$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: xtaTtPiidPhpzHs+7iL7u0cM7Aj6PK+EB9LdnJ5PPVI= Subject key identifier: DE:83:AD:10:DF:03:09:F0:4D:94:54:5C:F5:53:09:91:10:51:AB:9F Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019CAAC7203FCAFA4206B67C79443AEDB57C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 12DE Signing time: Sun 01 Mar 2026 19:01:42 +0000 Manifest this update: Sun 01 Mar 2026 19:01:42 +0000 Manifest next update: Mon 02 Mar 2026 19:01:42 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: r9xrN3C0zU+b323PrL4MLdLEfXwIi+dG54FWxLlE6KQ=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c7:20:3f:ca:fa:42:06:b6:7c:79:44:3a:ed:b5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Mar 1 19:01:42 2026 GMT Not After : Mar 2 19:01:42 2026 GMT Subject: CN=de83ad10df0309f04d94545cf55309911051ab9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:3d:d8:9e:53:01:59:4a:9b:7a:ac:14:53: af:66:be:1a:c6:52:d6:41:7a:69:cf:75:66:b4:47: 4c:e5:2e:d4:5a:a3:49:69:c3:9d:b5:43:f2:81:3c: 6b:42:b7:d3:0c:79:a9:79:0b:92:64:df:6e:d5:5a: de:3f:a1:22:09:1b:c4:7d:d3:52:31:c9:a7:c7:19: d8:b0:0b:30:50:4c:2b:13:79:98:c2:4a:4b:86:0a: 68:d8:d8:d1:ec:21:b7:e6:1c:ce:6e:e1:a2:0b:aa: 3a:c5:5a:16:9b:44:20:9d:67:ac:76:13:b1:b1:fc: 04:0d:b5:40:b5:26:7e:6c:bf:21:1a:6d:58:59:d9: b3:39:8f:25:c3:0a:f5:a3:30:67:78:8e:0c:b5:9e: 49:e9:b8:c9:7d:b6:2d:1f:04:2e:3d:d2:48:e7:88: 44:f3:c3:6f:b3:ce:51:83:52:c2:21:3a:ad:64:3e: 7d:94:0e:11:36:af:57:01:2e:f4:11:bf:0e:10:a6: 36:e9:db:f9:4a:47:53:ba:e6:1d:51:7b:52:bb:a9: fa:5e:ec:9d:2b:d6:b2:f9:64:f1:42:3d:9b:0f:ee: ee:df:24:da:4a:9c:5a:d2:e7:83:76:73:9c:d0:60: e0:45:94:e8:f8:be:35:66:b7:76:a6:21:f8:96:f2: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:AD:10:DF:03:09:F0:4D:94:54:5C:F5:53:09:91:10:51:AB:9F X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b3:fb:d3:7c:a6:6d:21:f9:1e:e4:81:db:73:96:c7:4d:24: d4:f9:c5:aa:50:0d:35:04:0b:f1:c5:54:4e:ff:e6:09:4f:11: 34:fe:aa:33:c3:c4:4e:71:97:89:4b:a7:6a:0e:d0:01:ab:b5: e0:1a:47:a2:98:d3:5a:ba:04:d2:c6:0a:f1:11:e7:f2:c8:7e: b4:ce:3b:59:1c:06:d2:55:ce:9c:7f:9e:d2:6a:44:4b:5b:9d: b2:9a:6d:8c:cf:9d:00:d2:42:ae:a2:2b:32:21:2a:b2:31:e9: 1b:e7:7c:ad:ed:94:5b:64:44:44:fe:86:bb:c2:16:1c:6f:8b: 9e:3b:04:fc:fd:d7:28:a8:ff:3e:f5:2f:8a:c5:37:c9:e2:0f: 47:c9:31:83:89:96:aa:a6:d6:b3:ee:da:55:81:3c:36:d5:c5: 39:fe:3f:31:05:e2:24:8f:2d:e4:29:44:91:47:e9:ad:f0:ed: b7:6e:35:cc:06:a2:6e:70:10:79:62:fa:3e:7f:d6:b9:aa:1d: 8e:fd:1d:8f:d4:05:25:d6:8d:9c:72:a5:52:ec:f3:99:34:54: 46:06:b1:68:31:12:e0:da:7b:93:e7:f5:8a:cd:77:9f:76:b4: 1d:38:4f:1d:6e:38:32:3b:2d:79:ff:df:68:ba:23:79:09:19: 60:45:af:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxyA/yvpCBrZ8eUQ67bV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMzAxMTkwMTQyWhcNMjYwMzAyMTkwMTQyWjAzMTEwLwYDVQQD EyhkZTgzYWQxMGRmMDMwOWYwNGQ5NDU0NWNmNTUzMDk5MTEwNTFhYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz092J5TAVlKm3qsFFOvZr4axlLW QXppz3VmtEdM5S7UWqNJacOdtUPygTxrQrfTDHmpeQuSZN9u1VreP6EiCRvEfdNS McmnxxnYsAswUEwrE3mYwkpLhgpo2NjR7CG35hzObuGiC6o6xVoWm0QgnWesdhOx sfwEDbVAtSZ+bL8hGm1YWdmzOY8lwwr1ozBneI4MtZ5J6bjJfbYtHwQuPdJI54hE 88Nvs85Rg1LCITqtZD59lA4RNq9XAS70Eb8OEKY26dv5SkdTuuYdUXtSu6n6Xuyd K9ay+WTxQj2bD+7u3yTaSpxa0ueDdnOc0GDgRZTo+L41Zrd2piH4lvLSyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6DrRDfAwnwTZRUXPVTCZEQUaufMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrP703ym bSH5HuSB23OWx00k1PnFqlANNQQL8cVUTv/mCU8RNP6qM8PETnGXiUunag7QAau1 4BpHopjTWroE0sYK8RHn8sh+tM47WRwG0lXOnH+e0mpES1udspptjM+dANJCrqIr MiEqsjHpG+d8re2UW2RERP6Gu8IWHG+LnjsE/P3XKKj/PvUvisU3yeIPR8kxg4mW qqbWs+7aVYE8NtXFOf4/MQXiJI8t5ClEkUfprfDtt241zAaibnAQeWL6Pn/Wuaod jv0dj9QFJdaNnHKlUuzzmTRURgaxaDES4Np7k+f1is13n3a0HThPHW44Mjstef/f aLojeQkZYEWvqg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:26:52 2026 by rpki-client