$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: ggueKQx2kpkC7vs/+4CbUup6DJ2EoJX9CkChQ/Vr9oc= Subject key identifier: 57:B6:2A:01:F5:FB:49:C0:0E:E1:90:56:21:CB:7D:5D:10:CC:F8:11 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01988D341082617DB55A6F5E69D00E9F3FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1640 Signing time: Sat 09 Aug 2025 05:00:56 +0000 Manifest this update: Sat 09 Aug 2025 05:00:56 +0000 Manifest next update: Sun 10 Aug 2025 05:00:56 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: pXDNKJkC8JGyPW0DzgsaHqlgmAJs779+MegfD/QOynQ=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 7: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8d:34:10:82:61:7d:b5:5a:6f:5e:69:d0:0e:9f:3f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Aug 9 05:00:56 2025 GMT Not After : Aug 10 05:00:56 2025 GMT Subject: CN=57b62a01f5fb49c00ee1905621cb7d5d10ccf811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:d1:e3:fb:34:ac:a9:0a:b1:95:02:ff:e6: 8d:c5:4c:54:bf:6b:cd:69:21:7b:a8:cb:c7:31:98: a0:54:a9:ff:69:3a:46:e9:f8:3d:db:41:e4:ac:66: 76:95:37:b1:52:8e:d3:5d:f4:50:27:40:68:0e:14: 9b:be:da:c8:a7:42:08:97:05:05:17:0a:4a:c2:df: 9e:b8:60:9b:d1:d7:3b:bf:75:70:3c:4b:cd:82:8f: 8e:09:f7:4b:71:a4:42:32:fa:1a:4f:cc:bc:b7:c2: 33:c2:85:40:fe:61:c8:43:1e:43:b2:b7:93:0e:a5: 34:d7:02:64:6f:ef:f6:c6:18:47:a2:bc:ef:49:e3: 52:65:aa:4e:4c:e4:0d:9c:18:8e:b1:8a:28:e6:f1: c7:2e:a9:fa:33:b9:8e:c1:b0:a8:56:34:fd:85:79: 5c:77:d4:d1:6d:2e:b3:11:fb:84:2e:0b:13:ef:41: 91:69:53:2f:de:1d:06:d3:88:05:16:05:96:35:01: c4:de:6c:53:e4:1a:c8:78:61:1d:94:ce:70:6e:d8: d6:16:df:1c:dc:99:a1:d5:a5:3c:03:95:7f:84:7b: 7f:40:be:0e:2a:30:2a:7e:a3:fd:3e:99:bb:70:f1: eb:79:a7:90:35:4f:6a:48:48:dd:c5:96:d4:6b:44: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:2A:01:F5:FB:49:C0:0E:E1:90:56:21:CB:7D:5D:10:CC:F8:11 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ea:12:4f:d8:7d:93:a4:55:ce:1e:2d:d2:2e:03:b1:a9:a1: 3c:47:a8:fb:50:1a:35:d6:b8:d3:ac:71:8a:79:c3:cb:cc:a0: e8:6a:cd:61:42:2c:ec:be:f7:14:1c:29:6b:17:2b:09:0b:81: 6d:ad:c8:e5:c8:85:5c:f5:d7:bf:84:6a:56:ed:5e:74:0c:b4: 92:14:9d:e4:09:b0:1d:de:00:fa:4b:78:b5:d5:58:70:5d:62: cc:52:32:36:1c:55:d5:db:d9:9f:3d:40:dc:34:e3:72:00:4d: 36:08:a2:c6:eb:c2:f4:6d:4f:30:0b:14:08:a9:98:ce:62:3f: 38:11:0e:97:0b:f4:41:6e:2c:47:37:a2:d0:2f:2c:3c:37:db: 89:87:38:f2:40:2e:8f:60:a4:dc:fd:bf:ff:e7:e7:bc:4c:be: 15:6b:ad:59:1c:e5:e4:13:69:8a:e0:bf:6f:d6:28:ba:16:83: 81:ec:20:c6:f6:71:3e:74:e0:6e:19:5b:5c:8b:57:f1:0b:29: 60:ec:e0:a3:6f:2a:d8:7f:31:aa:60:45:d6:a2:2f:44:a8:bd: 4e:e5:17:1d:93:ec:e3:2e:c3:83:c2:52:b8:79:7a:42:e7:a4: e5:80:27:61:f8:c6:c5:0d:3a:3a:33:ba:5b:5e:62:33:fb:69: 82:c8:a2:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiNNBCCYX21Wm9eadAOnz+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwODA5MDUwMDU2WhcNMjUwODEwMDUwMDU2WjAzMTEwLwYDVQQD Eyg1N2I2MmEwMWY1ZmI0OWMwMGVlMTkwNTYyMWNiN2Q1ZDEwY2NmODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+nR4/s0rKkKsZUC/+aNxUxUv2vN aSF7qMvHMZigVKn/aTpG6fg920HkrGZ2lTexUo7TXfRQJ0BoDhSbvtrIp0IIlwUF FwpKwt+euGCb0dc7v3VwPEvNgo+OCfdLcaRCMvoaT8y8t8IzwoVA/mHIQx5DsreT DqU01wJkb+/2xhhHorzvSeNSZapOTOQNnBiOsYoo5vHHLqn6M7mOwbCoVjT9hXlc d9TRbS6zEfuELgsT70GRaVMv3h0G04gFFgWWNQHE3mxT5BrIeGEdlM5wbtjWFt8c 3Jmh1aU8A5V/hHt/QL4OKjAqfqP9Ppm7cPHreaeQNU9qSEjdxZbUa0TjrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe2KgH1+0nADuGQViHLfV0QzPgRMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+oST9h9 k6RVzh4t0i4DsamhPEeo+1AaNda406xxinnDy8yg6GrNYUIs7L73FBwpaxcrCQuB ba3I5ciFXPXXv4RqVu1edAy0khSd5AmwHd4A+kt4tdVYcF1izFIyNhxV1dvZnz1A 3DTjcgBNNgiixuvC9G1PMAsUCKmYzmI/OBEOlwv0QW4sRzei0C8sPDfbiYc48kAu j2Ck3P2//+fnvEy+FWutWRzl5BNpiuC/b9YouhaDgewgxvZxPnTgbhlbXItX8Qsp YOzgo28q2H8xqmBF1qIvRKi9TuUXHZPs4y7Dg8JSuHl6Quek5YAnYfjGxQ06OjO6 W15iM/tpgsiiWg== -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:41 2025 by rpki-client