$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: vSO6s/r3Wa+catNqSLlYQVuJBIb4sZ35pP5cBJux5Ls= Subject key identifier: 52:D3:93:33:66:54:DD:50:11:C2:A3:C1:6A:45:F0:91:0A:52:61:F6 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 01991AD30CC356231CD2CBEF415A114BCDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 9B Signing time: Fri 05 Sep 2025 17:01:02 +0000 Manifest this update: Fri 05 Sep 2025 17:01:02 +0000 Manifest next update: Sat 06 Sep 2025 17:01:02 +0000 Files and hashes: 1: BLL7KvTCffO6tp4kIOP_sSt6WzU.roa (hash: K2KxT9evveKUcS3Zp6W/L1otqyWrsiDb4Q4jrBUnW7c=) 2: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (hash: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=) 3: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (hash: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=) 4: JoDgj6_aYuH2h_z7acYlnllXJD8.roa (hash: s9ZiFfWtjJJRskfMKESh5wPV+ucKeG1v2mAsgKvSMUs=) 5: TH3AhVbNZPfpfze9jk4P8EYhJRk.roa (hash: CvDuj4p8KBdrmQoz9VsmO+AYAN5CIQ+jW9RXbyF9x5g=) 6: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (hash: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=) 7: X1OJBmObFYHg6-TEw8S-Kw2Q7ic.roa (hash: Oyq+zf+xTb/nBsWGWwl35Zcj+K8DjFf57comG4rLZLc=) 8: Y8i3rrn4fUUiKvEOTWMIpo8Wdg0.roa (hash: lhJRliSxc8nIrWSQMwOkXfftJXTelhvnTEYCqHEODt0=) 9: Z1M_6TrqOd8wD9NKtj0iTyQonVc.roa (hash: aDWP4uHhbYWLYFp3XR/+E+EeJ5Rm4IXEZcu1iYff0qg=) 10: ZDayT6lDLS2GCPR-v8fqvcLoQK4.roa (hash: +ziQ7srcO8pPuSJWXnBHZoMe2FpncGGdN6aXUGmO+8s=) 11: dHXXvm5G29XbZTMm4RwPjpLYBp4.roa (hash: Y17gdHapZNrAnkNJtHU7rPFemKpgw5uE5ulxbMkkwBE=) 12: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (hash: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=) 13: emjANyISkJRoOdzxCAt2kq4CVQE.roa (hash: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=) 14: gchhAVJFDCU8blLfh1bBR6nV7eE.roa (hash: i4UDZqnLoafc9IhMJrDyMFSOYLmIkEVFeY6p5LZlGi4=) 15: hLDp0R1tKZ1uQpk7clza_OXTeIc.roa (hash: 2IvvdqWOvjCen06JgJKZvx4rVETFnJduNU5B5/20Srw=) 16: hok1h3DBZfbszYTqi9gXzI5jkqU.roa (hash: Rrp79AM7R2rghKYLAtKfPleubz/8AHn7KNcJJOJ8/Y0=) 17: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (hash: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=) 18: p2_7XpLZT8F42rihOd0TzCMxmCo.roa (hash: f2RKPMbWax0ofSjG9a3ohFFR7biXce7y0gFKOZaUepQ=) 19: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: X+sYYUaT9l9q4GNIaQi5kPruLNWW5H9fDY5BPx9jXk0=) 20: qYUhOlm7rxtE24ifggtJupvHC-U.roa (hash: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=) 21: z1lDJAYiSGQWP0hQT2qsq0NQckw.roa (hash: +w84SriAFLfwafgawze6gO/oCWYDdlLPo2xuwocy9KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1a:d3:0c:c3:56:23:1c:d2:cb:ef:41:5a:11:4b:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Sep 5 17:01:02 2025 GMT Not After : Sep 6 17:01:02 2025 GMT Subject: CN=52d393336654dd5011c2a3c16a45f0910a5261f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:42:da:ea:e4:ea:a8:6d:1f:2f:6e:62:b1: