$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: FL+ToDq8RC5zhQmWieU9SP6aUA5c+sI/FF7R5MP7ewo= Subject key identifier: 40:6A:E4:64:2F:BD:B0:CA:C9:C3:35:2F:70:DB:28:E1:F8:95:A2:87 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019FA9AB896F65D7C7B02031F2704B20F378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 19F1 Signing time: Tue 28 Jul 2026 17:00:19 +0000 Manifest this update: Tue 28 Jul 2026 17:00:19 +0000 Manifest next update: Wed 29 Jul 2026 17:00:19 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=) 3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: pfadJ87X5oj99QkAv7czaHuF8vDuB3lG1c9Ycx9nTOg=) 6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) 10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ab:89:6f:65:d7:c7:b0:20:31:f2:70:4b:20:f3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jul 28 17:00:19 2026 GMT Not After : Jul 29 17:00:19 2026 GMT Subject: CN=406ae4642fbdb0cac9c3352f70db28e1f895a287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:c4:05:30:40:64:5d:03:a3:da:ad:98:32: f9:cd:80:1f:6c:8d:fe:dd:31:2b:89:92:bc:c2:c8: 1a:a9:3f:a3:84:22:e3:1c:01:1b:68:40:85:24:7a: e3:11:d0:88:24:be:80:8a:da:6d:d5:37:3a:40:03: 28:8d:7c:e2:77:89:44:13:84:96:b6:b9:2e:41:88: ba:31:46:00:80:21:76:fb:8b:06:20:5f:6d:d2:cd: 59:08:1b:21:f5:e5:a8:48:36:48:a4:a8:5c:e6:15: f5:94:f2:d3:cf:dd:59:e2:9e:b0:71:46:ab:24:ea: 2c:7e:36:ee:f6:e7:4d:a8:3e:6a:03:e6:77:c5:f5: 98:e0:7c:d0:d2:80:49:e3:32:a9:28:98:89:c7:21: 7d:59:b3:7e:52:92:6d:16:5c:93:1a:1a:72:8e:18: ae:8b:91:b3:70:4a:bc:c5:27:e7:94:c9:cc:76:2f: 00:2b:b3:ab:f8:ee:6f:ef:f6:b5:17:23:54:1e:d6: 84:74:13:ec:4e:9e:70:97:e9:68:57:1b:1f:f9:78: a8:d8:32:40:a9:1a:15:2b:af:97:ed:be:9f:da:c6: 33:db:89:81:73:12:01:d3:4a:d5:e2:3a:f1:e3:70: 59:75:e5:6a:2e:ff:77:e6:4a:f8:1e:31:f4:70:9f: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:E4:64:2F:BD:B0:CA:C9:C3:35:2F:70:DB:28:E1:F8:95:A2:87 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6e:fa:ef:f9:e3:73:17:a6:4a:e7:71:81:ed:f4:97:c3:cc: 5a:ba:b0:62:96:d6:11:f1:03:0b:b6:f9:57:ad:9e:39:6f:c8: 18:9b:e1:ce:58:76:d8:03:aa:bd:ce:20:22:0c:85:c5:0c:a2: 14:3e:1f:d5:e3:b7:86:92:90:16:38:4a:b4:32:c7:21:cc:13: 8f:24:b9:f9:44:ee:06:b8:61:fe:bb:5e:9f:30:7f:08:32:d4: 10:85:73:d2:b6:04:a1:dd:e9:7d:32:5d:c0:f0:72:d6:e9:28: 20:27:58:f6:c1:0c:0e:7c:d0:83:d5:de:be:57:3a:48:1a:f8: 3d:7c:a9:99:b1:b5:a4:e0:85:c4:d9:cd:85:e1:75:45:02:f9: 06:88:9b:58:a3:0b:9e:e6:0a:ce:ac:87:cc:24:df:a6:7e:74: e3:d6:9d:a0:10:f3:48:80:6d:f7:08:6c:f7:17:f2:59:8e:0d: 86:47:3f:ed:23:f8:2f:a6:d8:3a:fc:ed:4a:0b:ca:03:d2:c8: 6a:b5:e8:18:29:f9:35:0e:df:b9:d2:a7:75:47:fa:7f:4a:4b: fe:23:16:6e:db:4a:06:ed:15:81:25:ee:2d:6d:1a:1b:ca:5e: d1:77:19:2d:d4:9b:6c:ea:b1:90:ac:91:38:bb:b6:d5:c0:60: 49:e4:0b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pq4lvZdfHsCAx8nBLIPN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwNzI4MTcwMDE5WhcNMjYwNzI5MTcwMDE5WjAzMTEwLwYDVQQD Eyg0MDZhZTQ2NDJmYmRiMGNhYzljMzM1MmY3MGRiMjhlMWY4OTVhMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3XEBTBAZF0Do9qtmDL5zYAfbI3+ 3TEriZK8wsgaqT+jhCLjHAEbaECFJHrjEdCIJL6Aitpt1Tc6QAMojXzid4lEE4SW trkuQYi6MUYAgCF2+4sGIF9t0s1ZCBsh9eWoSDZIpKhc5hX1lPLTz91Z4p6wcUar JOosfjbu9udNqD5qA+Z3xfWY4HzQ0oBJ4zKpKJiJxyF9WbN+UpJtFlyTGhpyjhiu i5GzcEq8xSfnlMnMdi8AK7Or+O5v7/a1FyNUHtaEdBPsTp5wl+loVxsf+Xio2DJA qRoVK6+X7b6f2sYz24mBcxIB00rV4jrx43BZdeVqLv935kr4HjH0cJ/NoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBq5GQvvbDKycM1L3DbKOH4laKHMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm767/nj cxemSudxge30l8PMWrqwYpbWEfEDC7b5V62eOW/IGJvhzlh22AOqvc4gIgyFxQyi FD4f1eO3hpKQFjhKtDLHIcwTjyS5+UTuBrhh/rtenzB/CDLUEIVz0rYEod3pfTJd wPBy1ukoICdY9sEMDnzQg9Xevlc6SBr4PXypmbG1pOCFxNnNheF1RQL5BoibWKML nuYKzqyHzCTfpn5049adoBDzSIBt9whs9xfyWY4Nhkc/7SP4L6bYOvztSgvKA9LI arXoGCn5NQ7fudKndUf6f0pL/iMWbttKBu0VgSXuLW0aG8pe0XcZLdSbbOqxkKyR OLu21cBgSeQLyw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:59 2026 by rpki-client