$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: c8e8JnGek3DUJa6A2Kk7Rei9tMXAC+N8sWlCRuWkMM4= Subject key identifier: 40:E9:73:F1:DF:EF:08:F7:4C:D3:43:81:13:59:03:1A:ED:3A:E3:E5 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0197BB224E948A8FD530D7A62B890B409188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 15B8 Signing time: Sun 29 Jun 2025 10:01:17 +0000 Manifest this update: Sun 29 Jun 2025 10:01:17 +0000 Manifest next update: Mon 30 Jun 2025 10:01:17 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: A0mq9Rn7fljtA/a2JyOBEWLbQro11e0sW/6MKrf+NS0=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:22:4e:94:8a:8f:d5:30:d7:a6:2b:89:0b:40:91:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jun 29 10:01:17 2025 GMT Not After : Jun 30 10:01:17 2025 GMT Subject: CN=40e973f1dfef08f74cd343811359031aed3ae3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:3e:1d:46:be:24:9d:4e:4b:50:ce:ce:c2: 30:30:93:5a:5a:6e:86:a0:38:3b:12:a8:d3:51:ff: c8:e9:ab:54:11:b7:38:57:e6:f5:33:05:c2:08:a7: 3e:84:63:4e:e7:f1:50:70:17:4b:1b:7f:4b:a0:f7: 33:54:c8:c1:90:ea:0b:08:1a:51:20:ca:0f:7b:64: 98:a8:16:66:6a:bf:a3:e8:4a:9a:1b:aa:ab:89:75: 6e:85:e8:92:a2:2d:f2:cf:66:ff:a3:ff:58:af:0e: 03:dd:00:e4:16:c5:34:65:c8:2d:d4:aa:4a:6a:80: 72:3a:99:53:f2:88:82:61:70:38:a2:5d:23:1c:72: b3:67:9d:9d:30:c4:c3:58:fd:f0:d4:a9:84:58:9b: 58:c4:3a:50:40:69:47:e2:d8:14:c5:ab:55:c6:eb: cb:49:b7:1b:84:a3:64:9b:b6:b3:10:35:91:16:b7: 79:b5:8e:06:3f:e0:ce:6b:0a:86:3b:53:37:08:da: c2:0a:63:7e:8c:60:a6:07:d7:35:95:85:6e:a2:36: ad:26:ad:ce:4a:9a:d1:88:46:3d:79:e4:b5:53:83: 99:47:ba:ad:31:bc:d7:bc:7f:9c:c0:8c:1c:6f:52: 01:48:1e:2a:c0:f5:2c:36:55:b3:c1:23:e8:83:55: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E9:73:F1:DF:EF:08:F7:4C:D3:43:81:13:59:03:1A:ED:3A:E3:E5 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:62:4d:c2:21:c5:c4:3e:ef:47:3b:0c:43:5c:a7:0c:c8:36: 16:6b:fb:6a:01:63:1a:88:6f:e7:5f:e7:4f:50:4e:e1:24:74: c1:61:bf:29:60:c5:51:d6:81:c9:62:d6:50:7a:5a:98:a7:50: a6:15:ba:38:92:27:ae:df:9a:13:70:46:9d:04:80:db:b9:54: 3a:4b:b8:a6:44:e4:c6:23:ca:db:02:c6:1a:36:5e:e1:7f:80: 94:10:fd:61:7c:e5:3a:1b:24:b8:f1:7d:c3:62:69:95:25:b1: 2e:3b:96:5e:af:17:da:bd:d8:82:4a:51:40:d3:a2:a3:0a:ee: 90:c9:04:66:ce:0d:82:bf:df:5e:27:7b:06:b3:5b:e8:18:86: 17:87:35:b7:85:62:5c:0e:21:cd:aa:ba:da:08:a2:9f:57:67: 8b:02:ac:a9:a2:c0:cd:be:b9:b2:29:2c:fb:8a:b0:1a:e0:7f: e4:41:19:76:04:2d:e5:db:18:ca:93:81:39:b9:1a:9c:7d:5b: 14:65:1e:a6:e9:9f:2e:c7:c3:76:35:1e:1f:ae:d0:fe:12:a9: 59:63:5d:dc:13:03:23:da:9f:3b:ab:57:50:be:0f:18:19:11: bd:32:bd:2e:7c:f2:49:6f:11:b4:2c:e3:69:31:4b:0b:3e:67: df:6c:0e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7Ik6Uio/VMNemK4kLQJGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwNjI5MTAwMTE3WhcNMjUwNjMwMTAwMTE3WjAzMTEwLwYDVQQD Eyg0MGU5NzNmMWRmZWYwOGY3NGNkMzQzODExMzU5MDMxYWVkM2FlM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4U+HUa+JJ1OS1DOzsIwMJNaWm6G oDg7EqjTUf/I6atUEbc4V+b1MwXCCKc+hGNO5/FQcBdLG39LoPczVMjBkOoLCBpR IMoPe2SYqBZmar+j6EqaG6qriXVuheiSoi3yz2b/o/9Yrw4D3QDkFsU0Zcgt1KpK aoByOplT8oiCYXA4ol0jHHKzZ52dMMTDWP3w1KmEWJtYxDpQQGlH4tgUxatVxuvL SbcbhKNkm7azEDWRFrd5tY4GP+DOawqGO1M3CNrCCmN+jGCmB9c1lYVuojatJq3O SprRiEY9eeS1U4OZR7qtMbzXvH+cwIwcb1IBSB4qwPUsNlWzwSPog1UoyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDpc/Hf7wj3TNNDgRNZAxrtOuPlMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2JNwiHF xD7vRzsMQ1ynDMg2Fmv7agFjGohv51/nT1BO4SR0wWG/KWDFUdaByWLWUHpamKdQ phW6OJInrt+aE3BGnQSA27lUOku4pkTkxiPK2wLGGjZe4X+AlBD9YXzlOhskuPF9 w2JplSWxLjuWXq8X2r3YgkpRQNOiowrukMkEZs4Ngr/fXid7BrNb6BiGF4c1t4Vi XA4hzaq62giin1dniwKsqaLAzb65siks+4qwGuB/5EEZdgQt5dsYypOBObkanH1b FGUepumfLsfDdjUeH67Q/hKpWWNd3BMDI9qfO6tXUL4PGBkRvTK9LnzySW8RtCzj aTFLCz5n32wObA== -----END CERTIFICATE-----Generated at Sun Jun 29 14:18:02 2025 by rpki-client