$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: qnWbQ0fKQwIBfqKh91b8yVjwrv0nKWk4iA87u08DC2Y= Subject key identifier: 4E:20:5A:DB:3F:70:8F:EF:5E:C4:15:7B:F5:4A:1B:0A:9E:44:F0:F7 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019D9850582C659C3F0B0C1CCEC9906BDA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1359 Signing time: Thu 16 Apr 2026 22:01:35 +0000 Manifest this update: Thu 16 Apr 2026 22:01:35 +0000 Manifest next update: Fri 17 Apr 2026 22:01:35 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: fi1Smm9zy6FfGL+Ws53lcOvSHVs8+7Sr7w4Jm64D/xs=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:50:58:2c:65:9c:3f:0b:0c:1c:ce:c9:90:6b:da:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Apr 16 22:01:35 2026 GMT Not After : Apr 17 22:01:35 2026 GMT Subject: CN=4e205adb3f708fef5ec4157bf54a1b0a9e44f0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:f7:92:fb:d8:77:ca:e4:ad:a2:3a:21:67: a0:82:79:b2:bf:ce:34:fd:66:f0:96:07:36:b5:2c: 9f:fe:93:9f:ea:33:89:fe:dd:b5:85:fa:62:81:15: b2:cd:d1:e7:e8:55:02:bd:55:25:77:ed:c7:1a:3c: 99:52:54:17:ba:fe:c3:6c:98:f3:c0:65:63:b0:79: 1a:2b:10:59:58:a6:53:bb:8d:80:b6:be:5e:75:e4: ed:09:7e:29:ab:61:30:5e:f4:f5:16:f1:5a:67:d9: 7e:29:a9:1a:7a:66:ed:d2:d9:bb:6d:be:3b:9f:ef: 60:b7:8f:44:92:35:3d:35:36:22:40:59:f1:43:88: 5a:83:2e:99:a4:b6:5c:66:dc:49:c7:c5:33:97:eb: 4e:2f:ce:7d:5b:d8:be:a2:a3:f8:39:1b:bf:c1:d5: d4:1a:33:0e:eb:20:bf:04:6c:c3:c9:08:03:e8:58: 7d:25:06:12:9e:24:93:00:2b:b6:67:3b:97:60:e7: 1c:1c:f4:1c:ed:ac:90:e5:38:74:f1:3d:82:ed:df: c6:1e:66:65:8d:17:f2:72:4f:1c:b3:db:ca:a3:35: ed:00:76:f3:91:4c:66:56:16:a7:f4:72:e4:ec:b7: 07:d1:70:33:74:8f:c0:0a:c3:df:88:9b:3a:dc:83: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:20:5A:DB:3F:70:8F:EF:5E:C4:15:7B:F5:4A:1B:0A:9E:44:F0:F7 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:95:24:03:df:b7:4a:02:15:2f:b3:e1:c1:4e:35:0e:56: dd:a6:87:37:c5:bd:7f:d1:63:d3:cf:bf:5a:9a:8d:a0:b5:a5: d3:49:6e:0b:9b:5e:83:e3:37:1c:51:e0:a1:84:80:89:37:de: da:87:b8:8f:bf:e3:a1:71:11:8b:a0:42:e6:59:d1:4c:5c:f2: 4e:9a:af:72:71:d7:c0:d2:57:14:83:72:67:b0:0e:05:7e:58: 6e:fa:f7:2d:72:c5:56:7d:28:18:be:e4:24:0c:55:07:3c:58: ae:3e:4b:ee:2f:01:ff:ba:1b:6b:91:df:cc:2d:77:93:ce:57: fa:b4:5a:a5:a7:6a:f6:ef:b8:37:e5:c0:60:44:80:c9:fb:3e: 69:c8:c4:03:42:b0:9e:1e:9e:d0:24:1e:3a:a3:fa:a9:9f:ef: fa:79:d3:60:39:a2:83:5c:97:98:7b:cb:54:1d:6b:34:5f:84: 61:03:d5:06:6a:6c:35:f3:fe:8f:34:7a:38:e2:21:ea:2b:83: 32:de:99:c5:78:19:52:85:bd:a4:64:db:81:c8:3f:7d:a7:95: 5c:ad:87:df:1f:58:33:b8:80:7d:5a:32:6d:31:57:f2:a8:de: 62:1d:85:79:44:c6:3a:a6:db:35:6b:16:cc:2c:46:11:df:45: 5e:30:0d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YUFgsZZw/CwwczsmQa9ovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwNDE2MjIwMTM1WhcNMjYwNDE3MjIwMTM1WjAzMTEwLwYDVQQD Eyg0ZTIwNWFkYjNmNzA4ZmVmNWVjNDE1N2JmNTRhMWIwYTllNDRmMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5j3kvvYd8rkraI6IWeggnmyv840 /Wbwlgc2tSyf/pOf6jOJ/t21hfpigRWyzdHn6FUCvVUld+3HGjyZUlQXuv7DbJjz wGVjsHkaKxBZWKZTu42Atr5edeTtCX4pq2EwXvT1FvFaZ9l+Kakaembt0tm7bb47 n+9gt49EkjU9NTYiQFnxQ4hagy6ZpLZcZtxJx8Uzl+tOL859W9i+oqP4ORu/wdXU GjMO6yC/BGzDyQgD6Fh9JQYSniSTACu2ZzuXYOccHPQc7ayQ5Th08T2C7d/GHmZl jRfyck8cs9vKozXtAHbzkUxmVhan9HLk7LcH0XAzdI/ACsPfiJs63IP7VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4gWts/cI/vXsQVe/VKGwqeRPD3MB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGGVJAPf t0oCFS+z4cFONQ5W3aaHN8W9f9Fj08+/WpqNoLWl00luC5teg+M3HFHgoYSAiTfe 2oe4j7/joXERi6BC5lnRTFzyTpqvcnHXwNJXFINyZ7AOBX5Ybvr3LXLFVn0oGL7k JAxVBzxYrj5L7i8B/7oba5HfzC13k85X+rRapadq9u+4N+XAYESAyfs+acjEA0Kw nh6e0CQeOqP6qZ/v+nnTYDmig1yXmHvLVB1rNF+EYQPVBmpsNfP+jzR6OOIh6iuD Mt6ZxXgZUoW9pGTbgcg/faeVXK2H3x9YM7iAfVoybTFX8qjeYh2FeUTGOqbbNWsW zCxGEd9FXjANPQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:33:38 2026 by rpki-client