$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: TCDNKBNh+DLCNcckjez1f61NoS6Issr5qD3pxkSzG4Q= Subject key identifier: 32:1F:58:7B:C0:EE:54:DE:F0:07:58:31:AC:72:0F:F7:5D:73:5D:C4 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 0199FD34295000325CB6540DC9DA0CFCE217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1179 Signing time: Sun 19 Oct 2025 16:01:18 +0000 Manifest this update: Sun 19 Oct 2025 16:01:18 +0000 Manifest next update: Mon 20 Oct 2025 16:01:18 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: DlTtiTyOGQGwoRofRRracKf4qo6QC+3id9+4Adbrz70=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:29:50:00:32:5c:b6:54:0d:c9:da:0c:fc:e2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Oct 19 16:01:18 2025 GMT Not After : Oct 20 16:01:18 2025 GMT Subject: CN=321f587bc0ee54def0075831ac720ff75d735dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:fd:16:52:f1:15:18:20:87:3c:aa:69:50: 25:70:d2:38:fa:17:63:df:6c:7c:93:39:50:e0:48: 2f:61:96:e9:a6:67:6f:b3:fa:2b:54:59:89:97:52: 6e:bc:47:e2:37:72:82:1d:c3:36:31:80:bc:da:02: 17:ab:b1:0b:7a:78:cd:e9:78:05:39:e7:e6:5d:8b: b1:12:19:8f:11:bf:81:10:f9:c7:b4:fa:17:61:27: ec:a3:1a:b4:39:fb:90:c7:b7:1c:c7:a5:fc:dd:97: cf:69:c8:5c:7f:07:21:98:f2:0f:14:8e:71:82:a5: b8:e8:c2:f5:ed:da:16:87:4b:61:d3:c7:ff:06:17: 9a:69:79:aa:7f:10:84:3a:c7:b8:15:18:1a:32:8e: fe:a2:52:15:04:95:58:d1:f3:98:ee:6e:01:1a:00: 38:fe:32:7e:a9:3b:8c:c8:2e:60:36:9a:b0:56:fa: 82:3c:99:95:df:6f:51:c5:1d:a5:d4:4f:d5:76:1a: 1c:c5:f4:d1:da:20:5b:d6:98:87:30:c5:cd:b7:87: 48:aa:ea:78:14:75:a3:22:3a:d1:9a:c3:17:b6:1f: b1:1d:f5:c3:34:a9:f3:c5:e5:9e:85:87:05:0e:35: 75:db:6c:be:7c:c2:ef:78:5d:e4:25:7e:c5:bc:79: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1F:58:7B:C0:EE:54:DE:F0:07:58:31:AC:72:0F:F7:5D:73:5D:C4 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5f:a8:db:b5:c7:ea:aa:72:9a:68:7c:bf:ca:94:1c:91:89: 48:b3:3c:f2:bc:c4:c8:db:49:e8:7d:1c:cc:ad:4e:94:65:df: f5:38:80:4f:f9:41:4a:07:1d:0c:27:88:ae:70:fc:d5:0b:76: 77:21:e8:15:ff:78:ca:94:2a:6d:f2:96:73:78:0b:8f:88:9b: a8:8e:a2:c1:c9:09:f8:74:7f:93:b7:8e:4b:54:6d:7b:04:9c: 6b:5c:01:7f:27:e2:1d:53:f5:70:72:18:37:c3:9b:58:84:6c: 92:76:fe:4f:91:1c:b9:bb:85:20:fc:e0:29:23:b6:f4:92:d0: a3:48:65:4c:f1:f0:9e:2a:83:8f:a1:57:f5:5d:52:7c:02:30: 7d:88:d7:ef:8b:88:ff:25:8e:22:72:9a:11:d7:29:49:28:30: a3:82:02:41:74:50:36:05:e4:b5:90:c4:86:77:ad:50:3a:0f: 32:39:19:5c:97:38:b4:14:0f:26:f0:fe:86:2e:11:d6:dc:10: 6a:a5:20:96:a7:30:81:ec:9b:4e:c6:a6:ad:84:95:d7:fa:d4: 05:f2:44:b9:82:0f:9f:4d:e4:9e:e3:bc:6a:ed:2a:9a:4c:25: eb:80:38:23:42:29:a1:d2:a2:13:3b:54:2a:88:67:d4:15:a8: 15:2a:86:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NClQADJctlQNydoM/OIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMDE5MTYwMTE4WhcNMjUxMDIwMTYwMTE4WjAzMTEwLwYDVQQD EygzMjFmNTg3YmMwZWU1NGRlZjAwNzU4MzFhYzcyMGZmNzVkNzM1ZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNf9FlLxFRgghzyqaVAlcNI4+hdj 32x8kzlQ4EgvYZbppmdvs/orVFmJl1JuvEfiN3KCHcM2MYC82gIXq7ELenjN6XgF OefmXYuxEhmPEb+BEPnHtPoXYSfsoxq0OfuQx7ccx6X83ZfPachcfwchmPIPFI5x gqW46ML17doWh0th08f/BheaaXmqfxCEOse4FRgaMo7+olIVBJVY0fOY7m4BGgA4 /jJ+qTuMyC5gNpqwVvqCPJmV329RxR2l1E/VdhocxfTR2iBb1piHMMXNt4dIqup4 FHWjIjrRmsMXth+xHfXDNKnzxeWehYcFDjV122y+fMLveF3kJX7FvHntRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIfWHvA7lTe8AdYMaxyD/ddc13EMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF+o27XH 6qpymmh8v8qUHJGJSLM88rzEyNtJ6H0czK1OlGXf9TiAT/lBSgcdDCeIrnD81Qt2 dyHoFf94ypQqbfKWc3gLj4ibqI6iwckJ+HR/k7eOS1RtewSca1wBfyfiHVP1cHIY N8ObWIRsknb+T5EcubuFIPzgKSO29JLQo0hlTPHwniqDj6FX9V1SfAIwfYjX74uI /yWOInKaEdcpSSgwo4ICQXRQNgXktZDEhnetUDoPMjkZXJc4tBQPJvD+hi4R1twQ aqUglqcwgeybTsamrYSV1/rUBfJEuYIPn03knuO8au0qmkwl64A4I0IpodKiEztU Kohn1BWoFSqG+Q== -----END CERTIFICATE-----Generated at Sun Oct 19 17:37:45 2025 by rpki-client