$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: pf+Gi8l8XmTO1sEYMAF+9kpKFkK1NfUjT05+1OCW2sM= Subject key identifier: 66:F4:46:51:70:7D:A9:7D:3B:62:E8:45:9B:E5:82:3F:81:D0:F5:39 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0198D51573A72267C73ED3858F3AF1B23CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 164A Signing time: Sat 23 Aug 2025 04:00:09 +0000 Manifest this update: Sat 23 Aug 2025 04:00:09 +0000 Manifest next update: Sun 24 Aug 2025 04:00:09 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: XF+t9lITiahwqBC7jnSyUegEhXDzCyt16Ph6pGRrfME=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:73:a7:22:67:c7:3e:d3:85:8f:3a:f1:b2:3c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Aug 23 04:00:09 2025 GMT Not After : Aug 24 04:00:09 2025 GMT Subject: CN=66f44651707da97d3b62e8459be5823f81d0f539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:ac:8b:ca:04:c6:4a:0f:76:fb:d9:33:27: bb:ce:5b:35:94:6d:1d:10:61:58:80:b3:b7:17:10: 79:7a:f8:0f:12:4a:15:3c:ca:9d:ae:bb:89:a0:21: 21:60:de:11:1a:e7:fc:5f:93:00:6a:2b:eb:81:40: 56:bc:3c:68:4b:69:59:4f:eb:20:24:56:db:79:1a: eb:6a:28:aa:2f:5c:cd:4d:de:a3:07:98:65:b8:11: 35:ec:34:16:8c:d3:7a:e3:13:fe:ef:07:f5:99:db: 03:ec:d9:1a:8b:0e:a0:82:74:0b:2a:bf:27:ce:dd: 3d:d1:80:27:a1:42:b5:92:fa:d1:ff:ce:b4:51:42: 91:28:74:94:c2:f3:15:31:11:dd:44:cc:18:54:d7: b4:a4:30:34:0d:7c:93:96:b8:91:55:44:23:34:e0: 47:f8:1f:15:4e:00:c6:e7:85:1d:3b:e5:19:f2:43: 12:6c:a8:10:c0:f1:88:17:56:4a:28:e9:eb:8d:b9: cb:eb:79:7e:44:c5:d9:f7:29:68:92:cb:08:97:b9: 7f:63:ee:4b:77:85:78:68:3e:8e:4f:74:9b:d5:9b: 35:20:72:50:e9:2a:eb:37:83:6d:7d:20:a7:e8:78: a0:0a:e0:91:70:2b:e7:6b:d4:80:4c:07:da:0c:07: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:46:51:70:7D:A9:7D:3B:62:E8:45:9B:E5:82:3F:81:D0:F5:39 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:cf:33:95:e5:e6:42:c5:d8:bd:52:b2:ea:1c:de:98:92:43: 6e:e3:81:db:f9:69:04:7c:43:a0:2d:70:ce:06:09:bb:71:d6: 4f:ef:5f:d7:54:f3:5f:1b:cb:f2:b4:40:85:1e:3d:1e:c7:4a: 1b:78:56:03:1b:f7:ae:cb:cb:a8:7b:e8:3b:a8:02:88:12:0b: 4d:c4:7d:d3:58:a0:c4:9f:bb:12:fe:80:d0:98:0a:b0:05:4f: c9:ff:18:39:0f:30:a5:ae:c8:ae:01:b5:d6:7d:7a:9e:72:40: 26:40:d7:c4:f7:f1:39:83:eb:24:b5:9b:44:e8:76:52:de:92: 25:f5:a2:af:ce:8a:82:4a:e4:46:f1:7d:73:f1:41:53:48:b3: 7d:29:43:6c:1e:39:58:c0:98:de:0e:be:bb:72:bf:17:cc:39: 3d:94:96:c1:8b:73:14:86:68:d0:c3:8b:d2:5d:e2:c9:7f:61: a0:0f:ab:3f:e5:cf:e0:42:4e:b5:80:1c:b8:e0:6d:db:ce:98: 60:3f:f7:aa:bb:8d:bd:4a:ff:dd:6b:8a:b9:09:03:8e:0c:0c: 73:e4:9e:ee:b5:62:04:b4:52:88:74:dd:7b:79:5b:a0:84:3b: 3e:d8:93:6b:d1:86:f7:ff:17:9b:21:d9:0e:e0:71:ea:42:38: ab:62:01:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFXOnImfHPtOFjzrxsjyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwODIzMDQwMDA5WhcNMjUwODI0MDQwMDA5WjAzMTEwLwYDVQQD Eyg2NmY0NDY1MTcwN2RhOTdkM2I2MmU4NDU5YmU1ODIzZjgxZDBmNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaesi8oExkoPdvvZMye7zls1lG0d EGFYgLO3FxB5evgPEkoVPMqdrruJoCEhYN4RGuf8X5MAaivrgUBWvDxoS2lZT+sg JFbbeRrraiiqL1zNTd6jB5hluBE17DQWjNN64xP+7wf1mdsD7Nkaiw6ggnQLKr8n zt090YAnoUK1kvrR/860UUKRKHSUwvMVMRHdRMwYVNe0pDA0DXyTlriRVUQjNOBH +B8VTgDG54UdO+UZ8kMSbKgQwPGIF1ZKKOnrjbnL63l+RMXZ9ylokssIl7l/Y+5L d4V4aD6OT3Sb1Zs1IHJQ6SrrN4NtfSCn6HigCuCRcCvna9SATAfaDAegCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb0RlFwfal9O2LoRZvlgj+B0PU5MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmc8zleXm QsXYvVKy6hzemJJDbuOB2/lpBHxDoC1wzgYJu3HWT+9f11TzXxvL8rRAhR49HsdK G3hWAxv3rsvLqHvoO6gCiBILTcR901igxJ+7Ev6A0JgKsAVPyf8YOQ8wpa7IrgG1 1n16nnJAJkDXxPfxOYPrJLWbROh2Ut6SJfWir86KgkrkRvF9c/FBU0izfSlDbB45 WMCY3g6+u3K/F8w5PZSWwYtzFIZo0MOL0l3iyX9hoA+rP+XP4EJOtYAcuOBt286Y YD/3qruNvUr/3WuKuQkDjgwMc+Se7rViBLRSiHTde3lboIQ7PtiTa9GG9/8XmyHZ DuBx6kI4q2IB+w== -----END CERTIFICATE-----Generated at Sat Aug 23 11:35:31 2025 by rpki-client