$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: cQRemVDSlkXtqz/2trFntL3Yyf8LqZy7q4Uz7qs4bY4= Subject key identifier: 5C:EB:F1:D8:EE:E5:03:D0:8E:DE:84:46:1D:C1:E5:5F:30:75:5B:46 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019D2A3BA9B8C3EC1FB9277F56A7A6F1D6BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1320 Signing time: Thu 26 Mar 2026 13:00:46 +0000 Manifest this update: Thu 26 Mar 2026 13:00:46 +0000 Manifest next update: Fri 27 Mar 2026 13:00:46 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: laNIMsZEZZ0l1sYK5Hq2xkGnyQTmAcei7UDOYkoBRe0=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3b:a9:b8:c3:ec:1f:b9:27:7f:56:a7:a6:f1:d6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Mar 26 13:00:46 2026 GMT Not After : Mar 27 13:00:46 2026 GMT Subject: CN=5cebf1d8eee503d08ede84461dc1e55f30755b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:b4:5d:ff:b2:b1:43:34:bc:91:c2:c6:d2: 4d:30:ca:76:c5:b4:fe:a4:6a:33:1e:d1:70:b4:f9: 14:9a:cb:5b:5c:23:a9:91:83:58:20:df:2f:e0:e8: a7:a6:2b:4a:1d:b2:28:64:b0:da:94:e6:10:d8:21: 27:08:52:28:0e:9d:81:eb:f6:f5:8d:bd:5e:c9:47: 70:cc:bc:33:01:01:26:f7:3a:91:2f:2f:72:99:d2: df:9b:fb:19:4d:e2:f1:ae:22:a9:a3:35:ba:0d:ca: 18:c1:81:6c:f9:03:c2:7c:d5:06:e8:af:ff:1d:62: 5f:80:65:75:58:ca:8b:19:32:68:8c:2b:53:cc:11: b6:1e:49:46:df:9b:34:57:f4:06:bd:1a:a6:15:b1: 51:0f:e6:d4:3a:d8:fa:5b:65:a1:43:f7:77:3b:91: 8d:c2:df:6e:c6:24:1c:81:12:ae:b3:cb:5f:2c:0b: a2:04:8a:11:11:d9:90:5b:64:3b:c2:3d:16:91:ff: 49:9e:47:7b:67:66:26:85:38:45:52:5a:10:4d:33: fc:fe:d5:7e:54:fa:18:68:2e:e0:2a:8b:2f:97:b4: b9:db:96:91:ec:ca:75:2f:36:2d:26:33:d7:c5:73: f8:f9:33:91:36:2e:80:ab:00:03:77:ff:41:4e:b6: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:F1:D8:EE:E5:03:D0:8E:DE:84:46:1D:C1:E5:5F:30:75:5B:46 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:07:19:35:30:15:ab:5c:63:d6:6d:34:b0:64:dc:d7:61:c6: 2f:73:32:e7:de:7e:ce:b1:a3:84:52:e6:b0:4a:84:5b:e7:bb: 66:69:70:2b:91:70:00:0c:e7:e9:67:2c:33:06:b9:7b:fa:2c: a2:ec:5b:f9:b6:61:0b:99:3b:2b:76:eb:c5:7d:cd:b1:a6:60: 31:23:df:44:b0:c7:5b:db:09:e6:60:3e:ad:06:d1:90:f5:98: 0d:be:5e:4f:1c:75:fd:1d:db:f3:b4:13:6f:25:6d:2b:74:c3: 0c:cd:92:2c:29:ca:4c:7c:0a:a6:90:a7:cc:69:e3:d2:a2:95: 52:c2:a1:a2:b5:8f:61:7b:d4:b7:19:8a:54:55:bc:c6:b0:97: b7:83:0a:62:fe:28:73:1a:aa:1f:5b:5c:52:d8:18:c5:11:bd: c7:75:bb:e9:c1:fa:02:34:e5:02:cd:df:2d:41:5d:67:48:10: 29:88:4c:96:cd:a5:52:34:8b:ff:fd:fa:e6:a6:09:c7:21:83: 77:d8:8b:a2:0b:6a:00:3a:29:3d:9d:6b:ec:b9:63:36:1a:d9: 5c:29:ae:08:0f:af:3a:f7:cc:9e:f7:c5:bf:32:54:d3:a4:a2: 69:ad:35:a2:f7:e1:87:da:70:17:79:43:5e:52:e7:1b:5e:04: 95:5c:59:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qO6m4w+wfuSd/Vqem8da8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMzI2MTMwMDQ2WhcNMjYwMzI3MTMwMDQ2WjAzMTEwLwYDVQQD Eyg1Y2ViZjFkOGVlZTUwM2QwOGVkZTg0NDYxZGMxZTU1ZjMwNzU1YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssW0Xf+ysUM0vJHCxtJNMMp2xbT+ pGozHtFwtPkUmstbXCOpkYNYIN8v4OinpitKHbIoZLDalOYQ2CEnCFIoDp2B6/b1 jb1eyUdwzLwzAQEm9zqRLy9ymdLfm/sZTeLxriKpozW6DcoYwYFs+QPCfNUG6K// HWJfgGV1WMqLGTJojCtTzBG2HklG35s0V/QGvRqmFbFRD+bUOtj6W2WhQ/d3O5GN wt9uxiQcgRKus8tfLAuiBIoREdmQW2Q7wj0Wkf9Jnkd7Z2YmhThFUloQTTP8/tV+ VPoYaC7gKosvl7S525aR7Mp1LzYtJjPXxXP4+TORNi6AqwADd/9BTrZucwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzr8dju5QPQjt6ERh3B5V8wdVtGMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwcZNTAV q1xj1m00sGTc12HGL3My595+zrGjhFLmsEqEW+e7ZmlwK5FwAAzn6WcsMwa5e/os ouxb+bZhC5k7K3brxX3NsaZgMSPfRLDHW9sJ5mA+rQbRkPWYDb5eTxx1/R3b87QT byVtK3TDDM2SLCnKTHwKppCnzGnj0qKVUsKhorWPYXvUtxmKVFW8xrCXt4MKYv4o cxqqH1tcUtgYxRG9x3W76cH6AjTlAs3fLUFdZ0gQKYhMls2lUjSL//365qYJxyGD d9iLogtqADopPZ1r7LljNhrZXCmuCA+vOvfMnvfFvzJU06Siaa01ovfhh9pwF3lD XlLnG14ElVxZow== -----END CERTIFICATE-----Generated at Thu Mar 26 22:38:36 2026 by rpki-client