$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: QCvL8bcGdClQmm63pvWKfssL28Fdhha6WThId4bR/40= Subject key identifier: 78:36:41:71:08:AD:35:C0:C3:E4:08:25:77:D9:23:AE:79:34:E6:56 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 0199FBEB52C76818605697E671190E6FD9C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 18E3 Signing time: Sun 19 Oct 2025 10:02:07 +0000 Manifest this update: Sun 19 Oct 2025 10:02:07 +0000 Manifest next update: Mon 20 Oct 2025 10:02:07 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: P-v3vv0KtPcU5ckoJuioqfAvCBA.roa (hash: RGoV+ttam68ElUsAZjdRegMArcfjEbAdwWH0ALqYdx4=) 3: Pm6lp3qvcFfLJ4flFgghQPotdyE.roa (hash: LWLp7NCrCP/suPK9y7bFRh+l455QJg6YiGLb5Y5Bs5g=) 4: SLEQZLzCCx2HUHtlCovGfqiajac.roa (hash: YpwhaHcOB7Vp9l2Q6rvkGx/Xsm+vpPELReZ3jK8cuMo=) 5: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 6: UxAe-vuq0LASbymfXY97A2tyW0I.roa (hash: wK0TUb6+fwtEAOQM+tFuYJCxYRBZyTLv6liL52P7etQ=) 7: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 8: ZcoCLAuMS0FD4SRSBrl4rRHwFtI.roa (hash: g9p+MnHrqDz1zdwz25+f7URDMFu0+pb3qO13uPcQ0yI=) 9: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 10: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 11: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: z1XjpMYa9465i4xV93S7fIgE9O+QdGzKt6wnApILGqU=) 12: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 13: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:52:c7:68:18:60:56:97:e6:71:19:0e:6f:d9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Oct 19 10:02:07 2025 GMT Not After : Oct 20 10:02:07 2025 GMT Subject: CN=7836417108ad35c0c3e4082577d923ae7934e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:09:a1:d2:e6:b7:21:96:2e:e0:4b:2f:7f: b3:1a:4f:04:3c:e7:c8:32:49:cc:98:5d:b6:70:e5: 1b:7d:c1:20:46:f2:4a:70:a4:61:5e:49:35:95:93: b3:0f:03:34:3f:69:1e:69:42:f1:01:18:05:fa:c2: 09:74:a0:5f:f5:34:6f:f5:a5:4e:0b:00:e0:48:77: d6:7d:d4:ac:92:39:c3:02:cf:9b:7b:e3:3f:d1:ab: 57:ea:76:d7:b0:1d:82:a4:96:57:2f:af:96:2c:52: ac:29:cb:45:bf:3d:e4:c5:d2:a0:99:6f:71:99:eb: 49:ff:60:8e:36:b4:42:b8:fc:9f:4f:52:6d:4f:b5: d1:0f:87:72:e7:90:18:d3:95:8e:a7:d7:20:75:7c: cc:8d:fb:b3:9e:ab:1a:23:2c:8c:45:48:48:46:42: 11:ee:fe:e3:74:69:17:1a:b8:79:88:0c:0d:13:60: c9:1c:84:e2:92:78:14:0e:76:34:e9:07:4a:08:84: 84:21:c7:81:74:61:db:a1:58:01:95:00:b3:0a:36: 2b:f5:88:1e:59:9f:7b:8f:2a:e9:91:1f:11:73:bf: fa:85:ac:2c:52:c2:87:d5:f4:86:00:fc:83:ee:6b: 84:db:9e:be:f2:18:71:7a:00:e5:e1:d3:9e:50:47: d8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:36:41:71:08:AD:35:C0:C3:E4:08:25:77:D9:23:AE:79:34:E6:56 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0a:9a:7a:4f:5a:a5:b1:0f:c4:d2:a3:c0:27:f5:78:4f:eb: 02:43:32:96:35:d1:fd:a5:c1:fa:18:95:21:c2:0c:3e:95:e2: 44:b4:6b:78:be:62:e5:ee:8b:b3:76:34:c3:fd:c9:d6:14:b1: 29:65:db:67:3c:b5:1b:8e:97:76:08:e2:77:a2:ef:5c:e1:3b: 2f:a2:63:21:ac:19:5b:3c:5e:6f:87:9f:77:ef:86:ce:c7:83: 72:fc:a7:ac:20:a8:93:64:46:ff:69:ef:9d:95:a2:fa:7f:70: 22:6e:87:9e:7d:1c:33:57:0a:de:e0:41:50:d6:a1:53:46:f8: 34:9a:23:f0:06:54:95:65:98:e7:c2:ab:98:c4:9c:16:87:d2: eb:84:03:c7:fe:96:68:c9:43:f4:f8:65:15:f1:89:fe:52:9d: 3d:a1:24:07:64:66:b5:cb:7c:a4:bd:3f:bc:6e:9f:7a:12:95: 1b:5b:a2:17:81:41:5f:f7:ae:71:ae:cb:e8:4a:14:da:5d:44: d1:9b:e8:c5:3a:8e:84:99:49:5e:48:2d:0f:b3:2a:c4:dd:4a: 66:98:94:a6:d9:21:4f:ed:d6:27:db:fc:dc:cd:0c:59:64:42: df:ba:43:1f:0b:3b:d6:0d:b3:a2:c6:cb:17:f1:32:32:ba:9e: 83:b6:bd:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn761LHaBhgVpfmcRkOb9nGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUxMDE5MTAwMjA3WhcNMjUxMDIwMTAwMjA3WjAzMTEwLwYDVQQD Eyg3ODM2NDE3MTA4YWQzNWMwYzNlNDA4MjU3N2Q5MjNhZTc5MzRlNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscwJodLmtyGWLuBLL3+zGk8EPOfI MknMmF22cOUbfcEgRvJKcKRhXkk1lZOzDwM0P2keaULxARgF+sIJdKBf9TRv9aVO CwDgSHfWfdSskjnDAs+be+M/0atX6nbXsB2CpJZXL6+WLFKsKctFvz3kxdKgmW9x metJ/2CONrRCuPyfT1JtT7XRD4dy55AY05WOp9cgdXzMjfuznqsaIyyMRUhIRkIR 7v7jdGkXGrh5iAwNE2DJHITikngUDnY06QdKCISEIceBdGHboVgBlQCzCjYr9Yge WZ97jyrpkR8Rc7/6hawsUsKH1fSGAPyD7muE256+8hhxegDl4dOeUEfYaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHg2QXEIrTXAw+QIJXfZI655NOZWMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQqaek9a pbEPxNKjwCf1eE/rAkMyljXR/aXB+hiVIcIMPpXiRLRreL5i5e6Ls3Y0w/3J1hSx KWXbZzy1G46Xdgjid6LvXOE7L6JjIawZWzxeb4efd++GzseDcvynrCCok2RG/2nv nZWi+n9wIm6Hnn0cM1cK3uBBUNahU0b4NJoj8AZUlWWY58KrmMScFofS64QDx/6W aMlD9PhlFfGJ/lKdPaEkB2Rmtct8pL0/vG6fehKVG1uiF4FBX/euca7L6EoU2l1E 0ZvoxTqOhJlJXkgtD7MqxN1KZpiUptkhT+3WJ9v83M0MWWRC37pDHws71g2zosbL F/EyMrqeg7a9gQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:37:06 2025 by rpki-client