$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: mUNyr5XuxmudKOhcTYqmJiutHE6QBtokTFJKCw0qb+M= Subject key identifier: 41:64:09:18:89:05:9E:E2:5B:37:30:E4:C1:67:78:2F:76:09:2C:61 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 01A0E24FCB071F5D458190FB723E5C1F0D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1A76 Signing time: Sun 27 Sep 2026 10:01:15 +0000 Manifest this update: Sun 27 Sep 2026 10:01:15 +0000 Manifest next update: Mon 28 Sep 2026 10:01:15 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: rWSyEN1Fxav2ZPpmOLoES02t46944ho5Ihvh9b01uUY=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e2:4f:cb:07:1f:5d:45:81:90:fb:72:3e:5c:1f:0d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Sep 27 10:01:15 2026 GMT Not After : Sep 28 10:01:15 2026 GMT Subject: CN=4164091889059ee25b3730e4c167782f76092c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:10:1f:03:56:95:25:bc:dd:87:89:57:28: 87:1c:39:75:c4:d8:61:51:d1:c0:c5:da:9e:9b:69: 1d:a5:97:52:2c:63:6a:44:3c:f4:83:89:d6:22:46: d6:91:0e:64:e7:d1:b4:eb:cc:49:8e:75:45:a6:39: 2a:d3:5b:b4:24:69:b1:73:06:70:83:88:8f:a5:99: fb:79:eb:02:1d:46:1d:f4:c8:24:b9:5b:e3:6b:67: da:a2:1a:33:78:ed:18:73:27:88:5d:ad:f4:f7:57: e4:d2:83:ef:69:95:85:d8:e1:74:c6:08:e8:82:01: c9:ae:42:3f:7c:84:4b:54:44:52:be:b8:5b:52:55: 08:c2:18:0a:6e:f7:32:d2:97:22:ad:89:28:39:a7: 8b:a6:18:0d:6f:41:42:6c:24:f2:e5:9e:b5:97:39: de:b8:01:ba:fc:9f:81:0c:f8:87:07:2f:ab:31:e1: 88:86:5b:27:83:0d:0c:18:af:fb:95:94:ec:59:04: 2d:f9:0a:ed:e7:db:b6:54:cc:6f:40:cd:36:19:46: 38:6b:d5:b6:70:c8:90:1d:fb:41:b2:46:ec:27:af: 0a:83:cd:49:58:95:f8:0b:58:46:52:ed:13:6a:bc: eb:0d:71:d0:ad:ba:37:5b:54:ae:06:f6:a8:79:af: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:09:18:89:05:9E:E2:5B:37:30:E4:C1:67:78:2F:76:09:2C:61 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f4:ac:5b:b3:19:04:5e:f8:b6:eb:d3:5a:7e:63:58:9b:e2: 7c:3d:6c:37:69:a3:2a:b3:d5:99:26:97:57:1b:5d:13:38:c9: 87:db:eb:32:68:e9:55:4d:c6:0c:d3:34:40:35:b4:67:06:af: c4:31:26:d9:c3:41:06:cd:e8:8e:fe:20:76:d5:47:4e:b4:30: 62:0c:05:9e:ba:85:2b:d5:71:60:02:87:53:a8:89:27:1c:bd: 33:2e:c0:d4:af:3d:4c:e9:22:ac:31:f4:42:49:00:23:b7:48: 14:5f:88:e6:e4:3a:3d:e3:26:cf:ef:ac:6b:3d:b0:8c:68:04: ce:b8:01:47:76:87:f8:d2:cc:fd:56:e5:c6:2d:f0:2a:74:4a: af:6d:95:d7:a8:02:d8:e0:3c:64:c6:f2:76:68:b3:33:06:7e: 27:4d:33:e9:dd:2c:48:34:47:4c:89:de:22:c1:19:db:b5:d2: 95:dc:32:54:e4:14:5e:41:58:25:90:b1:65:b8:fe:09:c4:b7: 1c:9b:1a:a0:92:8d:d4:49:d9:05:0b:2a:4a:62:10:61:c1:e7: e5:36:e8:78:21:45:65:58:1c:5b:00:7c:62:91:8f:d2:0d:4b: ad:21:85:7e:1c:49:78:74:83:28:ec:02:38:0f:62:89:3a:e8: 37:9c:fd:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDiT8sHH11FgZD7cj5cHw1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwOTI3MTAwMTE1WhcNMjYwOTI4MTAwMTE1WjAzMTEwLwYDVQQD Eyg0MTY0MDkxODg5MDU5ZWUyNWIzNzMwZTRjMTY3NzgyZjc2MDkyYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuToQHwNWlSW83YeJVyiHHDl1xNhh UdHAxdqem2kdpZdSLGNqRDz0g4nWIkbWkQ5k59G068xJjnVFpjkq01u0JGmxcwZw g4iPpZn7eesCHUYd9MgkuVvja2faohozeO0YcyeIXa3091fk0oPvaZWF2OF0xgjo ggHJrkI/fIRLVERSvrhbUlUIwhgKbvcy0pcirYkoOaeLphgNb0FCbCTy5Z61lzne uAG6/J+BDPiHBy+rMeGIhlsngw0MGK/7lZTsWQQt+Qrt59u2VMxvQM02GUY4a9W2 cMiQHftBskbsJ68Kg81JWJX4C1hGUu0TarzrDXHQrbo3W1SuBvaoea+d9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFkCRiJBZ7iWzcw5MFneC92CSxhMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPSsW7MZ BF74tuvTWn5jWJvifD1sN2mjKrPVmSaXVxtdEzjJh9vrMmjpVU3GDNM0QDW0Zwav xDEm2cNBBs3ojv4gdtVHTrQwYgwFnrqFK9VxYAKHU6iJJxy9My7A1K89TOkirDH0 QkkAI7dIFF+I5uQ6PeMmz++saz2wjGgEzrgBR3aH+NLM/Vblxi3wKnRKr22V16gC 2OA8ZMbydmizMwZ+J00z6d0sSDRHTIneIsEZ27XSldwyVOQUXkFYJZCxZbj+CcS3 HJsaoJKN1EnZBQsqSmIQYcHn5TboeCFFZVgcWwB8YpGP0g1LrSGFfhxJeHSDKOwC OA9iiTroN5z9bQ== -----END CERTIFICATE-----Generated at Sun Sep 27 21:09:48 2026 by rpki-client