$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: /P3pBVQg30BN/X0dYCOFkigbm4Cvt1aOwzpltNQVg/0= Subject key identifier: 6E:B8:0A:AE:19:9C:3E:3B:C3:9D:DB:8F:E1:9E:81:75:BB:D4:1E:7D Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0198820BDEEB54C99CEF77ABB5BCF2FA49FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 161F Signing time: Thu 07 Aug 2025 01:01:12 +0000 Manifest this update: Thu 07 Aug 2025 01:01:12 +0000 Manifest next update: Fri 08 Aug 2025 01:01:12 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: inmGrcsBJLMKgH2ZhpWWyT81Ht28Wh/YNYy67Y8bTdU=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:82:0b:de:eb:54:c9:9c:ef:77:ab:b5:bc:f2:fa:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Aug 7 01:01:12 2025 GMT Not After : Aug 8 01:01:12 2025 GMT Subject: CN=6eb80aae199c3e3bc39ddb8fe19e8175bbd41e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:fa:15:46:aa:5b:df:5d:ac:6b:eb:b1:70: 33:8a:26:fb:73:41:42:3b:a6:57:b5:1f:43:6b:aa: 6d:55:28:68:df:94:c4:8e:50:91:78:5a:98:78:25: 3b:69:3a:75:1e:d7:68:99:b6:ff:04:b2:33:1d:93: 2f:15:7a:f6:62:28:90:36:0c:9d:44:84:a2:fa:19: ca:2e:d6:4b:8d:27:03:a3:f4:0d:9c:06:78:30:c6: ac:7a:2a:87:5b:00:5b:05:75:70:72:1e:f4:92:e9: 15:a4:3c:18:f7:0a:71:a4:8b:fd:89:88:89:bd:18: 91:fa:2b:13:ba:01:eb:aa:6c:1e:25:aa:c1:14:6a: 92:ad:75:c7:25:d6:c9:66:95:f7:2a:a5:44:4f:2c: 8c:83:d6:7a:6d:99:a4:c2:0e:d0:66:8d:b7:3c:12: 45:33:30:9e:5d:18:98:14:44:34:7e:a1:7d:d7:dd: b1:90:ff:ad:36:80:6a:4c:c4:da:c2:9d:87:90:67: 2d:e8:ab:bc:38:92:aa:79:c2:6b:75:fd:7f:95:bb: be:39:9c:ba:59:6c:b0:4c:e3:76:a9:d7:aa:0e:fd: 33:a3:54:db:22:51:cf:4d:33:59:d9:4d:a2:cb:7d: bd:69:7e:fb:ac:3c:a2:b7:dd:e5:bf:62:1a:47:d1: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B8:0A:AE:19:9C:3E:3B:C3:9D:DB:8F:E1:9E:81:75:BB:D4:1E:7D X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f4:0d:f6:ad:ba:26:fd:0b:44:e1:b7:db:1e:29:f3:68:93: 94:28:c4:0b:9b:7b:47:f8:de:e7:25:1f:a5:6d:ed:b7:ae:9a: e7:b0:46:32:61:fa:65:9d:39:a9:57:f3:b7:5e:d5:13:4c:2b: 0c:f8:ff:b5:e4:2a:32:ff:95:fd:24:1e:c6:48:ab:34:7f:ed: 9a:1e:9f:bc:93:3f:7f:26:d2:5c:07:07:05:b3:35:93:cf:02: e9:e2:de:dc:a2:50:bf:6c:44:dd:74:33:ea:f9:5c:14:18:7b: d0:0c:95:66:b7:b1:ac:d4:a4:fd:b9:2c:6a:c4:73:62:42:eb: 3b:4f:84:d9:26:6d:45:c3:8c:26:b7:1e:b7:33:a7:b3:77:c3: 9c:fc:5c:93:b6:98:96:5d:16:bc:29:0c:36:fb:81:36:ba:02: c9:8e:3e:21:3b:0a:71:c4:9b:ca:4d:80:a0:c5:e4:e9:a0:b3: bd:55:8d:8c:4c:b5:8f:64:ff:3b:07:dc:b4:07:b1:14:24:01: d1:f3:b4:8e:c6:c2:7d:db:9b:96:29:18:30:c2:c2:f6:b5:4b: 74:b8:f2:2c:e8:54:c5:1b:9b:24:d1:35:c1:06:02:49:54:1f: b1:cd:23:52:2c:ae:2f:f6:84:b7:6b:46:df:55:60:0d:8a:26: bb:bc:e6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiCC97rVMmc73ertbzy+kn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwODA3MDEwMTEyWhcNMjUwODA4MDEwMTEyWjAzMTEwLwYDVQQD Eyg2ZWI4MGFhZTE5OWMzZTNiYzM5ZGRiOGZlMTllODE3NWJiZDQxZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06v6FUaqW99drGvrsXAziib7c0FC O6ZXtR9Da6ptVSho35TEjlCReFqYeCU7aTp1Htdombb/BLIzHZMvFXr2YiiQNgyd RISi+hnKLtZLjScDo/QNnAZ4MMaseiqHWwBbBXVwch70kukVpDwY9wpxpIv9iYiJ vRiR+isTugHrqmweJarBFGqSrXXHJdbJZpX3KqVETyyMg9Z6bZmkwg7QZo23PBJF MzCeXRiYFEQ0fqF9192xkP+tNoBqTMTawp2HkGct6Ku8OJKqecJrdf1/lbu+OZy6 WWywTON2qdeqDv0zo1TbIlHPTTNZ2U2iy329aX77rDyit93lv2IaR9F9qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG64Cq4ZnD47w53bj+GegXW71B59MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvQN9q26 Jv0LROG32x4p82iTlCjEC5t7R/je5yUfpW3tt66a57BGMmH6ZZ05qVfzt17VE0wr DPj/teQqMv+V/SQexkirNH/tmh6fvJM/fybSXAcHBbM1k88C6eLe3KJQv2xE3XQz 6vlcFBh70AyVZrexrNSk/bksasRzYkLrO0+E2SZtRcOMJrcetzOns3fDnPxck7aY ll0WvCkMNvuBNroCyY4+ITsKccSbyk2AoMXk6aCzvVWNjEy1j2T/OwfctAexFCQB 0fO0jsbCfdublikYMMLC9rVLdLjyLOhUxRubJNE1wQYCSVQfsc0jUiyuL/aEt2tG 31VgDYomu7zm6g== -----END CERTIFICATE-----Generated at Thu Aug 7 07:29:57 2025 by rpki-client