$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: ql8cTC5CbhLEDhZw6r2x4Sl3r8RjQmr08xx7D20LogQ= Subject key identifier: CA:71:D4:FA:47:77:4B:BE:E2:7D:50:9C:9E:C5:39:38:EA:63:4E:07 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 01A13A49095ABCA906859E24F6738307D3AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 153D Signing time: Wed 14 Oct 2026 12:00:27 +0000 Manifest this update: Wed 14 Oct 2026 12:00:27 +0000 Manifest next update: Thu 15 Oct 2026 12:00:27 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: P7CgJWwuxJbmPUbf06NOaH12gJaJ2Vmoitksq7ZRCVA=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 7: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 8: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 9: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 10: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 11: ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa (hash: 3nfAqDZ+jchkof/hQMbxPVQAHcDXX0FbrKywJk2nvzA=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 07:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3a:49:09:5a:bc:a9:06:85:9e:24:f6:73:83:07:d3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Oct 14 12:00:27 2026 GMT Not After : Oct 15 12:00:27 2026 GMT Subject: CN=ca71d4fa47774bbee27d509c9ec53938ea634e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:6d:b1:dc:e8:cd:78:78:ce:f8:f6:7e:2e: d9:60:99:de:55:d6:ed:f6:2a:6b:20:ba:d7:b4:ab: a2:7c:23:9f:54:9d:25:d6:c6:e3:88:9f:e6:1b:21: ab:9e:94:08:73:7c:98:b7:59:d1:5f:17:e9:51:76: 7e:d3:ee:dc:3f:14:94:35:d8:3b:5d:f5:a7:b5:7f: 15:a4:71:a4:2b:ba:e1:a6:1b:a0:ff:61:2b:cb:60: 1c:50:f6:41:90:89:43:65:9b:88:90:9e:f9:e0:40: a0:ff:35:4f:79:40:73:c9:e2:07:55:22:5f:6e:c8: 08:17:5b:d5:10:ea:28:fa:90:5e:ed:8a:59:26:fa: fb:d4:48:9d:97:8c:4e:49:ec:4a:34:75:8a:48:4a: fa:77:ac:2f:46:99:1c:f8:34:0d:58:5b:d5:b0:eb: 54:29:a5:e7:e5:5d:48:d0:8d:c0:c3:b5:50:a6:e0: 85:31:21:c1:44:79:6d:a5:ee:87:51:a6:1c:ee:35: df:90:be:27:28:da:2b:ee:24:dc:52:3f:31:a3:a7: e4:bf:68:b4:82:ee:c3:9a:17:ab:7c:07:b6:d8:7d: 72:d8:dc:8d:29:cb:79:e4:51:c4:da:58:d1:cd:92: 2c:b2:a1:18:db:9e:97:84:6b:c0:d1:84:f5:26:2b: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:71:D4:FA:47:77:4B:BE:E2:7D:50:9C:9E:C5:39:38:EA:63:4E:07 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b8:ab:50:7e:45:42:53:ed:34:0c:18:43:66:74:fb:1b:fc: 4b:11:61:4e:06:b6:42:e4:2f:3d:a3:0c:54:d6:2a:37:01:ba: dc:fc:85:05:db:5e:36:c8:30:50:69:f3:32:3c:dd:95:30:71: d5:04:bd:69:1f:a4:67:b0:dd:10:88:98:78:d0:a9:00:ae:4d: 39:eb:8b:60:dc:c5:80:b2:e6:35:82:95:f9:16:b0:40:e1:66: de:f0:55:82:ee:ce:b5:93:f3:c9:3f:00:76:87:92:93:16:14: 3e:0c:1a:e3:56:b7:cc:96:0b:07:75:89:9d:ab:a8:fc:56:95: a4:41:11:c0:42:a0:13:1e:e5:94:e2:61:a4:54:7e:49:25:1a: a9:39:4d:da:ba:1a:fb:c9:2f:8d:75:c6:8f:ee:89:68:1e:9b: 81:d7:e1:cc:0a:7e:27:a8:19:72:9c:f2:a4:33:08:5a:42:5a: bf:ed:aa:54:c6:af:51:1a:c1:04:65:c8:cc:51:91:a9:40:38: b3:c3:c6:1b:08:54:ce:cb:fa:c6:9a:26:d7:62:02:28:28:f1: 72:07:f6:8e:43:18:ff:1b:ae:48:1d:38:86:b0:03:ed:1d:49: bf:6c:44:b7:be:17:b5:04:19:1c:6f:78:b1:47:94:e3:4d:fc: 7e:d6:d4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE6SQlavKkGhZ4k9nODB9OuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYxMDE0MTIwMDI3WhcNMjYxMDE1MTIwMDI3WjAzMTEwLwYDVQQD EyhjYTcxZDRmYTQ3Nzc0YmJlZTI3ZDUwOWM5ZWM1MzkzOGVhNjM0ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ltsdzozXh4zvj2fi7ZYJneVdbt 9iprILrXtKuifCOfVJ0l1sbjiJ/mGyGrnpQIc3yYt1nRXxfpUXZ+0+7cPxSUNdg7 XfWntX8VpHGkK7rhphug/2Ery2AcUPZBkIlDZZuIkJ754ECg/zVPeUBzyeIHVSJf bsgIF1vVEOoo+pBe7YpZJvr71Eidl4xOSexKNHWKSEr6d6wvRpkc+DQNWFvVsOtU KaXn5V1I0I3Aw7VQpuCFMSHBRHltpe6HUaYc7jXfkL4nKNor7iTcUj8xo6fkv2i0 gu7DmherfAe22H1y2NyNKct55FHE2ljRzZIssqEY256XhGvA0YT1JisUuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpx1PpHd0u+4n1QnJ7FOTjqY04HMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbirUH5F QlPtNAwYQ2Z0+xv8SxFhTga2QuQvPaMMVNYqNwG63PyFBdteNsgwUGnzMjzdlTBx 1QS9aR+kZ7DdEIiYeNCpAK5NOeuLYNzFgLLmNYKV+RawQOFm3vBVgu7OtZPzyT8A doeSkxYUPgwa41a3zJYLB3WJnauo/FaVpEERwEKgEx7llOJhpFR+SSUaqTlN2roa +8kvjXXGj+6JaB6bgdfhzAp+J6gZcpzypDMIWkJav+2qVMavURrBBGXIzFGRqUA4 s8PGGwhUzsv6xpom12ICKCjxcgf2jkMY/xuuSB04hrAD7R1Jv2xEt74XtQQZHG94 sUeU4038ftbUHw== -----END CERTIFICATE-----Generated at Wed Oct 14 15:54:31 2026 by rpki-client