$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: JoS1vVBP6RGKIp95f6bTqBuK/whSUSyKTe1zmx5qPa0= Subject key identifier: A3:46:36:15:66:51:8D:9A:EA:8D:5F:63:95:5D:BF:E4:A5:4E:D2:CF Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 01984A09D9501A4FA9EB839B2FF25BD9E109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1602 Signing time: Sun 27 Jul 2025 04:00:16 +0000 Manifest this update: Sun 27 Jul 2025 04:00:16 +0000 Manifest next update: Mon 28 Jul 2025 04:00:16 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: 4mkmA0ucUvF+gN9nszquUX4N5oXv2/ESMFzGW4ecPNQ=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:09:d9:50:1a:4f:a9:eb:83:9b:2f:f2:5b:d9:e1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jul 27 04:00:16 2025 GMT Not After : Jul 28 04:00:16 2025 GMT Subject: CN=a346361566518d9aea8d5f63955dbfe4a54ed2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:bb:fe:ee:01:bd:d6:50:35:5f:85:1f:a6: d4:b8:4e:cb:15:ae:8c:b6:08:ca:70:bc:29:f3:71: 79:b9:ec:94:5f:8b:ca:2d:c4:56:9c:05:a0:da:3f: e9:9b:92:2a:8f:1a:04:5b:68:08:98:2c:f8:7e:a2: e8:bd:82:7b:9f:0e:2a:91:4a:f0:a7:22:03:1e:37: a2:56:77:dc:d9:76:5d:af:cd:a9:96:f2:82:b9:46: d9:00:aa:6f:bb:c7:cf:99:b9:19:06:6c:1e:9d:21: 26:5f:a2:a8:32:8a:e0:ef:84:16:9b:97:6d:4e:91: c7:c1:85:2e:97:d3:34:a9:01:e2:61:09:67:b4:23: b0:83:6c:c7:68:05:dd:e9:6d:2a:32:8a:f5:62:d4: a9:16:61:4b:5c:de:2c:f3:5f:ec:e2:54:21:2f:f3: e9:17:31:78:d4:46:7a:e2:9d:c2:ad:94:04:a8:35: 61:1d:20:73:f9:f7:5d:a8:b4:4a:dc:0f:5b:4b:81: 59:20:56:e5:5f:52:c7:89:f8:58:7e:f2:33:1a:df: e6:e6:e0:98:d4:d8:dc:ed:00:8a:4f:26:12:4b:b2: a5:ce:c6:a0:53:87:08:95:95:99:f3:8a:03:eb:df: 4d:b5:39:cb:3b:58:6a:c0:95:6d:60:27:68:bd:1e: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:36:15:66:51:8D:9A:EA:8D:5F:63:95:5D:BF:E4:A5:4E:D2:CF X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:be:8d:1b:66:dc:30:e2:ad:12:8b:d8:21:64:3c:28:a3:a2: be:5a:75:30:78:9b:4f:0d:77:50:ee:90:83:f4:b2:38:38:cc: 02:6e:4b:2b:6f:bb:a4:45:fc:10:47:18:40:d5:68:2d:39:8e: 76:6f:2a:05:d3:a7:38:09:ad:87:c1:fc:b0:b7:f6:98:57:95: f0:01:48:41:a0:7c:27:15:f1:57:9d:4c:b7:95:8b:ab:19:75: 79:bd:08:9d:83:16:bc:c2:4c:ab:5d:11:84:41:1d:78:98:80: 0e:f3:ce:9b:99:40:9a:ef:50:dd:2e:28:f4:dc:e2:20:56:ae: 47:fb:ec:87:5f:16:bb:8c:a6:21:81:31:bf:4f:80:b4:50:5d: 27:62:ba:78:dd:bd:e9:26:1b:a6:91:3f:f1:7e:1c:54:a6:e3: 8c:d7:c8:b0:47:57:29:50:f3:2a:0e:60:02:dd:79:c4:2f:15: eb:50:f7:68:1a:2e:0c:59:9a:29:00:e0:32:c4:43:b1:bb:a6: a2:62:80:78:60:4f:1d:5a:f9:b9:c7:49:c1:b7:da:49:1c:1a: 33:5b:05:ff:b7:ef:6c:40:32:ca:89:62:aa:ff:ff:0a:70:ed: 0f:16:6b:2f:21:cb:13:5d:72:bf:f8:af:e0:8a:25:33:cf:82: a0:5a:b5:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKCdlQGk+p64ObL/Jb2eEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwNzI3MDQwMDE2WhcNMjUwNzI4MDQwMDE2WjAzMTEwLwYDVQQD EyhhMzQ2MzYxNTY2NTE4ZDlhZWE4ZDVmNjM5NTVkYmZlNGE1NGVkMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVe7/u4BvdZQNV+FH6bUuE7LFa6M tgjKcLwp83F5ueyUX4vKLcRWnAWg2j/pm5IqjxoEW2gImCz4fqLovYJ7nw4qkUrw pyIDHjeiVnfc2XZdr82plvKCuUbZAKpvu8fPmbkZBmwenSEmX6KoMorg74QWm5dt TpHHwYUul9M0qQHiYQlntCOwg2zHaAXd6W0qMor1YtSpFmFLXN4s81/s4lQhL/Pp FzF41EZ64p3CrZQEqDVhHSBz+fddqLRK3A9bS4FZIFblX1LHifhYfvIzGt/m5uCY 1Njc7QCKTyYSS7KlzsagU4cIlZWZ84oD699NtTnLO1hqwJVtYCdovR6jDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNGNhVmUY2a6o1fY5Vdv+SlTtLPMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI76NG2bc MOKtEovYIWQ8KKOivlp1MHibTw13UO6Qg/SyODjMAm5LK2+7pEX8EEcYQNVoLTmO dm8qBdOnOAmth8H8sLf2mFeV8AFIQaB8JxXxV51Mt5WLqxl1eb0InYMWvMJMq10R hEEdeJiADvPOm5lAmu9Q3S4o9NziIFauR/vsh18Wu4ymIYExv0+AtFBdJ2K6eN29 6SYbppE/8X4cVKbjjNfIsEdXKVDzKg5gAt15xC8V61D3aBouDFmaKQDgMsRDsbum omKAeGBPHVr5ucdJwbfaSRwaM1sF/7fvbEAyyoliqv//CnDtDxZrLyHLE11yv/iv 4IolM8+CoFq1ag== -----END CERTIFICATE-----Generated at Sun Jul 27 05:24:37 2025 by rpki-client