$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: Oe4RTRd9Gfas3OVXdbQMUHuM4VVr9ckjsC9xgMbM+fc= Subject key identifier: 42:CC:62:CE:BD:9B:82:71:17:A8:33:D2:33:BF:99:B9:8E:FD:C8:61 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 0196BB92DA2FC3D11B53174B22462B2DFEBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 154E Signing time: Sat 10 May 2025 19:01:25 +0000 Manifest this update: Sat 10 May 2025 19:01:25 +0000 Manifest next update: Sun 11 May 2025 19:01:25 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: PmcVKv7pyJO/EW2gYCfjCfYnSe2rikGfhfMb2G66GcQ=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 8: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) 9: r35yid910YnMRVJ0dohWLbFg9fA.roa (hash: R0fRzKPoSAK4VI2tCDaL9PTR+axXctfnY3qc7wzVVJQ=) 10: zP8qZCQuiGnyynXqFEworI-l4Kk.roa (hash: 8v3+9BYp2qaRN+mDEqf3MiLHJ2vk/UAqK532lYFyFAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:92:da:2f:c3:d1:1b:53:17:4b:22:46:2b:2d:fe:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: May 10 19:01:25 2025 GMT Not After : May 11 19:01:25 2025 GMT Subject: CN=42cc62cebd9b827117a833d233bf99b98efdc861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:32:79:eb:79:b1:5e:7c:d7:62:a4:be:e7: 0c:07:4d:e7:42:55:65:9d:07:6b:a9:a5:93:b1:c8: 4b:bb:01:1e:ca:69:93:bf:27:a6:04:ae:32:20:87: bd:11:fd:8a:64:73:b6:de:52:c1:01:35:26:83:2e: 7b:ab:a4:76:b8:5a:70:67:b6:7d:bb:95:88:3e:dc: 7e:b2:3d:bb:7a:d0:9d:f6:58:8c:15:87:3e:52:e3: 66:83:f7:0c:66:ca:ee:33:30:ee:6e:c4:2c:95:07: 84:78:bd:d2:48:cb:46:8a:ac:7b:c4:b6:1d:ca:b1: 37:6d:b6:5a:8b:6b:b1:fb:dd:52:e7:ae:e4:fc:f4: 5b:ab:f9:e0:5b:8a:3e:21:da:97:8d:58:0c:ec:c3: 72:29:e9:bc:04:16:64:06:83:e5:7f:18:19:38:77: 43:c7:39:a9:fe:3f:ac:de:89:7c:4c:78:af:dc:9d: 2a:d8:aa:f3:77:8f:a8:eb:b2:ae:b1:c1:8b:eb:a3: 29:6c:a6:0d:d4:ac:12:37:8b:0f:e6:e9:18:3d:9f: e9:c1:31:17:8b:02:c7:bf:f3:37:5d:d9:b2:14:a6: 03:33:94:e9:e7:66:91:06:3f:60:1e:19:6c:84:f4: d4:62:98:73:3e:08:0e:2e:8e:c4:d6:82:1d:3d:b3: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:62:CE:BD:9B:82:71:17:A8:33:D2:33:BF:99:B9:8E:FD:C8:61 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a2:67:92:01:22:18:db:ec:b6:30:2c:49:f6:ce:fe:87:a8: 86:07:60:ca:42:db:02:87:7a:3c:a9:e2:15:b7:f7:8a:59:ff: cf:cf:4a:60:33:01:61:e3:50:2c:1b:50:2a:dc:b7:06:f8:78: 75:fb:1c:ad:56:92:49:0e:39:3a:6e:76:cb:2f:fb:68:72:b9: 92:54:dd:a5:9f:15:ab:a0:c7:d6:e3:9c:2d:f9:df:e1:28:be: 4e:e7:76:1f:f2:3d:70:4c:7d:01:47:cd:32:0e:17:de:5d:4f: 0f:9c:47:b1:80:90:cb:7a:62:c6:0b:f3:86:2e:12:99:43:f0: 0a:24:91:81:68:a9:fc:9a:d6:0c:9c:6b:b1:8e:ef:e7:0e:9f: 1d:0c:b5:f3:3a:ce:c2:e3:6c:05:68:22:b1:aa:93:7d:94:fe: e2:73:f2:6d:d8:21:ac:24:e6:59:a7:e5:76:b8:d7:7e:d8:c8: 5b:a8:76:ba:2f:c5:55:ae:d5:fb:1a:3f:fd:9f:fa:ad:5c:89: d5:69:64:84:0d:20:b4:8f:2c:49:3a:78:5d:fb:cf:bd:be:c4: 6e:7c:76:24:a7:9c:94:f8:bf:77:78:12:12:97:0b:6f:64:43: 09:ad:85:1f:70:4e:4b:71:49:8e:08:b1:82:5a:75:8f:1c:be: 0c:db:9b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7ktovw9EbUxdLIkYrLf67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwNTEwMTkwMTI1WhcNMjUwNTExMTkwMTI1WjAzMTEwLwYDVQQD Eyg0MmNjNjJjZWJkOWI4MjcxMTdhODMzZDIzM2JmOTliOThlZmRjODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqoyeet5sV5812KkvucMB03nQlVl nQdrqaWTschLuwEeymmTvyemBK4yIIe9Ef2KZHO23lLBATUmgy57q6R2uFpwZ7Z9 u5WIPtx+sj27etCd9liMFYc+UuNmg/cMZsruMzDubsQslQeEeL3SSMtGiqx7xLYd yrE3bbZai2ux+91S567k/PRbq/ngW4o+IdqXjVgM7MNyKem8BBZkBoPlfxgZOHdD xzmp/j+s3ol8THiv3J0q2Krzd4+o67KuscGL66MpbKYN1KwSN4sP5ukYPZ/pwTEX iwLHv/M3XdmyFKYDM5Tp52aRBj9gHhlshPTUYphzPggOLo7E1oIdPbOc6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELMYs69m4JxF6gz0jO/mbmO/chhMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6JnkgEi GNvstjAsSfbO/oeohgdgykLbAod6PKniFbf3iln/z89KYDMBYeNQLBtQKty3Bvh4 dfscrVaSSQ45Om52yy/7aHK5klTdpZ8Vq6DH1uOcLfnf4Si+Tud2H/I9cEx9AUfN Mg4X3l1PD5xHsYCQy3pixgvzhi4SmUPwCiSRgWip/JrWDJxrsY7v5w6fHQy18zrO wuNsBWgisaqTfZT+4nPybdghrCTmWafldrjXftjIW6h2ui/FVa7V+xo//Z/6rVyJ 1WlkhA0gtI8sSTp4XfvPvb7Ebnx2JKeclPi/d3gSEpcLb2RDCa2FH3BOS3FJjgix glp1jxy+DNubcg== -----END CERTIFICATE-----Generated at Sun May 11 03:42:21 2025 by rpki-client