$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: FXjHpDbW+A/SFKPIgnaho0xiW0xhEdih0rS7Uj/5tqU= Subject key identifier: 65:B5:5A:67:5F:2B:89:9E:75:6D:25:E6:0E:2B:BA:8C:72:0F:E3:10 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 01A0C85813B2240A22945CFE0C079EC6D9D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1502 Signing time: Tue 22 Sep 2026 09:00:10 +0000 Manifest this update: Tue 22 Sep 2026 09:00:10 +0000 Manifest next update: Wed 23 Sep 2026 09:00:10 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: MR55XeTVu31akCWj9bhQk9LFJ6sXFYDkP9IQU7SHuU4=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 7: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 8: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 9: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 10: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 11: ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa (hash: 3nfAqDZ+jchkof/hQMbxPVQAHcDXX0FbrKywJk2nvzA=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:58:13:b2:24:0a:22:94:5c:fe:0c:07:9e:c6:d9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Sep 22 09:00:10 2026 GMT Not After : Sep 23 09:00:10 2026 GMT Subject: CN=65b55a675f2b899e756d25e60e2bba8c720fe310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:63:dd:df:2d:3b:4f:d0:8d:49:68:3d:36: 2a:b5:5e:de:8a:aa:5b:01:f0:bc:df:1f:78:a1:89: a2:18:3d:15:4f:ad:44:71:04:40:8d:08:ba:88:ae: 01:4e:7e:34:49:19:9e:8a:fe:74:b8:a1:c7:07:eb: 92:6c:31:2c:c4:14:3a:9f:86:27:1d:fb:c8:de:97: 8e:cd:89:38:53:5f:24:c7:3e:83:94:af:5b:1c:d4: ff:ff:2f:ec:bc:5d:9d:a5:50:2f:5f:f9:9a:33:aa: cd:42:21:c9:b3:01:cc:97:46:ac:67:21:98:18:cf: 14:88:d7:35:5d:5f:66:ad:16:cc:63:74:ad:1d:01: 39:06:e6:bf:4c:a2:c3:c8:02:bf:cd:4a:a1:c1:ef: dc:e7:4f:73:45:08:b0:7f:c6:9f:81:e9:70:78:37: fe:f8:25:76:8e:5e:2e:bb:71:57:3f:12:99:31:14: 52:cb:6a:ac:99:b0:10:1d:09:3b:ad:f9:3d:17:36: 58:db:a3:c0:27:b2:13:b0:cd:52:a2:a3:c4:6d:4d: 88:5c:7c:a7:d5:b0:a1:ea:3f:78:45:6e:52:78:35: 37:15:98:33:15:2e:48:76:91:67:95:90:27:c6:ff: 7d:51:f2:5e:3e:9b:4d:5e:cf:04:ad:13:88:d1:4d: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:5A:67:5F:2B:89:9E:75:6D:25:E6:0E:2B:BA:8C:72:0F:E3:10 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4d:25:50:9d:ff:d0:a2:27:e3:cd:ae:8f:ef:8e:27:fc:0b: fa:25:a6:1b:ba:e9:72:65:68:06:56:83:83:a0:4f:40:38:d2: 0b:ae:4a:c0:fa:71:cd:fe:92:69:c8:47:74:c0:ca:b0:5e:77: 43:7c:d1:e0:c2:c9:fb:15:b4:88:3e:48:57:96:cb:a1:d2:31: d8:9f:a4:01:9a:d4:81:57:94:38:9d:80:06:ed:12:52:3d:e9: 2c:1c:4c:c6:60:2d:23:d8:ca:b7:e4:c6:fb:ad:55:9e:07:3c: bb:6d:be:39:13:28:2d:6a:69:f2:c3:ad:06:e7:4d:d6:dd:5a: fe:62:78:08:84:57:57:20:bc:ec:f7:70:f5:fa:1b:76:22:99: ea:76:4a:f4:37:9a:21:74:89:af:d8:68:14:33:97:c7:f7:7d: 0d:5b:6f:d9:a6:12:ce:a4:d6:42:b3:c3:3d:d5:60:75:a0:0c: 3f:8f:ab:8f:b4:98:3e:a9:95:12:07:16:95:42:8b:00:f6:cd: 7a:27:99:6f:9b:9c:4b:b7:63:82:5f:e6:e1:55:c8:ff:29:9d: 01:c3:27:ff:96:97:0b:89:af:3b:5d:f8:3d:49:dc:0c:18:fd: 06:2a:68:00:31:0b:e9:b5:d2:d4:be:d7:6d:78:0d:5d:30:c1: fa:fe:8d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIWBOyJAoilFz+DAeextnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwOTIyMDkwMDEwWhcNMjYwOTIzMDkwMDEwWjAzMTEwLwYDVQQD Eyg2NWI1NWE2NzVmMmI4OTllNzU2ZDI1ZTYwZTJiYmE4YzcyMGZlMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRj3d8tO0/QjUloPTYqtV7eiqpb AfC83x94oYmiGD0VT61EcQRAjQi6iK4BTn40SRmeiv50uKHHB+uSbDEsxBQ6n4Yn HfvI3peOzYk4U18kxz6DlK9bHNT//y/svF2dpVAvX/maM6rNQiHJswHMl0asZyGY GM8UiNc1XV9mrRbMY3StHQE5Bua/TKLDyAK/zUqhwe/c509zRQiwf8afgelweDf+ +CV2jl4uu3FXPxKZMRRSy2qsmbAQHQk7rfk9FzZY26PAJ7ITsM1SoqPEbU2IXHyn 1bCh6j94RW5SeDU3FZgzFS5IdpFnlZAnxv99UfJePptNXs8ErROI0U0f2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW1WmdfK4medW0l5g4ruoxyD+MQMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk0lUJ3/ 0KIn482uj++OJ/wL+iWmG7rpcmVoBlaDg6BPQDjSC65KwPpxzf6SachHdMDKsF53 Q3zR4MLJ+xW0iD5IV5bLodIx2J+kAZrUgVeUOJ2ABu0SUj3pLBxMxmAtI9jKt+TG +61Vngc8u22+ORMoLWpp8sOtBudN1t1a/mJ4CIRXVyC87Pdw9fobdiKZ6nZK9Dea IXSJr9hoFDOXx/d9DVtv2aYSzqTWQrPDPdVgdaAMP4+rj7SYPqmVEgcWlUKLAPbN eieZb5ucS7djgl/m4VXI/ymdAcMn/5aXC4mvO134PUncDBj9BipoADEL6bXS1L7X bXgNXTDB+v6NrQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:05:16 2026 by rpki-client