$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: 2gCrP34IBbVXudZ22HRqgO2zpaUMt2+6oJuHSOkMMMQ= Subject key identifier: 37:B6:5E:AC:3A:A8:FA:80:A0:4F:C9:95:2A:72:C0:96:A1:8B:7C:05 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 01974742DC4B7C3D80FE9BBB76AF61FD771F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 157C Signing time: Fri 06 Jun 2025 22:00:53 +0000 Manifest this update: Fri 06 Jun 2025 22:00:53 +0000 Manifest next update: Sat 07 Jun 2025 22:00:53 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: 4EKcdh0Sqh8i2kmtO5Py7/ZQiz6T1odr5YxO/a9dNEs=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:42:dc:4b:7c:3d:80:fe:9b:bb:76:af:61:fd:77:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jun 6 22:00:53 2025 GMT Not After : Jun 7 22:00:53 2025 GMT Subject: CN=37b65eac3aa8fa80a04fc9952a72c096a18b7c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:91:c9:a8:75:88:23:fe:c9:3d:76:d8:ae: 19:75:26:18:79:73:84:71:a2:f5:ef:e2:bb:b5:cd: 2b:42:3a:5b:f2:37:a7:68:8a:4e:32:eb:36:13:7b: 7b:f5:6a:d3:4e:8f:4b:9f:0b:24:0d:91:ba:a1:9f: 84:a1:dd:64:0b:02:58:b4:ff:5c:62:3b:58:e4:3f: 46:20:3f:05:46:b9:d7:f7:5f:40:34:c9:93:28:7a: 23:08:4b:82:1d:03:6b:40:65:18:f7:8c:44:19:cd: 55:e9:8c:7c:92:38:7d:5c:2c:cf:47:b3:b0:1d:b0: ba:e3:e8:f9:e4:a1:69:1e:c5:12:f6:25:25:44:70: a9:c8:2c:70:be:7e:97:ef:01:d6:8a:ac:e4:24:6f: 05:b2:77:98:75:cf:0a:e6:8e:50:c7:b7:bd:b6:5b: 87:43:d5:a2:87:c6:9d:6f:7b:d1:9c:9d:92:45:21: 7a:b9:8c:09:5a:86:0d:b9:a3:3c:cc:74:50:40:5f: b0:79:16:93:0d:6b:28:b3:1a:9d:d0:41:93:22:7e: e4:9f:40:66:a2:07:db:ce:40:4f:41:db:54:82:22: a9:b0:44:b0:df:74:8b:27:46:e0:db:84:68:bf:ef: d2:69:e3:9b:59:8e:b0:9e:27:57:7f:ea:86:b5:3b: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:5E:AC:3A:A8:FA:80:A0:4F:C9:95:2A:72:C0:96:A1:8B:7C:05 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1a:72:5c:8c:03:3d:a2:da:af:12:54:2b:00:b4:05:78:fd: 9d:59:71:b6:6b:3d:8c:62:b1:90:4e:ff:4c:a7:72:a3:62:3f: 6e:04:44:b5:94:3e:69:89:84:85:fe:5a:1d:28:17:a7:9f:7f: 33:80:3a:67:56:ba:b1:41:43:f3:6b:f5:8e:00:f9:49:51:b4: e4:b4:db:ec:83:ec:be:d8:87:73:a2:f4:bc:d4:cd:e1:bc:24: 16:6b:b5:de:38:2b:ee:5e:fb:99:ba:c6:ff:b1:db:0e:7b:ca: 6c:94:78:cf:b8:ae:dd:57:ee:54:69:60:90:a7:03:a3:d8:3d: 5b:b6:c1:85:9d:87:b7:26:3f:d6:d8:91:b2:9f:66:34:e7:5b: 43:3b:4a:a1:b2:b6:fa:40:28:77:a5:6b:36:68:1f:a8:59:cb: c1:d1:e7:82:b5:58:ee:bc:72:70:02:4a:ca:af:71:3c:b5:19: e1:e9:6d:b8:64:d3:92:52:24:c0:5b:b0:43:d6:ee:f1:54:20: 3f:b9:50:d7:72:d3:d3:b3:c5:28:a1:63:2e:75:c3:4b:1d:eb: c1:be:08:8f:68:f6:69:ec:de:49:45:98:5c:8c:62:27:96:5d: b1:96:e6:87:3b:a3:ac:03:56:fe:a8:73:b0:f2:6c:bd:1f:56: 7d:c5:ec:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHQtxLfD2A/pu7dq9h/XcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwNjA2MjIwMDUzWhcNMjUwNjA3MjIwMDUzWjAzMTEwLwYDVQQD EygzN2I2NWVhYzNhYThmYTgwYTA0ZmM5OTUyYTcyYzA5NmExOGI3YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskaRyah1iCP+yT122K4ZdSYYeXOE caL17+K7tc0rQjpb8jenaIpOMus2E3t79WrTTo9LnwskDZG6oZ+Eod1kCwJYtP9c YjtY5D9GID8FRrnX919ANMmTKHojCEuCHQNrQGUY94xEGc1V6Yx8kjh9XCzPR7Ow HbC64+j55KFpHsUS9iUlRHCpyCxwvn6X7wHWiqzkJG8FsneYdc8K5o5Qx7e9tluH Q9Wih8adb3vRnJ2SRSF6uYwJWoYNuaM8zHRQQF+weRaTDWsosxqd0EGTIn7kn0Bm ogfbzkBPQdtUgiKpsESw33SLJ0bg24Rov+/SaeObWY6wnidXf+qGtTtscQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe2Xqw6qPqAoE/JlSpywJahi3wFMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRpyXIwD PaLarxJUKwC0BXj9nVlxtms9jGKxkE7/TKdyo2I/bgREtZQ+aYmEhf5aHSgXp59/ M4A6Z1a6sUFD82v1jgD5SVG05LTb7IPsvtiHc6L0vNTN4bwkFmu13jgr7l77mbrG /7HbDnvKbJR4z7iu3VfuVGlgkKcDo9g9W7bBhZ2HtyY/1tiRsp9mNOdbQztKobK2 +kAod6VrNmgfqFnLwdHngrVY7rxycAJKyq9xPLUZ4eltuGTTklIkwFuwQ9bu8VQg P7lQ13LT07PFKKFjLnXDSx3rwb4Ij2j2aezeSUWYXIxiJ5ZdsZbmhzujrANW/qhz sPJsvR9WfcXsBQ== -----END CERTIFICATE-----Generated at Sat Jun 7 01:16:26 2025 by rpki-client