$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: KWnHoMYxKOEnno9o2/Y7ZOrgIOfN0zukVugHxNf6aYU= Subject key identifier: 97:FC:0C:17:AB:C3:14:6F:D7:5A:93:D4:3E:F1:E5:2A:1A:59:1B:50 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019A4C97CDFC193FC68E980CAC595EC501DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1729 Signing time: Tue 04 Nov 2025 02:00:08 +0000 Manifest this update: Tue 04 Nov 2025 02:00:08 +0000 Manifest next update: Wed 05 Nov 2025 02:00:08 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: e+/n+XUCOw1rYd+lJ0VH0c2t67j6jrDyB8rwroaHhPw=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:97:cd:fc:19:3f:c6:8e:98:0c:ac:59:5e:c5:01:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Nov 4 02:00:08 2025 GMT Not After : Nov 5 02:00:08 2025 GMT Subject: CN=97fc0c17abc3146fd75a93d43ef1e52a1a591b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:72:6d:02:6c:0d:ed:46:e4:b9:7a:b1:6d: bf:8e:96:15:35:9c:3a:c0:86:c2:92:4b:82:2f:09: 18:d4:47:26:93:a9:19:b0:2b:f1:aa:5e:4e:31:65: ce:ad:bc:98:7a:f6:0a:63:c1:a5:86:e6:8c:23:a0: 9a:73:35:e2:84:d1:e7:a8:be:26:ff:b7:ea:3c:4d: 2b:a2:9e:ae:4b:ea:6d:a7:30:ee:9b:ba:c5:f8:32: 32:2c:31:67:d4:d1:b1:af:f6:b9:3b:87:69:8d:7f: 84:ec:8d:90:7d:19:f7:a5:e1:9a:1e:20:6d:be:77: c2:ea:fe:1c:a5:3c:21:bc:06:ad:b6:8d:48:3a:f0: 6f:76:b2:b9:78:b6:17:b1:fe:dd:d4:02:2b:25:b6: 77:37:9e:bd:ed:6c:b4:ed:af:f3:42:14:85:5c:59: e7:cc:2c:3f:53:72:f1:a6:f5:2a:28:3d:96:6c:19: e6:28:17:df:58:aa:9e:43:c0:22:34:e1:0e:a6:53: 87:fd:2c:d5:d5:43:aa:8e:73:de:92:0d:1f:7f:5c: ac:31:b9:74:34:7a:16:07:da:1b:78:54:b5:f9:c9: 7b:20:0d:64:af:e8:dc:4d:d7:10:b5:bf:5f:f1:07: a0:ef:ca:29:10:d3:16:d2:b7:eb:56:4e:72:00:ff: 2a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FC:0C:17:AB:C3:14:6F:D7:5A:93:D4:3E:F1:E5:2A:1A:59:1B:50 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ea:ab:70:fa:ec:4b:34:94:2c:21:b1:51:f1:8e:61:ae:7b: 86:89:2f:5d:bf:b4:db:11:4d:77:c8:17:8f:78:07:65:66:6d: 95:c9:e2:18:de:90:3a:b8:29:ae:33:bd:25:bf:8d:7d:52:d2: 7b:b4:5c:6d:06:e5:cd:6b:89:f1:e5:23:9f:24:5c:0d:3a:20: 52:3a:e4:be:ee:e3:a4:56:95:25:98:65:e6:5f:05:f0:1a:79: f2:5c:6c:21:fc:ed:6f:9b:12:32:82:48:de:6a:a3:fa:3d:e6: f2:20:92:a4:7f:ad:bc:ac:d2:19:4e:74:30:e1:59:b3:51:cf: d0:11:af:cc:0b:7a:e6:05:1c:cd:af:3f:35:b6:02:38:6a:b6: a9:31:cb:e2:8c:b1:16:8e:f1:0c:94:38:44:ab:b5:6a:ea:54: f6:3c:29:68:2c:52:b0:bf:ae:e2:f8:89:27:9d:87:7f:66:cd: aa:a2:54:41:8f:2c:a8:dc:5f:7c:53:08:49:87:c4:49:3c:1f: b0:73:82:23:3a:ac:e6:8f:86:6d:d4:74:55:87:3a:ff:88:74: c1:c3:6e:14:8b:02:cd:42:4a:b5:47:33:9c:af:e3:c2:09:15: 29:04:55:e3:08:59:90:3f:8b:b3:24:42:83:95:5e:72:17:a2: 33:8f:c9:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMl838GT/GjpgMrFlexQHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUxMTA0MDIwMDA4WhcNMjUxMTA1MDIwMDA4WjAzMTEwLwYDVQQD Eyg5N2ZjMGMxN2FiYzMxNDZmZDc1YTkzZDQzZWYxZTUyYTFhNTkxYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujVybQJsDe1G5Ll6sW2/jpYVNZw6 wIbCkkuCLwkY1Ecmk6kZsCvxql5OMWXOrbyYevYKY8GlhuaMI6CaczXihNHnqL4m /7fqPE0rop6uS+ptpzDum7rF+DIyLDFn1NGxr/a5O4dpjX+E7I2QfRn3peGaHiBt vnfC6v4cpTwhvAatto1IOvBvdrK5eLYXsf7d1AIrJbZ3N5697Wy07a/zQhSFXFnn zCw/U3LxpvUqKD2WbBnmKBffWKqeQ8AiNOEOplOH/SzV1UOqjnPekg0ff1ysMbl0 NHoWB9obeFS1+cl7IA1kr+jcTdcQtb9f8Qeg78opENMW0rfrVk5yAP8qFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf8DBerwxRv11qT1D7x5SoaWRtQMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeqrcPrs SzSULCGxUfGOYa57hokvXb+02xFNd8gXj3gHZWZtlcniGN6QOrgprjO9Jb+NfVLS e7RcbQblzWuJ8eUjnyRcDTogUjrkvu7jpFaVJZhl5l8F8Bp58lxsIfztb5sSMoJI 3mqj+j3m8iCSpH+tvKzSGU50MOFZs1HP0BGvzAt65gUcza8/NbYCOGq2qTHL4oyx Fo7xDJQ4RKu1aupU9jwpaCxSsL+u4viJJ52Hf2bNqqJUQY8sqNxffFMISYfESTwf sHOCIzqs5o+GbdR0VYc6/4h0wcNuFIsCzUJKtUcznK/jwgkVKQRV4whZkD+LsyRC g5VecheiM4/JTA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:48:09 2025 by rpki-client