$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: 3SBmSs2oXtTdTspVeJ5G7yzEsL/3ZYunxs31WcHL3L4= Subject key identifier: 44:FA:4F:97:55:C1:7E:76:1F:3E:74:FF:78:7B:95:87:D8:CA:96:26 Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 01992DECAE9460A177FD4793C845BFA2CF16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 167E Signing time: Tue 09 Sep 2025 10:01:49 +0000 Manifest this update: Tue 09 Sep 2025 10:01:49 +0000 Manifest next update: Wed 10 Sep 2025 10:01:49 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: mh7l6f5IR69alXQT9E3OwtbCsZsdqSp7kqySqglwbQ0=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:ec:ae:94:60:a1:77:fd:47:93:c8:45:bf:a2:cf:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Sep 9 10:01:49 2025 GMT Not After : Sep 10 10:01:49 2025 GMT Subject: CN=44fa4f9755c17e761f3e74ff787b9587d8ca9626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:64:b6:14:9b:e9:99:5c:89:75:f1:8c:c1: 54:cc:b5:2d:b9:ab:39:71:6e:13:fb:e6:49:7a:ed: af:5d:30:5a:69:58:60:ec:d3:a0:cd:68:95:72:ca: dd:c7:34:b7:f5:fa:40:49:d0:ca:9b:07:6f:1d:a5: 53:ba:fd:d2:bf:d0:d5:01:e5:bb:f2:36:da:6d:86: 7f:6d:1a:83:84:be:4e:dd:77:b3:6a:d1:73:59:00: 56:32:0f:ee:29:e9:ee:4d:53:00:95:04:eb:40:42: 92:ce:9e:b6:58:c9:b7:54:58:93:64:a9:88:88:2f: f3:e9:cb:88:fd:42:cc:f9:38:6b:81:94:bb:10:bf: b6:40:d9:8f:cf:7e:9b:b5:bd:12:0b:5c:cf:6e:5e: 34:f2:69:fc:ff:36:90:98:77:04:74:e8:2e:39:d9: c6:37:e5:1d:d2:3b:ae:d0:6b:5d:8c:b7:d8:50:7c: 1b:eb:5d:8c:36:e3:cf:7d:8c:82:5e:08:03:66:5b: b5:a7:d3:89:1c:88:45:ec:8d:17:08:c3:8a:90:29: b5:db:4c:ed:e6:26:46:7c:c3:4b:e0:a3:78:ff:e3: 38:44:e0:80:f1:00:52:6f:13:9c:a3:48:7b:5c:ea: e3:b7:f6:55:4d:b7:b0:41:31:2d:aa:4b:6d:9f:95: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FA:4F:97:55:C1:7E:76:1F:3E:74:FF:78:7B:95:87:D8:CA:96:26 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c6:d8:59:69:6c:04:11:4e:ee:22:21:37:3c:2d:1f:41:4b: 41:38:f3:91:72:4a:6a:d8:94:78:d5:3d:e2:03:78:3b:5d:e7: a8:74:86:a2:6d:d9:65:ee:db:27:a4:54:e4:ac:46:e8:68:b7: c0:68:bc:e9:26:09:04:01:17:5e:4b:40:b0:06:d4:9c:8c:4b: 1c:8f:6b:14:ac:12:d1:d9:8d:ee:5e:eb:28:ec:1d:a0:ff:01: b4:8b:30:8b:33:80:3b:b1:6c:62:f7:47:58:3a:52:8a:86:40: 11:66:a0:40:7f:2c:f3:c0:b5:ca:36:88:4f:c7:9b:c4:31:13: 35:8d:ae:f0:ed:5b:39:5b:0a:5f:60:29:93:3f:42:2b:14:e7: 1e:1c:28:16:72:a2:b7:05:db:cf:8b:29:71:eb:3c:b7:53:79: c2:e3:2e:77:58:4c:d0:e9:22:1d:07:b9:af:c0:74:72:46:46: 0b:a7:36:6f:57:72:00:30:88:bf:54:bf:95:bf:eb:47:71:9c: 61:1b:5c:c3:a8:75:ab:7d:e0:8b:d9:90:dc:96:54:a9:cd:cd: a8:be:33:2e:ad:e0:c6:4c:bc:cc:a1:de:84:b3:65:e4:fc:73: 39:e0:64:7b:a2:20:e3:fa:c5:0c:5c:a0:bc:0b:6c:6c:a1:bb: 59:fa:35:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkt7K6UYKF3/UeTyEW/os8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwOTA5MTAwMTQ5WhcNMjUwOTEwMTAwMTQ5WjAzMTEwLwYDVQQD Eyg0NGZhNGY5NzU1YzE3ZTc2MWYzZTc0ZmY3ODdiOTU4N2Q4Y2E5NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykZkthSb6ZlciXXxjMFUzLUtuas5 cW4T++ZJeu2vXTBaaVhg7NOgzWiVcsrdxzS39fpASdDKmwdvHaVTuv3Sv9DVAeW7 8jbabYZ/bRqDhL5O3XezatFzWQBWMg/uKenuTVMAlQTrQEKSzp62WMm3VFiTZKmI iC/z6cuI/ULM+ThrgZS7EL+2QNmPz36btb0SC1zPbl408mn8/zaQmHcEdOguOdnG N+Ud0juu0GtdjLfYUHwb612MNuPPfYyCXggDZlu1p9OJHIhF7I0XCMOKkCm120zt 5iZGfMNL4KN4/+M4ROCA8QBSbxOco0h7XOrjt/ZVTbewQTEtqkttn5UeiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET6T5dVwX52Hz50/3h7lYfYypYmMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsbYWWls BBFO7iIhNzwtH0FLQTjzkXJKatiUeNU94gN4O13nqHSGom3ZZe7bJ6RU5KxG6Gi3 wGi86SYJBAEXXktAsAbUnIxLHI9rFKwS0dmN7l7rKOwdoP8BtIswizOAO7FsYvdH WDpSioZAEWagQH8s88C1yjaIT8ebxDETNY2u8O1bOVsKX2Apkz9CKxTnHhwoFnKi twXbz4spces8t1N5wuMud1hM0OkiHQe5r8B0ckZGC6c2b1dyADCIv1S/lb/rR3Gc YRtcw6h1q33gi9mQ3JZUqc3NqL4zLq3gxky8zKHehLNl5PxzOeBke6Ig4/rFDFyg vAtsbKG7Wfo1Mw== -----END CERTIFICATE-----Generated at Tue Sep 9 15:30:50 2025 by rpki-client