$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: Zh+jeYrE8jO6JdDHTKGwMcpTrbPOZjtMznnEtIrpaN8= Subject key identifier: 97:00:03:77:B3:E1:62:58:3F:7B:A2:B9:C4:91:81:72:B9:87:A4:EE Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 01969E9AD741543F45008B78D430D3D00F2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1704 Signing time: Mon 05 May 2025 04:01:09 +0000 Manifest this update: Mon 05 May 2025 04:01:09 +0000 Manifest next update: Tue 06 May 2025 04:01:09 +0000 Files and hashes: 1: G219Y64AdfvWR2NuekRtXdgP-Ic.roa (hash: 5+RXRW/15EIQ38duZeOS5dPeZR9sfJdvGbXk53gYh2w=) 2: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 3: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=) 4: UMkHnIq7XWRmxvmDvgvckqsDfyg.roa (hash: UclYhW3LjpNehjDdsWCzHEOORl0S/2R/2opPQs9YB3A=) 5: aMCpVj1Fefbqz5te0ANwzU5pAtU.roa (hash: /TZGThQW9xF+8qGqInkXk4qaM698Wah4degkQvBR09w=) 6: fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa (hash: pI5sDBFJByOhv7aMqIYQbfKd/45ixTiiuKep9pppuh0=) 7: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 8: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 9: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: 24AElV0FZoa6jTrtlCwOtxiFrj01PTUWT0o0JWvF3gI=) 10: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 11: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 12: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9e:9a:d7:41:54:3f:45:00:8b:78:d4:30:d3:d0:0f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: May 5 04:01:09 2025 GMT Not After : May 6 04:01:09 2025 GMT Subject: CN=97000377b3e162583f7ba2b9c4918172b987a4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:7c:b4:79:31:cf:b9:da:2d:cd:a3:b5:7d: 86:50:7b:11:99:fd:6a:b4:19:6c:40:f7:6b:2f:ba: a1:0e:9e:45:bd:20:b2:0a:2f:8e:6a:1c:cb:ae:1f: ea:57:62:79:6f:23:0c:1f:45:49:57:63:48:4b:68: 31:f4:0e:ad:06:f6:32:5e:1f:15:e6:91:00:40:e0: 96:96:6e:1d:0d:15:7c:2d:a8:c5:ed:25:d1:05:a7: d8:73:d8:21:0f:e6:6b:48:42:45:53:44:9a:20:c1: 6c:5f:b9:39:3d:7c:29:e5:51:41:a9:9b:1f:95:60: bf:2c:77:e6:2e:52:2d:6b:41:25:e0:72:b2:b2:13: 31:3f:df:c3:26:b6:88:57:3f:ba:ae:4c:c1:0c:18: ac:1c:89:34:6a:1c:b8:a5:2e:49:a9:c9:cc:2c:0d: 1b:60:df:13:0e:c6:39:12:8a:3e:09:64:25:7b:39: 3e:30:5b:4f:ae:99:c5:62:17:da:95:a5:a4:8d:e3: 07:d4:1f:00:db:b7:b9:12:1f:28:88:46:92:0d:02: 5f:1a:bd:e1:69:04:39:bc:d7:d0:ff:30:05:70:1c: ad:49:61:02:85:40:8f:be:a7:dc:44:2f:47:d2:99: 2d:d2:12:84:5b:a7:18:7d:58:f8:53:8b:64:66:d6: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:00:03:77:B3:E1:62:58:3F:7B:A2:B9:C4:91:81:72:B9:87:A4:EE X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:32:91:c5:0b:4b:20:05:09:b2:cb:9f:28:81:22:20:06:a1: a4:ac:79:69:b6:af:ff:17:28:b8:e3:55:3c:1e:4b:80:31:70: 95:75:a2:01:3d:4f:f3:b0:3e:d5:01:6c:ac:4d:dd:34:de:cb: fd:ca:9c:b9:82:26:b5:34:4f:14:d5:ef:4c:3f:22:7d:67:0b: 1e:12:90:98:18:2d:9e:7e:5b:2f:4e:90:bf:af:63:53:a7:99: ab:44:54:39:ed:f5:4a:2b:52:2d:10:12:3d:fd:8f:c4:d2:b2: 3a:35:62:d5:b9:82:07:3e:de:f8:b2:c0:18:f6:87:15:12:36: 70:bf:28:d9:4d:8f:a8:1e:1c:c1:cb:8f:ff:c0:ff:3a:b7:04: 6e:c2:d4:5d:69:2b:f2:a3:0b:67:2b:9d:54:f6:95:45:13:a4: fb:cb:31:f8:26:b6:30:94:e4:fb:77:3e:e6:06:7f:30:6c:10: 9f:8d:03:ee:73:ba:75:3c:a7:99:0a:6e:b2:d7:9b:93:9e:b4: 03:4b:42:c3:5b:6c:dd:74:4b:8c:43:11:d7:d9:71:5b:cb:53: 6e:fe:3a:5f:81:63:f1:d6:5d:a1:e3:6d:59:77:38:a2:02:48: ab:c3:cf:fb:b6:7f:cd:42:c4:bf:e3:5f:30:1b:2a:20:95:d5: ac:e7:5e:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaemtdBVD9FAIt41DDT0A8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwNTA1MDQwMTA5WhcNMjUwNTA2MDQwMTA5WjAzMTEwLwYDVQQD Eyg5NzAwMDM3N2IzZTE2MjU4M2Y3YmEyYjljNDkxODE3MmI5ODdhNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3958tHkxz7naLc2jtX2GUHsRmf1q tBlsQPdrL7qhDp5FvSCyCi+OahzLrh/qV2J5byMMH0VJV2NIS2gx9A6tBvYyXh8V 5pEAQOCWlm4dDRV8LajF7SXRBafYc9ghD+ZrSEJFU0SaIMFsX7k5PXwp5VFBqZsf lWC/LHfmLlIta0El4HKyshMxP9/DJraIVz+6rkzBDBisHIk0ahy4pS5JqcnMLA0b YN8TDsY5Eoo+CWQlezk+MFtPrpnFYhfalaWkjeMH1B8A27e5Eh8oiEaSDQJfGr3h aQQ5vNfQ/zAFcBytSWEChUCPvqfcRC9H0pkt0hKEW6cYfVj4U4tkZtb09QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcAA3ez4WJYP3uiucSRgXK5h6TuMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDKRxQtL IAUJssufKIEiIAahpKx5abav/xcouONVPB5LgDFwlXWiAT1P87A+1QFsrE3dNN7L /cqcuYImtTRPFNXvTD8ifWcLHhKQmBgtnn5bL06Qv69jU6eZq0RUOe31SitSLRAS Pf2PxNKyOjVi1bmCBz7e+LLAGPaHFRI2cL8o2U2PqB4cwcuP/8D/OrcEbsLUXWkr 8qMLZyudVPaVRROk+8sx+Ca2MJTk+3c+5gZ/MGwQn40D7nO6dTynmQpustebk560 A0tCw1ts3XRLjEMR19lxW8tTbv46X4Fj8dZdoeNtWXc4ogJIq8PP+7Z/zULEv+Nf MBsqIJXVrOde3A== -----END CERTIFICATE-----Generated at Mon May 5 07:07:54 2025 by rpki-client