$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: vNJdxd7Rcin4kq23VLU6VKUPJZaIILofBHQ7HNKYfPg= Subject key identifier: 72:E6:EB:0C:6E:7D:90:AD:DF:CE:77:A7:42:BD:8A:74:C6:C7:89:8E Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019E2926CB9EFA9E206AA0EB6E4C2DEEFA4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 190D Signing time: Fri 15 May 2026 01:01:08 +0000 Manifest this update: Fri 15 May 2026 01:01:08 +0000 Manifest next update: Sat 16 May 2026 01:01:08 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: oErrtKAJRwRz+hint9g82BBEVdwAPH7pCk4x0yo9Y1A=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:26:cb:9e:fa:9e:20:6a:a0:eb:6e:4c:2d:ee:fa:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: May 15 01:01:08 2026 GMT Not After : May 16 01:01:08 2026 GMT Subject: CN=72e6eb0c6e7d90addfce77a742bd8a74c6c7898e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:8b:e8:a1:fd:71:13:f1:a5:8a:a1:7e:1e: 13:6b:83:a4:83:29:ec:c0:4e:88:26:6d:69:c4:d8: c5:38:29:17:f6:55:62:9f:e4:4a:b3:e1:ef:d7:72: d0:9c:c6:d6:55:b1:fe:56:8d:72:39:82:16:36:8d: c4:b7:e0:95:32:f5:64:9f:6d:72:39:0f:6a:02:be: f4:33:ec:e1:27:14:de:76:78:bd:c6:a9:31:19:56: 86:b9:3e:1a:6e:0c:6f:6e:f0:58:ad:e2:ca:06:b2: 17:07:07:27:5f:e8:42:ec:b5:1d:e4:28:68:a9:4b: 5c:08:56:9c:9a:d5:1c:61:8c:d1:5e:f5:3e:f4:a1: 83:a6:87:eb:b5:f7:ba:e0:4f:4e:d1:fd:5c:67:5a: d1:97:89:c3:aa:48:86:de:9e:ad:39:8d:1b:80:ca: a8:1c:a3:30:ff:ae:77:dc:d4:a2:96:fb:1e:ec:d9: 8c:d2:95:84:bb:82:89:4a:b1:7f:69:11:c1:ac:40: bb:dc:b1:fe:b3:9e:6c:71:bf:d6:25:74:8f:5d:75: 16:c9:ce:ca:c4:be:a8:79:40:f7:e9:2a:bf:e5:f7: 89:68:24:81:10:ba:8c:78:29:d9:4d:04:bf:fa:4c: 03:5c:79:7f:a5:c7:a5:2f:2e:51:9d:da:3b:3e:5b: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E6:EB:0C:6E:7D:90:AD:DF:CE:77:A7:42:BD:8A:74:C6:C7:89:8E X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ba:98:ad:46:48:7c:c5:2e:c7:89:bd:43:ee:f4:98:20:46: d8:c7:8f:74:b8:2a:eb:5e:1c:91:d3:23:9b:7e:25:fc:1d:58: a8:8e:7b:48:6b:23:dd:95:0c:62:1e:c0:f5:6b:46:f7:0a:87: f2:19:9a:3e:f6:b8:01:f8:45:12:25:eb:25:de:00:ae:2a:8d: 45:c9:a2:14:23:79:4a:71:9c:47:dd:85:34:eb:60:25:83:6a: a0:9b:07:ea:c6:c7:fe:62:d0:8f:db:2f:2e:bb:67:5b:b2:74: 41:88:11:25:66:e5:fa:70:72:40:87:97:c9:d5:54:b8:34:c6: 22:e3:92:2c:ba:89:0a:9a:cb:ae:ff:aa:a2:b5:42:f7:b3:e9: 41:54:16:46:1d:63:e1:da:05:54:82:b0:77:74:17:ca:00:71: e7:38:20:a1:41:27:ef:8c:b9:bb:4b:bc:66:0d:3b:ab:17:50: cd:72:8f:46:35:9c:e0:bc:32:1f:31:4d:58:45:49:4b:6c:e2: ac:db:15:7b:84:3e:27:07:32:19:92:9d:d2:6f:67:1d:9b:81: af:99:ee:e4:7f:70:0e:ef:4b:fc:c2:05:fd:0e:a0:4a:42:0c: a9:43:2c:5d:43:17:e6:66:66:88:d3:99:3d:a9:6f:c6:2e:ed: 5e:46:06:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4pJsue+p4gaqDrbkwt7vpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwNTE1MDEwMTA4WhcNMjYwNTE2MDEwMTA4WjAzMTEwLwYDVQQD Eyg3MmU2ZWIwYzZlN2Q5MGFkZGZjZTc3YTc0MmJkOGE3NGM2Yzc4OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+qL6KH9cRPxpYqhfh4Ta4Okgyns wE6IJm1pxNjFOCkX9lVin+RKs+Hv13LQnMbWVbH+Vo1yOYIWNo3Et+CVMvVkn21y OQ9qAr70M+zhJxTedni9xqkxGVaGuT4abgxvbvBYreLKBrIXBwcnX+hC7LUd5Cho qUtcCFacmtUcYYzRXvU+9KGDpofrtfe64E9O0f1cZ1rRl4nDqkiG3p6tOY0bgMqo HKMw/6533NSilvse7NmM0pWEu4KJSrF/aRHBrEC73LH+s55scb/WJXSPXXUWyc7K xL6oeUD36Sq/5feJaCSBELqMeCnZTQS/+kwDXHl/pcelLy5Rndo7Plu46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLm6wxufZCt3853p0K9inTGx4mOMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabqYrUZI fMUux4m9Q+70mCBG2MePdLgq614ckdMjm34l/B1YqI57SGsj3ZUMYh7A9WtG9wqH 8hmaPva4AfhFEiXrJd4AriqNRcmiFCN5SnGcR92FNOtgJYNqoJsH6sbH/mLQj9sv LrtnW7J0QYgRJWbl+nByQIeXydVUuDTGIuOSLLqJCprLrv+qorVC97PpQVQWRh1j 4doFVIKwd3QXygBx5zggoUEn74y5u0u8Zg07qxdQzXKPRjWc4LwyHzFNWEVJS2zi rNsVe4Q+JwcyGZKd0m9nHZuBr5nu5H9wDu9L/MIF/Q6gSkIMqUMsXUMX5mZmiNOZ Palvxi7tXkYGfQ== -----END CERTIFICATE-----Generated at Fri May 15 11:15:58 2026 by rpki-client