$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: dfCwBdH4y7oJIhGib5gBEM/xi88nlIBcFsKc4pbOCzs= Subject key identifier: 2F:64:AA:4B:1E:76:C5:BA:1B:E7:EB:9F:60:89:E4:69:A4:C6:EC:A8 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 0197B8FD3349AA9D49D5897638D73863637F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 17A5 Signing time: Sun 29 Jun 2025 00:01:30 +0000 Manifest this update: Sun 29 Jun 2025 00:01:30 +0000 Manifest next update: Mon 30 Jun 2025 00:01:30 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: 8toB7VFNGybG6ifS92zANgzIE1g.roa (hash: Xm6zBEQ9EAvLXB5HW7NMAdOsXFA/FL2WctKzXcvROIM=) 3: FYveWoN8G4Mc9xqmzxZPD08NVq0.roa (hash: iF8YslgSWkV/O08KHGCTJNZCZccUSOC6VQIpX2fzF7g=) 4: REcGuo92b1DY8T4ANyCVgkFrnZo.roa (hash: T3jB7dTvEm92KYKX7S2GWrFjgYef5PEnqJNsMjzWJ/Y=) 5: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 6: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=) 7: VvXmAfjVw54vY7d91UzupmqoF6o.roa (hash: sTB0yCV/ZuSBahnlvzgCou59omGp61y4mLaAz0thtOM=) 8: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 9: kMts3hx-qWKJDtFLvIyyQmj1MsU.roa (hash: 1mgCcrqsDFQy+qo6HuaIVhE6BHRje2bNOQ89LKJX5P8=) 10: o-k703YStiAy5KUZuCIku-Gb1VI.roa (hash: HdUF/e0Ve/16Io5tSSce+LiQN66lprLkSnrx4lYGkbk=) 11: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 12: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: ZWYJKTezRbW+e83fsK+6+tLn4PwzBvIU16GnWw75FmU=) 13: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 14: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=) 15: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:fd:33:49:aa:9d:49:d5:89:76:38:d7:38:63:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jun 29 00:01:30 2025 GMT Not After : Jun 30 00:01:30 2025 GMT Subject: CN=2f64aa4b1e76c5ba1be7eb9f6089e469a4c6eca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:dc:39:30:d1:df:74:6d:e3:23:fc:d4:c2: 30:11:de:5b:a8:c0:1b:9e:b9:e6:d6:78:34:cf:da: 0b:c8:0d:9a:8d:cb:e5:b1:f6:d9:28:3b:ca:7c:34: 9d:e7:bc:be:57:b6:a3:ba:de:59:f6:b1:5a:7f:d0: ef:88:91:df:4a:05:e0:d4:ff:4d:01:c4:b5:29:df: f2:5e:03:3b:bf:22:fa:e5:16:b2:72:d2:a3:cb:6b: ab:26:b0:34:5a:b6:27:d4:5a:17:19:d6:9c:8d:7f: 68:82:57:7f:71:22:c3:8e:02:33:93:1e:bf:99:c3: f0:fc:2b:80:a3:f9:2b:e0:4d:bd:1c:1f:6b:25:21: a4:7f:b4:3c:af:d4:44:3b:52:ff:c9:43:07:a4:3c: 44:a8:c5:6d:f4:32:be:c5:10:ba:b0:a1:0f:b1:63: f3:46:55:1c:77:42:98:5d:42:b5:fe:ce:be:b7:92: 