$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: u2ZtAxgQSw/z6xSJ5WI7MO6KeAXkNZi3XtfE59EDtOU= Subject key identifier: BA:6D:28:F4:9F:0A:7A:D3:5D:F5:83:CA:91:44:15:62:13:65:AA:4F Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 0198868D1B6C470CBA5F8CB6556315816290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 10B7 Signing time: Thu 07 Aug 2025 22:00:51 +0000 Manifest this update: Thu 07 Aug 2025 22:00:51 +0000 Manifest next update: Fri 08 Aug 2025 22:00:51 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: 8ow2ct/wUDvewhUNCsZHxWrXD1e8dsJK9bkGol7fwJ8=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:86:8d:1b:6c:47:0c:ba:5f:8c:b6:55:63:15:81:62:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Aug 7 22:00:51 2025 GMT Not After : Aug 8 22:00:51 2025 GMT Subject: CN=ba6d28f49f0a7ad35df583ca914415621365aa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:11:04:30:b9:c4:60:5b:9f:5b:eb:eb:41: 04:0f:56:d1:6f:6f:cf:64:cc:f1:b8:91:ab:cb:6b: 4c:05:f9:c1:3f:52:a9:13:78:5f:a4:6e:46:70:9c: 6b:e2:d6:4c:83:02:c6:94:1f:5d:8b:5e:44:34:e8: 21:3a:34:e5:6a:5f:cc:7c:ba:77:3e:94:5c:2d:c1: bd:75:44:bc:de:78:6c:a6:2f:ac:39:d8:54:84:44: 3a:1d:9e:b8:34:fa:a8:1c:d1:4d:6a:2e:3d:49:94: 1c:68:92:aa:31:1e:43:74:62:46:3a:2a:4a:14:ea: c6:8d:eb:4f:82:37:ae:2c:b3:2d:26:39:07:24:9c: 5b:31:dc:f2:1f:5c:01:b9:dc:98:26:fd:9e:35:f4: b2:15:7a:42:e2:f0:65:7e:54:e9:67:b2:b6:e4:4e: cd:2e:bd:6c:06:3f:af:eb:33:1a:f5:38:61:60:26: f5:1b:7a:fa:54:53:36:13:a4:bb:7a:05:e4:8c:75: 35:fb:3b:ac:a4:1d:dd:28:30:2b:e5:5f:f7:80:54: 70:9f:0a:f1:60:66:70:98:cf:75:44:6e:63:42:ed: c4:46:d4:c9:e7:80:e0:2c:85:9d:32:57:c5:79:39: a6:54:36:af:47:93:8a:05:83:9c:a4:4a:a1:d2:2a: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:28:F4:9F:0A:7A:D3:5D:F5:83:CA:91:44:15:62:13:65:AA:4F X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:d2:28:a4:8b:2a:3d:06:0e:87:c3:d7:dc:30:a9:18:61: 0b:bf:97:7c:4b:06:ed:8f:4d:84:02:34:d7:69:c9:71:9c:d8: f4:19:24:12:05:ac:cf:54:cb:1a:b4:70:26:b5:e6:e1:19:94: 83:45:86:fd:4e:d0:76:35:0c:e5:c0:a1:0c:23:f8:39:54:e0: 37:77:e7:62:26:5a:52:d8:f0:82:bd:1b:cd:11:a4:bc:9b:c8: bb:54:67:c6:4c:45:3e:bc:81:13:85:96:e4:9e:30:bb:c9:47: 53:25:30:90:eb:51:7b:1f:cc:b1:c6:aa:65:aa:b9:46:53:0f: a9:40:fe:e6:b6:5b:0b:81:08:d1:56:9f:05:97:3c:17:4e:b0: 4a:04:25:da:01:19:37:e3:7e:54:ad:79:54:a2:fc:c7:a0:54: fd:b6:a7:1a:05:48:9d:8e:44:eb:a7:9f:31:33:77:75:44:73: 69:b8:d2:c8:d0:d5:66:75:fa:b0:d8:8d:80:b0:29:a0:28:6d: 1d:57:52:36:3d:09:9f:c0:d8:13:53:6a:87:cd:93:7f:39:b5: c0:72:38:a8:f5:52:3d:e9:c3:72:fd:a1:d7:92:62:41:ee:04: 37:54:ee:5c:93:75:36:46:4b:f0:f3:29:2e:79:df:9a:38:65: 91:86:d9:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiGjRtsRwy6X4y2VWMVgWKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUwODA3MjIwMDUxWhcNMjUwODA4MjIwMDUxWjAzMTEwLwYDVQQD EyhiYTZkMjhmNDlmMGE3YWQzNWRmNTgzY2E5MTQ0MTU2MjEzNjVhYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7IRBDC5xGBbn1vr60EED1bRb2/P ZMzxuJGry2tMBfnBP1KpE3hfpG5GcJxr4tZMgwLGlB9di15ENOghOjTlal/MfLp3 PpRcLcG9dUS83nhspi+sOdhUhEQ6HZ64NPqoHNFNai49SZQcaJKqMR5DdGJGOipK FOrGjetPgjeuLLMtJjkHJJxbMdzyH1wBudyYJv2eNfSyFXpC4vBlflTpZ7K25E7N Lr1sBj+v6zMa9ThhYCb1G3r6VFM2E6S7egXkjHU1+zuspB3dKDAr5V/3gFRwnwrx YGZwmM91RG5jQu3ERtTJ54DgLIWdMlfFeTmmVDavR5OKBYOcpEqh0ir4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLptKPSfCnrTXfWDypFEFWITZapPMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVTSKKSL Kj0GDofD19wwqRhhC7+XfEsG7Y9NhAI012nJcZzY9BkkEgWsz1TLGrRwJrXm4RmU g0WG/U7QdjUM5cChDCP4OVTgN3fnYiZaUtjwgr0bzRGkvJvIu1RnxkxFPryBE4WW 5J4wu8lHUyUwkOtRex/MscaqZaq5RlMPqUD+5rZbC4EI0VafBZc8F06wSgQl2gEZ N+N+VK15VKL8x6BU/banGgVInY5E66efMTN3dURzabjSyNDVZnX6sNiNgLApoCht HVdSNj0Jn8DYE1Nqh82Tfzm1wHI4qPVSPenDcv2h15JiQe4EN1TuXJN1NkZL8PMp LnnfmjhlkYbZNA== -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:55 2025 by rpki-client