$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: RKyrX/AjPwBZ7Rn93zVGmM3DN5Ux9wl2jgFr8fVwrr4= Subject key identifier: 44:79:AB:F2:E0:F0:95:98:C7:B5:96:AF:3A:B0:44:CB:2F:11:6A:5C Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 019749310A7195CBEE4DD71E127DB33E990C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1583 Signing time: Sat 07 Jun 2025 07:00:39 +0000 Manifest this update: Sat 07 Jun 2025 07:00:39 +0000 Manifest next update: Sun 08 Jun 2025 07:00:39 +0000 Files and hashes: 1: BpSPq7XfPfzRsknKhPXQhOzp2EE.roa (hash: h2/Pws1JkvszHvwCU+CrKw9Tx8/syCQT7vQlEmitd5Q=) 2: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 3: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 4: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: DaDSFWcqf3CynpExkejkTjkCDZXFapgbzPrH/QUeft0=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:0a:71:95:cb:ee:4d:d7:1e:12:7d:b3:3e:99:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Jun 7 07:00:39 2025 GMT Not After : Jun 8 07:00:39 2025 GMT Subject: CN=4479abf2e0f09598c7b596af3ab044cb2f116a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:5b:cd:27:09:6f:7a:16:ce:b7:ec:f2:ec: 3b:c8:ff:e2:69:6c:59:b5:bb:d2:43:9f:53:a9:7c: 93:59:c5:99:f9:eb:be:83:ce:6d:13:8b:f5:03:fc: cb:55:30:06:07:00:58:1d:da:48:48:0b:67:47:ad: 92:28:ae:83:ed:41:44:3e:0a:69:42:4c:e4:39:6f: f5:bf:93:d6:a1:e4:ac:94:0e:ba:c5:36:97:75:3d: 95:52:9e:24:7d:19:cf:41:a9:e0:38:f0:2e:25:9f: a9:f5:19:f0:6f:a2:ef:c8:c2:ef:73:8c:05:6f:07: 31:1b:82:03:37:8c:39:8d:cb:03:b3:e0:5f:9f:32: e9:c0:0b:19:b7:14:c5:9b:10:b5:92:76:f8:ab:95: aa:35:5c:6d:4e:38:9e:65:69:f5:20:b0:ba:f7:8f: c8:53:66:99:fb:9c:11:e5:a8:67:17:66:af:66:41: 70:72:05:d9:3a:6e:0e:e1:f0:4c:17:db:8d:83:72: 3d:19:a5:6c:b7:b7:86:cd:81:51:bd:45:2e:10:12: 01:62:c0:a6:7f:86:fa:1e:0f:01:a9:4d:a0:b3:80: 65:45:80:47:a2:96:87:a3:00:7d:62:4b:dc:d7:4f: 69:60:3e:56:cd:7b:6b:60:df:23:81:49:b6:d5:d3: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:AB:F2:E0:F0:95:98:C7:B5:96:AF:3A:B0:44:CB:2F:11:6A:5C X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:43:21:7c:11:8c:a6:c7:07:85:89:cb:61:a2:4e:0c:b6:bc: 8d:e6:3e:38:49:a2:7a:40:82:21:67:da:f2:d7:3a:36:75:57: 25:42:39:d9:8c:c8:12:32:7a:b5:fe:93:84:34:c3:a7:32:b3: ee:57:ea:47:9d:38:85:eb:63:53:5a:02:56:52:7e:50:a0:6d: 04:7e:62:07:f3:ca:b3:53:6a:18:6d:00:b6:69:94:d3:f7:bd: 36:2a:c2:df:76:10:e0:0d:fc:fd:d4:e7:bb:30:50:4c:97:b8: 0c:a7:f2:3b:dc:61:53:11:52:16:51:6f:6a:2e:88:a7:2f:e8: 5e:00:ea:5b:64:ef:85:41:ca:c7:99:2f:d4:88:d1:5e:42:8f: ff:0d:3b:f0:97:86:02:87:51:40:8c:cc:4e:24:15:0b:c7:49: c4:31:ae:7f:38:5d:a7:05:48:b8:17:8c:45:74:6e:4a:75:f5: 24:b8:98:cc:3b:a4:e2:01:8d:b7:3a:18:b2:1b:04:6d:4d:13: 89:9b:81:cf:47:ff:97:b1:39:cc:ac:b3:91:1d:f8:e7:1e:28: 7a:53:08:a5:7f:5f:26:34:eb:00:0c:60:94:2a:87:55:fe:60: e6:b7:a3:bd:b3:26:d7:7d:ce:70:bb:5e:b3:59:77:af:e2:fc: 89:91:5c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMQpxlcvuTdceEn2zPpkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNjA3MDcwMDM5WhcNMjUwNjA4MDcwMDM5WjAzMTEwLwYDVQQD Eyg0NDc5YWJmMmUwZjA5NTk4YzdiNTk2YWYzYWIwNDRjYjJmMTE2YTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MdbzScJb3oWzrfs8uw7yP/iaWxZ tbvSQ59TqXyTWcWZ+eu+g85tE4v1A/zLVTAGBwBYHdpISAtnR62SKK6D7UFEPgpp QkzkOW/1v5PWoeSslA66xTaXdT2VUp4kfRnPQangOPAuJZ+p9Rnwb6LvyMLvc4wF bwcxG4IDN4w5jcsDs+BfnzLpwAsZtxTFmxC1knb4q5WqNVxtTjieZWn1ILC694/I U2aZ+5wR5ahnF2avZkFwcgXZOm4O4fBMF9uNg3I9GaVst7eGzYFRvUUuEBIBYsCm f4b6Hg8BqU2gs4BlRYBHopaHowB9Ykvc109pYD5WzXtrYN8jgUm21dPDlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER5q/Lg8JWYx7WWrzqwRMsvEWpcMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkMhfBGM pscHhYnLYaJODLa8jeY+OEmiekCCIWfa8tc6NnVXJUI52YzIEjJ6tf6ThDTDpzKz 7lfqR504hetjU1oCVlJ+UKBtBH5iB/PKs1NqGG0AtmmU0/e9NirC33YQ4A38/dTn uzBQTJe4DKfyO9xhUxFSFlFvai6Ipy/oXgDqW2TvhUHKx5kv1IjRXkKP/w078JeG AodRQIzMTiQVC8dJxDGufzhdpwVIuBeMRXRuSnX1JLiYzDuk4gGNtzoYshsEbU0T iZuBz0f/l7E5zKyzkR345x4oelMIpX9fJjTrAAxglCqHVf5g5rejvbMm133OcLte s1l3r+L8iZFcAg== -----END CERTIFICATE-----Generated at Sat Jun 7 11:52:11 2025 by rpki-client