$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: 0jxLVfFHRnmQQ71rtRa8p9W+IsKmEYwGCxHkbqLz7tI= Subject key identifier: 11:F5:49:11:69:DB:A0:31:7F:7F:04:DF:A9:75:E8:1E:B7:84:6A:C8 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0199FE7E13B0703CDC8622912E46ABBF1329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 16E4 Signing time: Sun 19 Oct 2025 22:01:39 +0000 Manifest this update: Sun 19 Oct 2025 22:01:39 +0000 Manifest next update: Mon 20 Oct 2025 22:01:39 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: hvnnHBiExJSWLiyZ27Fy5fIAEEv1V1SGXvy+hNJqDB4=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 22:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7e:13:b0:70:3c:dc:86:22:91:2e:46:ab:bf:13:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Oct 19 22:01:39 2025 GMT Not After : Oct 20 22:01:39 2025 GMT Subject: CN=11f5491169dba0317f7f04dfa975e81eb7846ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:11:94:9b:4c:2e:96:04:76:58:6b:02:55: 8c:a1:ec:7b:fd:23:fa:d7:3f:19:fc:cb:5d:74:7d: e9:c7:f6:69:51:58:57:17:49:84:30:90:aa:54:c4: a4:58:75:92:32:5b:00:38:65:4b:5d:c8:d7:db:9e: 2a:50:59:6d:e9:ac:ee:99:6d:40:ea:9d:43:22:6a: 1a:09:6b:4e:55:7e:27:bc:de:5a:0d:9b:35:19:5e: 87:e2:dd:be:39:9e:ab:cc:80:8a:4e:6f:39:28:c3: f2:89:68:0d:e4:4f:0b:61:2d:c8:b0:65:00:66:2e: 80:3e:39:49:71:47:7b:37:5e:c6:63:c5:c0:e3:d1: 83:3a:2b:1c:3d:d9:65:9b:3e:52:8a:d6:30:f6:bf: 49:77:05:47:df:ce:27:6b:f7:4b:b6:2f:0e:90:1d: 71:27:9f:c1:a2:3c:c6:eb:6c:f7:cb:4f:a0:34:6b: 2a:b4:c8:50:3f:f5:70:c5:6f:02:e2:bf:f9:71:db: a8:3e:fc:9e:18:49:0d:e1:31:c9:f9:34:a2:41:90: 05:5c:a1:60:8f:d0:7a:dc:81:91:03:3b:1e:14:03: fe:2d:e2:26:ac:7d:f5:68:4b:db:08:07:bd:7e:ed: 35:4c:ad:3b:fe:60:28:a4:03:7d:4d:8b:05:92:93: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:49:11:69:DB:A0:31:7F:7F:04:DF:A9:75:E8:1E:B7:84:6A:C8 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:35:cb:83:25:bd:91:f3:d3:15:8c:ba:90:b0:da:9e:49:34: 45:c4:e4:bc:25:12:bd:78:df:68:45:ee:af:bb:9c:f3:f6:d3: dc:18:e2:1e:4f:4b:39:1c:48:e2:33:15:4b:6b:9c:a0:d0:5f: 30:80:82:2e:8f:e1:78:b1:27:cb:73:35:f1:ac:8f:56:16:ec: 55:19:b2:08:dd:d8:a3:1e:23:32:e2:de:ce:cb:f9:cd:73:2e: 24:fa:b6:a5:10:30:d1:75:a2:d8:24:a9:b3:50:17:05:03:35: 4a:5d:58:ec:85:50:e9:c9:95:f7:12:55:98:ad:8d:e2:8f:e6: 3c:71:7f:a8:78:17:b0:d9:88:4f:ad:6c:62:90:5e:49:4e:b1: e8:2a:4d:b2:11:c3:f1:08:60:f1:13:8b:4c:ec:53:5c:42:d7: 42:29:b0:7c:a0:e4:eb:1b:5e:16:b3:51:08:e5:35:c3:9e:64: 37:6f:51:7d:6d:8a:66:04:d3:b5:d8:7c:b5:9c:05:14:d1:c3: ef:58:df:93:55:32:fa:9e:f9:13:40:60:60:86:23:48:83:9b: 1b:ec:17:da:2a:be:f4:aa:be:1b:00:db:2d:70:33:d6:b4:7a: a6:8e:7d:e3:0d:87:d9:06:79:ff:20:d1:62:46:aa:03:e4:9f: 86:d9:89:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+fhOwcDzchiKRLkarvxMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUxMDE5MjIwMTM5WhcNMjUxMDIwMjIwMTM5WjAzMTEwLwYDVQQD EygxMWY1NDkxMTY5ZGJhMDMxN2Y3ZjA0ZGZhOTc1ZTgxZWI3ODQ2YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I4RlJtMLpYEdlhrAlWMoex7/SP6 1z8Z/MtddH3px/ZpUVhXF0mEMJCqVMSkWHWSMlsAOGVLXcjX254qUFlt6azumW1A 6p1DImoaCWtOVX4nvN5aDZs1GV6H4t2+OZ6rzICKTm85KMPyiWgN5E8LYS3IsGUA Zi6APjlJcUd7N17GY8XA49GDOiscPdllmz5SitYw9r9JdwVH384na/dLti8OkB1x J5/BojzG62z3y0+gNGsqtMhQP/VwxW8C4r/5cduoPvyeGEkN4THJ+TSiQZAFXKFg j9B63IGRAzseFAP+LeImrH31aEvbCAe9fu01TK07/mAopAN9TYsFkpMF5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH1SRFp26Axf38E36l16B63hGrIMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDXLgyW9 kfPTFYy6kLDankk0RcTkvCUSvXjfaEXur7uc8/bT3BjiHk9LORxI4jMVS2ucoNBf MICCLo/heLEny3M18ayPVhbsVRmyCN3Yox4jMuLezsv5zXMuJPq2pRAw0XWi2CSp s1AXBQM1Sl1Y7IVQ6cmV9xJVmK2N4o/mPHF/qHgXsNmIT61sYpBeSU6x6CpNshHD 8Qhg8ROLTOxTXELXQimwfKDk6xteFrNRCOU1w55kN29RfW2KZgTTtdh8tZwFFNHD 71jfk1Uy+p75E0BgYIYjSIObG+wX2iq+9Kq+GwDbLXAz1rR6po594w2H2QZ5/yDR YkaqA+SfhtmJZw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:20 2025 by rpki-client