$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: YHmLWYeNC4XHl/LEKkCm54StIz7xnz+M1tJq6W+b3sM= Subject key identifier: 28:E5:67:87:AD:B7:C4:A4:0B:EF:37:D9:24:F2:34:9C:F8:8D:C4:1D Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019E1D911F1DEEFE7D987D44312078F504FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1907 Signing time: Tue 12 May 2026 19:01:50 +0000 Manifest this update: Tue 12 May 2026 19:01:50 +0000 Manifest next update: Wed 13 May 2026 19:01:50 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: RmiTYp5zhLBff7AV9xtJ6KT1E7nRaT8Ug5ZBcTC/LFI=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:91:1f:1d:ee:fe:7d:98:7d:44:31:20:78:f5:04:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: May 12 19:01:50 2026 GMT Not After : May 13 19:01:50 2026 GMT Subject: CN=28e56787adb7c4a40bef37d924f2349cf88dc41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:35:f3:71:7a:08:54:42:36:60:74:39:47: 19:41:4e:a8:c4:da:18:8c:66:60:62:4f:5f:0e:f8: df:18:d3:a0:d1:f7:79:3c:76:88:5d:ca:9a:a9:0c: 9b:1e:d6:59:32:29:6d:af:07:8f:7b:e5:05:47:4d: 17:80:17:82:dc:8f:8a:50:f0:46:89:12:76:a4:2a: 93:77:67:ec:37:f4:ca:3f:13:d7:d9:14:8f:83:c5: ee:7c:1f:5e:76:cd:32:00:d2:12:dd:e1:ed:7f:ef: e9:81:69:ae:bb:3b:78:f9:63:55:1c:04:c4:3e:00: ff:ef:0b:f2:c1:85:cf:2a:49:5f:81:7c:d0:e7:7b: e5:6d:80:51:eb:34:dd:41:dc:c0:da:81:07:ba:e9: ca:47:79:be:7a:13:d4:68:21:8c:77:c4:4c:54:d8: 53:49:e0:36:a7:cf:0c:d3:32:9e:56:e3:c9:b5:bd: e9:3a:e8:3d:f8:ff:8b:34:2a:2e:88:be:3d:40:62: 8d:dc:80:b9:71:d9:10:58:c9:6a:21:2b:d4:cc:81: 5a:3a:26:06:87:86:7e:b3:0d:61:da:ce:69:57:58: 50:c2:d7:22:46:1a:95:84:5f:1e:0c:cd:de:f1:34: 03:b7:42:2c:6d:6d:55:3b:75:13:77:b0:72:24:93: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E5:67:87:AD:B7:C4:A4:0B:EF:37:D9:24:F2:34:9C:F8:8D:C4:1D X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d7:70:21:6e:f0:31:e5:91:f0:fc:8d:81:1d:1c:67:c4:09: 5b:7d:e0:68:d8:4c:31:de:51:05:90:43:74:d3:9d:75:69:5c: 6d:cf:0d:bf:67:06:77:3d:cd:eb:76:82:74:e3:7f:99:26:29: cc:54:ff:a7:a2:e5:a3:6e:e9:1b:d4:3a:21:a6:3a:75:71:d5: c7:42:f5:6b:05:c0:45:6f:11:36:cd:c4:f3:bd:b4:13:42:47: a7:b0:34:7a:ed:4b:64:c7:4c:38:95:25:73:6b:15:f6:f5:52: 96:e3:b3:ac:00:4a:d9:b4:ea:81:44:85:8b:2d:28:30:c5:41: 80:af:71:94:4c:50:e8:a0:ee:b4:4f:ec:b2:58:05:40:6e:e1: 02:bc:d0:44:f3:45:df:97:66:0c:11:32:37:62:33:c2:0b:9e: e6:20:f2:a2:0c:3c:0e:d6:10:66:ea:90:56:30:cb:a7:65:1a: 77:81:3b:2f:b9:99:24:fa:a9:eb:e7:d6:bb:77:23:fb:b6:65: 8d:95:c3:32:f1:80:90:96:15:9e:31:27:cf:a7:34:9e:1d:00: d8:0c:1b:2b:cc:49:1f:78:f4:fa:42:8a:90:53:ee:c4:ea:61: 22:44:4c:94:43:49:a6:d8:4b:fe:cf:46:01:7e:34:2b:7b:7f: a0:e1:f2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkR8d7v59mH1EMSB49QT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwNTEyMTkwMTUwWhcNMjYwNTEzMTkwMTUwWjAzMTEwLwYDVQQD EygyOGU1Njc4N2FkYjdjNGE0MGJlZjM3ZDkyNGYyMzQ5Y2Y4OGRjNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArws183F6CFRCNmB0OUcZQU6oxNoY jGZgYk9fDvjfGNOg0fd5PHaIXcqaqQybHtZZMiltrwePe+UFR00XgBeC3I+KUPBG iRJ2pCqTd2fsN/TKPxPX2RSPg8XufB9eds0yANIS3eHtf+/pgWmuuzt4+WNVHATE PgD/7wvywYXPKklfgXzQ53vlbYBR6zTdQdzA2oEHuunKR3m+ehPUaCGMd8RMVNhT SeA2p88M0zKeVuPJtb3pOug9+P+LNCouiL49QGKN3IC5cdkQWMlqISvUzIFaOiYG h4Z+sw1h2s5pV1hQwtciRhqVhF8eDM3e8TQDt0IsbW1VO3UTd7ByJJPjWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjlZ4ett8SkC+832STyNJz4jcQdMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKddwIW7w MeWR8PyNgR0cZ8QJW33gaNhMMd5RBZBDdNOddWlcbc8Nv2cGdz3N63aCdON/mSYp zFT/p6Llo27pG9Q6IaY6dXHVx0L1awXARW8RNs3E8720E0JHp7A0eu1LZMdMOJUl c2sV9vVSluOzrABK2bTqgUSFiy0oMMVBgK9xlExQ6KDutE/sslgFQG7hArzQRPNF 35dmDBEyN2Izwgue5iDyogw8DtYQZuqQVjDLp2Uad4E7L7mZJPqp6+fWu3cj+7Zl jZXDMvGAkJYVnjEnz6c0nh0A2AwbK8xJH3j0+kKKkFPuxOphIkRMlENJpthL/s9G AX40K3t/oOHyJA== -----END CERTIFICATE-----Generated at Wed May 13 06:52:56 2026 by rpki-client