$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: rMeUFJxswC1CrP6clMy7bEwztaMEmwJSUTtmK9MZbqo= Subject key identifier: AB:E4:2D:C1:47:7D:54:21:6D:64:69:F1:B7:15:01:99:9B:11:FE:E6 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 0198D54E801CF0768BA3DABD60E447B8D547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1848 Signing time: Sat 23 Aug 2025 05:02:28 +0000 Manifest this update: Sat 23 Aug 2025 05:02:28 +0000 Manifest next update: Sun 24 Aug 2025 05:02:28 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: P-v3vv0KtPcU5ckoJuioqfAvCBA.roa (hash: RGoV+ttam68ElUsAZjdRegMArcfjEbAdwWH0ALqYdx4=) 3: SLEQZLzCCx2HUHtlCovGfqiajac.roa (hash: YpwhaHcOB7Vp9l2Q6rvkGx/Xsm+vpPELReZ3jK8cuMo=) 4: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 5: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 6: ZcoCLAuMS0FD4SRSBrl4rRHwFtI.roa (hash: g9p+MnHrqDz1zdwz25+f7URDMFu0+pb3qO13uPcQ0yI=) 7: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 8: kwOyuuDg3-S03TS2I0WqFSe_pu8.roa (hash: ZbyfvHOE7g5cp+O9MlAOCTO0HekTFMhe/qoLPlPfLHo=) 9: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: pFGsEZ11ybB5KX0YpYwcQnjdXWqGRT9SmJqJiaPLeTs=) 11: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 12: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:80:1c:f0:76:8b:a3:da:bd:60:e4:47:b8:d5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Aug 23 05:02:28 2025 GMT Not After : Aug 24 05:02:28 2025 GMT Subject: CN=abe42dc1477d54216d6469f1b71501999b11fee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:1d:7b:8b:74:58:a0:35:f7:cb:90:21:84: d0:38:69:f3:d9:38:62:c3:91:55:a5:3b:64:a3:95: cc:b5:9b:1c:7e:4e:1d:95:e2:8e:04:a2:5c:58:5e: 86:73:59:05:ad:46:62:e9:bf:34:ec:90:64:f4:d8: cc:70:21:5a:5b:47:cd:89:eb:71:ed:50:c0:8f:48: 45:b9:14:d3:d0:c4:13:53:d5:85:1f:b7:1e:99:ea: 23:9f:a6:00:cd:77:9f:ce:f7:2e:f5:b3:ab:39:c9: e9:9d:9b:5c:a7:d5:52:e5:da:04:bd:69:17:de:24: fa:ff:9f:90:d0:d8:95:58:1a:11:30:39:ac:bb:a4: 97:15:c0:d0:7a:e0:52:7c:76:3b:ec:73:79:02:c2: e6:e1:d6:69:c0:38:22:46:89:69:64:18:3d:c9:34: ad:72:a7:36:08:2e:b3:27:79:df:f2:c9:d6:8c:71: 2b:ba:6a:2d:9c:f5:31:86:e3:dd:22:88:66:33:a3: 8b:4b:4b:5c:a4:5e:78:0a:29:5d:f5:f2:c0:2d:c3: 8c:33:77:2f:90:b9:8b:ac:11:c0:2f:fe:a6:80:ca: 98:36:db:49:1b:79:e9:87:91:8e:51:7a:01:e1:56: a2:2d:20:2f:6b:06:ed:83:3e:6c:98:84:c2:a2:67: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E4:2D:C1:47:7D:54:21:6D:64:69:F1:B7:15:01:99:9B:11:FE:E6 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bd:77:e3:9b:61:cf:5d:cf:78:11:4f:f8:4f:2c:46:14:ce: b8:fa:79:28:54:67:c3:63:ef:db:29:52:8d:d0:c7:47:d8:87: d6:c4:6e:02:0b:c7:3d:f6:50:cc:12:d5:8e:b0:8a:03:54:2b: 4b:8d:da:92:73:8b:b1:c6:f3:5f:8f:c9:0c:91:b0:9e:42:7f: ba:f2:d2:39:96:4f:0f:8b:21:c4:4d:df:6d:36:3d:8c:c9:67: cc:c6:0f:df:af:a3:dd:a4:09:13:c5:57:7c:ae:27:69:50:82: fc:fa:db:c9:66:12:c2:9e:e6:77:70:fb:e2:c8:c1:15:c4:59: e4:07:2d:11:84:4a:17:88:df:67:bf:c6:a9:9b:be:93:96:25: bf:59:cf:07:97:d9:84:fe:3a:6f:b7:e3:e3:4e:09:09:09:6b: bb:e9:34:c3:80:68:29:1f:32:c1:1c:ef:97:d7:e1:d6:e6:33: de:fa:bf:9f:3f:c5:a5:16:7b:2b:a7:57:d3:1c:bd:3e:4f:33: 06:a6:75:80:8a:3c:e4:e3:28:4f:33:dc:b6:f7:41:68:ea:fc: 77:b8:4f:83:86:a7:ac:e8:bc:4f:d6:1b:08:ca:20:6f:bb:50: 99:23:3a:78:11:9f:e8:20:bd:5e:90:84:62:1e:7a:d4:c7:f3: 31:aa:50:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVToAc8HaLo9q9YORHuNVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUwODIzMDUwMjI4WhcNMjUwODI0MDUwMjI4WjAzMTEwLwYDVQQD EyhhYmU0MmRjMTQ3N2Q1NDIxNmQ2NDY5ZjFiNzE1MDE5OTliMTFmZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqQde4t0WKA198uQIYTQOGnz2Thi w5FVpTtko5XMtZscfk4dleKOBKJcWF6Gc1kFrUZi6b807JBk9NjMcCFaW0fNietx 7VDAj0hFuRTT0MQTU9WFH7cemeojn6YAzXefzvcu9bOrOcnpnZtcp9VS5doEvWkX 3iT6/5+Q0NiVWBoRMDmsu6SXFcDQeuBSfHY77HN5AsLm4dZpwDgiRolpZBg9yTSt cqc2CC6zJ3nf8snWjHErumotnPUxhuPdIohmM6OLS0tcpF54Cild9fLALcOMM3cv kLmLrBHAL/6mgMqYNttJG3nph5GOUXoB4VaiLSAvawbtgz5smITComf3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvkLcFHfVQhbWRp8bcVAZmbEf7mMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb1345th z13PeBFP+E8sRhTOuPp5KFRnw2Pv2ylSjdDHR9iH1sRuAgvHPfZQzBLVjrCKA1Qr S43aknOLscbzX4/JDJGwnkJ/uvLSOZZPD4shxE3fbTY9jMlnzMYP36+j3aQJE8VX fK4naVCC/PrbyWYSwp7md3D74sjBFcRZ5ActEYRKF4jfZ7/GqZu+k5Ylv1nPB5fZ hP46b7fj404JCQlru+k0w4BoKR8ywRzvl9fh1uYz3vq/nz/FpRZ7K6dX0xy9Pk8z BqZ1gIo85OMoTzPctvdBaOr8d7hPg4anrOi8T9YbCMogb7tQmSM6eBGf6CC9XpCE Yh561MfzMapQTA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:41:29 2025 by rpki-client