$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: zwK2I99yvju5rg+vMHdOdc79k81FSXAwSqbzp3FyI0c= Subject key identifier: 3B:DD:F6:4E:4A:C2:27:6F:3A:20:7A:6B:7B:EF:02:DD:C7:EC:F4:00 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 0196BECA3A1F3028F93AB20B0F40F7006E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 0FCB Signing time: Sun 11 May 2025 10:00:46 +0000 Manifest this update: Sun 11 May 2025 10:00:46 +0000 Manifest next update: Mon 12 May 2025 10:00:46 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: TjnVV/9yftHgTxPbRsK8qcNN/aeB4d6/biNgn4uRHOc=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:ca:3a:1f:30:28:f9:3a:b2:0b:0f:40:f7:00:6e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: May 11 10:00:46 2025 GMT Not After : May 12 10:00:46 2025 GMT Subject: CN=3bddf64e4ac2276f3a207a6b7bef02ddc7ecf400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:08:6b:1b:82:34:8e:5d:7a:36:6a:0c:8d: ab:b9:64:99:ac:e8:b5:07:e3:0a:8f:c7:e2:c3:f3: 8f:c6:f1:32:e7:13:bb:6d:cc:9d:55:9a:5c:21:89: e7:43:40:88:b6:b0:48:41:41:3c:e8:98:96:10:70: 22:66:a2:fa:85:d7:ab:d0:6d:eb:c5:dc:22:11:83: 26:a5:d3:ca:93:f6:2b:00:02:08:1b:09:06:ac:d7: 04:32:9f:3d:fb:c2:96:74:a8:92:38:52:1e:e4:e4: f8:a4:37:e4:58:0d:85:30:03:64:ce:73:cf:ff:fd: 00:c4:13:64:c5:f2:26:37:05:4d:0e:76:1c:4d:70: 44:9d:ba:c7:9a:52:2a:47:c2:ad:bc:f9:09:c3:51: 55:bd:0a:bf:90:2c:bf:71:f8:0b:84:6d:7c:1c:a8: 09:5e:32:20:ac:61:9b:1f:d8:52:c3:55:70:cf:bb: e3:d5:06:a8:83:7e:73:1b:cf:90:42:96:61:ed:44: ab:bc:3b:df:21:0c:8c:69:0e:8d:72:69:38:9a:98: 24:2a:0c:6e:9f:af:82:0b:88:b4:ca:e2:39:ad:d6: ad:2f:d3:64:2d:ae:f4:cb:36:eb:00:5d:21:67:ce: 8b:fb:1e:31:e2:50:0b:3e:24:a6:85:f0:85:ae:96: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DD:F6:4E:4A:C2:27:6F:3A:20:7A:6B:7B:EF:02:DD:C7:EC:F4:00 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fb:5f:69:2f:a7:6a:b9:b7:77:e4:c8:a3:18:d8:f1:f2:1a: 32:f7:03:1d:5b:ba:31:aa:37:6a:57:7d:6a:f5:c0:1a:43:65: 7e:ba:5a:1a:44:fd:2f:67:f7:18:83:c3:f0:c4:84:8c:65:e7: 14:58:c6:35:21:71:b3:8f:ba:7d:2e:b5:ab:9b:7f:e4:2b:93: 88:4b:14:e9:23:c0:b5:23:11:94:40:ac:02:b7:6a:95:c7:c0: 4d:99:9e:a3:e2:60:df:88:79:fb:6e:2d:91:ff:98:b3:15:bd: 5c:21:82:40:be:5a:a2:70:69:5b:d3:18:67:a5:e8:7c:a3:c4: 91:71:32:b1:20:d9:54:24:4c:e4:8b:ad:df:8f:7e:08:30:63: 93:01:cf:71:4e:20:3c:96:bf:4f:9a:95:e7:61:96:3e:d3:9d: b7:0b:6b:86:e5:61:e7:6d:17:ba:e4:b5:d2:6e:d0:88:97:77: fb:a5:1c:f3:5b:ee:e0:61:66:d2:83:7a:94:18:81:2e:24:1e: 10:77:17:1f:8b:c5:ff:cc:33:31:25:f8:f5:0e:5d:76:f1:0e: 22:ec:66:e4:c5:e5:33:f6:a4:9d:11:37:92:40:47:ba:72:5c: 3b:34:53:5d:2a:50:bf:e6:2b:1e:f2:bc:e0:a3:fe:16:18:d5: b8:ad:75:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+yjofMCj5OrILD0D3AG49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUwNTExMTAwMDQ2WhcNMjUwNTEyMTAwMDQ2WjAzMTEwLwYDVQQD EygzYmRkZjY0ZTRhYzIyNzZmM2EyMDdhNmI3YmVmMDJkZGM3ZWNmNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncQIaxuCNI5dejZqDI2ruWSZrOi1 B+MKj8fiw/OPxvEy5xO7bcydVZpcIYnnQ0CItrBIQUE86JiWEHAiZqL6hder0G3r xdwiEYMmpdPKk/YrAAIIGwkGrNcEMp89+8KWdKiSOFIe5OT4pDfkWA2FMANkznPP //0AxBNkxfImNwVNDnYcTXBEnbrHmlIqR8KtvPkJw1FVvQq/kCy/cfgLhG18HKgJ XjIgrGGbH9hSw1Vwz7vj1Qaog35zG8+QQpZh7USrvDvfIQyMaQ6Ncmk4mpgkKgxu n6+CC4i0yuI5rdatL9NkLa70yzbrAF0hZ86L+x4x4lALPiSmhfCFrpZbewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvd9k5KwidvOiB6a3vvAt3H7PQAMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/tfaS+n arm3d+TIoxjY8fIaMvcDHVu6Mao3ald9avXAGkNlfrpaGkT9L2f3GIPD8MSEjGXn FFjGNSFxs4+6fS61q5t/5CuTiEsU6SPAtSMRlECsArdqlcfATZmeo+Jg34h5+24t kf+YsxW9XCGCQL5aonBpW9MYZ6XofKPEkXEysSDZVCRM5Iut349+CDBjkwHPcU4g PJa/T5qV52GWPtOdtwtrhuVh520XuuS10m7QiJd3+6Uc81vu4GFm0oN6lBiBLiQe EHcXH4vF/8wzMSX49Q5ddvEOIuxm5MXlM/aknRE3kkBHunJcOzRTXSpQv+YrHvK8 4KP+FhjVuK11+Q== -----END CERTIFICATE-----Generated at Sun May 11 13:19:54 2025 by rpki-client