$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: q0hQzQ7DsxwBPv9FDFdORPQ9/rbJOsl+O3s0MhUCHVw= Subject key identifier: CB:87:B4:6B:D7:93:18:D0:9F:60:71:14:2E:E0:E5:F7:18:9F:A0:22 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01A0CF35F55DC43D77117E3FE60EFEAE006D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1A8A Signing time: Wed 23 Sep 2026 17:00:14 +0000 Manifest this update: Wed 23 Sep 2026 17:00:14 +0000 Manifest next update: Thu 24 Sep 2026 17:00:14 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 3: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 4: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: s/RdpCtaekh/xKNiudaVTL1BuSEwPgQ7NkDRexOrmzE=) 5: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 6: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 7: OVwsXYypxA7SEcE0oqAv66KV2iw.roa (hash: p2ldypSF2XQKcxweJh6LjsaWiKlRwLKkcdSWL7M3990=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa (hash: tKohV45mbquQ6A1OYA4BBMCrfZiBK3eEB8vOzL2T2gM=) 10: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:35:f5:5d:c4:3d:77:11:7e:3f:e6:0e:fe:ae:00:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Sep 23 17:00:14 2026 GMT Not After : Sep 24 17:00:14 2026 GMT Subject: CN=cb87b46bd79318d09f6071142ee0e5f7189fa022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:f2:01:8d:3e:34:10:56:bd:98:70:c8:a6: b5:70:6c:8d:44:bb:42:b7:e1:97:91:50:ad:be:da: f8:a7:95:f2:c8:8c:49:e1:9f:a0:5b:8f:65:36:46: 43:7e:f5:a0:60:cb:07:1e:2d:40:ea:29:d6:dd:1a: 43:93:24:52:fe:81:bc:ef:56:14:9e:fc:96:ba:9d: 13:e8:78:3f:00:fc:a9:a1:8a:a8:3e:26:be:dc:d6: 03:15:7a:22:a9:a7:ab:aa:c4:03:55:26:ff:0e:95: f3:ec:ae:79:1e:ef:fa:2c:be:e8:99:e3:fd:bb:b0: 26:17:ed:d3:77:3f:13:ab:ef:fd:d8:0e:4d:3a:b5: 53:d1:f4:a8:14:be:b5:e1:55:67:17:d1:d0:b7:1b: 72:c9:8e:6f:32:f8:10:e8:89:0d:78:c9:51:55:fd: 0e:29:67:cc:9e:b9:a3:97:a7:01:97:e7:e2:06:09: 37:a7:2b:04:8e:d2:7a:9a:4a:c5:39:7f:36:7a:d8: a7:22:d4:92:2e:b7:5f:2e:0e:57:54:31:e9:f2:ed: 23:1a:68:e5:72:f4:ba:04:08:f0:90:3e:e3:f3:4b: 79:b2:5e:6b:09:62:79:f7:3d:e7:6b:79:7e:39:88: 7b:35:86:6d:ee:be:bb:8c:65:64:02:3b:24:a6:9e: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:87:B4:6B:D7:93:18:D0:9F:60:71:14:2E:E0:E5:F7:18:9F:A0:22 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ff:5b:c2:69:29:a6:88:8e:af:77:7c:d4:9c:1c:e8:8a:9c: a8:a1:2f:55:89:d2:16:58:31:af:d3:2e:89:c1:81:9d:9f:37: 02:73:ac:ff:c8:02:0a:8e:57:c8:63:c0:a6:e2:db:5a:d8:54: c7:b5:75:01:c9:f4:14:31:f3:4c:88:87:59:f7:09:2b:88:ef: 91:08:1b:60:48:b1:0f:f5:65:b4:57:45:95:78:88:cc:0a:8c: 32:ea:d0:57:38:b1:3b:f2:37:ba:5b:31:65:1e:e0:ec:50:29: 30:a9:3f:23:c1:3a:3f:ea:1b:16:82:fc:9d:a8:a2:64:13:f1: d2:ed:36:d9:c9:10:2c:e5:b8:36:07:d1:62:6f:98:d2:ae:ca: 33:41:b0:ad:58:65:3d:a5:6b:97:0b:29:41:39:88:4b:01:6e: 2f:3c:5f:ea:4f:04:fc:5a:5a:45:55:20:04:24:b0:29:ca:87: 00:48:53:09:9b:db:ad:58:f9:1f:6b:15:b8:9e:3c:b3:cc:a0: 8d:ab:49:a8:23:6f:ba:c5:49:2a:44:81:64:32:af:be:e2:59: 72:11:c7:2c:6a:c8:2d:55:e4:ce:6c:64:4d:e4:9f:4e:2c:1e: 50:fb:c9:bf:7b:81:9d:95:48:e2:74:75:38:45:39:11:a9:6e: 9e:43:ac:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPNfVdxD13EX4/5g7+rgBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwOTIzMTcwMDE0WhcNMjYwOTI0MTcwMDE0WjAzMTEwLwYDVQQD EyhjYjg3YjQ2YmQ3OTMxOGQwOWY2MDcxMTQyZWUwZTVmNzE4OWZhMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNfyAY0+NBBWvZhwyKa1cGyNRLtC t+GXkVCtvtr4p5XyyIxJ4Z+gW49lNkZDfvWgYMsHHi1A6inW3RpDkyRS/oG871YU nvyWup0T6Hg/APypoYqoPia+3NYDFXoiqaerqsQDVSb/DpXz7K55Hu/6LL7omeP9 u7AmF+3Tdz8Tq+/92A5NOrVT0fSoFL614VVnF9HQtxtyyY5vMvgQ6IkNeMlRVf0O KWfMnrmjl6cBl+fiBgk3pysEjtJ6mkrFOX82etinItSSLrdfLg5XVDHp8u0jGmjl cvS6BAjwkD7j80t5sl5rCWJ59z3na3l+OYh7NYZt7r67jGVkAjskpp4ERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuHtGvXkxjQn2BxFC7g5fcYn6AiMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtv9bwmkp poiOr3d81Jwc6IqcqKEvVYnSFlgxr9MuicGBnZ83AnOs/8gCCo5XyGPApuLbWthU x7V1Acn0FDHzTIiHWfcJK4jvkQgbYEixD/VltFdFlXiIzAqMMurQVzixO/I3ulsx ZR7g7FApMKk/I8E6P+obFoL8naiiZBPx0u022ckQLOW4NgfRYm+Y0q7KM0GwrVhl PaVrlwspQTmISwFuLzxf6k8E/FpaRVUgBCSwKcqHAEhTCZvbrVj5H2sVuJ48s8yg jatJqCNvusVJKkSBZDKvvuJZchHHLGrILVXkzmxkTeSfTiweUPvJv3uBnZVI4nR1 OEU5EalunkOsZg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:32:59 2026 by rpki-client