$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: aNWeFrrx9+CtyuK6og/9lmrm5bU8qZmXBsL3ntyBdf8= Subject key identifier: C4:1C:41:44:DB:E3:DE:8B:AD:68:40:86:23:96:ED:06:7C:B8:93:8D Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 0199FD6B474B79FA5F9FF4A0F347889ACE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1700 Signing time: Sun 19 Oct 2025 17:01:30 +0000 Manifest this update: Sun 19 Oct 2025 17:01:30 +0000 Manifest next update: Mon 20 Oct 2025 17:01:30 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: bFJTfWBTlE1pLKsVIN3igwXlcqZHwoBvCJkHK8OBMvk=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6b:47:4b:79:fa:5f:9f:f4:a0:f3:47:88:9a:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Oct 19 17:01:30 2025 GMT Not After : Oct 20 17:01:30 2025 GMT Subject: CN=c41c4144dbe3de8bad6840862396ed067cb8938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:78:21:df:b9:af:af:fd:ed:55:18:91:b7: 1a:12:26:cb:3e:b8:4a:58:16:1f:c0:2b:39:9e:a3: f8:99:09:d2:24:c1:44:28:cb:b1:f7:c3:b5:4a:98: 67:e4:2d:96:60:05:1d:d9:0f:2f:88:b6:34:e6:8b: 7d:e2:c8:84:d7:98:8b:7f:7e:0b:92:0b:53:4b:9a: 52:98:a9:00:de:b8:4e:b5:43:62:ac:55:d6:8d:9a: 39:01:53:59:cf:79:9e:cc:6c:c4:0c:57:31:9f:7b: 22:cf:ae:68:8e:0b:37:4f:56:a2:6f:d0:d5:ab:65: d9:04:7c:5c:4a:69:4e:5a:64:06:c6:a7:cc:aa:59: 5f:69:d4:50:cf:2e:77:d0:9a:e3:97:19:b3:9a:d8: fb:6d:0e:32:87:fb:11:c6:9e:d4:c3:6c:29:b9:26: 3b:0a:fb:4c:d7:ea:09:bc:83:32:2f:0b:6a:60:2f: e5:67:fb:16:17:d3:3a:99:cc:fe:de:4a:c5:3f:1c: 8b:3c:b0:0d:eb:ff:f3:23:7a:b1:31:8d:fa:6f:42: 0a:d6:0d:a3:ee:7c:a4:6c:2d:42:16:5b:d0:28:9a: 71:0c:d3:6a:e5:a1:18:2d:48:e8:4e:88:53:fc:6d: 4d:af:cf:63:f5:3b:dd:95:50:3e:dd:e8:d7:66:1f: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1C:41:44:DB:E3:DE:8B:AD:68:40:86:23:96:ED:06:7C:B8:93:8D X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c6:7b:17:22:e7:12:ee:da:a5:9a:31:c3:d3:c5:71:4a:1d: 40:af:a5:f0:7d:01:fc:9b:41:b7:b1:86:d6:e2:bc:5a:a9:ad: 01:d0:ec:6f:a4:19:97:0f:0d:30:56:30:4d:3e:06:79:c1:28: 00:8c:a5:46:4a:1a:58:24:3e:58:e7:8c:bb:69:5a:a5:ed:bd: f4:9b:47:e5:24:61:4b:70:c3:a9:c7:02:07:28:c3:c3:e8:81: 64:59:37:86:f7:69:9f:df:14:b7:54:f1:5f:2e:86:4b:60:1e: 40:6b:98:11:d1:e6:38:82:0d:00:a4:e9:54:ab:2d:8b:3a:64: a5:e4:3b:4a:a0:4c:0d:cc:3f:49:c7:61:b9:4d:fe:4a:01:a0: b5:c9:95:32:ae:b9:e2:ab:1b:ef:e8:29:5a:97:6a:e8:65:d5: af:dc:22:6f:e3:3a:ee:a0:a7:a0:9c:0a:60:db:e0:bf:5d:c8: 17:c9:cf:a9:8c:80:9c:aa:b1:96:54:97:73:fb:8d:00:40:76: 23:d1:fb:18:26:ff:bf:ed:16:b3:86:1d:14:4f:fa:55:36:90: 57:8b:e3:15:e6:c8:fb:e0:5e:0a:21:aa:20:f4:cf:4e:04:ad: b5:b7:4c:3a:4b:94:b1:5c:80:1e:98:08:8c:30:a4:84:01:0d: 65:63:ea:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9a0dLefpfn/Sg80eIms6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUxMDE5MTcwMTMwWhcNMjUxMDIwMTcwMTMwWjAzMTEwLwYDVQQD EyhjNDFjNDE0NGRiZTNkZThiYWQ2ODQwODYyMzk2ZWQwNjdjYjg5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o14Id+5r6/97VUYkbcaEibLPrhK WBYfwCs5nqP4mQnSJMFEKMux98O1Sphn5C2WYAUd2Q8viLY05ot94siE15iLf34L kgtTS5pSmKkA3rhOtUNirFXWjZo5AVNZz3mezGzEDFcxn3siz65ojgs3T1aib9DV q2XZBHxcSmlOWmQGxqfMqllfadRQzy530Jrjlxmzmtj7bQ4yh/sRxp7Uw2wpuSY7 CvtM1+oJvIMyLwtqYC/lZ/sWF9M6mcz+3krFPxyLPLAN6//zI3qxMY36b0IK1g2j 7nykbC1CFlvQKJpxDNNq5aEYLUjoTohT/G1Nr89j9TvdlVA+3ejXZh/CMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQcQUTb496LrWhAhiOW7QZ8uJONMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcZ7FyLn Eu7apZoxw9PFcUodQK+l8H0B/JtBt7GG1uK8WqmtAdDsb6QZlw8NMFYwTT4GecEo AIylRkoaWCQ+WOeMu2lape299JtH5SRhS3DDqccCByjDw+iBZFk3hvdpn98Ut1Tx Xy6GS2AeQGuYEdHmOIINAKTpVKstizpkpeQ7SqBMDcw/ScdhuU3+SgGgtcmVMq65 4qsb7+gpWpdq6GXVr9wib+M67qCnoJwKYNvgv13IF8nPqYyAnKqxllSXc/uNAEB2 I9H7GCb/v+0Ws4YdFE/6VTaQV4vjFebI++BeCiGqIPTPTgSttbdMOkuUsVyAHpgI jDCkhAENZWPq3w== -----END CERTIFICATE-----Generated at Sun Oct 19 23:58:38 2025 by rpki-client