$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: dJtEesCzKjfVJeyBoUvm/iW70zuUUOrwD7qPKHoB3xw= Subject key identifier: 82:72:69:EA:2E:EE:96:DE:DF:44:3F:23:D2:7D:CC:33:EE:C2:7A:D1 Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 019A2EC4D335EDACFACE3C51614089B1ECE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1703 Signing time: Wed 29 Oct 2025 07:00:42 +0000 Manifest this update: Wed 29 Oct 2025 07:00:42 +0000 Manifest next update: Thu 30 Oct 2025 07:00:42 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: hVECy1uPJ/W1+gWmI43EqTAnYL3+dX85d1f/4Z+0wnk=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2e:c4:d3:35:ed:ac:fa:ce:3c:51:61:40:89:b1:ec:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Oct 29 07:00:42 2025 GMT Not After : Oct 30 07:00:42 2025 GMT Subject: CN=827269ea2eee96dedf443f23d27dcc33eec27ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:20:34:80:1d:2d:62:20:f6:b1:53:94:a0: 70:95:85:60:af:79:68:1b:e7:b8:54:5e:95:05:a3: bf:e1:b8:52:49:85:83:b8:e7:3a:94:bc:3c:f1:a8: 5d:dc:05:0a:1a:f9:7d:8e:10:c7:04:64:45:64:a7: c5:59:67:4c:71:a4:94:09:8a:41:35:9d:f2:bb:a3: 58:6a:f5:f6:5c:3b:13:66:a3:e7:bf:6a:f0:a9:33: 53:b2:fc:e9:5a:ea:25:62:6c:f7:56:f6:e0:bc:d0: 86:e3:d1:e6:4c:90:11:09:7a:96:45:c0:ae:71:49: 6a:0f:a8:51:9c:23:d5:e8:56:ff:45:95:f7:43:99: 81:0a:bc:86:75:a9:73:07:3d:3b:e2:49:3d:0e:d8: 13:b2:65:2a:e1:9a:ee:31:7e:f2:82:ad:d4:94:58: 6b:2f:76:53:64:82:3d:ab:89:17:8e:f0:8f:ab:63: a0:ad:60:ec:55:f2:a3:70:22:86:fc:4c:c8:b8:d7: ff:28:22:d7:e0:03:f9:4d:cb:3d:1f:ed:41:41:6d: 3f:15:f9:08:9f:0e:ee:36:95:22:83:95:d4:cf:92: 1d:24:31:d1:bd:03:16:09:5b:db:32:22:0d:49:af: e3:58:86:4a:36:ad:f4:2e:73:ff:a1:5c:61:3e:57: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:69:EA:2E:EE:96:DE:DF:44:3F:23:D2:7D:CC:33:EE:C2:7A:D1 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:f8:44:b2:62:93:35:f1:7e:1f:28:6f:33:bf:eb:92:65: 4c:60:e5:2f:8b:21:9b:fd:d7:5b:14:95:ec:be:a8:78:e7:18: 65:94:25:62:28:62:f2:0e:08:79:c3:0f:47:04:be:0b:ae:ab: a6:dd:79:1a:6d:18:72:ff:89:f1:a9:18:57:1e:27:21:f0:2d: 5f:f0:3a:6e:ba:12:e5:2d:00:7c:8a:1f:d8:1f:ef:f0:46:cd: 44:25:61:50:09:39:35:f4:0d:8a:1c:38:4c:9b:cc:1d:61:f3: 1f:e0:26:63:f3:63:61:70:bb:92:b5:e3:2b:d1:5a:34:68:97: 21:c4:39:a7:69:af:c9:82:13:5f:a7:9a:a1:11:8d:ef:e0:d3: 69:68:ad:80:46:3c:06:a0:13:61:24:5b:70:18:4d:d4:b6:36: e9:6f:91:86:16:0c:6d:66:5a:f7:69:c2:0e:0f:ef:97:11:37: 3e:0a:0e:42:07:fc:e8:67:53:a0:e9:c0:22:ee:c0:af:fc:1c: 13:3b:1b:17:2a:f6:de:54:8a:52:94:1c:b7:86:13:c1:13:4f: 9f:40:4e:67:ef:fc:4f:69:ff:d1:54:ff:52:2b:b5:f1:fd:69: a8:26:05:2a:ce:e1:81:c3:b2:1b:75:38:07:25:eb:c0:66:d3: 2a:58:16:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZouxNM17az6zjxRYUCJseziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUxMDI5MDcwMDQyWhcNMjUxMDMwMDcwMDQyWjAzMTEwLwYDVQQD Eyg4MjcyNjllYTJlZWU5NmRlZGY0NDNmMjNkMjdkY2MzM2VlYzI3YWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiwgNIAdLWIg9rFTlKBwlYVgr3lo G+e4VF6VBaO/4bhSSYWDuOc6lLw88ahd3AUKGvl9jhDHBGRFZKfFWWdMcaSUCYpB NZ3yu6NYavX2XDsTZqPnv2rwqTNTsvzpWuolYmz3VvbgvNCG49HmTJARCXqWRcCu cUlqD6hRnCPV6Fb/RZX3Q5mBCryGdalzBz074kk9DtgTsmUq4ZruMX7ygq3UlFhr L3ZTZII9q4kXjvCPq2OgrWDsVfKjcCKG/EzIuNf/KCLX4AP5Tcs9H+1BQW0/FfkI nw7uNpUig5XUz5IdJDHRvQMWCVvbMiINSa/jWIZKNq30LnP/oVxhPldGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJyaeou7pbe30Q/I9J9zDPuwnrRMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmf4RLJi kzXxfh8obzO/65JlTGDlL4shm/3XWxSV7L6oeOcYZZQlYihi8g4IecMPRwS+C66r pt15Gm0Ycv+J8akYVx4nIfAtX/A6broS5S0AfIof2B/v8EbNRCVhUAk5NfQNihw4 TJvMHWHzH+AmY/NjYXC7krXjK9FaNGiXIcQ5p2mvyYITX6eaoRGN7+DTaWitgEY8 BqATYSRbcBhN1LY26W+RhhYMbWZa92nCDg/vlxE3PgoOQgf86GdToOnAIu7Ar/wc EzsbFyr23lSKUpQct4YTwRNPn0BOZ+/8T2n/0VT/Uiu18f1pqCYFKs7hgcOyG3U4 ByXrwGbTKlgWqA== -----END CERTIFICATE-----Generated at Wed Oct 29 08:55:48 2025 by rpki-client