$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: EnF+Dbkx1XbNl08bVPLE+VdmJNF5UQcD7EfGNl1GCyE= Subject key identifier: 80:1F:C8:47:B3:FD:E1:64:63:96:56:4B:94:A4:11:05:45:74:BB:7D Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 0198D583C8F5E15CB0A7205DB6EFC4761DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 164D Signing time: Sat 23 Aug 2025 06:00:40 +0000 Manifest this update: Sat 23 Aug 2025 06:00:40 +0000 Manifest next update: Sun 24 Aug 2025 06:00:40 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: s+LX/jiz2FJKoJo+dLnx9XV7IjFJaG6nzlhjiEt8YeI=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:c8:f5:e1:5c:b0:a7:20:5d:b6:ef:c4:76:1d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Aug 23 06:00:40 2025 GMT Not After : Aug 24 06:00:40 2025 GMT Subject: CN=801fc847b3fde1646396564b94a411054574bb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:da:39:ad:50:32:27:b3:1b:f2:12:7b:d6: b8:9c:cb:9e:25:97:08:c1:2f:e9:cd:c3:ff:c0:68: 4f:a2:f1:ad:7b:7d:de:74:50:d7:bb:fe:72:43:7e: 45:0e:51:fe:c3:79:c0:e7:f4:24:bf:0c:e8:23:5d: e7:f5:17:c1:75:00:4f:b8:3a:f8:13:91:aa:ec:55: 00:37:4c:69:4f:ce:81:be:81:1a:df:c4:83:3a:54: 85:9d:ba:a4:4a:00:da:03:47:08:74:b5:df:45:01: 92:31:35:93:7e:cd:5a:be:eb:e1:43:0d:cf:ff:9b: 4a:ed:ca:a6:7c:c0:58:12:bd:b3:4d:de:b1:3b:ea: e5:95:bc:64:e1:4b:3a:7d:f4:be:24:f6:9f:e2:2f: 66:3a:bf:79:62:4f:bc:97:fb:2d:9f:be:bb:3a:20: 0f:0b:63:da:65:ba:0c:76:78:64:8f:a2:0b:97:d2: 3c:60:c1:63:82:f5:ec:9b:2a:97:ca:f5:c7:fe:3e: a1:25:14:79:d9:13:8a:b1:b1:42:9a:dc:4e:ae:7a: 97:7e:8d:37:65:85:d1:28:dd:4d:3f:c7:88:91:e9: 9b:fd:78:02:dc:c3:f3:22:0a:b6:02:28:36:54:4e: 7e:b6:c3:01:f2:b1:b6:6f:b1:50:e9:1d:a3:5f:e9: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1F:C8:47:B3:FD:E1:64:63:96:56:4B:94:A4:11:05:45:74:BB:7D X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:27:71:9b:84:fb:cc:84:35:a3:24:df:26:0f:72:fb:35: f6:f4:a3:7a:3a:fa:f2:0e:d0:f3:0d:4f:20:bc:d1:36:6a:45: 71:26:30:7f:32:6b:1a:a2:4d:77:17:8d:c0:38:96:1a:dc:5f: 02:43:e1:7e:78:35:55:d4:15:e6:59:ab:c9:8d:7e:6d:8a:34: ee:cd:7b:ae:f0:7b:5d:1b:75:3d:c9:e9:ef:ef:fc:78:48:fb: 1e:44:79:f4:c3:ec:23:f7:ca:c6:6d:d2:f4:c8:d6:1b:be:00: b5:f1:b5:2c:04:79:79:6a:5c:b3:86:59:71:d7:af:8b:ef:f5: 53:78:5c:eb:8d:84:cf:4f:5b:80:4f:af:c2:14:30:78:eb:e6: f4:c9:6e:b9:8f:f7:2e:60:b0:5a:da:02:fa:0e:91:07:cb:fa: 85:0e:99:c5:d1:c9:46:2e:49:41:36:a5:d3:ce:ef:6f:ed:3c: a5:7a:0d:a4:65:c4:a5:1e:55:46:74:d7:36:a4:24:39:9c:3a: 2d:62:45:ec:e9:6d:81:66:8d:eb:bd:65:29:37:4b:09:b1:f6: 18:56:b7:4e:dc:d7:5d:f4:7b:ba:54:ff:15:4b:c6:41:b7:fd: f4:63:00:67:da:33:30:65:22:3d:3e:18:1f:b2:bf:69:07:07: eb:5e:ed:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg8j14VywpyBdtu/Edh3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUwODIzMDYwMDQwWhcNMjUwODI0MDYwMDQwWjAzMTEwLwYDVQQD Eyg4MDFmYzg0N2IzZmRlMTY0NjM5NjU2NGI5NGE0MTEwNTQ1NzRiYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgHaOa1QMiezG/ISe9a4nMueJZcI wS/pzcP/wGhPovGte33edFDXu/5yQ35FDlH+w3nA5/QkvwzoI13n9RfBdQBPuDr4 E5Gq7FUAN0xpT86BvoEa38SDOlSFnbqkSgDaA0cIdLXfRQGSMTWTfs1avuvhQw3P /5tK7cqmfMBYEr2zTd6xO+rllbxk4Us6ffS+JPaf4i9mOr95Yk+8l/stn767OiAP C2PaZboMdnhkj6ILl9I8YMFjgvXsmyqXyvXH/j6hJRR52ROKsbFCmtxOrnqXfo03 ZYXRKN1NP8eIkemb/XgC3MPzIgq2Aig2VE5+tsMB8rG2b7FQ6R2jX+kMDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAfyEez/eFkY5ZWS5SkEQVFdLt9MB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaMncZuE +8yENaMk3yYPcvs19vSjejr68g7Q8w1PILzRNmpFcSYwfzJrGqJNdxeNwDiWGtxf AkPhfng1VdQV5lmryY1+bYo07s17rvB7XRt1Pcnp7+/8eEj7HkR59MPsI/fKxm3S 9MjWG74AtfG1LAR5eWpcs4ZZcdevi+/1U3hc642Ez09bgE+vwhQweOvm9MluuY/3 LmCwWtoC+g6RB8v6hQ6ZxdHJRi5JQTal087vb+08pXoNpGXEpR5VRnTXNqQkOZw6 LWJF7OltgWaN671lKTdLCbH2GFa3TtzXXfR7ulT/FUvGQbf99GMAZ9ozMGUiPT4Y H7K/aQcH617t+Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:37 2025 by rpki-client