$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: tPu/mws0tDvG+srtuk4AiE0VLSYHQizfuUAjvP7s1K0= Subject key identifier: 28:3B:BB:6E:7F:AB:CA:97:A1:B2:86:30:02:38:C8:9E:BF:09:EA:42 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019747E73B9AA371D81E753978C47F7A1760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 175E Signing time: Sat 07 Jun 2025 01:00:25 +0000 Manifest this update: Sat 07 Jun 2025 01:00:25 +0000 Manifest next update: Sun 08 Jun 2025 01:00:25 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: G219Y64AdfvWR2NuekRtXdgP-Ic.roa (hash: 5+RXRW/15EIQ38duZeOS5dPeZR9sfJdvGbXk53gYh2w=) 3: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 4: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=) 5: UMkHnIq7XWRmxvmDvgvckqsDfyg.roa (hash: UclYhW3LjpNehjDdsWCzHEOORl0S/2R/2opPQs9YB3A=) 6: fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa (hash: pI5sDBFJByOhv7aMqIYQbfKd/45ixTiiuKep9pppuh0=) 7: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 8: kMts3hx-qWKJDtFLvIyyQmj1MsU.roa (hash: 1mgCcrqsDFQy+qo6HuaIVhE6BHRje2bNOQ89LKJX5P8=) 9: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: DTpumKxhn0x+2NIsKc0uz2l5VTA7vhqy13clwxQXk/c=) 11: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 12: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 13: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:3b:9a:a3:71:d8:1e:75:39:78:c4:7f:7a:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jun 7 01:00:25 2025 GMT Not After : Jun 8 01:00:25 2025 GMT Subject: CN=283bbb6e7fabca97a1b286300238c89ebf09ea42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:df:8a:a4:f4:e1:a8:bd:b5:16:50:d8:7c: 35:bf:99:90:c7:f0:83:9c:f3:bc:15:e4:ab:ee:0d: 74:d1:87:85:bd:34:f4:b7:b0:9e:1e:d6:10:bb:ec: d9:ae:21:2c:4b:82:07:b1:c2:74:1c:5f:0d:cd:0c: 04:c3:fa:b0:a7:a4:44:df:3b:20:94:31:a7:88:12: 48:df:96:f2:1a:c4:5d:c0:b6:82:8b:46:22:15:3b: 5e:a1:d3:bc:c7:aa:3f:a7:8b:01:03:97:bf:0c:9e: 95:e7:64:81:d5:71:db:4a:9e:ef:6e:47:df:47:22: 85:19:c3:21:d4:15:6f:f2:0b:e8:2e:fe:c7:4e:00: fb:c3:29:53:e1:0c:fd:e8:8d:bc:55:df:5f:9e:33: de:e0:e0:fd:e5:42:25:8a:ed:fd:99:9f:84:3d:6b: 12:af:93:5b:dc:c9:69:fc:cf:f6:24:50:ea:d9:a8: 6a:ba:bf:a2:71:e1:83:87:38:ed:50:a2:6a:5f:ad: d4:a6:3f:cf:0b:83:d9:6a:bb:70:e3:fa:80:cc:c5: d8:7f:c3:a0:1a:bb:cf:aa:8d:c1:dd:1a:af:43:73: 07:de:a3:c7:94:90:24:e7:17:dc:70:d4:87:15:35: 6f:6f:e7:21:b7:8f:af:8d:eb:1e:50:a3:cf:89:b5: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:BB:6E:7F:AB:CA:97:A1:B2:86:30:02:38:C8:9E:BF:09:EA:42 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a6:7c:b7:80:57:a0:f7:08:10:22:a4:32:6f:ba:55:15:d8: 91:3f:5d:51:76:80:ba:17:0a:ec:35:a0:ff:41:1f:63:3f:0a: 4d:e4:7a:f1:72:84:e1:64:eb:f9:04:34:8d:1c:40:dd:ca:14: d0:5c:cc:25:75:6e:87:4c:ff:94:4c:dc:ac:13:7e:fd:25:2d: 42:02:bb:59:a1:aa:d0:93:44:34:33:88:88:b8:bd:d1:6a:6b: 28:f8:4d:bc:59:31:20:c6:6d:8e:73:c1:fa:fa:ee:68:a1:10: 74:65:6e:b0:22:0d:df:25:06:56:75:fe:d1:cd:52:85:15:a8: ef:b4:13:cb:c6:ea:bb:d9:1d:84:1e:55:3e:f4:dd:c7:0b:0b: d9:03:51:10:ec:0c:79:2a:ac:20:ea:74:95:0a:a0:4a:cc:d9: a7:2f:13:91:2d:fa:ae:a4:a3:87:93:5e:a7:c6:c3:3b:d3:58: d3:01:f8:1c:af:d7:34:cc:68:2b:14:08:91:8b:7b:f6:e9:51: ff:28:62:02:7e:2e:4d:fc:20:c2:af:fb:86:44:dd:3e:58:bf: 9a:ce:39:02:e5:54:c1:f5:0a:a0:7f:df:d4:90:43:b4:5c:b0: 4a:12:a3:f9:40:3c:88:b5:05:28:db:6b:14:d6:e4:38:ae:36: 02:8a:0e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH5zuao3HYHnU5eMR/ehdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwNjA3MDEwMDI1WhcNMjUwNjA4MDEwMDI1WjAzMTEwLwYDVQQD EygyODNiYmI2ZTdmYWJjYTk3YTFiMjg2MzAwMjM4Yzg5ZWJmMDllYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aPfiqT04ai9tRZQ2Hw1v5mQx/CD nPO8FeSr7g100YeFvTT0t7CeHtYQu+zZriEsS4IHscJ0HF8NzQwEw/qwp6RE3zsg lDGniBJI35byGsRdwLaCi0YiFTteodO8x6o/p4sBA5e/DJ6V52SB1XHbSp7vbkff RyKFGcMh1BVv8gvoLv7HTgD7wylT4Qz96I28Vd9fnjPe4OD95UIliu39mZ+EPWsS r5Nb3Mlp/M/2JFDq2ahqur+iceGDhzjtUKJqX63Upj/PC4PZartw4/qAzMXYf8Og GrvPqo3B3RqvQ3MH3qPHlJAk5xfccNSHFTVvb+cht4+vjeseUKPPibW5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg7u25/q8qXobKGMAI4yJ6/CepCMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaZ8t4BX oPcIECKkMm+6VRXYkT9dUXaAuhcK7DWg/0EfYz8KTeR68XKE4WTr+QQ0jRxA3coU 0FzMJXVuh0z/lEzcrBN+/SUtQgK7WaGq0JNENDOIiLi90WprKPhNvFkxIMZtjnPB +vruaKEQdGVusCIN3yUGVnX+0c1ShRWo77QTy8bqu9kdhB5VPvTdxwsL2QNREOwM eSqsIOp0lQqgSszZpy8TkS36rqSjh5Nep8bDO9NY0wH4HK/XNMxoKxQIkYt79ulR /yhiAn4uTfwgwq/7hkTdPli/ms45AuVUwfUKoH/f1JBDtFywShKj+UA8iLUFKNtr FNbkOK42AooOIg== -----END CERTIFICATE-----Generated at Sat Jun 7 09:17:49 2025 by rpki-client