$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: +dC+Ri4SrQT5Ov8uJVDAMvYJnbaBFwxxTLW+8l6BpF4= Subject key identifier: FF:99:1D:F4:B1:D1:30:01:60:6C:B2:B4:17:F0:19:54:71:AC:F7:EE Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 0198507A487CAE0113C8F7520C31749EA4E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 109B Signing time: Mon 28 Jul 2025 10:00:47 +0000 Manifest this update: Mon 28 Jul 2025 10:00:47 +0000 Manifest next update: Tue 29 Jul 2025 10:00:47 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: GBz/P4SisxrRzrfr2yf5rmVYu9dN50loCTjh0+HmESQ=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:50:7a:48:7c:ae:01:13:c8:f7:52:0c:31:74:9e:a4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jul 28 10:00:47 2025 GMT Not After : Jul 29 10:00:47 2025 GMT Subject: CN=ff991df4b1d13001606cb2b417f0195471acf7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:64:64:4f:9b:a0:f1:7a:e2:46:f4:1e:9a: c4:5b:b7:10:eb:24:0b:49:b3:0f:61:b0:e5:f5:fb: 1f:62:3a:0d:12:79:aa:2f:4c:7f:02:3b:0b:17:d0: 48:80:28:82:a9:1c:90:16:10:51:bf:6c:53:f2:9a: 99:ad:b6:9f:28:4d:6a:17:b4:e0:05:55:9d:6f:91: 38:2c:1c:97:c8:89:81:70:2f:4a:c5:ab:7a:b1:e7: 0c:25:3e:96:05:13:15:02:f4:20:42:1e:8a:3b:84: dc:73:92:d8:9a:7d:ee:62:a9:1d:ee:3f:fd:a8:3b: bf:ef:5b:81:25:ea:93:00:8f:8b:5e:61:c0:8e:e7: 76:c0:89:1e:e1:3c:3d:0b:4b:c6:89:dd:63:7e:c5: 3a:02:cd:ff:cf:9e:2a:b1:ec:88:dc:c2:c5:c5:0a: 8d:c1:a2:c9:18:dd:7b:cd:a5:7c:dd:d5:a5:40:4f: f7:25:ed:e0:ee:08:c3:57:24:d6:ba:50:23:80:75: ba:b2:e1:0c:84:b7:76:3e:b6:b4:4c:90:25:8e:c6: cb:1b:3e:96:d7:53:45:c9:61:f7:fb:37:b9:b3:be: 11:51:04:5e:dc:8b:29:94:3c:9f:a7:ed:83:ba:15: ce:63:96:8e:ea:d6:75:aa:30:bc:88:b8:a2:39:e3: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:1D:F4:B1:D1:30:01:60:6C:B2:B4:17:F0:19:54:71:AC:F7:EE X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5f:15:a8:85:b1:74:61:1a:71:44:51:df:89:7b:0f:6b:9e: ba:e1:ee:1c:c3:1c:d4:d9:5d:3c:e3:5c:c7:5b:24:b2:56:96: a6:bd:26:da:77:45:36:06:a8:31:a4:10:93:9d:82:2a:a4:c6: 0a:14:a7:b1:66:d2:6b:d9:87:91:7a:e3:fb:58:65:b6:ab:73: 66:30:6d:25:a7:ea:7b:32:fe:3b:ca:26:b5:ba:ef:4a:3a:0d: 10:95:03:10:13:73:48:c7:5b:96:55:21:e1:b7:c9:93:40:c8: c5:03:4c:e8:a7:fb:88:34:7f:fa:ca:4b:68:fe:3d:4c:49:07: f4:99:b0:17:78:2b:9b:1e:22:55:35:53:42:3a:89:8c:ab:82: 28:e0:8c:ba:7c:78:1d:35:75:d3:c5:93:56:cd:89:75:ca:10: cd:3f:c1:e0:b7:b5:fa:17:ea:97:5a:b9:51:46:92:4b:bf:9c: 98:f7:86:b4:d2:a5:cd:62:1d:c3:51:49:72:ea:38:57:be:6b: 7d:bc:66:2f:9e:9d:64:8c:4a:e8:af:22:94:8d:1a:69:f4:b3: d8:24:c1:b7:17:9a:c2:dd:43:d4:ff:e5:3f:a8:42:fd:27:d9: a2:e8:d6:35:5b:ac:24:83:74:32:f0:66:7c:f3:44:a8:d2:d8: ea:01:7d:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhQekh8rgETyPdSDDF0nqToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUwNzI4MTAwMDQ3WhcNMjUwNzI5MTAwMDQ3WjAzMTEwLwYDVQQD EyhmZjk5MWRmNGIxZDEzMDAxNjA2Y2IyYjQxN2YwMTk1NDcxYWNmN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nxkZE+boPF64kb0HprEW7cQ6yQL SbMPYbDl9fsfYjoNEnmqL0x/AjsLF9BIgCiCqRyQFhBRv2xT8pqZrbafKE1qF7Tg BVWdb5E4LByXyImBcC9Kxat6secMJT6WBRMVAvQgQh6KO4Tcc5LYmn3uYqkd7j/9 qDu/71uBJeqTAI+LXmHAjud2wIke4Tw9C0vGid1jfsU6As3/z54qseyI3MLFxQqN waLJGN17zaV83dWlQE/3Je3g7gjDVyTWulAjgHW6suEMhLd2Pra0TJAljsbLGz6W 11NFyWH3+ze5s74RUQRe3IsplDyfp+2DuhXOY5aO6tZ1qjC8iLiiOeO2ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+ZHfSx0TABYGyytBfwGVRxrPfuMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi18VqIWx dGEacURR34l7D2ueuuHuHMMc1NldPONcx1skslaWpr0m2ndFNgaoMaQQk52CKqTG ChSnsWbSa9mHkXrj+1hltqtzZjBtJafqezL+O8omtbrvSjoNEJUDEBNzSMdbllUh 4bfJk0DIxQNM6Kf7iDR/+spLaP49TEkH9JmwF3grmx4iVTVTQjqJjKuCKOCMunx4 HTV108WTVs2JdcoQzT/B4Le1+hfql1q5UUaSS7+cmPeGtNKlzWIdw1FJcuo4V75r fbxmL56dZIxK6K8ilI0aafSz2CTBtxeawt1D1P/lP6hC/SfZoujWNVusJIN0MvBm fPNEqNLY6gF9QQ== -----END CERTIFICATE-----Generated at Mon Jul 28 14:38:54 2025 by rpki-client