$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: +m8IYpM4RY7LWdt3GwCGmHay9vQcmNjrAAP1aavHrro= Subject key identifier: 7B:D9:9A:0D:71:FA:EF:7E:26:1D:2F:7C:52:5A:C7:FD:2B:AE:CE:8E Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019934C91BD15412FFF88F70ED03E662A379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 187B Signing time: Wed 10 Sep 2025 18:00:19 +0000 Manifest this update: Wed 10 Sep 2025 18:00:19 +0000 Manifest next update: Thu 11 Sep 2025 18:00:19 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: P-v3vv0KtPcU5ckoJuioqfAvCBA.roa (hash: RGoV+ttam68ElUsAZjdRegMArcfjEbAdwWH0ALqYdx4=) 3: Pm6lp3qvcFfLJ4flFgghQPotdyE.roa (hash: LWLp7NCrCP/suPK9y7bFRh+l455QJg6YiGLb5Y5Bs5g=) 4: SLEQZLzCCx2HUHtlCovGfqiajac.roa (hash: YpwhaHcOB7Vp9l2Q6rvkGx/Xsm+vpPELReZ3jK8cuMo=) 5: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 6: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 7: ZcoCLAuMS0FD4SRSBrl4rRHwFtI.roa (hash: g9p+MnHrqDz1zdwz25+f7URDMFu0+pb3qO13uPcQ0yI=) 8: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 9: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: +32aBr9cFP2IZN7RhmOkE3dncF3Pn49GEE1FrVuiH+c=) 11: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 12: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:34:c9:1b:d1:54:12:ff:f8:8f:70:ed:03:e6:62:a3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Sep 10 18:00:19 2025 GMT Not After : Sep 11 18:00:19 2025 GMT Subject: CN=7bd99a0d71faef7e261d2f7c525ac7fd2baece8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:b1:10:2f:31:11:6f:8d:41:25:b7:c9:35: be:25:b5:a4:fc:50:73:35:30:8c:08:e0:a9:85:fd: 39:f9:34:ed:4a:98:7d:e3:c9:c2:30:1b:2a:f8:c6: ff:36:0e:6d:f1:f5:43:97:4b:26:7b:b2:aa:34:49: 29:5e:ad:3c:00:7c:7f:5b:4f:a8:02:f5:95:af:cf: bc:dd:86:02:0e:5f:7b:21:08:2f:84:a1:6d:0c:eb: ca:f7:02:5c:4e:00:13:e5:b4:61:22:10:48:35:6e: 67:a2:f4:f9:65:12:86:48:32:48:c8:c4:ee:72:cb: 86:0c:9b:b9:fa:c3:8a:a0:53:e3:b9:a8:b6:62:9a: fd:da:fb:27:1b:3e:5e:8d:51:75:65:b4:be:30:32: 67:87:d0:2e:8a:7d:1c:70:20:f1:f9:67:4f:cb:42: 58:c0:78:72:af:4a:77:38:d1:e4:f6:4c:6e:2e:3a: 45:a3:a0:da:e6:b6:f7:fe:05:3f:6f:41:cb:32:ae: b9:16:60:f7:05:19:d0:99:a6:57:ad:42:b9:7d:c9: d4:cc:cf:3f:0d:eb:16:13:48:74:a9:a5:15:63:3e: 46:de:4f:55:ed:57:b3:4a:83:18:2c:8b:f9:d2:7c: b0:6f:3d:16:be:61:bd:9a:2b:f3:b7:03:cc:78:34: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:9A:0D:71:FA:EF:7E:26:1D:2F:7C:52:5A:C7:FD:2B:AE:CE:8E X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:27:2b:2b:cb:c9:fe:a4:a1:51:5e:4b:cb:84:03:ee:7e:eb: a4:25:fd:2a:b9:99:94:4d:89:0a:93:0b:e0:07:cb:3f:fb:b7: 2a:2b:e1:9a:07:c8:ab:1d:70:53:58:98:d8:21:68:78:83:ac: 73:a0:c2:9e:0c:73:c8:ca:35:14:71:0e:7f:da:d0:47:47:96: 7c:36:c5:25:24:3d:78:66:01:90:82:a1:8d:89:6a:52:47:6b: aa:4f:ea:b6:13:59:b0:63:f3:c7:dd:46:11:3f:3b:68:cb:1d: 8d:ac:9e:b9:94:7d:bb:de:12:de:45:62:c1:ab:2c:b3:fa:54: 49:f3:ed:55:c3:0c:f8:f4:37:dd:19:0d:54:4a:a4:43:83:8c: 58:aa:28:9e:20:dd:9a:7f:ad:b4:5f:73:af:28:f7:1e:3a:4d: 7a:a7:63:8d:8b:03:60:ce:9a:e8:69:f4:b4:e1:61:44:6c:33: 85:43:ff:c4:d3:49:31:e5:13:a4:95:36:55:b4:5d:e2:f6:c6: df:52:e0:ed:bc:82:1b:bd:f9:7f:df:35:4b:35:5b:db:db:89: 74:b9:35:17:69:5a:fb:08:4a:02:6f:4e:42:34:5d:05:15:59: 87:47:9c:de:1f:18:4b:60:8f:42:d2:f8:6e:3b:1d:f1:4f:4e: b3:bf:28:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk0yRvRVBL/+I9w7QPmYqN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwOTEwMTgwMDE5WhcNMjUwOTExMTgwMDE5WjAzMTEwLwYDVQQD Eyg3YmQ5OWEwZDcxZmFlZjdlMjYxZDJmN2M1MjVhYzdmZDJiYWVjZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBqxEC8xEW+NQSW3yTW+JbWk/FBz NTCMCOCphf05+TTtSph948nCMBsq+Mb/Ng5t8fVDl0sme7KqNEkpXq08AHx/W0+o AvWVr8+83YYCDl97IQgvhKFtDOvK9wJcTgAT5bRhIhBINW5novT5ZRKGSDJIyMTu csuGDJu5+sOKoFPjuai2Ypr92vsnGz5ejVF1ZbS+MDJnh9Auin0ccCDx+WdPy0JY wHhyr0p3ONHk9kxuLjpFo6Da5rb3/gU/b0HLMq65FmD3BRnQmaZXrUK5fcnUzM8/ DesWE0h0qaUVYz5G3k9V7VezSoMYLIv50nywbz0WvmG9mivztwPMeDQlIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvZmg1x+u9+Jh0vfFJax/0rrs6OMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCcrK8vJ /qShUV5Ly4QD7n7rpCX9KrmZlE2JCpML4AfLP/u3KivhmgfIqx1wU1iY2CFoeIOs c6DCngxzyMo1FHEOf9rQR0eWfDbFJSQ9eGYBkIKhjYlqUkdrqk/qthNZsGPzx91G ET87aMsdjayeuZR9u94S3kViwasss/pUSfPtVcMM+PQ33RkNVEqkQ4OMWKooniDd mn+ttF9zryj3HjpNeqdjjYsDYM6a6Gn0tOFhRGwzhUP/xNNJMeUTpJU2VbRd4vbG 31Lg7byCG735f981SzVb29uJdLk1F2la+whKAm9OQjRdBRVZh0ec3h8YS2CPQtL4 bjsd8U9Os78olg== -----END CERTIFICATE-----Generated at Wed Sep 10 21:18:28 2025 by rpki-client