$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: 3Nsc8ucAaCej7BihNKAotO7kF1aleOumYcD4dB1D9ik= Subject key identifier: 74:D2:F7:E9:69:3F:65:1A:E2:A1:F3:2C:5B:21:47:2C:52:2D:73:91 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019747E75A51F4B0F647747A1D4A60EB4626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1012 Signing time: Sat 07 Jun 2025 01:00:33 +0000 Manifest this update: Sat 07 Jun 2025 01:00:33 +0000 Manifest next update: Sun 08 Jun 2025 01:00:33 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: +Rgr51KPcYBy4OP3OTOJuPMwBx34fHAMPE2zCshdJCQ=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:5a:51:f4:b0:f6:47:74:7a:1d:4a:60:eb:46:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jun 7 01:00:33 2025 GMT Not After : Jun 8 01:00:33 2025 GMT Subject: CN=74d2f7e9693f651ae2a1f32c5b21472c522d7391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:d0:51:65:ab:f5:50:42:3a:1d:e4:ba:00: e4:e1:16:35:77:d6:f6:65:14:90:81:30:1e:88:1c: 30:6f:8e:fa:eb:f0:97:f0:82:c5:3a:4a:08:4a:93: 9a:e8:a9:ab:b2:0a:71:04:6b:39:f3:fd:78:96:d4: 46:75:49:0b:ba:1c:83:ed:fa:c1:d7:84:06:b3:14: df:80:6b:50:28:19:3f:e8:6e:08:83:57:58:22:1f: 46:f9:00:0c:a6:28:20:2c:2a:61:74:4d:1e:9a:4f: 5c:a8:0e:42:01:54:ac:93:34:7d:e6:65:9a:f7:63: 8f:73:f2:9d:54:27:52:65:a4:0c:68:e0:f4:48:63: e6:36:27:8a:d6:44:6f:65:14:2b:18:73:82:7a:d3: 38:f1:dc:79:ba:be:e1:68:4d:16:2c:ff:af:fa:c0: 3a:88:84:ab:ee:49:40:d6:c4:6c:3f:1e:6c:ac:72: fd:08:3e:04:27:72:82:4d:3e:b9:9f:d4:b8:79:ff: d2:fb:2d:cf:5a:71:03:6e:cb:fe:60:2c:f1:e7:48: 92:8e:9c:a8:b0:3d:8e:31:e2:d9:7d:d9:1b:ea:b2: 60:4e:b7:05:33:ba:d2:d6:56:11:15:e9:17:c5:bc: ab:9c:df:44:b5:50:12:42:61:cc:f5:de:55:1a:2e: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:F7:E9:69:3F:65:1A:E2:A1:F3:2C:5B:21:47:2C:52:2D:73:91 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7e:64:ce:bd:cf:2a:c0:8b:2c:be:7e:aa:78:12:80:97:a9: ce:56:ce:52:cb:75:62:12:75:5d:6f:b9:81:52:19:a5:92:e5: a1:78:32:3c:fa:e2:0a:24:d3:7b:4a:c0:a1:33:27:dc:d1:fa: 52:ec:a5:59:b8:27:83:3a:5a:ec:27:c3:fd:73:30:31:e8:04: e6:f4:2e:65:50:ec:b9:6e:d6:9e:ba:24:4e:9d:40:c3:6f:54: d5:23:03:da:42:a0:ce:0b:53:6a:9a:b0:15:54:6b:a9:0a:65: d2:36:b9:d8:8e:52:b3:e4:45:a3:44:2c:9e:32:82:57:fb:34: c8:cc:ca:aa:f7:79:15:10:eb:74:24:78:ca:3e:9f:16:35:20: ba:46:67:73:9e:e1:a7:16:98:b1:de:c6:41:dc:2e:1c:07:3b: 51:76:05:25:3f:4c:b5:b3:26:b5:cb:b1:d6:40:6b:b7:4f:47: 0a:1a:9e:a9:ef:1e:cb:df:17:c0:fb:ad:a6:2f:4b:a6:08:43: 7e:b0:5b:28:9e:d9:2b:9b:d9:29:c7:61:11:35:3a:18:b2:6e: 29:35:fd:99:45:12:47:eb:ac:33:00:9b:c8:0a:98:c2:ea:ad: ed:c3:07:2a:81:71:ff:3d:2d:28:c6:bd:d1:dc:d6:a9:ae:19: e6:09:79:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH51pR9LD2R3R6HUpg60YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUwNjA3MDEwMDMzWhcNMjUwNjA4MDEwMDMzWjAzMTEwLwYDVQQD Eyg3NGQyZjdlOTY5M2Y2NTFhZTJhMWYzMmM1YjIxNDcyYzUyMmQ3MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XLQUWWr9VBCOh3kugDk4RY1d9b2 ZRSQgTAeiBwwb4766/CX8ILFOkoISpOa6KmrsgpxBGs58/14ltRGdUkLuhyD7frB 14QGsxTfgGtQKBk/6G4Ig1dYIh9G+QAMpiggLCphdE0emk9cqA5CAVSskzR95mWa 92OPc/KdVCdSZaQMaOD0SGPmNieK1kRvZRQrGHOCetM48dx5ur7haE0WLP+v+sA6 iISr7klA1sRsPx5srHL9CD4EJ3KCTT65n9S4ef/S+y3PWnEDbsv+YCzx50iSjpyo sD2OMeLZfdkb6rJgTrcFM7rS1lYRFekXxbyrnN9EtVASQmHM9d5VGi5rnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTS9+lpP2Ua4qHzLFshRyxSLXORMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin5kzr3P KsCLLL5+qngSgJepzlbOUst1YhJ1XW+5gVIZpZLloXgyPPriCiTTe0rAoTMn3NH6 UuylWbgngzpa7CfD/XMwMegE5vQuZVDsuW7WnrokTp1Aw29U1SMD2kKgzgtTapqw FVRrqQpl0ja52I5Ss+RFo0QsnjKCV/s0yMzKqvd5FRDrdCR4yj6fFjUgukZnc57h pxaYsd7GQdwuHAc7UXYFJT9MtbMmtcux1kBrt09HChqeqe8ey98XwPutpi9LpghD frBbKJ7ZK5vZKcdhETU6GLJuKTX9mUUSR+usMwCbyAqYwuqt7cMHKoFx/z0tKMa9 0dzWqa4Z5gl5dw== -----END CERTIFICATE-----Generated at Sat Jun 7 09:37:04 2025 by rpki-client