$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: 9OugHQcjbMS12y1b3Zbl+5XX3Fc3X7gojW+dXJfP0mQ= Subject key identifier: 87:F4:3E:1F:76:D3:3B:07:06:3D:72:2D:03:23:C8:1C:B3:FE:AF:03 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019F8F7E6EFC1980EC64AE7E2D7C46DC0367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1460 Signing time: Thu 23 Jul 2026 15:00:55 +0000 Manifest this update: Thu 23 Jul 2026 15:00:55 +0000 Manifest next update: Fri 24 Jul 2026 15:00:55 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: MO1C3MDKFTZoYaDqJba5GnEp5GUSr144BSorc5YOtAw=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 7: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 8: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 9: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 10: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 11: ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa (hash: 3nfAqDZ+jchkof/hQMbxPVQAHcDXX0FbrKywJk2nvzA=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:6e:fc:19:80:ec:64:ae:7e:2d:7c:46:dc:03:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jul 23 15:00:55 2026 GMT Not After : Jul 24 15:00:55 2026 GMT Subject: CN=87f43e1f76d33b07063d722d0323c81cb3feaf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:8a:d9:3d:e2:1a:76:35:18:e9:f0:d1:48: 3b:61:07:46:82:45:46:4f:74:b4:ce:d5:75:ff:69: 05:da:9b:a5:0f:00:70:d4:61:36:4f:45:26:12:84: ce:0c:d8:50:b0:a3:df:c8:6f:e2:80:fb:b6:c3:b6: c4:45:e7:2a:97:f4:e0:0c:d9:84:d1:cc:e8:49:06: b7:04:2a:cb:b8:c1:12:b9:0d:0e:16:1e:bb:9a:47: 77:a1:6c:47:52:8d:57:c5:4a:33:6e:58:2b:82:87: e0:dc:3f:7a:c7:fa:ff:67:f2:3c:c5:77:a0:14:09: e4:db:35:17:d5:c9:00:ae:5a:c9:44:55:0d:34:e8: f4:f7:59:c6:a1:75:fc:3e:91:43:5b:42:06:7b:12: ef:03:9a:1b:18:25:12:8b:84:d0:c7:63:53:60:6f: e5:05:3a:0f:24:a0:79:34:ee:6d:e1:db:cc:92:e3: fa:13:72:81:55:4a:a2:0a:26:3e:46:80:23:ed:2e: 04:e7:b8:b0:e3:2f:33:5a:a9:b1:f0:7b:ab:5c:77: 67:a8:88:e8:32:6a:0c:90:ab:be:db:e4:f0:5b:40: 0a:1f:f6:62:fa:84:15:d2:3a:f5:09:53:48:86:3c: a4:b6:ce:7a:e3:5b:21:82:8d:56:47:56:04:da:ba: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F4:3E:1F:76:D3:3B:07:06:3D:72:2D:03:23:C8:1C:B3:FE:AF:03 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ad:67:0b:8c:6e:26:96:12:ca:67:4b:b2:00:45:c0:4a:e5: 63:b3:39:18:80:ef:15:f8:11:0d:b1:bf:e8:f6:58:ba:8b:9b: 13:e1:bf:9d:0a:26:45:4e:ec:f0:5e:ae:38:06:8b:53:b3:4a: 42:29:3d:5d:ca:70:6f:fd:b7:54:24:ef:62:2e:80:69:3d:99: 3a:25:44:bd:6d:dc:18:ef:2f:a2:12:c0:90:48:64:d9:c1:ec: 87:e8:e9:f1:79:06:3c:5c:ab:a9:3d:09:6c:c9:a3:ed:07:b3: ac:c7:14:63:af:31:b8:c6:0c:bc:3d:90:6a:1f:d7:c3:68:4f: 5f:01:f5:d5:72:c0:20:41:8a:54:3c:c1:f3:a5:80:3c:9f:4a: 9d:3d:28:2b:96:20:00:f9:36:bf:a0:60:ec:28:c5:e6:a3:e5: 68:dc:8e:d3:78:4a:c5:e8:11:b3:fb:5d:a2:03:73:bc:8e:d2: e0:6b:87:7c:0a:cd:57:6b:38:8e:d2:dc:05:68:ef:ea:65:ff: 12:d3:28:16:87:59:d9:2a:db:39:ba:c2:04:ce:bf:6d:46:f8: 3f:40:c1:08:d4:23:b2:38:ad:61:4e:27:8d:fb:4b:2a:ae:71: cf:56:a5:18:fc:42:00:a9:15:42:36:85:a7:61:9b:88:a4:b0: e2:77:0b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Pfm78GYDsZK5+LXxG3ANnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwNzIzMTUwMDU1WhcNMjYwNzI0MTUwMDU1WjAzMTEwLwYDVQQD Eyg4N2Y0M2UxZjc2ZDMzYjA3MDYzZDcyMmQwMzIzYzgxY2IzZmVhZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwaK2T3iGnY1GOnw0Ug7YQdGgkVG T3S0ztV1/2kF2pulDwBw1GE2T0UmEoTODNhQsKPfyG/igPu2w7bERecql/TgDNmE 0czoSQa3BCrLuMESuQ0OFh67mkd3oWxHUo1XxUozblgrgofg3D96x/r/Z/I8xXeg FAnk2zUX1ckArlrJRFUNNOj091nGoXX8PpFDW0IGexLvA5obGCUSi4TQx2NTYG/l BToPJKB5NO5t4dvMkuP6E3KBVUqiCiY+RoAj7S4E57iw4y8zWqmx8HurXHdnqIjo MmoMkKu+2+TwW0AKH/Zi+oQV0jr1CVNIhjykts5641shgo1WR1YE2rqauQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf0Ph920zsHBj1yLQMjyByz/q8DMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIa1nC4xu JpYSymdLsgBFwErlY7M5GIDvFfgRDbG/6PZYuoubE+G/nQomRU7s8F6uOAaLU7NK Qik9Xcpwb/23VCTvYi6AaT2ZOiVEvW3cGO8vohLAkEhk2cHsh+jp8XkGPFyrqT0J bMmj7QezrMcUY68xuMYMvD2Qah/Xw2hPXwH11XLAIEGKVDzB86WAPJ9KnT0oK5Yg APk2v6Bg7CjF5qPlaNyO03hKxegRs/tdogNzvI7S4GuHfArNV2s4jtLcBWjv6mX/ EtMoFodZ2SrbObrCBM6/bUb4P0DBCNQjsjitYU4njftLKq5xz1alGPxCAKkVQjaF p2GbiKSw4ncLkA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:05 2026 by rpki-client