$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: UgAHD36O64QV164VbfzZRf+qRwHzgUV8vZ+veXmXJS4= Subject key identifier: 3E:06:83:1D:93:90:FF:A8:C5:F2:EC:59:62:B2:18:0F:D7:88:3A:98 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019FA8991EFDC66C8F9212BFA4A88EB77F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 146D Signing time: Tue 28 Jul 2026 12:00:34 +0000 Manifest this update: Tue 28 Jul 2026 12:00:34 +0000 Manifest next update: Wed 29 Jul 2026 12:00:34 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: tZcr47aia/p5Y6ooZ4VsQN+rIAi9ZIqfTQLauoPSag0=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 7: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 8: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 9: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 10: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 11: ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa (hash: 3nfAqDZ+jchkof/hQMbxPVQAHcDXX0FbrKywJk2nvzA=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:1e:fd:c6:6c:8f:92:12:bf:a4:a8:8e:b7:7f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jul 28 12:00:34 2026 GMT Not After : Jul 29 12:00:34 2026 GMT Subject: CN=3e06831d9390ffa8c5f2ec5962b2180fd7883a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:6a:d3:bf:a8:ea:f7:04:2c:32:d1:65:98: 8d:67:11:8e:b8:fb:9e:0f:74:2c:9a:7d:0f:6d:30: b2:eb:ee:e8:e3:64:a5:a7:91:97:fc:83:d7:a0:dc: 1c:23:0e:c1:21:a4:ef:8b:4d:f3:f8:2f:54:f1:e9: ea:e9:03:35:a7:5a:2b:e1:3b:0c:7a:2d:ae:fe:a7: d6:77:19:2f:5b:2b:63:34:39:18:dd:af:7b:c0:74: a1:5b:a9:50:16:de:bf:70:6b:c1:b1:94:c8:a3:d6: 12:e0:a3:c3:5c:2d:d2:58:22:32:a3:1f:ce:de:26: 7f:56:f7:76:a6:f0:ad:93:fb:77:af:f2:d9:dd:7f: 7b:06:f6:82:11:ad:f4:6d:6d:a6:af:97:3f:d1:5e: 97:f0:91:db:24:30:cc:9c:1e:00:b2:c3:27:10:eb: 45:4a:2f:96:34:0e:82:02:9a:30:4b:e1:c9:69:02: 50:b9:6d:11:71:9c:b4:65:02:98:c9:5e:81:ca:59: af:00:8b:c8:18:4f:20:5f:4c:36:8b:3b:74:bd:76: d9:15:99:22:12:9b:62:84:f9:92:6d:18:c7:d3:e6: a9:82:3b:ae:b0:14:54:10:f0:c2:6e:93:89:96:4c: 7d:96:1f:03:89:a0:1e:14:59:2e:e5:ff:7d:3d:78: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:06:83:1D:93:90:FF:A8:C5:F2:EC:59:62:B2:18:0F:D7:88:3A:98 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2d:11:66:b9:63:08:2c:d3:23:13:49:34:76:3d:0e:24:7f: 3c:53:12:fa:23:9f:d8:3c:49:82:ee:c0:30:bb:03:1b:af:21: 23:29:06:ec:2c:f6:22:4b:a0:e8:7f:74:81:4f:5c:7d:c4:48: b0:19:05:9a:99:7a:26:45:5b:5d:a9:21:35:37:df:09:7d:2e: 52:ea:a1:6b:aa:de:d2:41:52:1a:17:10:e4:56:4c:d5:fe:6c: 30:e4:f9:66:cd:b3:87:8c:39:40:24:d4:39:1a:11:16:d0:fe: c9:17:1f:74:50:b7:d3:e0:a9:10:b6:2f:49:84:ef:d7:7a:b8: ff:c9:cd:d4:bb:25:35:ec:67:5d:fc:3a:92:bd:45:8c:db:4f: 86:5f:45:78:7e:90:1f:1c:80:49:0d:7f:da:4c:7f:57:6f:68: 5c:ca:dd:51:24:c7:93:f7:c8:c0:23:7a:b5:f6:fd:5b:b3:51: a4:42:c5:79:97:6b:7b:e8:3e:3e:08:ee:74:2c:b6:42:ea:7e: af:9f:d3:3d:57:cf:05:26:bf:6f:4c:78:5c:ef:57:ec:ba:a5: e6:52:42:76:e7:bf:24:45:ed:e8:ec:c7:17:94:d1:2d:d5:5b: ae:23:93:90:97:a7:7a:c1:9c:d2:80:b4:63:69:89:c3:8b:81: 27:ca:cf:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omR79xmyPkhK/pKiOt38MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwNzI4MTIwMDM0WhcNMjYwNzI5MTIwMDM0WjAzMTEwLwYDVQQD EygzZTA2ODMxZDkzOTBmZmE4YzVmMmVjNTk2MmIyMTgwZmQ3ODgzYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I9q07+o6vcELDLRZZiNZxGOuPue D3Qsmn0PbTCy6+7o42Slp5GX/IPXoNwcIw7BIaTvi03z+C9U8enq6QM1p1or4TsM ei2u/qfWdxkvWytjNDkY3a97wHShW6lQFt6/cGvBsZTIo9YS4KPDXC3SWCIyox/O 3iZ/Vvd2pvCtk/t3r/LZ3X97BvaCEa30bW2mr5c/0V6X8JHbJDDMnB4AssMnEOtF Si+WNA6CApowS+HJaQJQuW0RcZy0ZQKYyV6BylmvAIvIGE8gX0w2izt0vXbZFZki EptihPmSbRjH0+apgjuusBRUEPDCbpOJlkx9lh8DiaAeFFku5f99PXgW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4Ggx2TkP+oxfLsWWKyGA/XiDqYMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS0RZrlj CCzTIxNJNHY9DiR/PFMS+iOf2DxJgu7AMLsDG68hIykG7Cz2Ikug6H90gU9cfcRI sBkFmpl6JkVbXakhNTffCX0uUuqha6re0kFSGhcQ5FZM1f5sMOT5Zs2zh4w5QCTU ORoRFtD+yRcfdFC30+CpELYvSYTv13q4/8nN1LslNexnXfw6kr1FjNtPhl9FeH6Q HxyASQ1/2kx/V29oXMrdUSTHk/fIwCN6tfb9W7NRpELFeZdre+g+PgjudCy2Qup+ r5/TPVfPBSa/b0x4XO9X7Lql5lJCdue/JEXt6OzHF5TRLdVbriOTkJenesGc0oC0 Y2mJw4uBJ8rPww== -----END CERTIFICATE-----Generated at Tue Jul 28 22:00:20 2026 by rpki-client