$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: dgm1NonKAdakmtI/QPKZdrbEtWEcmHtRM441jHcYMmc= Subject key identifier: 48:D4:45:8A:59:5D:18:A8:4D:3A:80:87:B3:65:3D:13:7C:02:7D:15 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 0198808AE55DCBA4D5DAABF389F3466E0990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1621 Signing time: Wed 06 Aug 2025 18:00:42 +0000 Manifest this update: Wed 06 Aug 2025 18:00:42 +0000 Manifest next update: Thu 07 Aug 2025 18:00:42 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: U7jTq2MGmkF9scuZSdkO91hehV9Cta/9jdwqd6mG5Kg=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:80:8a:e5:5d:cb:a4:d5:da:ab:f3:89:f3:46:6e:09:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Aug 6 18:00:42 2025 GMT Not After : Aug 7 18:00:42 2025 GMT Subject: CN=48d4458a595d18a84d3a8087b3653d137c027d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:5a:2d:63:a4:51:f1:34:18:8d:95:bb:6e: 87:5a:1a:11:62:29:8b:96:ec:d8:fc:42:8e:4d:a1: f1:1d:54:13:a4:17:45:6e:a3:f2:5e:d2:a3:38:82: 56:35:8b:7d:5b:92:2a:07:cf:40:7b:08:a6:e3:34: db:a3:12:8f:05:31:af:9b:09:3e:fc:7b:23:06:b8: a8:17:02:dc:e2:1d:82:d3:fb:56:d6:8e:6c:4a:1f: 54:f4:7a:74:4b:7d:4d:07:17:9a:a4:74:66:11:58: 63:38:10:0d:33:7b:72:08:d6:cf:1f:3b:0c:14:3c: e8:2a:11:fe:38:49:12:f5:72:93:ff:24:c5:4b:04: 9d:2b:d5:5b:2f:cf:1a:42:c4:9f:e5:59:b9:3c:a3: c7:fd:02:1a:9f:f0:77:58:93:12:b8:d2:d3:25:59: 5e:67:c2:93:4a:26:cd:42:11:f4:80:7f:2d:76:45: 6b:e3:2c:fd:88:73:39:77:57:8e:c8:53:70:aa:b6: e1:91:ef:19:19:21:cb:5a:e3:50:57:fd:26:05:28: 33:4b:5a:12:04:bf:ed:b7:9a:5e:da:28:71:f7:98: 32:ae:e2:b1:65:08:70:72:a2:4f:f2:8b:ae:64:1b: ae:82:f5:ad:05:32:86:c1:d7:ad:2f:4d:ff:a4:65: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D4:45:8A:59:5D:18:A8:4D:3A:80:87:B3:65:3D:13:7C:02:7D:15 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:30:23:6f:3b:a2:b7:d4:79:8d:5f:68:cc:7a:d3:fb:22:5a: 3b:71:b6:90:d1:a8:75:73:22:9a:a4:39:44:05:6c:38:29:cc: 02:f0:88:06:71:30:fa:58:d8:f8:a3:a9:31:91:60:cb:24:96: 03:37:93:2b:0e:0d:c1:1a:3f:b9:ff:47:46:a8:6c:a1:23:5f: c0:12:3a:51:b3:1b:ea:e6:b4:02:dc:d8:5a:f1:d6:27:03:8b: a0:17:ac:2c:f7:c6:9a:96:ad:6b:31:1a:aa:17:5d:b5:69:78: 4f:35:a9:e4:36:06:c3:da:44:25:67:c2:6e:22:a4:1c:38:5e: 85:63:aa:12:f0:bb:41:6a:f7:0a:cd:24:28:be:bf:f3:ce:4c: 72:9c:09:1f:86:c4:07:77:a5:f6:65:ac:e5:02:8a:43:d0:63: 46:b5:a8:17:ee:6e:8e:87:b3:ae:02:24:c3:c2:a5:6a:d9:85: 62:ba:f7:40:e0:c4:b2:9d:64:c7:b3:5f:96:d2:fb:e3:7b:18: 24:d8:95:f5:56:86:26:8e:e9:73:c7:52:fc:27:cb:f1:41:11: 82:a2:4f:5d:c6:dd:14:0b:43:d1:9d:63:a2:f8:1c:11:a3:f3: 63:7f:fd:18:ee:b5:95:2c:f1:ed:3c:51:86:5e:66:7d:70:3c: 8b:82:0f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiAiuVdy6TV2qvzifNGbgmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUwODA2MTgwMDQyWhcNMjUwODA3MTgwMDQyWjAzMTEwLwYDVQQD Eyg0OGQ0NDU4YTU5NWQxOGE4NGQzYTgwODdiMzY1M2QxMzdjMDI3ZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA9aLWOkUfE0GI2Vu26HWhoRYimL luzY/EKOTaHxHVQTpBdFbqPyXtKjOIJWNYt9W5IqB89Aewim4zTboxKPBTGvmwk+ /HsjBrioFwLc4h2C0/tW1o5sSh9U9Hp0S31NBxeapHRmEVhjOBANM3tyCNbPHzsM FDzoKhH+OEkS9XKT/yTFSwSdK9VbL88aQsSf5Vm5PKPH/QIan/B3WJMSuNLTJVle Z8KTSibNQhH0gH8tdkVr4yz9iHM5d1eOyFNwqrbhke8ZGSHLWuNQV/0mBSgzS1oS BL/tt5pe2ihx95gyruKxZQhwcqJP8ouuZBuugvWtBTKGwdetL03/pGVz3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjURYpZXRioTTqAh7NlPRN8An0VMB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDAjbzui t9R5jV9ozHrT+yJaO3G2kNGodXMimqQ5RAVsOCnMAvCIBnEw+ljY+KOpMZFgyySW AzeTKw4NwRo/uf9HRqhsoSNfwBI6UbMb6ua0AtzYWvHWJwOLoBesLPfGmpatazEa qhddtWl4TzWp5DYGw9pEJWfCbiKkHDhehWOqEvC7QWr3Cs0kKL6/885McpwJH4bE B3el9mWs5QKKQ9BjRrWoF+5ujoezrgIkw8KlatmFYrr3QODEsp1kx7NfltL743sY JNiV9VaGJo7pc8dS/CfL8UERgqJPXcbdFAtD0Z1jovgcEaPzY3/9GO61lSzx7TxR hl5mfXA8i4IPKg== -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:49 2025 by rpki-client