$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: PiLMxIL+UoB1RMGU2R36n3BCcQE4JmOmoVi4JNapKPI= Subject key identifier: 3D:E5:0F:36:70:9D:B8:6E:7B:C5:6F:0B:BB:43:36:8A:55:2D:B9:F8 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 01993B70012A8490641741975EF79FDFAD62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 167F Signing time: Fri 12 Sep 2025 01:00:19 +0000 Manifest this update: Fri 12 Sep 2025 01:00:19 +0000 Manifest next update: Sat 13 Sep 2025 01:00:19 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: x2utE/t0r2SHJtptbd6omO+txllMxHtGH3DS/cr4nuU=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 23:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:3b:70:01:2a:84:90:64:17:41:97:5e:f7:9f:df:ad:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Sep 12 01:00:19 2025 GMT Not After : Sep 13 01:00:19 2025 GMT Subject: CN=3de50f36709db86e7bc56f0bbb43368a552db9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:ce:2d:43:88:8d:87:20:83:7d:c8:b0:0a: ab:18:cb:e4:a8:21:79:53:07:9c:b1:d2:0f:de:cf: 18:ff:e5:48:f8:0c:a4:d5:02:19:73:4c:16:67:97: 80:af:df:d1:97:60:89:f1:12:b8:21:b3:8b:95:05: 0b:af:fe:d5:3c:c2:6b:64:5d:68:c5:d0:3d:28:af: 04:e2:fa:0d:96:1a:56:37:bd:82:56:6c:48:39:a8: 7f:5a:8c:12:52:97:73:6f:89:f4:5d:c2:9e:64:7d: b4:f5:d4:db:e1:7d:58:da:98:eb:f5:19:20:bc:07: 4a:5e:e1:ad:a1:2a:94:39:4c:c4:14:b5:e1:65:d3: 36:8a:38:a7:e0:72:f7:00:00:fa:3c:36:ad:20:bb: aa:c3:bd:ef:95:85:2f:c2:e5:07:8c:6d:36:4f:4e: 62:5e:cd:36:88:bf:9d:25:0c:e3:63:7f:aa:5c:50: 08:a8:f1:2d:1c:0e:6c:94:57:00:71:ee:11:33:9e: a1:54:7f:1b:e9:5a:24:10:15:34:51:b1:4f:56:04: 00:b4:71:2b:c1:0c:4c:f8:07:51:23:8e:63:96:15: 74:d6:57:97:7a:3a:02:3b:5b:ed:cb:6d:79:78:51: 3b:89:e6:05:e7:0f:df:e7:33:3a:2e:eb:f3:a0:28: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E5:0F:36:70:9D:B8:6E:7B:C5:6F:0B:BB:43:36:8A:55:2D:B9:F8 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d5:df:07:c8:43:23:c5:d9:42:37:36:70:ec:33:a4:ec:56: e9:72:2f:f6:d5:f4:d3:08:a4:61:28:b8:05:47:8f:6d:76:02: 8a:ed:9e:2a:d7:02:6f:20:60:d2:c4:74:8d:bc:d3:d0:c6:43: 1b:86:5c:97:60:97:d6:00:1e:ad:5a:bd:63:f7:6d:a1:2c:9a: 4b:c3:ad:25:8f:d4:8f:00:6a:16:3d:32:f4:e8:a4:95:46:62: 99:da:44:85:6f:2c:c1:44:55:8d:63:1a:bc:45:b6:7a:6a:f1: 91:89:b7:8a:09:81:61:15:76:d6:a4:0d:26:ed:63:55:14:ae: 09:d3:49:a7:9b:7d:9a:8e:d8:80:10:57:a4:ce:1a:cf:40:b8: 8d:ed:ad:5a:02:74:a3:84:c2:ac:68:0b:78:87:57:4a:17:88: 75:41:06:f0:4c:cd:85:90:e4:d0:3d:ff:92:25:57:c5:cc:29: 88:39:46:20:29:bc:2b:24:82:68:9c:83:06:f8:b3:8f:22:2c: f5:2d:ef:fc:38:32:3c:2c:e5:1a:f4:56:93:d4:82:0f:d6:17: df:a2:64:7c:75:54:35:34:bf:74:41:a2:c5:00:26:a9:8c:52: f7:62:b0:82:95:73:24:e3:47:b0:7e:fd:ed:cd:37:49:08:3f: c9:e2:03:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk7cAEqhJBkF0GXXvef361iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwOTEyMDEwMDE5WhcNMjUwOTEzMDEwMDE5WjAzMTEwLwYDVQQD EygzZGU1MGYzNjcwOWRiODZlN2JjNTZmMGJiYjQzMzY4YTU1MmRiOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSnOLUOIjYcgg33IsAqrGMvkqCF5 UwecsdIP3s8Y/+VI+Ayk1QIZc0wWZ5eAr9/Rl2CJ8RK4IbOLlQULr/7VPMJrZF1o xdA9KK8E4voNlhpWN72CVmxIOah/WowSUpdzb4n0XcKeZH209dTb4X1Y2pjr9Rkg vAdKXuGtoSqUOUzEFLXhZdM2ijin4HL3AAD6PDatILuqw73vlYUvwuUHjG02T05i Xs02iL+dJQzjY3+qXFAIqPEtHA5slFcAce4RM56hVH8b6VokEBU0UbFPVgQAtHEr wQxM+AdRI45jlhV01leXejoCO1vty215eFE7ieYF5w/f5zM6LuvzoCgvIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3lDzZwnbhue8VvC7tDNopVLbn4MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndXfB8hD I8XZQjc2cOwzpOxW6XIv9tX00wikYSi4BUePbXYCiu2eKtcCbyBg0sR0jbzT0MZD G4Zcl2CX1gAerVq9Y/dtoSyaS8OtJY/UjwBqFj0y9OiklUZimdpEhW8swURVjWMa vEW2emrxkYm3igmBYRV21qQNJu1jVRSuCdNJp5t9mo7YgBBXpM4az0C4je2tWgJ0 o4TCrGgLeIdXSheIdUEG8EzNhZDk0D3/kiVXxcwpiDlGICm8KySCaJyDBvizjyIs 9S3v/DgyPCzlGvRWk9SCD9YX36JkfHVUNTS/dEGixQAmqYxS92KwgpVzJONHsH79 7c03SQg/yeIDWQ== -----END CERTIFICATE-----Generated at Fri Sep 12 08:25:57 2025 by rpki-client