$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: O96UiR7d1wKJArmPozdJTIzm04dOhfr9+f6Wyc+AvHI= Subject key identifier: F3:D5:24:0F:F4:E5:F3:98:A6:DD:6E:78:E5:45:C1:89:E4:56:68:91 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 0198D5F18DCEEE4427D8FD486B222BCC550B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1667 Signing time: Sat 23 Aug 2025 08:00:34 +0000 Manifest this update: Sat 23 Aug 2025 08:00:34 +0000 Manifest next update: Sun 24 Aug 2025 08:00:34 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: O30SZPotNxlYZy+YFvz0XKmjMh+4gDLSPLH0S9vxjUo=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:8d:ce:ee:44:27:d8:fd:48:6b:22:2b:cc:55:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Aug 23 08:00:34 2025 GMT Not After : Aug 24 08:00:34 2025 GMT Subject: CN=f3d5240ff4e5f398a6dd6e78e545c189e4566891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:0c:0d:39:b5:59:a4:05:f7:8b:62:ee:82: ab:7a:22:b4:8f:7b:ec:28:5f:4b:1a:1a:01:1d:8f: 11:5c:a6:3a:d9:17:34:21:7e:1d:68:27:4e:ba:2d: 1d:f9:68:7f:96:09:af:b7:41:40:ab:33:98:e6:a3: e5:2c:88:51:fb:30:09:20:f3:ec:d1:ac:39:6d:a0: 69:51:81:dc:fa:a8:fd:5f:89:bd:14:80:95:45:a7: 0d:89:44:8d:d4:a8:03:2f:25:cf:a0:cf:91:53:23: 9a:73:b9:32:64:4f:29:9d:a2:46:ad:21:fa:7c:fa: a0:ba:f9:e9:f9:4a:1d:89:0c:ff:de:0c:af:2d:f5: 5e:c8:71:75:ab:40:e8:0c:07:aa:da:04:4b:4e:8f: 01:df:3f:c2:e6:93:2d:d3:87:bb:aa:08:83:d4:7b: 63:9b:a0:46:b0:65:60:6d:38:89:d3:79:23:68:d1: 06:3b:68:41:d1:b6:39:35:ea:a4:c7:df:f3:dc:3c: 1d:34:82:05:b9:71:62:e0:dc:3e:71:fc:d0:99:a8: 07:4a:de:58:e5:7f:5f:f2:6a:e0:78:40:5f:27:1f: 6d:8a:9e:87:6d:59:64:8a:e2:b1:69:2f:b6:30:0f: 5e:82:19:34:20:22:8c:09:52:6e:c5:59:f6:2f:0c: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D5:24:0F:F4:E5:F3:98:A6:DD:6E:78:E5:45:C1:89:E4:56:68:91 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:57:2d:10:90:a6:5a:2e:39:43:24:ef:ef:61:26:8b:ae:f1: c9:9b:45:74:7d:bd:51:14:d2:f5:9d:40:97:73:32:d3:cf:9c: f9:cd:a1:41:7c:6e:29:ca:5a:68:74:55:da:a9:1e:09:f6:f3: f9:f2:42:bd:6b:d1:c7:5a:6a:6a:cc:2a:f3:64:08:6a:70:46: 86:2c:6e:c5:75:71:51:2c:2b:43:9c:d4:01:9d:97:2d:89:f6: 80:5c:68:ab:e2:4c:46:6d:d7:ee:3a:6d:12:f5:cc:b0:26:d5: 83:ed:9d:a6:e4:4c:20:47:60:4e:36:43:94:5b:d9:6a:13:27: f9:8e:26:eb:a5:25:33:ce:3f:ff:e9:80:63:4e:36:1b:07:4c: 0f:6d:d7:b6:22:ea:66:35:46:82:68:e0:b5:50:73:e1:c6:57: be:6c:89:28:cd:f7:7d:e5:01:f9:23:1d:3a:59:98:88:d6:b3: 26:64:9a:98:7f:f2:70:9a:63:34:b0:59:fa:63:38:0b:0f:a4: 35:97:32:94:04:d2:a0:ba:cd:ac:c4:64:fa:c2:64:a2:7c:af: 79:7e:ba:23:b0:ac:b2:c4:90:a7:45:c9:b2:94:72:7a:3f:78: 19:88:34:7e:9a:57:2e:eb:29:cb:56:ce:28:22:2e:58:da:13: 4b:a3:2e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8Y3O7kQn2P1IayIrzFULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwODIzMDgwMDM0WhcNMjUwODI0MDgwMDM0WjAzMTEwLwYDVQQD EyhmM2Q1MjQwZmY0ZTVmMzk4YTZkZDZlNzhlNTQ1YzE4OWU0NTY2ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvgMDTm1WaQF94ti7oKreiK0j3vs KF9LGhoBHY8RXKY62Rc0IX4daCdOui0d+Wh/lgmvt0FAqzOY5qPlLIhR+zAJIPPs 0aw5baBpUYHc+qj9X4m9FICVRacNiUSN1KgDLyXPoM+RUyOac7kyZE8pnaJGrSH6 fPqguvnp+UodiQz/3gyvLfVeyHF1q0DoDAeq2gRLTo8B3z/C5pMt04e7qgiD1Htj m6BGsGVgbTiJ03kjaNEGO2hB0bY5Neqkx9/z3DwdNIIFuXFi4Nw+cfzQmagHSt5Y 5X9f8mrgeEBfJx9tip6HbVlkiuKxaS+2MA9eghk0ICKMCVJuxVn2LwwWnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPVJA/05fOYpt1ueOVFwYnkVmiRMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAulctEJCm Wi45QyTv72Emi67xyZtFdH29URTS9Z1Al3My08+c+c2hQXxuKcpaaHRV2qkeCfbz +fJCvWvRx1pqaswq82QIanBGhixuxXVxUSwrQ5zUAZ2XLYn2gFxoq+JMRm3X7jpt EvXMsCbVg+2dpuRMIEdgTjZDlFvZahMn+Y4m66UlM84//+mAY042GwdMD23XtiLq ZjVGgmjgtVBz4cZXvmyJKM33feUB+SMdOlmYiNazJmSamH/ycJpjNLBZ+mM4Cw+k NZcylATSoLrNrMRk+sJkonyveX66I7CsssSQp0XJspRyej94GYg0fppXLuspy1bO KCIuWNoTS6Mu6g== -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:18 2025 by rpki-client