$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: DcrdiX4eBZnz6BR6GmGrVrFUeWHEjbAjHG+sB1o+XjE= Subject key identifier: AB:C2:9F:B3:AC:4D:68:D0:A9:F5:90:44:CF:01:BD:E0:66:73:F2:77 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019D37C0AB844E215B29854888613D728952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1327 Signing time: Sun 29 Mar 2026 04:01:06 +0000 Manifest this update: Sun 29 Mar 2026 04:01:06 +0000 Manifest next update: Mon 30 Mar 2026 04:01:06 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: BLUp50N1T3ptINIkxAVwdBovVXsqnNQU96BHvq6HqOA=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:ab:84:4e:21:5b:29:85:48:88:61:3d:72:89:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Mar 29 04:01:06 2026 GMT Not After : Mar 30 04:01:06 2026 GMT Subject: CN=abc29fb3ac4d68d0a9f59044cf01bde06673f277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:d1:0f:ba:c9:7b:51:66:ef:d2:da:62:fe: 45:0e:6f:34:15:6c:64:93:e2:28:d2:23:51:af:73: 56:82:20:7a:60:fe:68:c2:03:c9:89:8e:df:b3:2c: 36:67:ec:74:58:bf:39:cf:4e:18:33:18:8a:97:db: a3:00:d1:a3:35:34:63:f6:ac:7b:53:b4:e3:f8:0f: 58:c6:73:7c:fe:e9:c1:0f:7c:af:b0:53:95:2f:02: e6:c6:72:0e:62:81:2f:44:a0:e0:70:79:aa:f8:99: c1:ff:ae:62:19:65:64:23:07:4c:0a:b8:89:38:2e: 04:3c:d3:e2:b6:ec:c9:0d:0d:5d:db:52:d0:bb:ef: 8f:88:43:0b:ba:f0:eb:d0:c5:8c:8b:1b:68:87:78: 11:9e:86:4f:9b:df:1e:9c:e5:0c:47:21:67:45:74: 9e:be:c7:96:ea:b6:d9:8d:ca:09:ed:1d:c2:ee:8f: 5d:f3:b2:f9:11:68:4d:2a:99:97:8d:8b:9d:da:96: 02:d2:88:d7:e6:97:cb:45:5b:68:12:bb:f0:0e:19: 5a:20:e8:ed:b4:a1:93:76:6d:26:0f:38:3f:c5:c7: b1:73:7e:89:56:25:91:53:6f:19:d1:9a:70:88:48: e2:3c:1a:9e:cc:91:a2:f7:6a:1b:3b:18:f9:e6:bc: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:9F:B3:AC:4D:68:D0:A9:F5:90:44:CF:01:BD:E0:66:73:F2:77 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8d:92:87:24:85:4f:b7:05:4e:b3:05:17:bf:40:81:1e:ea: 18:d6:d0:83:73:98:e0:35:da:3b:13:15:5f:4c:57:9d:52:74: b9:e0:8c:d8:6e:ee:c5:39:b1:ed:56:8b:08:91:bf:6d:a7:90: 84:94:bc:d6:89:4d:a3:b8:0e:40:05:99:4b:c5:b9:bb:0d:ba: a8:92:2b:3c:24:bc:cc:8f:69:76:42:de:f1:56:1d:2e:62:74: a0:50:99:ea:0c:57:d5:2a:f7:0a:55:65:a9:e7:11:e4:ff:7d: 17:31:56:c0:2b:ec:ad:e8:7a:85:4a:4b:9f:18:a3:7f:12:71: 8d:62:e7:14:6e:7b:46:7b:7f:3b:b4:d1:30:2e:b8:eb:0e:de: 0e:65:f1:e7:b7:ed:a8:df:b6:09:75:4b:02:1a:0b:e1:c9:d6: 8c:51:ae:fa:60:9b:c3:4d:ff:99:0d:82:eb:92:09:44:18:95: c8:91:09:af:a4:09:73:78:63:0d:cc:82:3e:65:62:b6:a6:c4: 39:19:12:86:8b:1d:df:c1:f8:2e:ef:e5:94:64:91:42:5e:71: 3a:36:22:29:77:a9:89:e8:05:9c:a4:74:7a:eb:cd:01:4c:0a: 45:0f:02:fb:8e:9e:95:82:e8:4f:9e:76:9b:ed:2a:30:4a:10: 33:19:ce:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wKuETiFbKYVIiGE9colSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMzI5MDQwMTA2WhcNMjYwMzMwMDQwMTA2WjAzMTEwLwYDVQQD EyhhYmMyOWZiM2FjNGQ2OGQwYTlmNTkwNDRjZjAxYmRlMDY2NzNmMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQDRD7rJe1Fm79LaYv5FDm80FWxk k+Io0iNRr3NWgiB6YP5owgPJiY7fsyw2Z+x0WL85z04YMxiKl9ujANGjNTRj9qx7 U7Tj+A9YxnN8/unBD3yvsFOVLwLmxnIOYoEvRKDgcHmq+JnB/65iGWVkIwdMCriJ OC4EPNPituzJDQ1d21LQu++PiEMLuvDr0MWMixtoh3gRnoZPm98enOUMRyFnRXSe vseW6rbZjcoJ7R3C7o9d87L5EWhNKpmXjYud2pYC0ojX5pfLRVtoErvwDhlaIOjt tKGTdm0mDzg/xcexc36JViWRU28Z0ZpwiEjiPBqezJGi92obOxj55rxlZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvCn7OsTWjQqfWQRM8BveBmc/J3MB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio2ShySF T7cFTrMFF79AgR7qGNbQg3OY4DXaOxMVX0xXnVJ0ueCM2G7uxTmx7VaLCJG/baeQ hJS81olNo7gOQAWZS8W5uw26qJIrPCS8zI9pdkLe8VYdLmJ0oFCZ6gxX1Sr3ClVl qecR5P99FzFWwCvsreh6hUpLnxijfxJxjWLnFG57Rnt/O7TRMC646w7eDmXx57ft qN+2CXVLAhoL4cnWjFGu+mCbw03/mQ2C65IJRBiVyJEJr6QJc3hjDcyCPmVitqbE ORkShosd38H4Lu/llGSRQl5xOjYiKXepiegFnKR0euvNAUwKRQ8C+46elYLoT552 m+0qMEoQMxnOFg== -----END CERTIFICATE-----Generated at Sun Mar 29 14:04:29 2026 by rpki-client