$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: 3F4qAdDcAzqKG18RWYLMSR9J5MvYCps2tzLbwrWKq8U= Subject key identifier: 4F:DB:77:E3:12:A7:60:23:0E:22:A5:B3:BD:A3:BF:8A:F2:D3:84:3E Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 01987A52520325C1C934BAC10B433D48035C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1816 Signing time: Tue 05 Aug 2025 13:01:11 +0000 Manifest this update: Tue 05 Aug 2025 13:01:11 +0000 Manifest next update: Wed 06 Aug 2025 13:01:11 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: SLEQZLzCCx2HUHtlCovGfqiajac.roa (hash: YpwhaHcOB7Vp9l2Q6rvkGx/Xsm+vpPELReZ3jK8cuMo=) 3: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 4: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 5: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 6: kwOyuuDg3-S03TS2I0WqFSe_pu8.roa (hash: ZbyfvHOE7g5cp+O9MlAOCTO0HekTFMhe/qoLPlPfLHo=) 7: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 8: oviWOpLT1qa_QlvcF06kxF1PsAE.roa (hash: 06h9FkxdcGuPtmnJPaSEvBV1beciLQDwC+dGunkQE1I=) 9: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: 5T4zDQJ8mSDAf9TR0RHa51QYAmGHvtGC/6XIRXTJwfM=) 10: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 11: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 12: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:52:52:03:25:c1:c9:34:ba:c1:0b:43:3d:48:03:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Aug 5 13:01:11 2025 GMT Not After : Aug 6 13:01:11 2025 GMT Subject: CN=4fdb77e312a760230e22a5b3bda3bf8af2d3843e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:c0:89:48:9a:33:35:ba:b1:4e:90:5a:43: 8b:d9:4f:04:44:5b:a4:64:75:16:8e:ad:1c:44:c3: b3:10:ad:d6:7a:7b:cc:b8:aa:64:64:e6:f2:7c:6a: ab:a7:9d:af:95:cf:53:51:c0:62:4d:b7:03:f6:e3: 98:06:1a:ec:b6:d6:2d:62:7f:8b:b1:3d:e3:e0:30: b0:94:4c:bd:2b:57:bf:c2:32:73:06:5b:45:3a:c8: 34:7b:c8:90:ce:85:6a:c8:10:28:7c:5e:8e:5c:20: 17:ac:be:dd:f0:7b:5b:17:df:1c:6c:f4:4a:4c:67: 31:f1:c7:12:28:29:4d:f5:00:2d:d1:03:cf:41:72: 56:19:54:85:93:e1:26:0b:f5:5c:74:4c:fd:c7:e3: 2a:b1:97:5b:5a:5d:26:f5:14:51:e3:9e:cc:dd:1c: 81:8e:cd:48:ef:20:d9:9a:46:0e:1c:aa:11:cf:ce: 66:f6:7c:2c:38:e1:af:c5:d2:96:5d:df:c2:0f:c2: db:49:b2:2c:e8:84:ab:7c:68:1c:94:f4:11:b4:c2: be:2f:33:25:98:3d:43:63:41:4b:13:96:4c:d4:cd: 4e:b7:67:70:2b:9a:32:a5:80:4c:b4:f3:92:2e:50: e0:bf:e0:48:0e:f8:6f:be:5e:d4:7c:04:56:e5:6a: 08:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:77:E3:12:A7:60:23:0E:22:A5:B3:BD:A3:BF:8A:F2:D3:84:3E X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:80:49:5e:ad:a7:3d:4f:4b:64:37:9c:92:3c:dc:7e:92:7d: 8f:f4:d0:9e:18:c1:b2:2a:61:4f:89:82:96:2d:d3:6e:de:99: ac:51:85:fc:fb:10:57:ab:4c:e0:ff:b6:40:7b:00:67:be:b5: 3b:f8:5d:a8:d1:e1:84:d2:3f:e2:cd:86:3a:bf:1c:90:23:7e: 35:f4:17:c1:3d:74:83:24:31:3c:7a:3f:d0:e1:ca:1e:aa:13: 03:e4:4f:64:4c:9a:85:99:fc:a1:5a:90:45:6f:a5:5d:22:5c: a9:9f:58:91:62:58:c0:d8:b4:c9:96:d3:16:b0:7e:f6:92:20: 88:41:a7:60:de:56:81:92:87:45:60:9e:fc:6f:8d:0e:75:37: 84:53:ed:9c:3c:28:3d:8f:bf:1e:cd:b7:3e:4e:3f:6d:43:f3: 50:d1:1f:40:c3:c7:63:19:e4:66:25:6c:83:00:2f:58:12:9c: c5:66:ea:3c:34:a3:35:c7:ce:d4:a4:ef:a7:ce:38:c3:5a:5d: be:f8:67:85:d2:86:7f:31:06:d9:86:36:30:75:d9:22:1e:64: 02:23:0c:3b:3e:53:a0:17:c2:db:55:e8:80:d8:24:73:2c:36: 50:86:92:2f:0a:90:42:5b:ae:d8:7d:80:44:7f:2a:4d:85:43: c3:10:33:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6UlIDJcHJNLrBC0M9SANcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwODA1MTMwMTExWhcNMjUwODA2MTMwMTExWjAzMTEwLwYDVQQD Eyg0ZmRiNzdlMzEyYTc2MDIzMGUyMmE1YjNiZGEzYmY4YWYyZDM4NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcDAiUiaMzW6sU6QWkOL2U8ERFuk ZHUWjq0cRMOzEK3WenvMuKpkZObyfGqrp52vlc9TUcBiTbcD9uOYBhrsttYtYn+L sT3j4DCwlEy9K1e/wjJzBltFOsg0e8iQzoVqyBAofF6OXCAXrL7d8HtbF98cbPRK TGcx8ccSKClN9QAt0QPPQXJWGVSFk+EmC/VcdEz9x+MqsZdbWl0m9RRR457M3RyB js1I7yDZmkYOHKoRz85m9nwsOOGvxdKWXd/CD8LbSbIs6ISrfGgclPQRtMK+LzMl mD1DY0FLE5ZM1M1Ot2dwK5oypYBMtPOSLlDgv+BIDvhvvl7UfARW5WoIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/bd+MSp2AjDiKls72jv4ry04Q+MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4BJXq2n PU9LZDeckjzcfpJ9j/TQnhjBsiphT4mCli3Tbt6ZrFGF/PsQV6tM4P+2QHsAZ761 O/hdqNHhhNI/4s2GOr8ckCN+NfQXwT10gyQxPHo/0OHKHqoTA+RPZEyahZn8oVqQ RW+lXSJcqZ9YkWJYwNi0yZbTFrB+9pIgiEGnYN5WgZKHRWCe/G+NDnU3hFPtnDwo PY+/Hs23Pk4/bUPzUNEfQMPHYxnkZiVsgwAvWBKcxWbqPDSjNcfO1KTvp844w1pd vvhnhdKGfzEG2YY2MHXZIh5kAiMMOz5ToBfC21XogNgkcyw2UIaSLwqQQluu2H2A RH8qTYVDwxAzFw== -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:37 2025 by rpki-client