$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: 6dGTnUx6z1ew+IgDRmbOj7cdPCGuKiJmbtAgG2etnfI= Subject key identifier: 11:87:7F:ED:C0:EF:D5:F4:37:B1:6D:45:86:A0:8E:79:40:D1:88:F4 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019A27424A9C16F06D780162635802E88291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1190 Signing time: Mon 27 Oct 2025 20:00:47 +0000 Manifest this update: Mon 27 Oct 2025 20:00:47 +0000 Manifest next update: Tue 28 Oct 2025 20:00:47 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: GPyiTKBBhAtZ3k6K3EqskHtG6PjKodo/K3JlNM7yuFg=) 5: GNzsCq9UcoPEjNUJsHvqEaDTmhI.roa (hash: UUPKwITy6fppL/i4iIfPQtQ+oEwY++MmCUS8CWuHxoc=) 6: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 7: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 8: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 9: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:27:42:4a:9c:16:f0:6d:78:01:62:63:58:02:e8:82:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Oct 27 20:00:47 2025 GMT Not After : Oct 28 20:00:47 2025 GMT Subject: CN=11877fedc0efd5f437b16d4586a08e7940d188f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:d5:46:62:28:93:5a:05:84:2c:a6:12:3f: fb:6a:43:56:88:f0:a9:56:9d:b1:7c:fc:e7:59:2e: e8:a6:3e:87:72:1e:3a:a0:29:a8:10:1b:dc:c0:50: 9f:46:8d:80:23:a7:e5:06:a8:ac:8a:0a:ef:9b:e6: 50:6c:0a:75:bb:aa:57:74:b5:5e:09:5c:d7:75:cb: 74:7c:06:8e:76:97:4e:c8:e9:6e:bc:e6:3a:62:41: d5:11:14:63:22:93:14:09:60:31:05:db:03:33:fb: 19:c4:79:d2:08:11:39:ce:bc:ca:c3:68:5d:7d:9f: 48:44:a0:37:b6:86:cc:44:49:a3:0d:c8:1b:13:3d: 6c:0f:b6:4d:2d:7c:3a:2a:7d:fd:d6:4f:b5:63:9a: 9b:03:13:91:f7:b4:43:10:9b:8c:54:60:c4:d2:e5: 5b:bc:10:af:49:f2:d1:3c:7c:c8:bd:df:9e:d6:51: b4:d6:a5:b4:2d:cc:e8:c5:c5:34:87:5e:d6:93:54: e9:98:32:f4:c5:e5:39:aa:7c:61:7d:a4:52:db:fe: ab:02:8e:7c:0e:dc:39:44:c0:e7:71:2f:6e:7b:60: 20:6d:74:cf:04:75:f2:f7:e3:07:37:8b:2a:91:9c: d5:a8:f2:d3:13:88:1e:50:f7:6c:a2:61:60:12:17: be:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:7F:ED:C0:EF:D5:F4:37:B1:6D:45:86:A0:8E:79:40:D1:88:F4 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:52:f1:9a:d3:31:39:18:be:71:fa:34:da:18:1c:61:d5: 13:34:fb:37:2a:f1:4e:02:1b:70:c3:13:fc:60:14:59:04:10: c0:24:8f:8e:3f:5a:91:bf:b8:fb:6a:72:aa:9a:c8:14:56:8b: 2a:0f:c2:02:0a:bb:89:79:e8:7d:44:46:e7:f9:84:af:9d:ba: b3:1c:71:cb:90:75:5f:39:08:a1:fb:99:95:8c:d3:9f:79:0b: db:4a:cd:dc:0b:66:00:5a:d0:e2:ea:24:05:b6:5b:a8:ab:bd: 40:22:a3:51:35:83:55:4e:72:87:f8:dc:73:7e:06:60:ba:06: 28:9b:ad:00:55:7b:ff:c0:c7:ad:ae:83:c9:d9:af:45:98:2b: bf:f8:dc:05:f5:8f:17:99:6d:85:b2:e5:a7:b7:aa:d1:2f:10: cd:58:00:89:ab:1a:14:96:af:dc:53:9d:f2:18:98:9e:4c:d3: a2:63:d9:28:25:93:ce:eb:8a:15:13:04:78:2a:d0:19:25:a9: c9:f4:57:32:cd:b1:62:05:2c:49:eb:04:dd:cb:9d:76:8a:85: 1f:a9:18:77:2a:cd:61:d7:bb:1b:a3:5a:05:1a:3e:53:ab:3c: 7d:b7:67:b8:13:25:45:af:a9:47:2f:76:76:51:8e:31:6d:3a: cc:26:ae:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZonQkqcFvBteAFiY1gC6IKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUxMDI3MjAwMDQ3WhcNMjUxMDI4MjAwMDQ3WjAzMTEwLwYDVQQD EygxMTg3N2ZlZGMwZWZkNWY0MzdiMTZkNDU4NmEwOGU3OTQwZDE4OGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DXVRmIok1oFhCymEj/7akNWiPCp Vp2xfPznWS7opj6Hch46oCmoEBvcwFCfRo2AI6flBqisigrvm+ZQbAp1u6pXdLVe CVzXdct0fAaOdpdOyOluvOY6YkHVERRjIpMUCWAxBdsDM/sZxHnSCBE5zrzKw2hd fZ9IRKA3tobMREmjDcgbEz1sD7ZNLXw6Kn391k+1Y5qbAxOR97RDEJuMVGDE0uVb vBCvSfLRPHzIvd+e1lG01qW0LczoxcU0h17Wk1TpmDL0xeU5qnxhfaRS2/6rAo58 Dtw5RMDncS9ue2AgbXTPBHXy9+MHN4sqkZzVqPLTE4geUPdsomFgEhe+eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGHf+3A79X0N7FtRYagjnlA0Yj0MB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd1S8ZrT MTkYvnH6NNoYHGHVEzT7NyrxTgIbcMMT/GAUWQQQwCSPjj9akb+4+2pyqprIFFaL Kg/CAgq7iXnofURG5/mEr526sxxxy5B1XzkIofuZlYzTn3kL20rN3AtmAFrQ4uok BbZbqKu9QCKjUTWDVU5yh/jcc34GYLoGKJutAFV7/8DHra6DydmvRZgrv/jcBfWP F5lthbLlp7eq0S8QzVgAiasaFJav3FOd8hiYnkzTomPZKCWTzuuKFRMEeCrQGSWp yfRXMs2xYgUsSesE3cuddoqFH6kYdyrNYde7G6NaBRo+U6s8fbdnuBMlRa+pRy92 dlGOMW06zCauvQ== -----END CERTIFICATE-----Generated at Tue Oct 28 06:35:48 2025 by rpki-client