$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: 6shtv5ICLwXkY0PpqA19yQqdbcvrbU1C70CWUoVU5nE= Subject key identifier: FA:32:94:8E:38:7B:BC:E4:B1:2F:C1:A2:97:9C:E0:F0:6B:FC:CC:2D Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019F12D38D79691249ADEBDC907EAF069AC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1986 Signing time: Mon 29 Jun 2026 10:01:21 +0000 Manifest this update: Mon 29 Jun 2026 10:01:21 +0000 Manifest next update: Tue 30 Jun 2026 10:01:21 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: qAByCkx31Gj7n0J3PRQI7Ag00L8CWgFpYciDVE34IOo=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:d3:8d:79:69:12:49:ad:eb:dc:90:7e:af:06:9a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jun 29 10:01:21 2026 GMT Not After : Jun 30 10:01:21 2026 GMT Subject: CN=fa32948e387bbce4b12fc1a2979ce0f06bfccc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:24:69:f4:58:b3:25:6f:dc:68:67:45:59: 7c:3b:42:d4:4d:6f:f6:e5:3b:4f:5b:fb:cc:2f:9c: 52:3a:9d:ee:60:01:75:c3:26:5b:9c:b4:51:c6:82: 51:a8:8b:a3:51:c6:3f:41:57:20:d2:88:a3:09:48: d7:44:6c:13:7d:bc:bd:73:f0:58:a2:30:70:5d:cb: a8:ea:2e:2e:21:c7:2c:8b:09:ab:40:f3:0e:65:80: 4d:bb:73:23:1c:47:4f:81:7f:a7:e5:91:26:2f:b6: c2:2b:e5:5e:66:a4:4a:ef:8b:98:a9:87:4f:16:41: 54:02:e9:b0:77:e4:75:4b:fa:f4:df:36:d7:a7:a0: d3:4e:ea:3c:2f:2a:5c:e6:b7:ca:52:f8:b5:cf:16: 5f:06:94:29:a8:e8:8e:88:99:48:c7:51:6e:b2:08: 49:eb:20:85:8d:2b:04:43:30:54:39:f4:17:88:1b: c8:83:ce:12:db:9e:24:af:aa:58:02:cb:e6:ae:f4: c7:8e:e3:4f:79:1d:cf:5d:7e:2d:2d:e3:cc:a5:c0: 2c:ab:2a:62:27:c7:68:50:25:56:c5:0d:91:fe:b5: 9b:88:bf:db:f6:85:0a:93:a9:c1:a2:6d:4a:de:db: 6c:6c:87:87:26:4c:af:64:49:d8:f8:f0:e4:f3:2d: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:32:94:8E:38:7B:BC:E4:B1:2F:C1:A2:97:9C:E0:F0:6B:FC:CC:2D X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bc:41:04:02:9b:b6:73:c9:89:9e:10:ea:f6:93:5e:dd:4c: 65:9d:0a:48:fc:42:93:32:44:62:fc:0f:27:76:55:7e:ca:9a: 54:33:cf:66:4d:e3:0d:1c:a2:ff:31:c6:08:63:61:c4:ff:37: 9b:09:19:1b:ea:b1:7d:4e:21:fb:80:f1:36:47:33:5b:ef:6e: 80:f7:9d:8c:10:92:55:92:44:af:00:d1:7c:47:e9:b2:6c:93: 1a:5a:48:43:ea:b2:0d:8e:00:68:c1:fb:5a:ff:f4:f3:e7:55: c7:b2:a2:25:9a:03:df:54:5d:0d:0a:e1:6f:f4:1f:59:5e:6c: 84:52:57:1f:f4:28:2c:43:fc:99:43:3f:32:ec:cb:90:8f:b9: 0c:3c:33:93:a4:28:19:88:0f:ba:ec:27:27:47:35:63:10:1e: 4c:96:8a:de:76:27:8d:87:bd:a5:4d:90:59:ed:1e:03:34:cf: d0:02:16:87:d2:b4:df:c4:54:dc:b0:0a:2a:d6:1c:e2:2b:16: 05:ad:87:d4:1d:d9:2d:65:c5:fc:57:82:ac:e1:ca:33:cc:53: 2c:14:00:53:c9:c3:70:85:e9:be:20:bf:e1:1d:35:3e:98:3d: 05:75:e9:43:fe:a6:f3:87:2a:14:01:ca:85:37:ff:ef:67:d5: fd:23:13:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8S0415aRJJrevckH6vBprHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwNjI5MTAwMTIxWhcNMjYwNjMwMTAwMTIxWjAzMTEwLwYDVQQD EyhmYTMyOTQ4ZTM4N2JiY2U0YjEyZmMxYTI5NzljZTBmMDZiZmNjYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVEkafRYsyVv3GhnRVl8O0LUTW/2 5TtPW/vML5xSOp3uYAF1wyZbnLRRxoJRqIujUcY/QVcg0oijCUjXRGwTfby9c/BY ojBwXcuo6i4uIccsiwmrQPMOZYBNu3MjHEdPgX+n5ZEmL7bCK+VeZqRK74uYqYdP FkFUAumwd+R1S/r03zbXp6DTTuo8Lypc5rfKUvi1zxZfBpQpqOiOiJlIx1FusghJ 6yCFjSsEQzBUOfQXiBvIg84S254kr6pYAsvmrvTHjuNPeR3PXX4tLePMpcAsqypi J8doUCVWxQ2R/rWbiL/b9oUKk6nBom1K3ttsbIeHJkyvZEnY+PDk8y0RWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoylI44e7zksS/Bopec4PBr/MwtMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7xBBAKb tnPJiZ4Q6vaTXt1MZZ0KSPxCkzJEYvwPJ3ZVfsqaVDPPZk3jDRyi/zHGCGNhxP83 mwkZG+qxfU4h+4DxNkczW+9ugPedjBCSVZJErwDRfEfpsmyTGlpIQ+qyDY4AaMH7 Wv/08+dVx7KiJZoD31RdDQrhb/QfWV5shFJXH/QoLEP8mUM/MuzLkI+5DDwzk6Qo GYgPuuwnJ0c1YxAeTJaK3nYnjYe9pU2QWe0eAzTP0AIWh9K038RU3LAKKtYc4isW Ba2H1B3ZLWXF/FeCrOHKM8xTLBQAU8nDcIXpviC/4R01Ppg9BXXpQ/6m84cqFAHK hTf/72fV/SMTzA== -----END CERTIFICATE-----Generated at Mon Jun 29 15:43:36 2026 by rpki-client