$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: qS0DaSu+X5Y0qigS0vA6w95hJPPpBFPe+MzSiS1HWZg= Subject key identifier: 85:92:4A:50:9A:4D:E4:75:B3:33:43:06:C4:72:26:A9:83:16:D2:76 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019F92480946DAF2852F5A37888792A50A05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 19C8 Signing time: Fri 24 Jul 2026 04:00:22 +0000 Manifest this update: Fri 24 Jul 2026 04:00:22 +0000 Manifest next update: Sat 25 Jul 2026 04:00:22 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: 2SGnfqtFKbn8ZKI5QpnYKNIEd2/7sqDeKoT7KerenBQ=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:48:09:46:da:f2:85:2f:5a:37:88:87:92:a5:0a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jul 24 04:00:22 2026 GMT Not After : Jul 25 04:00:22 2026 GMT Subject: CN=85924a509a4de475b3334306c47226a98316d276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:ea:04:52:1e:95:2d:fb:e3:d6:a9:f5:5c: b7:0c:9b:28:32:62:1b:e5:3b:e3:a1:72:36:d5:6b: 7d:85:fd:25:25:51:81:c3:53:ff:a8:b6:39:86:6a: e5:42:09:83:4a:9d:e5:ec:70:cb:8c:62:83:80:b7: a1:af:9e:f0:4b:8f:a9:c7:a0:9a:06:c8:97:87:fc: b6:fe:e4:08:e1:ed:5b:a8:c2:f8:03:9f:12:aa:2f: 70:e0:b8:b4:1c:26:59:32:34:f2:83:74:5e:2f:3d: 3a:24:f9:c2:6b:65:3c:59:c6:92:01:1c:5a:37:a2: 10:b1:b2:27:d1:8b:b0:f2:83:c0:e9:19:f3:02:7c: 90:61:2e:5f:19:68:a6:b5:58:2e:44:69:7e:77:31: b9:df:46:9e:1a:89:e2:b8:ca:b1:58:b5:40:e1:33: 40:92:3d:ec:93:5a:17:ac:79:ca:8f:6a:88:5d:fb: 22:bb:f1:26:13:53:50:c7:7e:7b:79:27:b0:3c:eb: 32:54:e9:95:83:c5:3f:1e:45:96:f6:ef:f4:da:0e: 97:be:df:63:20:64:64:20:1b:b2:ad:a6:fc:49:2d: 33:87:0a:0d:90:e1:da:ca:67:c7:4f:e4:82:57:55: 16:5b:4a:91:43:fb:1c:f4:b6:c3:e8:69:0d:f4:6a: b3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:4A:50:9A:4D:E4:75:B3:33:43:06:C4:72:26:A9:83:16:D2:76 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b0:1c:61:80:49:17:ef:06:4f:98:ad:95:02:25:41:0f:f1: ac:63:89:a1:59:9e:96:aa:5c:9e:55:73:b3:e8:5a:1f:d1:7c: 73:a9:89:9a:7a:da:fd:53:83:0c:f0:2d:fe:dd:bc:26:e5:11: de:b5:2c:19:d0:31:c0:8f:3f:3b:1c:39:e4:63:ad:27:67:99: da:47:bf:e3:2d:32:b1:8a:a4:40:1f:eb:8d:d1:36:29:40:2f: 80:15:c3:85:b2:7c:99:3b:da:7f:45:99:a7:72:ec:8a:92:38: b0:da:90:80:28:c2:eb:81:2c:44:26:e2:15:86:f1:9e:04:02: 01:6a:2c:5a:0b:46:d9:eb:72:16:a3:b4:f7:b7:3b:e0:dd:cd: 12:d6:c8:52:cd:5f:fc:68:30:b7:47:b2:95:f5:be:a1:8e:d7: 8a:df:d2:c2:f0:83:29:7a:a7:d4:3d:bb:d2:d3:f3:f3:f3:9a: 20:a4:cb:75:00:24:b6:32:a7:77:41:94:66:74:2f:97:cd:eb: 69:23:75:e9:f7:83:01:7a:d5:ee:10:95:18:fb:f2:66:ef:67: 19:4c:d0:15:5e:c2:eb:66:c7:d6:e7:31:16:e0:86:99:25:93: 45:5b:45:23:93:9f:cd:6f:04:de:b8:11:00:ed:cf:1a:6d:ae: 9e:77:8b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SSAlG2vKFL1o3iIeSpQoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwNzI0MDQwMDIyWhcNMjYwNzI1MDQwMDIyWjAzMTEwLwYDVQQD Eyg4NTkyNGE1MDlhNGRlNDc1YjMzMzQzMDZjNDcyMjZhOTgzMTZkMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOrqBFIelS3749ap9Vy3DJsoMmIb 5TvjoXI21Wt9hf0lJVGBw1P/qLY5hmrlQgmDSp3l7HDLjGKDgLehr57wS4+px6Ca BsiXh/y2/uQI4e1bqML4A58Sqi9w4Li0HCZZMjTyg3ReLz06JPnCa2U8WcaSARxa N6IQsbIn0Yuw8oPA6RnzAnyQYS5fGWimtVguRGl+dzG530aeGoniuMqxWLVA4TNA kj3sk1oXrHnKj2qIXfsiu/EmE1NQx357eSewPOsyVOmVg8U/HkWW9u/02g6Xvt9j IGRkIBuyrab8SS0zhwoNkOHaymfHT+SCV1UWW0qRQ/sc9LbD6GkN9GqzAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWSSlCaTeR1szNDBsRyJqmDFtJ2MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrAcYYBJ F+8GT5itlQIlQQ/xrGOJoVmelqpcnlVzs+haH9F8c6mJmnra/VODDPAt/t28JuUR 3rUsGdAxwI8/Oxw55GOtJ2eZ2ke/4y0ysYqkQB/rjdE2KUAvgBXDhbJ8mTvaf0WZ p3LsipI4sNqQgCjC64EsRCbiFYbxngQCAWosWgtG2etyFqO097c74N3NEtbIUs1f /Ggwt0eylfW+oY7Xit/SwvCDKXqn1D270tPz8/OaIKTLdQAktjKnd0GUZnQvl83r aSN16feDAXrV7hCVGPvyZu9nGUzQFV7C62bH1ucxFuCGmSWTRVtFI5OfzW8E3rgR AO3PGm2unneL1w== -----END CERTIFICATE-----Generated at Fri Jul 24 10:48:06 2026 by rpki-client