78:ee:c3:35:3e:f1:46:cc:c1:d1:c4:01:98:c4:f1:98:e7: b4:04:a6:24:fd:e8:0d:9b:d7:a0:b6:a9:b9:34:12:7e:0a:57: ad:be:bd:66:e4:b1:e8:9a:de:7a:79:2a:29:ac:ee:b4:f1:c8: 27:c9:94:e7:36:20:8d:b0:7d:59:8d:0c:c1:30:0b:c3:e7:4a: da:0c:b5:2b:32:9e:51:d0:10:e3:71:f4:54:9e:30:74:97:23: 00:8a:c4:cd:cc:99:26:72:b0:c5:cf:c0:5c:d6:98:5e:e3:f5: a6:04:20:de:39:9b:4d:8d:4c:f8:6e:76:91:e3:f3:ec:12:c8: ab:90:f3:84:aa:19:2a:0c:46:f2:ff:4a:44:89:d4:fa:a2:3d: b6:c8:bf:62:f7:18:2d:30:4f:0f:fe:5b:19:e0:56:3e:c3:07: 90:87:14:56:36:08:94:68:4b:20:98:f8:1a:19:a5:3c:63:ec: 8b:3b:c5:ba:dc:0c:9a:c3:f4:3e:df:6c:2d:eb:f1:44:45:6e: 47:35:97:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhGLZSpVh+/jEpGD3PZrNtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwNzI2MTAwMDQ4WhcNMjUwNzI3MTAwMDQ4WjAzMTEwLwYDVQQD Eyg5MjJlMjJhY2MyM2U0YzU1YWQyMmIxZjQ0MjZmNDdiM2M2NzNjM2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Wt7gJHmOMMq3VrCw3hSTWBxJzp kjMo3cCaI3Uc5SGDYPwiebHMy13eet6Ikt/0Bu+9Q9bkk+FBbk9mhlxIBWTmFLVS eSU64i+mLPXCpBoiYi8TEprzAay/n4IDfTJJjajkToYUwYFEizeWTnKWAToEGqRd wiPfBO3dp9euls5loo9VSXQ88aGlQuxzOqT5DhfBasz0CEj66zWJXIOskugR+uDI +6WxYF5d1cvqZ3GaGPVyJz2dH0iGihwRiv/hlpGuxwtoQoL+p6LjdzdM0zNJNkVG FIT2yXTmQ7Gh6SqJia05Y0kdXVF87J2AtGeehphTM0tzTDk6FKQCeHaD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIuIqzCPkxVrSKx9EJvR7PGc8PKMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4V/L5Sa j1+N5nvZgWsNOE/IJNj8IEjYmTrrJTbuE1lmvIJ7hp1KfwMjcMko8tu52gwxPWJS jXjuwzU+8UbMwdHEAZjE8ZjntASmJP3oDZvXoLapuTQSfgpXrb69ZuSx6Jreenkq KazutPHIJ8mU5zYgjbB9WY0MwTALw+dK2gy1KzKeUdAQ43H0VJ4wdJcjAIrEzcyZ JnKwxc/AXNaYXuP1pgQg3jmbTY1M+G52kePz7BLIq5DzhKoZKgxG8v9KRInU+qI9 tsi/YvcYLTBPD/5bGeBWPsMHkIcUVjYIlGhLIJj4GhmlPGPsizvFutwMmsP0Pt9s LevxREVuRzWXHg== -----END CERTIFICATE-----Generated at Sat Jul 26 15:19:08 2025 by rpki-client