$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: EhKTk/H5VjuDdgdR0VwRDbApxj3O+Vr5JE4Smf+EI6c= Subject key identifier: 18:83:A6:D2:D4:2A:41:69:A8:22:31:75:26:D7:B7:BA:E9:94:54:BC Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019768BC177C30EA813472EB19AA90030C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 176F Signing time: Fri 13 Jun 2025 10:00:46 +0000 Manifest this update: Fri 13 Jun 2025 10:00:46 +0000 Manifest next update: Sat 14 Jun 2025 10:00:46 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: G219Y64AdfvWR2NuekRtXdgP-Ic.roa (hash: 5+RXRW/15EIQ38duZeOS5dPeZR9sfJdvGbXk53gYh2w=) 3: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 4: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=) 5: UMkHnIq7XWRmxvmDvgvckqsDfyg.roa (hash: UclYhW3LjpNehjDdsWCzHEOORl0S/2R/2opPQs9YB3A=) 6: fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa (hash: pI5sDBFJByOhv7aMqIYQbfKd/45ixTiiuKep9pppuh0=) 7: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 8: kMts3hx-qWKJDtFLvIyyQmj1MsU.roa (hash: 1mgCcrqsDFQy+qo6HuaIVhE6BHRje2bNOQ89LKJX5P8=) 9: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: Zy5IJ0GXQhvqg6AO5SAEXwoRR4c6yEkvE2OzoC/krkk=) 11: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 12: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 13: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bc:17:7c:30:ea:81:34:72:eb:19:aa:90:03:0c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jun 13 10:00:46 2025 GMT Not After : Jun 14 10:00:46 2025 GMT Subject: CN=1883a6d2d42a4169a822317526d7b7bae99454bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6a:a9:1d:a7:d9:8f:34:a3:a7:84:a3:17:70: 9b:43:7a:89:ce:17:1e:75:45:f1:df:d1:55:d3:02: 98:fd:c7:8f:91:f1:26:d6:83:1c:fc:c3:a0:15:7b: 87:ae:84:da:fa:f0:4d:f1:f0:3e:96:82:70:77:9d: f3:d7:fc:f1:c5:0b:b6:ec:a9:18:05:20:48:6e:d7: e0:36:ef:b2:5b:46:93:5d:65:97:ed:03:ff:a6:35: 76:7e:d5:0d:06:26:af:7b:f8:34:24:b8:0b:a7:1b: fe:74:5a:d8:51:f4:27:2b:60:b0:ed:b6:7e:75:42: 5e:b7:46:bd:37:cc:b5:e5:a5:fd:3e:31:1b:05:49: 70:1a:38:06:a1:56:7e:f0:4a:f7:ca:3c:c5:5e:6f: ef:f4:25:66:21:26:39:2e:b2:8b:1f:db:1f:88:fd: 83:3d:87:3b:5f:75:c3:95:09:09:a2:27:d6:57:54: f1:be:f6:64:ba:a0:42:d5:a7:f9:5f:24:6e:4a:17: c2:54:5e:51:76:b1:b0:04:f8:ce:df:25:b3:84:4f: 4e:d3:9a:ae:e3:c8:77:13:f8:f0:2e:4b:02:db:36: 5d:36:b3:d0:70:6c:1b:89:ae:ae:7e:13:27:13:cd: c9:b4:74:b7:4a:2f:0c:b6:5b:59:a5:33:55:f5:3c: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:A6:D2:D4:2A:41:69:A8:22:31:75:26:D7:B7:BA:E9:94:54:BC X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d5:7b:13:e7:6c:50:ba:b8:49:55:0c:78:e2:f9:ec:8d:04: 85:2e:b1:fd:46:91:b4:b0:36:de:a7:76:d6:8a:3d:79:94:2e: 37:75:ae:0e:8e:a2:9b:37:b1:84:13:49:0c:ce:44:28:0f:fb: 98:00:78:f4:7a:34:a6:44:a5:84:96:e3:bd:02:f9:11:68:9c: 0a:08:7a:39:b7:7e:92:83:a8:ef:ef:25:6f:9b:3f:ed:ef:8c: d9:9f:6b:23:ce:10:be:57:2a:6e:5c:1d:ba:42:0b:6e:23:1e: 5b:1f:0f:81:fd:eb:f3:45:5b:a3:a2:7c:e9:7b:dc:10:e4:d9: d4:ab:fe:3a:7d:15:80:e4:1c:fa:d3:ea:d1:37:90:6d:bb:c4: 7c:70:68:bd:31:8b:27:da:b2:84:0a:33:43:d5:37:13:14:05: 7a:d9:37:45:33:f1:72:8d:98:63:72:07:c1:af:ca:a4:a7:2e: 73:63:c4:84:a9:cf:eb:0d:a1:01:3e:3f:cb:4a:c7:62:7a:92: 8c:32:39:ca:ae:dd:56:0a:ee:cc:29:7b:4b:96:64:a2:f6:19: 53:98:32:4a:e6:8c:37:8f:ed:18:a6:bb:15:50:6b:fd:92:2f: 3a:0e:e7:d0:70:44:7f:99:28:f8:95:6f:b7:11:15:da:d8:86: 39:58:dd:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdovBd8MOqBNHLrGaqQAwxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwNjEzMTAwMDQ2WhcNMjUwNjE0MTAwMDQ2WjAzMTEwLwYDVQQD EygxODgzYTZkMmQ0MmE0MTY5YTgyMjMxNzUyNmQ3YjdiYWU5OTQ1NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mqpHafZjzSjp4SjF3CbQ3qJzhce dUXx39FV0wKY/cePkfEm1oMc/MOgFXuHroTa+vBN8fA+loJwd53z1/zxxQu27KkY BSBIbtfgNu+yW0aTXWWX7QP/pjV2ftUNBiave/g0JLgLpxv+dFrYUfQnK2Cw7bZ+ dUJet0a9N8y15aX9PjEbBUlwGjgGoVZ+8Er3yjzFXm/v9CVmISY5LrKLH9sfiP2D PYc7X3XDlQkJoifWV1TxvvZkuqBC1af5XyRuShfCVF5RdrGwBPjO3yWzhE9O05qu 48h3E/jwLksC2zZdNrPQcGwbia6ufhMnE83JtHS3Si8MtltZpTNV9TwFwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiDptLUKkFpqCIxdSbXt7rplFS8MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtV7E+ds ULq4SVUMeOL57I0EhS6x/UaRtLA23qd21oo9eZQuN3WuDo6imzexhBNJDM5EKA/7 mAB49Ho0pkSlhJbjvQL5EWicCgh6Obd+koOo7+8lb5s/7e+M2Z9rI84Qvlcqblwd ukILbiMeWx8Pgf3r80Vbo6J86XvcEOTZ1Kv+On0VgOQc+tPq0TeQbbvEfHBovTGL J9qyhAozQ9U3ExQFetk3RTPxco2YY3IHwa/KpKcuc2PEhKnP6w2hAT4/y0rHYnqS jDI5yq7dVgruzCl7S5ZkovYZU5gySuaMN4/tGKa7FVBr/ZIvOg7n0HBEf5ko+JVv txEV2tiGOVjdVQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:21:49 2025 by rpki-client