$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: Rr5oYDTpXl7yloVzZiaD0Aq6kJjsxjxWxr+y+WfSU8k= Subject key identifier: 6B:84:82:90:79:39:CE:50:D9:55:B4:18:61:6C:FD:BA:37:0F:EB:0D Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01A0D6F081E0D86CE1899A502352951CB386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1A8E Signing time: Fri 25 Sep 2026 05:01:21 +0000 Manifest this update: Fri 25 Sep 2026 05:01:21 +0000 Manifest next update: Sat 26 Sep 2026 05:01:21 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 3: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 4: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: SAqibqZW6w5onW5WF7NAack4vsbrDPTglDV3ACa73OA=) 5: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 6: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 7: OVwsXYypxA7SEcE0oqAv66KV2iw.roa (hash: p2ldypSF2XQKcxweJh6LjsaWiKlRwLKkcdSWL7M3990=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa (hash: tKohV45mbquQ6A1OYA4BBMCrfZiBK3eEB8vOzL2T2gM=) 10: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:f0:81:e0:d8:6c:e1:89:9a:50:23:52:95:1c:b3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Sep 25 05:01:21 2026 GMT Not After : Sep 26 05:01:21 2026 GMT Subject: CN=6b8482907939ce50d955b418616cfdba370feb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1d:d2:1e:30:ce:d4:ec:90:12:78:4c:38:4f: f5:9f:0e:54:cc:15:46:0e:23:76:b4:fd:bb:a9:25: 40:a0:e4:b5:22:99:ac:19:7e:07:ed:7c:a7:d1:e7: 7d:3d:9b:5f:b8:a2:10:d2:0d:14:a4:01:6f:ca:71: 46:41:ce:bf:58:5e:c0:07:7e:cf:e8:fb:3d:30:b8: cb:bd:91:25:40:56:f8:2d:4a:cc:3a:fc:59:7b:7f: 65:ea:e5:27:da:77:56:a8:b0:ef:2f:6c:9c:1a:4c: 16:1f:06:c9:3b:06:c5:21:da:81:b6:65:87:3b:f6: 64:3d:79:37:4c:f3:f3:93:3d:79:4a:6c:fe:70:6c: aa:12:f1:d8:78:5f:65:5e:4b:00:0d:51:59:4f:19: 6f:bf:e7:17:1a:a7:f4:d5:35:14:a1:45:ae:ed:58: 31:06:05:95:da:ef:89:83:75:55:5b:a9:a0:b4:c4: a6:40:c4:6f:58:2c:79:0d:ed:8d:86:3c:dc:c3:4c: 0c:07:40:0f:3a:ff:7c:c3:ec:a5:c9:42:27:94:fa: c7:3b:2b:ef:3e:27:6e:7f:fe:d5:12:c9:9b:85:7a: dc:a6:8c:bd:cd:76:ee:bd:89:25:b3:c0:dc:2f:14: 95:75:b2:a0:be:ac:98:62:55:47:ee:a6:fd:96:93: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:82:90:79:39:CE:50:D9:55:B4:18:61:6C:FD:BA:37:0F:EB:0D X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:90:8e:0f:e6:47:36:3b:b0:9f:92:a0:93:c5:45:a9:89:0d: f1:13:00:e8:f6:fa:82:c9:19:7e:bf:6f:2e:d7:47:d1:f3:62: bc:ee:2d:47:22:da:da:b5:26:35:9d:2d:59:67:7a:2e:72:30: 5a:42:45:12:76:23:ea:75:f7:99:1d:f7:83:ef:15:2f:92:5e: df:88:88:ff:b3:5f:9f:63:57:0e:bb:b0:76:61:56:25:b4:43: 87:ec:4d:62:79:fc:52:75:b0:7e:48:50:04:fe:5c:7b:6a:c3: 06:ac:c1:83:3c:2f:97:a3:76:5b:d8:e6:1d:05:14:6c:37:0c: e5:0f:2c:11:97:46:d3:64:26:d5:1c:71:3e:d0:1c:92:ab:2b: d4:44:54:49:db:57:ae:f6:00:20:c5:5c:c0:77:52:44:72:c3: 11:e4:1a:41:ea:66:a2:2a:f2:b8:63:c1:f4:89:f0:cc:70:49: 7c:42:e1:50:8b:5f:3d:40:7a:eb:53:73:55:24:9a:60:d0:1e: 1e:7c:58:f7:ec:23:ba:7e:69:8f:92:dd:85:4b:61:12:21:e0: 9e:25:45:47:21:e9:14:62:15:ef:11:a9:6d:11:fb:69:09:d9: 88:e5:53:1d:d7:1c:a7:c2:0f:f5:5e:78:ee:bb:bc:7d:b8:cc: 29:07:57:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDW8IHg2GzhiZpQI1KVHLOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwOTI1MDUwMTIxWhcNMjYwOTI2MDUwMTIxWjAzMTEwLwYDVQQD Eyg2Yjg0ODI5MDc5MzljZTUwZDk1NWI0MTg2MTZjZmRiYTM3MGZlYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B3SHjDO1OyQEnhMOE/1nw5UzBVG DiN2tP27qSVAoOS1IpmsGX4H7Xyn0ed9PZtfuKIQ0g0UpAFvynFGQc6/WF7AB37P 6Ps9MLjLvZElQFb4LUrMOvxZe39l6uUn2ndWqLDvL2ycGkwWHwbJOwbFIdqBtmWH O/ZkPXk3TPPzkz15Smz+cGyqEvHYeF9lXksADVFZTxlvv+cXGqf01TUUoUWu7Vgx BgWV2u+Jg3VVW6mgtMSmQMRvWCx5De2Nhjzcw0wMB0APOv98w+ylyUInlPrHOyvv Piduf/7VEsmbhXrcpoy9zXbuvYkls8DcLxSVdbKgvqyYYlVH7qb9lpPccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuEgpB5Oc5Q2VW0GGFs/bo3D+sNMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5COD+ZH Njuwn5Kgk8VFqYkN8RMA6Pb6gskZfr9vLtdH0fNivO4tRyLa2rUmNZ0tWWd6LnIw WkJFEnYj6nX3mR33g+8VL5Je34iI/7Nfn2NXDruwdmFWJbRDh+xNYnn8UnWwfkhQ BP5ce2rDBqzBgzwvl6N2W9jmHQUUbDcM5Q8sEZdG02Qm1RxxPtAckqsr1ERUSdtX rvYAIMVcwHdSRHLDEeQaQepmoiryuGPB9InwzHBJfELhUItfPUB661NzVSSaYNAe HnxY9+wjun5pj5LdhUthEiHgniVFRyHpFGIV7xGpbRH7aQnZiOVTHdccp8IP9V54 7ru8fbjMKQdXVQ== -----END CERTIFICATE-----Generated at Fri Sep 25 15:19:56 2026 by rpki-client