$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: 4NarVDFbyzEgsr02QHwVvNHxI1YxoPkCgezZDcVQx+A= Subject key identifier: 7A:F5:70:8D:D4:2C:59:7F:D3:F1:E8:E4:B4:9E:3A:3D:7A:E2:A3:14 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019F12D3B38C6D5461E650CE387759A8B8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 141D Signing time: Mon 29 Jun 2026 10:01:31 +0000 Manifest this update: Mon 29 Jun 2026 10:01:31 +0000 Manifest next update: Tue 30 Jun 2026 10:01:31 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: afElSrDxTMcUcMDzYqvhXsXR+rW28dyCitJB7AKYyJk=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:d3:b3:8c:6d:54:61:e6:50:ce:38:77:59:a8:b8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jun 29 10:01:31 2026 GMT Not After : Jun 30 10:01:31 2026 GMT Subject: CN=7af5708dd42c597fd3f1e8e4b49e3a3d7ae2a314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:87:76:9c:1e:8e:fd:59:ad:80:bb:d2:57:5c: 53:c6:80:90:6e:c4:ef:88:3b:62:e2:c7:fc:73:95: ed:5a:e5:1c:77:42:fa:e4:0a:6a:47:68:7f:71:ca: fb:f3:cf:b5:d9:f4:cc:2a:4b:0a:f4:c7:28:0c:32: ac:3a:dc:07:de:91:fa:88:7e:ee:b0:a4:9a:9f:5a: e7:a9:62:72:79:f5:30:f1:8d:5a:29:e6:0a:94:35: 3d:d0:93:45:c4:05:41:8d:83:73:1d:4b:f7:75:83: 74:bd:04:1e:c4:2f:1b:85:7c:ae:a7:b4:ee:ac:55: b7:64:a7:dc:1b:5e:55:c8:d9:9e:25:cf:e9:b1:6d: d3:96:f6:df:94:15:e3:eb:8e:75:ab:0a:11:39:fd: 92:9c:14:9e:fd:e6:af:9a:c6:d4:06:0f:27:af:ec: c4:33:65:6e:70:67:3e:ef:b1:e8:22:90:53:11:3a: ca:a1:e6:64:0e:98:e4:30:e8:7c:89:b1:d8:5d:e3: c6:58:0b:c8:b1:00:8a:27:7d:97:09:04:bf:f5:6a: b9:43:6e:9f:60:65:ff:8f:29:4d:12:ce:3e:6d:f8: d7:72:46:85:61:7b:22:85:83:da:42:d3:a5:88:d4: db:76:dd:32:2f:8e:57:54:11:d8:20:4b:aa:d9:1c: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:70:8D:D4:2C:59:7F:D3:F1:E8:E4:B4:9E:3A:3D:7A:E2:A3:14 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:79:50:61:4c:f8:3c:9f:ba:ec:37:5d:2d:a7:cf:10:64:da: c2:0b:c1:0a:c3:41:b8:7b:a2:c6:fe:5e:0c:8d:aa:83:d4:fe: 14:33:ad:d1:64:d0:88:91:50:b4:17:09:bf:0b:2c:ec:dd:ed: 90:6f:f9:87:ad:e7:ef:b1:c4:91:46:71:ca:f3:1a:e7:d6:39: 1d:e3:75:dc:42:fc:02:ce:94:f8:09:88:d7:c1:95:2e:07:a2: 9a:b0:f7:e2:42:f3:0c:fa:8d:34:39:c5:3b:1a:63:4a:7e:01: 43:5f:d4:b2:d9:c2:fc:f6:f1:54:7c:5e:c0:cf:96:53:75:8d: e4:48:bf:7a:81:54:da:9a:b3:f6:b3:5a:a6:5a:36:e1:92:b3: ee:00:96:9f:2b:05:dd:be:19:cd:c6:98:4f:d4:57:12:14:bf: 1f:b6:b2:e4:0a:3b:eb:a7:62:a1:d4:d7:d6:2b:0a:28:38:2f: 02:b5:59:8e:12:e2:6b:2e:39:2a:e8:14:09:5c:f0:bc:fc:27: 98:2c:3d:8e:3d:3f:57:08:b2:f8:93:43:be:f9:94:4f:b0:53: da:57:b7:41:f7:82:ca:b7:0f:2d:48:25:55:2d:41:8b:88:ca: b8:fe:df:41:f9:a7:e5:f0:46:20:f6:2f:5f:ca:7e:ca:6c:30: 3c:2a:09:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8S07OMbVRh5lDOOHdZqLjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwNjI5MTAwMTMxWhcNMjYwNjMwMTAwMTMxWjAzMTEwLwYDVQQD Eyg3YWY1NzA4ZGQ0MmM1OTdmZDNmMWU4ZTRiNDllM2EzZDdhZTJhMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Yd2nB6O/VmtgLvSV1xTxoCQbsTv iDti4sf8c5XtWuUcd0L65ApqR2h/ccr788+12fTMKksK9McoDDKsOtwH3pH6iH7u sKSan1rnqWJyefUw8Y1aKeYKlDU90JNFxAVBjYNzHUv3dYN0vQQexC8bhXyup7Tu rFW3ZKfcG15VyNmeJc/psW3TlvbflBXj6451qwoROf2SnBSe/eavmsbUBg8nr+zE M2VucGc+77HoIpBTETrKoeZkDpjkMOh8ibHYXePGWAvIsQCKJ32XCQS/9Wq5Q26f YGX/jylNEs4+bfjXckaFYXsihYPaQtOliNTbdt0yL45XVBHYIEuq2RzjFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr1cI3ULFl/0/Ho5LSeOj164qMUMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHlQYUz4 PJ+67DddLafPEGTawgvBCsNBuHuixv5eDI2qg9T+FDOt0WTQiJFQtBcJvwss7N3t kG/5h63n77HEkUZxyvMa59Y5HeN13EL8As6U+AmI18GVLgeimrD34kLzDPqNNDnF OxpjSn4BQ1/UstnC/PbxVHxewM+WU3WN5Ei/eoFU2pqz9rNaplo24ZKz7gCWnysF 3b4ZzcaYT9RXEhS/H7ay5Ao766diodTX1isKKDgvArVZjhLiay45KugUCVzwvPwn mCw9jj0/Vwiy+JNDvvmUT7BT2le3QfeCyrcPLUglVS1Bi4jKuP7fQfmn5fBGIPYv X8p+ymwwPCoJsQ== -----END CERTIFICATE-----Generated at Mon Jun 29 14:46:16 2026 by rpki-client