$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: nsW1eYRrlg2OdPlMDU+ky4sJfq1XvYgSYpAl9MUz/sc= Subject key identifier: 0A:46:E5:04:39:B8:99:AF:3F:7E:BD:68:8C:5B:BD:F2:BD:BC:07:E0 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 0198D3CC36109D0AD60A2EB0F84334D37FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 10DF Signing time: Fri 22 Aug 2025 22:00:32 +0000 Manifest this update: Fri 22 Aug 2025 22:00:32 +0000 Manifest next update: Sat 23 Aug 2025 22:00:32 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: +SUkfMNJaxerD2tiKYQzo6KClS8Gylel5IsanYnaLdw=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d3:cc:36:10:9d:0a:d6:0a:2e:b0:f8:43:34:d3:7f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Aug 22 22:00:32 2025 GMT Not After : Aug 23 22:00:32 2025 GMT Subject: CN=0a46e50439b899af3f7ebd688c5bbdf2bdbc07e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:76:b8:34:3b:34:8c:73:da:7b:7f:5f:ed: 33:54:b0:cb:ba:f1:c4:db:05:ee:7c:42:96:cd:77: c1:b8:2b:d7:24:47:6f:71:de:af:c6:72:f5:16:1c: 28:5b:34:fb:e3:36:2b:21:3d:c5:0a:60:35:8c:56: 33:18:76:eb:4a:54:02:c7:bf:9b:17:6d:da:37:92: 08:d2:f4:21:60:04:6c:46:9e:98:0a:a7:d3:b2:de: 40:29:e0:d6:b7:ab:0e:7a:9d:56:d9:b2:1f:fd:c4: 10:8b:02:e8:68:43:cc:aa:88:9a:7f:af:17:80:8a: cd:45:54:80:52:29:9d:db:56:31:ea:5c:0b:af:22: 8b:d1:76:36:e9:e1:2d:9f:22:bf:3f:d5:0a:cd:e5: 3e:f5:3b:85:41:31:99:54:59:34:ed:f2:fd:79:aa: 49:a4:19:50:71:3d:93:f7:5f:1a:0b:09:4e:37:e4: 6e:7f:51:50:76:7a:c5:fe:e9:1a:e7:2b:f0:36:0b: 17:1f:17:6c:cb:cc:c4:b0:94:9d:24:86:ae:f5:51: 2c:ce:ef:5e:a9:0f:d2:85:44:1a:73:21:33:07:48: db:40:64:5f:33:d5:f8:92:56:31:54:1d:f7:88:70: 52:b8:bd:ee:1a:de:19:b1:3a:0c:38:85:b0:4d:48: 80:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:46:E5:04:39:B8:99:AF:3F:7E:BD:68:8C:5B:BD:F2:BD:BC:07:E0 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ba:41:2c:8c:cf:48:b0:01:c6:99:1f:ee:fd:62:c6:d5:c5: 03:2c:7e:6e:7e:cb:33:85:79:cd:9a:97:fb:d2:c0:72:43:df: b3:e3:0d:f8:06:25:5f:98:56:f2:a2:ee:dd:7b:64:d8:c8:b1: 42:4b:50:f4:b3:d9:8e:14:fb:ae:14:2c:3b:5a:8d:f0:d4:30: cc:73:c2:13:01:09:2c:4a:24:80:04:8c:58:2b:f3:d9:d5:a8: ea:47:92:fb:d4:0a:12:2d:30:d2:da:36:5b:1c:8b:d1:75:f1: b9:a2:b2:3d:06:cf:42:91:88:3e:03:ff:8f:38:e1:1c:25:f7: f7:30:97:42:a6:b0:b0:76:11:0b:26:ad:97:96:cc:12:fe:61: 6d:88:be:5e:3e:eb:c3:ea:20:b1:13:01:de:1b:85:88:3d:42: a4:59:1f:08:98:75:b7:7a:17:81:77:ac:8b:2b:c2:7c:f8:4b: 38:89:87:08:eb:ec:8e:8f:7f:4f:21:bd:a0:45:78:99:ba:cc: 46:c4:5c:4b:04:42:7b:af:c7:7c:91:30:a2:9f:0b:67:e5:f1: ba:07:40:e9:66:f3:c2:93:d7:d5:91:42:7b:87:a6:93:c6:2d: 58:cd:f8:b1:b2:a9:06:be:a2:1e:ac:6b:02:10:d6:f4:84:e2: 71:a8:33:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjTzDYQnQrWCi6w+EM003/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUwODIyMjIwMDMyWhcNMjUwODIzMjIwMDMyWjAzMTEwLwYDVQQD EygwYTQ2ZTUwNDM5Yjg5OWFmM2Y3ZWJkNjg4YzViYmRmMmJkYmMwN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2F2uDQ7NIxz2nt/X+0zVLDLuvHE 2wXufEKWzXfBuCvXJEdvcd6vxnL1FhwoWzT74zYrIT3FCmA1jFYzGHbrSlQCx7+b F23aN5II0vQhYARsRp6YCqfTst5AKeDWt6sOep1W2bIf/cQQiwLoaEPMqoiaf68X gIrNRVSAUimd21Yx6lwLryKL0XY26eEtnyK/P9UKzeU+9TuFQTGZVFk07fL9eapJ pBlQcT2T918aCwlON+Ruf1FQdnrF/uka5yvwNgsXHxdsy8zEsJSdJIau9VEszu9e qQ/ShUQacyEzB0jbQGRfM9X4klYxVB33iHBSuL3uGt4ZsToMOIWwTUiAOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApG5QQ5uJmvP369aIxbvfK9vAfgMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7pBLIzP SLABxpkf7v1ixtXFAyx+bn7LM4V5zZqX+9LAckPfs+MN+AYlX5hW8qLu3Xtk2Mix QktQ9LPZjhT7rhQsO1qN8NQwzHPCEwEJLEokgASMWCvz2dWo6keS+9QKEi0w0to2 WxyL0XXxuaKyPQbPQpGIPgP/jzjhHCX39zCXQqawsHYRCyatl5bMEv5hbYi+Xj7r w+ogsRMB3huFiD1CpFkfCJh1t3oXgXesiyvCfPhLOImHCOvsjo9/TyG9oEV4mbrM RsRcSwRCe6/HfJEwop8LZ+XxugdA6WbzwpPX1ZFCe4emk8YtWM34sbKpBr6iHqxr AhDW9ITicagz4A== -----END CERTIFICATE-----Generated at Sat Aug 23 07:17:12 2025 by rpki-client