22:ff:05:44:13:14:c1:dd:f0:cf:8e:69:8e:ca:c8: 27:4c:9a:e0:99:9e:30:07:2f:7e:e9:0b:d0:3c:4d: e1:fc:c9:31:70:12:e0:28:78:ac:b3:df:0b:8f:55: 06:ab:84:cc:b9:2e:f2:57:3f:4a:94:d7:8f:6f:10: 53:1c:9d:16:d3:d6:f0:4c:48:5e:ac:82:7e:f3:4a: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:AA:4B:1E:76:C5:BA:1B:E7:EB:9F:60:89:E4:69:A4:C6:EC:A8 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:ef:35:f9:f3:e6:af:4c:7e:93:4c:94:5d:d4:c8:87:e1: 80:5d:16:64:c1:3b:80:bc:55:68:3c:6c:5b:6e:42:f0:53:46: d2:36:e0:12:6c:db:1f:bd:49:3d:ee:f2:1d:81:75:cd:94:3a: fb:16:cc:63:18:18:17:f6:f7:ff:2c:d2:a3:60:95:01:5a:87: d1:c9:bc:e6:dd:bc:1c:70:0f:ce:5f:d8:6e:c9:04:db:7e:ef: 48:47:f3:8b:16:0d:b3:68:6a:dc:74:d9:1d:9c:53:ff:80:b9: 00:56:b6:f9:a3:28:db:3b:c9:56:79:85:45:f8:b2:31:89:f8: e2:7a:78:39:d0:0f:f5:4a:2d:dd:0d:7e:f6:81:60:d8:2c:1c: 5e:77:12:32:5e:42:d2:4c:23:73:90:3f:75:21:40:03:f7:58: 10:73:fa:1d:58:fa:c2:a0:ab:3a:02:58:51:38:cf:22:5f:ff: 20:7a:0d:4c:50:2a:0d:48:62:90:8e:33:71:bc:90:f5:ce:3f: 21:3f:de:57:32:0b:56:98:27:bc:e3:43:e7:03:7e:25:3e:1b: 00:11:b5:51:07:87:1a:95:5c:15:77:8c:4b:cf:88:74:54:6c: af:db:4d:18:dd:e4:7d:53:ec:2a:ab:e2:50:dd:f2:6f:26:ea: a9:8e:00:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4/TNJqp1J1Yl2ONc4Y2N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwNjI5MDAwMTMwWhcNMjUwNjMwMDAwMTMwWjAzMTEwLwYDVQQD EygyZjY0YWE0YjFlNzZjNWJhMWJlN2ViOWY2MDg5ZTQ2OWE0YzZlY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgvcOTDR33Rt4yP81MIwEd5bqMAb nrnm1ng0z9oLyA2ajcvlsfbZKDvKfDSd57y+V7ajut5Z9rFaf9DviJHfSgXg1P9N AcS1Kd/yXgM7vyL65RayctKjy2urJrA0WrYn1FoXGdacjX9ogld/cSLDjgIzkx6/ mcPw/CuAo/kr4E29HB9rJSGkf7Q8r9REO1L/yUMHpDxEqMVt9DK+xRC6sKEPsWPz RlUcd0KYXUK1/s6+t5Ii/wVEExTB3fDPjmmOysgnTJrgmZ4wBy9+6QvQPE3h/Mkx cBLgKHiss98Lj1UGq4TMuS7yVz9KlNePbxBTHJ0W09bwTEherIJ+80oZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9kqksedsW6G+frn2CJ5GmkxuyoMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeLvNfnz 5q9MfpNMlF3UyIfhgF0WZME7gLxVaDxsW25C8FNG0jbgEmzbH71JPe7yHYF1zZQ6 +xbMYxgYF/b3/yzSo2CVAVqH0cm85t28HHAPzl/YbskE237vSEfzixYNs2hq3HTZ HZxT/4C5AFa2+aMo2zvJVnmFRfiyMYn44np4OdAP9Uot3Q1+9oFg2CwcXncSMl5C 0kwjc5A/dSFAA/dYEHP6HVj6wqCrOgJYUTjPIl//IHoNTFAqDUhikI4zcbyQ9c4/ IT/eVzILVpgnvOND5wN+JT4bABG1UQeHGpVcFXeMS8+IdFRsr9tNGN3kfVPsKqvi UN3ybybqqY4AZQ== -----END CERTIFICATE-----Generated at Sun Jun 29 06:50:33 2025 by rpki-client