$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: FVteExN26T6EK7w4YYMRxzXheLhlRmryvHwlaXeuVrQ= Subject key identifier: C3:CC:FD:CE:59:D0:24:1B:24:2C:85:BA:6B:32:90:5B:C5:5F:D8:FE Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 0197B7B2E6E0D41E4BF01120B3F9AE60E978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 15B9 Signing time: Sat 28 Jun 2025 18:00:44 +0000 Manifest this update: Sat 28 Jun 2025 18:00:44 +0000 Manifest next update: Sun 29 Jun 2025 18:00:44 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: 7dCFKcWe6JauwdSmL1bGeGLNjH5POD2P3w/Yubrg3Qw=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:e6:e0:d4:1e:4b:f0:11:20:b3:f9:ae:60:e9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Jun 28 18:00:44 2025 GMT Not After : Jun 29 18:00:44 2025 GMT Subject: CN=c3ccfdce59d0241b242c85ba6b32905bc55fd8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:53:ec:21:65:b4:77:64:2f:17:b6:e0:3b: a4:44:8d:ff:0d:35:e7:12:01:bb:38:6f:e5:d0:dd: fa:e7:40:0d:21:f1:5e:b8:98:20:5e:52:a8:dc:05: d6:be:3a:e5:08:20:ed:f7:45:18:c8:61:4e:15:45: f1:81:ce:36:b5:56:06:a7:0d:94:c1:8b:29:44:9f: f2:fb:fc:73:c1:90:d4:b3:2b:75:56:77:3b:22:83: 27:2e:1f:ce:e1:9e:bd:57:96:f5:c9:af:e8:04:1d: ed:b2:0b:da:6a:1b:04:31:6e:5d:ef:26:5b:e5:66: c3:d0:d6:86:a7:ea:a2:3c:ae:45:93:87:77:ef:1b: 87:7d:ba:30:28:d9:c7:92:a6:ed:bd:c5:a2:60:91: 1a:ba:f1:40:f7:c0:a6:80:65:bb:12:d6:40:4c:07: 8e:64:e9:c0:eb:dd:ba:b1:c2:e3:28:0d:95:9b:ca: 01:95:23:61:f4:d2:e5:db:ea:77:1c:68:4d:51:e1: d5:3a:c4:9b:10:aa:0e:ca:89:3e:87:d1:a5:ea:a7: 3a:d8:18:83:72:ec:cf:c4:c8:58:1d:f0:e4:18:7e: 36:c5:1a:b8:d5:af:44:3e:44:19:e3:b0:7c:c4:c1: 6e:73:4c:09:09:ff:99:d3:e4:bf:ca:d6:e2:d2:51: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:FD:CE:59:D0:24:1B:24:2C:85:BA:6B:32:90:5B:C5:5F:D8:FE X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6f:63:3d:9a:b5:d8:29:e9:7e:11:3e:a1:31:5d:9e:02:3c: 21:18:3a:e9:ad:c6:6c:25:18:f3:b5:42:ff:37:ef:90:6e:42: 34:f2:93:ed:e3:f4:7c:15:70:1a:db:c2:d0:51:5a:b4:e7:55: e9:7a:d4:bb:7e:f8:0d:e8:c0:9b:db:be:31:25:b7:e8:88:ad: d9:35:32:b8:cf:b5:fe:b9:ed:85:bd:e2:51:f4:41:d5:63:6a: 81:1b:10:4b:e6:47:09:8c:17:cb:9e:9d:ea:fc:ec:bf:2c:d7: 54:3d:7b:0d:ed:33:04:4d:e1:76:45:dc:df:07:f7:28:a0:a9: 76:e8:6d:c5:93:a0:02:21:9b:b2:5e:8c:05:39:48:89:70:fb: d2:4e:04:ae:55:40:53:8e:3b:f5:74:ac:54:84:4c:d7:77:5c: 54:a1:9f:50:b5:69:d0:98:b8:0c:57:25:5d:2f:bb:93:d3:28: 06:d8:9d:55:4a:c3:dd:7c:b0:81:62:1c:1e:d0:a4:96:eb:62: e2:3f:88:c6:e7:ee:ac:ef:1d:bc:ee:08:a2:a1:0f:f4:da:05: 33:1e:dd:cb:db:08:aa:fd:51:51:d0:1f:c1:56:d1:16:6a:9b: 34:7d:25:22:5e:0c:d9:22:04:f4:03:b6:30:0a:1d:ef:27:24: dc:d8:9c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3subg1B5L8BEgs/muYOl4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUwNjI4MTgwMDQ0WhcNMjUwNjI5MTgwMDQ0WjAzMTEwLwYDVQQD EyhjM2NjZmRjZTU5ZDAyNDFiMjQyYzg1YmE2YjMyOTA1YmM1NWZkOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMNT7CFltHdkLxe24DukRI3/DTXn EgG7OG/l0N3650ANIfFeuJggXlKo3AXWvjrlCCDt90UYyGFOFUXxgc42tVYGpw2U wYspRJ/y+/xzwZDUsyt1Vnc7IoMnLh/O4Z69V5b1ya/oBB3tsgvaahsEMW5d7yZb 5WbD0NaGp+qiPK5Fk4d37xuHfbowKNnHkqbtvcWiYJEauvFA98CmgGW7EtZATAeO ZOnA6926scLjKA2Vm8oBlSNh9NLl2+p3HGhNUeHVOsSbEKoOyok+h9Gl6qc62BiD cuzPxMhYHfDkGH42xRq41a9EPkQZ47B8xMFuc0wJCf+Z0+S/ytbi0lFNowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPM/c5Z0CQbJCyFumsykFvFX9j+MB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm9jPZq1 2CnpfhE+oTFdngI8IRg66a3GbCUY87VC/zfvkG5CNPKT7eP0fBVwGtvC0FFatOdV 6XrUu374DejAm9u+MSW36Iit2TUyuM+1/rnthb3iUfRB1WNqgRsQS+ZHCYwXy56d 6vzsvyzXVD17De0zBE3hdkXc3wf3KKCpduhtxZOgAiGbsl6MBTlIiXD70k4ErlVA U4479XSsVIRM13dcVKGfULVp0Ji4DFclXS+7k9MoBtidVUrD3XywgWIcHtCkluti 4j+IxufurO8dvO4IoqEP9NoFMx7dy9sIqv1RUdAfwVbRFmqbNH0lIl4M2SIE9AO2 MAod7yck3NicxQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:00:34 2025 by rpki-client