ec:f3:51:99:76:fb:0a:b0:2e:de:34:bd:f3:a9:49: d1:fa:5c:15:bb:a3:db:a6:a3:8f:e4:21:10:e1:ea: 6d:6f:2e:02:93:88:f7:ed:49:83:3d:c2:f3:37:66: 7b:d2:0d:2d:6f:eb:64:53:05:ae:99:06:a7:9e:8c: e2:43:86:14:bb:bc:50:f2:22:70:e7:82:15:db:0c: 54:3b:5f:c2:ac:99:c3:19:56:ad:92:f0:e6:c5:72: f7:a4:82:57:3b:d4:31:a8:f9:05:b1:09:fa:88:0c: 2a:66:2f:73:99:39:7f:32:9d:d9:f0:d8:92:89:0d: 46:b8:ca:ca:d4:e1:d0:7f:56:2e:35:e6:17:a7:88: 51:a3:04:19:c4:77:92:5d:79:a8:56:c8:fc:48:ac: a7:bf:4f:e8:98:58:cb:2f:53:50:d5:12:f2:39:c1: 72:98:e5:73:2f:b8:cd:98:71:b6:d1:41:be:04:c2: 23:01:77:c2:fe:ee:c4:68:dc:e9:f9:a6:e4:55:18: 8f:c6:26:67:e1:32:a6:e4:85:27:0f:fa:3a:10:e6: d0:fe:96:6a:30:d7:06:31:43:c8:66:a8:eb:f9:30: 95:04:14:cf:4b:9a:e1:a3:31:4b:e3:32:b9:6a:44: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D3:93:33:66:54:DD:50:11:C2:A3:C1:6A:45:F0:91:0A:52:61:F6 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b2:03:79:3c:38:9d:d6:88:3e:28:81:83:2e:05:f2:67:9b: 18:84:34:d3:76:c4:d4:40:11:8c:4a:a6:6e:1a:8c:70:24:27: 20:4a:f5:4c:cd:73:20:a3:a0:f0:35:7e:ba:85:d7:0e:d9:82: 1a:9c:66:15:ab:f6:77:55:87:2e:28:35:05:a5:e5:47:87:5a: e7:cf:4d:d2:e6:ef:16:09:d2:4b:6e:a7:1e:d8:ac:69:e4:90: 1e:84:c6:74:3f:2a:6d:af:55:2a:b8:a0:eb:38:13:2b:41:53: 21:5f:dd:f9:bc:26:b4:16:ec:03:50:a4:0f:4d:0c:1a:3a:fb: 0e:78:e2:5e:88:ac:3d:2b:7f:3d:d7:1a:5d:80:a4:2f:c4:42: 8b:a4:f3:9e:e0:ab:ce:d2:ff:70:7e:4e:90:0f:7c:0b:8b:04: 49:b3:86:da:e8:e8:b6:61:b9:3e:af:7d:9d:f8:4f:f1:51:20: 29:40:b6:7c:a1:c2:af:e9:4d:51:59:d2:88:77:15:65:e3:84: 42:47:26:59:2a:c5:a5:5d:05:5d:16:00:49:67:51:68:fb:97: 11:c0:0b:99:fb:56:3b:e1:28:9f:7d:6b:4d:d0:77:a4:96:c2: 21:53:55:8c:9f:55:18:e2:18:a9:5f:d0:7c:e8:1d:df:6d:40: 0a:bf:89:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZka0wzDViMc0svvQVoRS83QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUwOTA1MTcwMTAyWhcNMjUwOTA2MTcwMTAyWjAzMTEwLwYDVQQD Eyg1MmQzOTMzMzY2NTRkZDUwMTFjMmEzYzE2YTQ1ZjA5MTBhNTI2MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3BC2urk6qhtHy9uYrHs81GZdvsK sC7eNL3zqUnR+lwVu6PbpqOP5CEQ4eptby4Ck4j37UmDPcLzN2Z70g0tb+tkUwWu mQannoziQ4YUu7xQ8iJw54IV2wxUO1/CrJnDGVatkvDmxXL3pIJXO9QxqPkFsQn6 iAwqZi9zmTl/Mp3Z8NiSiQ1GuMrK1OHQf1YuNeYXp4hRowQZxHeSXXmoVsj8SKyn v0/omFjLL1NQ1RLyOcFymOVzL7jNmHG20UG+BMIjAXfC/u7EaNzp+abkVRiPxiZn 4TKm5IUnD/o6EObQ/pZqMNcGMUPIZqjr+TCVBBTPS5rhozFL4zK5akQoLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLTkzNmVN1QEcKjwWpF8JEKUmH2MB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbIDeTw4 ndaIPiiBgy4F8mebGIQ003bE1EARjEqmbhqMcCQnIEr1TM1zIKOg8DV+uoXXDtmC GpxmFav2d1WHLig1BaXlR4da589N0ubvFgnSS26nHtisaeSQHoTGdD8qba9VKrig 6zgTK0FTIV/d+bwmtBbsA1CkD00MGjr7DnjiXoisPSt/PdcaXYCkL8RCi6TznuCr ztL/cH5OkA98C4sESbOG2ujotmG5Pq99nfhP8VEgKUC2fKHCr+lNUVnSiHcVZeOE QkcmWSrFpV0FXRYASWdRaPuXEcALmftWO+Eon31rTdB3pJbCIVNVjJ9VGOIYqV/Q fOgd321ACr+Jig== -----END CERTIFICATE-----Generated at Fri Sep 5 17:47:09 2025 by rpki-client