$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: nwM5nRC/F3ORVDIYQgH8RF/uMzQV4V/43o011B+J4d4= Subject key identifier: D0:45:74:97:9A:ED:79:FC:FA:9C:B6:AC:AB:EE:85:1E:A8:A8:21:29 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 01A118618A282546C57D84F9A5038286DA0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1A92 Signing time: Wed 07 Oct 2026 22:00:07 +0000 Manifest this update: Wed 07 Oct 2026 22:00:07 +0000 Manifest next update: Thu 08 Oct 2026 22:00:07 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: JUw7r+9m/OYd3T+NuhscrRkISwgwrWpD98aKJvuBVSs=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 18:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:18:61:8a:28:25:46:c5:7d:84:f9:a5:03:82:86:da:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Oct 7 22:00:07 2026 GMT Not After : Oct 8 22:00:07 2026 GMT Subject: CN=d04574979aed79fcfa9cb6acabee851ea8a82129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:47:a1:7b:12:33:fa:62:8d:2c:bb:31:66: e5:11:ce:bb:63:19:9b:17:37:75:fa:42:3f:86:b8: ca:3a:e8:29:cb:d2:a6:8b:e2:c6:0a:d3:79:16:11: 5b:38:ba:73:d9:3b:fb:52:75:03:88:7b:f1:a1:76: 99:9a:c9:ea:c3:8b:e9:da:64:4f:70:3b:47:41:a9: a3:84:7a:fb:04:92:15:01:37:08:2d:2f:ff:39:b7: e8:fd:a5:83:96:91:35:12:38:b5:34:e0:51:cd:aa: f9:e1:c5:bf:92:d8:5b:b9:2c:6d:b3:1d:90:e2:16: de:9c:1c:d8:a4:d4:05:2c:5d:8c:47:e3:9f:57:ef: 42:9b:88:ba:a6:42:44:e3:69:8f:d4:a1:64:b9:0d: ae:78:dd:b3:41:92:c0:e8:f8:e1:ba:bc:d2:66:81: 9d:59:0d:88:49:dd:24:7a:b8:1e:25:e0:1e:41:1e: 37:e8:0f:c4:a1:5e:68:e9:d7:f8:a4:9d:aa:32:76: 1e:a7:16:69:97:06:73:38:99:44:72:e1:de:ab:4f: 46:c5:cb:dd:3b:96:44:23:11:43:34:07:10:6c:8a: e8:4d:35:86:9a:3d:9b:2a:4a:38:f7:13:22:89:08: cd:8e:75:1e:db:72:69:70:48:1c:c8:1f:29:42:7c: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:45:74:97:9A:ED:79:FC:FA:9C:B6:AC:AB:EE:85:1E:A8:A8:21:29 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3c:8d:a8:91:20:af:fd:1f:df:19:2f:6e:ed:50:6f:aa:24: 7e:38:f6:cc:b7:06:1a:d0:43:27:99:be:38:25:79:82:1b:e7: 34:2b:83:2f:e8:ac:a0:bf:bd:0f:18:68:27:a1:8e:c0:46:67: 9b:a9:fe:4f:63:75:6b:f5:52:31:dd:fe:56:92:40:09:fe:a5: 74:90:80:55:34:85:56:62:c6:0c:26:93:c1:79:9c:68:cc:39: d2:ac:0e:a2:ed:11:f0:2a:e3:9a:4b:83:8a:9a:1a:1a:fc:9c: dc:5c:63:88:b5:03:a8:3b:48:5e:b2:18:54:c5:37:98:78:fd: 99:5b:e1:19:76:e1:e3:2b:40:74:4a:ce:74:2b:e7:48:e5:b5: f6:9f:af:6a:bf:3e:b9:4c:da:3d:e0:68:d6:3e:ee:84:4a:64: 29:3c:ec:ce:5a:93:43:55:95:6b:71:d2:bf:7a:56:9c:53:1d: d2:39:d7:7a:57:98:3b:3e:3e:79:25:5d:be:f7:bc:68:c6:f0: 4e:ab:63:52:54:94:d3:67:68:2e:ef:94:75:3a:d8:50:da:4e: e8:15:35:e7:34:64:bd:dd:0c:58:97:0e:e1:4d:5b:c6:73:03: 9e:40:68:56:08:27:90:32:de:84:09:d4:c3:92:42:57:c0:fd: 28:18:f2:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEYYYooJUbFfYT5pQOChtoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYxMDA3MjIwMDA3WhcNMjYxMDA4MjIwMDA3WjAzMTEwLwYDVQQD EyhkMDQ1NzQ5NzlhZWQ3OWZjZmE5Y2I2YWNhYmVlODUxZWE4YTgyMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkZHoXsSM/pijSy7MWblEc67Yxmb Fzd1+kI/hrjKOugpy9Kmi+LGCtN5FhFbOLpz2Tv7UnUDiHvxoXaZmsnqw4vp2mRP cDtHQamjhHr7BJIVATcILS//Obfo/aWDlpE1Eji1NOBRzar54cW/kthbuSxtsx2Q 4hbenBzYpNQFLF2MR+OfV+9Cm4i6pkJE42mP1KFkuQ2ueN2zQZLA6PjhurzSZoGd WQ2ISd0kergeJeAeQR436A/EoV5o6df4pJ2qMnYepxZplwZzOJlEcuHeq09Gxcvd O5ZEIxFDNAcQbIroTTWGmj2bKko49xMiiQjNjnUe23JpcEgcyB8pQnwSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBFdJea7Xn8+py2rKvuhR6oqCEpMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjyNqJEg r/0f3xkvbu1Qb6okfjj2zLcGGtBDJ5m+OCV5ghvnNCuDL+isoL+9DxhoJ6GOwEZn m6n+T2N1a/VSMd3+VpJACf6ldJCAVTSFVmLGDCaTwXmcaMw50qwOou0R8CrjmkuD ipoaGvyc3FxjiLUDqDtIXrIYVMU3mHj9mVvhGXbh4ytAdErOdCvnSOW19p+var8+ uUzaPeBo1j7uhEpkKTzszlqTQ1WVa3HSv3pWnFMd0jnXeleYOz4+eSVdvve8aMbw TqtjUlSU02doLu+UdTrYUNpO6BU15zRkvd0MWJcO4U1bxnMDnkBoVggnkDLehAnU w5JCV8D9KBjyaA== -----END CERTIFICATE-----Generated at Thu Oct 8 01:12:02 2026 by rpki-client