$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: DVBU0YhpPx99f9fe2cUKRtZFF0ZJeKA5D4Mxi/uet7U= Subject key identifier: AC:98:4C:36:FC:56:63:E3:7A:71:AF:C3:DF:9F:D7:C1:26:59:A7:F0 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019771BF950ED2BC86C5B5ED1224F1C68FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1592 Signing time: Sun 15 Jun 2025 04:01:10 +0000 Manifest this update: Sun 15 Jun 2025 04:01:10 +0000 Manifest next update: Mon 16 Jun 2025 04:01:10 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: NpXfPVCFmAx1AdwhDORoaYSuwyZHXTHt3vJVm4Ju1WQ=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:bf:95:0e:d2:bc:86:c5:b5:ed:12:24:f1:c6:8f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jun 15 04:01:10 2025 GMT Not After : Jun 16 04:01:10 2025 GMT Subject: CN=ac984c36fc5663e37a71afc3df9fd7c12659a7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:b5:ab:22:97:81:d2:5c:e1:b5:34:a4:9a: 53:bf:ca:69:2b:cb:59:23:1c:ad:af:cc:32:03:06: 2f:43:b8:9f:84:c2:ee:56:de:64:c9:00:c4:92:82: 3a:77:a4:28:b4:9a:b9:5d:9b:e1:2b:8b:c6:de:59: 21:f8:cb:78:80:36:97:2d:09:a2:36:e1:53:98:00: b8:41:75:11:a8:8b:88:be:fc:26:b3:d5:a7:16:34: 3c:7c:7e:9b:93:1b:49:83:18:8c:bb:7d:99:d5:2e: ce:03:f0:ff:de:82:63:a9:a7:6f:cd:e2:19:c1:ff: ce:07:28:38:dc:1d:d6:0a:5d:60:cf:b9:5a:7b:4e: 12:8a:f7:62:5e:97:09:6c:53:b2:0e:4c:98:64:3f: fe:11:f3:f2:fb:cc:82:7c:be:3b:a6:b5:b6:5d:6f: 65:50:ed:60:12:23:f7:cf:0a:be:76:7b:78:f2:f8: fd:34:77:97:df:ba:a0:e7:d3:5a:15:e0:b8:2a:54: 3f:34:c9:76:3d:9a:65:3f:48:99:27:b5:91:1f:6b: fa:18:cb:a2:29:44:fe:e6:4d:09:de:03:14:95:c1: 45:98:f7:c4:a6:e9:14:42:9c:e2:26:3c:07:a8:62: 03:67:4b:49:12:80:8a:d2:f5:1b:e8:9b:ca:4b:dc: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:4C:36:FC:56:63:E3:7A:71:AF:C3:DF:9F:D7:C1:26:59:A7:F0 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4a:ca:a2:0c:94:42:8a:de:c7:13:8a:f8:0a:74:e0:fd:39: 3b:76:ed:ab:f3:5c:e4:84:f1:85:fb:7e:7b:e0:77:7a:67:23: b9:ca:92:c1:06:f6:66:33:af:28:f1:14:e8:7a:b1:71:4c:1c: bd:9e:08:cb:ed:c0:97:65:1c:3d:c6:01:6f:e4:2f:71:5a:a6: 86:a4:6e:f9:72:11:21:43:17:08:fb:51:0b:8e:7a:b8:89:0b: 40:4c:66:d2:ea:51:0e:fb:70:5d:c9:6c:70:32:3a:8f:1f:55: f1:d2:34:e8:3e:38:52:16:c6:80:dc:07:a4:dd:e7:18:7c:55: 4d:2a:63:07:2e:6e:c9:81:ab:6d:e3:1d:34:36:ed:a2:70:60: 97:d1:46:40:2c:4d:91:8c:8f:26:50:d0:b4:91:d6:13:c5:1d: 0c:d0:96:75:17:be:18:15:7b:ec:66:83:81:d3:0a:d7:f0:67: f5:ad:40:2b:16:8c:5f:16:91:b8:fc:fb:cd:8f:2e:2d:d3:d6: bc:12:8e:d8:05:16:e5:2b:9c:3c:6e:bb:ab:1d:9e:27:ec:af: b2:ea:98:f6:8b:31:ea:32:df:bf:0c:48:87:5e:f2:7f:89:31: 29:e0:f7:39:0e:90:51:dd:9f:6f:33:2a:c4:ca:89:2d:ba:10: bf:9b:78:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxv5UO0ryGxbXtEiTxxo/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwNjE1MDQwMTEwWhcNMjUwNjE2MDQwMTEwWjAzMTEwLwYDVQQD EyhhYzk4NGMzNmZjNTY2M2UzN2E3MWFmYzNkZjlmZDdjMTI2NTlhN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7O1qyKXgdJc4bU0pJpTv8ppK8tZ Ixytr8wyAwYvQ7ifhMLuVt5kyQDEkoI6d6QotJq5XZvhK4vG3lkh+Mt4gDaXLQmi NuFTmAC4QXURqIuIvvwms9WnFjQ8fH6bkxtJgxiMu32Z1S7OA/D/3oJjqadvzeIZ wf/OByg43B3WCl1gz7lae04SivdiXpcJbFOyDkyYZD/+EfPy+8yCfL47prW2XW9l UO1gEiP3zwq+dnt48vj9NHeX37qg59NaFeC4KlQ/NMl2PZplP0iZJ7WRH2v6GMui KUT+5k0J3gMUlcFFmPfEpukUQpziJjwHqGIDZ0tJEoCK0vUb6JvKS9yNqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyYTDb8VmPjenGvw9+f18EmWafwMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIErKogyU QorexxOK+Ap04P05O3btq/Nc5ITxhft+e+B3emcjucqSwQb2ZjOvKPEU6HqxcUwc vZ4Iy+3Al2UcPcYBb+QvcVqmhqRu+XIRIUMXCPtRC456uIkLQExm0upRDvtwXcls cDI6jx9V8dI06D44UhbGgNwHpN3nGHxVTSpjBy5uyYGrbeMdNDbtonBgl9FGQCxN kYyPJlDQtJHWE8UdDNCWdRe+GBV77GaDgdMK1/Bn9a1AKxaMXxaRuPz7zY8uLdPW vBKO2AUW5SucPG67qx2eJ+yvsuqY9osx6jLfvwxIh17yf4kxKeD3OQ6QUd2fbzMq xMqJLboQv5t4Ig== -----END CERTIFICATE-----Generated at Sun Jun 15 09:16:25 2025 by rpki-client