$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: otBiomSfHxyjMxxDfmZDYq0xqsR6NdG52f1k6w+VcEA= Subject key identifier: F7:2A:A3:02:1B:CA:75:28:5F:A6:A5:98:FE:57:2B:77:5F:0C:86:59 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019835711C8EE1FA54C504CDC59E0892F5BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 17F2 Signing time: Wed 23 Jul 2025 04:01:01 +0000 Manifest this update: Wed 23 Jul 2025 04:01:01 +0000 Manifest next update: Thu 24 Jul 2025 04:01:01 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: SLEQZLzCCx2HUHtlCovGfqiajac.roa (hash: YpwhaHcOB7Vp9l2Q6rvkGx/Xsm+vpPELReZ3jK8cuMo=) 3: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 4: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 5: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 6: kwOyuuDg3-S03TS2I0WqFSe_pu8.roa (hash: ZbyfvHOE7g5cp+O9MlAOCTO0HekTFMhe/qoLPlPfLHo=) 7: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 8: p9weqcwKzF5P6E4PpAyu9c1qrTk.roa (hash: vw93uscHpkewfwJ8S5ELvSe02w8qGO8AWWpmf1fHYTg=) 9: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: VH4yodX9Yzj6VOXrrWO2WAIRL5g/2VpBTEpufpokSE8=) 10: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 11: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 12: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:71:1c:8e:e1:fa:54:c5:04:cd:c5:9e:08:92:f5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jul 23 04:01:01 2025 GMT Not After : Jul 24 04:01:01 2025 GMT Subject: CN=f72aa3021bca75285fa6a598fe572b775f0c8659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:c9:54:60:96:e1:96:71:b6:64:98:a9:15: 32:42:a7:32:fa:09:1d:44:4e:f7:a0:88:81:67:5b: 99:7d:fc:82:d8:8e:71:ff:59:2f:56:10:c6:b7:63: fd:1e:f9:09:3c:92:0a:e0:34:ff:eb:6b:b3:1d:0b: 61:b0:b3:48:1f:8a:22:f4:69:d8:97:c4:0b:74:20: 31:4b:23:ae:91:79:f7:57:6e:55:ce:92:2f:38:d6: 69:7c:49:91:e7:a5:8b:09:7f:a6:b2:39:8e:b7:a4: 0d:40:73:2d:02:1c:be:2f:12:da:43:c7:5c:32:65: dd:9b:90:7f:d4:52:d0:12:99:e0:32:9a:fc:a1:2b: 14:4d:6f:70:76:4f:20:66:08:6d:ab:a7:76:4b:81: 04:98:fc:0c:93:b9:d2:a3:7d:f2:96:32:95:17:df: d2:1d:88:19:06:dc:71:28:e8:fe:8b:fd:d2:a8:4f: 72:12:2c:c9:0f:5e:39:fc:89:78:5b:c9:ff:31:c8: f7:6f:54:a6:81:90:21:f5:f6:f5:79:cc:8c:3c:58: 5d:94:df:6b:8d:a1:f2:10:27:86:ea:60:64:18:bc: 05:7d:a9:35:13:76:93:1b:b6:2b:90:9a:d2:30:3a: 34:fd:ff:a0:fe:47:37:43:9d:96:05:d7:ac:3d:3a: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2A:A3:02:1B:CA:75:28:5F:A6:A5:98:FE:57:2B:77:5F:0C:86:59 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:a7:ba:14:69:2d:83:f5:fc:36:5a:6f:96:d9:84:b3:04: ff:3a:1b:9d:ca:df:a4:7c:6d:af:05:6c:be:aa:c4:7b:9c:2b: 44:23:8f:09:aa:15:c9:41:d2:50:fd:2b:6f:7a:8e:b0:af:7a: 16:99:4d:81:8f:aa:99:9e:37:b3:83:a4:a1:e8:82:63:95:d1: 34:75:c5:9e:77:79:b9:e5:55:ec:b5:b6:0d:a1:7c:55:d7:16: 77:60:ae:09:44:ed:9a:ce:01:63:03:96:ed:90:b1:c3:17:d7: 51:90:ac:a2:9e:72:e1:fb:5a:95:5d:46:53:90:3a:56:0b:62: 83:14:17:19:2b:e9:91:0f:64:7e:83:fa:5c:fd:2b:a0:57:56: c3:e5:6d:ab:9c:08:11:24:3c:c5:93:d1:aa:e3:c6:2a:85:c4: b5:b9:be:02:75:8f:ce:4f:ce:83:28:3d:dc:24:da:93:03:c8: db:54:59:5e:b6:1f:84:63:90:10:42:70:fb:2e:28:d2:9b:5d: ba:00:92:68:84:17:d8:c5:85:c0:1d:a6:19:02:df:ac:5c:a4: 23:b6:17:96:60:84:70:a2:ce:33:72:c2:79:ee:5b:e8:0d:6f: c1:79:29:46:4e:52:e4:7b:36:6d:31:b2:3c:a4:1e:1b:58:ec: 32:8d:b5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cRyO4fpUxQTNxZ4IkvW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwNzIzMDQwMTAxWhcNMjUwNzI0MDQwMTAxWjAzMTEwLwYDVQQD EyhmNzJhYTMwMjFiY2E3NTI4NWZhNmE1OThmZTU3MmI3NzVmMGM4NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQfJVGCW4ZZxtmSYqRUyQqcy+gkd RE73oIiBZ1uZffyC2I5x/1kvVhDGt2P9HvkJPJIK4DT/62uzHQthsLNIH4oi9GnY l8QLdCAxSyOukXn3V25VzpIvONZpfEmR56WLCX+msjmOt6QNQHMtAhy+LxLaQ8dc MmXdm5B/1FLQEpngMpr8oSsUTW9wdk8gZghtq6d2S4EEmPwMk7nSo33yljKVF9/S HYgZBtxxKOj+i/3SqE9yEizJD145/Il4W8n/Mcj3b1SmgZAh9fb1ecyMPFhdlN9r jaHyECeG6mBkGLwFfak1E3aTG7YrkJrSMDo0/f+g/kc3Q52WBdesPToqcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcqowIbynUoX6almP5XK3dfDIZZMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXanuhRp LYP1/DZab5bZhLME/zobncrfpHxtrwVsvqrEe5wrRCOPCaoVyUHSUP0rb3qOsK96 FplNgY+qmZ43s4OkoeiCY5XRNHXFnnd5ueVV7LW2DaF8VdcWd2CuCUTtms4BYwOW 7ZCxwxfXUZCsop5y4ftalV1GU5A6VgtigxQXGSvpkQ9kfoP6XP0roFdWw+Vtq5wI ESQ8xZPRquPGKoXEtbm+AnWPzk/Ogyg93CTakwPI21RZXrYfhGOQEEJw+y4o0ptd ugCSaIQX2MWFwB2mGQLfrFykI7YXlmCEcKLOM3LCee5b6A1vwXkpRk5S5Hs2bTGy PKQeG1jsMo21zA== -----END CERTIFICATE-----Generated at Wed Jul 23 07:59:19 2025 by rpki-client