$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: 3Cz/+IYc1JcMOxzLxkN6nbq5wD8OP1yVtt6A6K/y/NM= Subject key identifier: 73:4E:A1:BA:51:A0:F3:A1:7C:43:78:21:94:FD:CB:E3:9A:A0:53:72 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 0197B6D79C6CCF0AFEA888AAA09BBBEC170F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 15D1 Signing time: Sat 28 Jun 2025 14:01:12 +0000 Manifest this update: Sat 28 Jun 2025 14:01:12 +0000 Manifest next update: Sun 29 Jun 2025 14:01:12 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: vNs/5rYkvTefQfNmPfEoU3fUjv87QdJ4392rKxr/3zs=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 7: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:9c:6c:cf:0a:fe:a8:88:aa:a0:9b:bb:ec:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jun 28 14:01:12 2025 GMT Not After : Jun 29 14:01:12 2025 GMT Subject: CN=734ea1ba51a0f3a17c43782194fdcbe39aa05372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:f4:13:3c:a9:da:4f:45:6b:db:81:28:ab: 92:63:cb:cb:8f:9e:19:d7:c5:e6:21:89:ed:68:63: b6:9c:e0:ea:c5:ee:17:64:5f:29:0c:72:0d:8c:01: 6a:33:fd:f6:1c:fd:78:c4:89:61:ed:7e:63:7e:77: db:ba:43:56:fa:90:54:c8:75:8f:73:c8:93:47:8a: 94:f8:66:c0:68:8d:68:7f:66:83:0b:81:b9:18:dd: fc:62:86:a7:00:17:b9:d4:cc:75:a6:ed:af:42:54: fd:e8:71:c5:5c:93:0f:08:ba:39:17:74:41:3a:08: 91:c8:a6:fc:f8:a3:e7:18:66:b7:91:6b:c2:2a:c3: 48:6c:94:b5:7d:e4:d9:d5:66:45:98:0e:ef:5d:3f: cf:e2:f3:7d:79:d8:89:b7:dc:d1:72:b5:26:66:9a: 17:42:5e:7e:35:db:d2:98:07:02:c7:74:44:4f:77: 81:cc:e5:85:5d:e4:79:4a:31:53:fa:ca:cf:6e:7e: d1:49:6e:11:99:75:7c:17:53:90:38:87:a3:84:7e: 5f:61:e4:5b:fb:22:22:73:46:c8:23:59:6d:05:46: 5a:ad:3a:11:2a:0c:ea:b9:c0:39:48:50:dd:e9:4f: 6b:05:5d:f0:40:d6:b5:3f:ba:1c:80:3a:5b:a0:44: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:A1:BA:51:A0:F3:A1:7C:43:78:21:94:FD:CB:E3:9A:A0:53:72 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:28:b4:a2:cb:aa:06:2b:e7:17:13:9b:cb:5c:03:98:07: 73:f9:50:ea:f9:dc:16:c1:9d:f0:2e:6c:a2:60:46:38:ea:e2: 12:76:13:45:0d:bd:15:08:ba:72:66:4d:d5:8f:fb:7a:16:51: 58:56:5d:d0:f0:d5:dc:eb:91:d7:6b:1d:b8:a8:b0:fb:6c:e8: 39:f6:45:0a:e9:1a:d1:77:e6:64:6e:ba:27:c8:d5:d9:23:23: a0:4d:9e:3f:1e:7b:e2:d3:eb:41:9b:34:55:34:ca:1f:1f:63: a4:a2:6b:8a:7d:8a:dd:98:3a:5e:d7:74:e3:e5:47:d3:24:d6: c0:50:72:41:e0:0a:ea:b5:39:8d:49:8d:c9:a4:d0:85:4e:33: 9b:e3:03:ee:72:00:dc:97:8a:39:28:8a:cc:bd:8b:02:32:a3: 10:28:2c:df:f5:2c:86:ad:8a:a3:c4:c5:ea:e2:1b:38:dc:a2: 95:c8:c4:f0:16:d2:a5:04:52:42:71:b3:ec:36:0a:09:4f:cb: af:e5:73:01:c1:13:ba:43:fa:f9:73:d0:b4:ab:2c:6e:fe:52: 79:af:6b:9a:7e:b4:27:0f:e6:ac:26:28:cc:c7:62:ea:67:29: ee:9f:fb:a5:80:05:01:85:b7:2c:c6:d4:da:59:63:27:11:4a: 57:f3:3b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe215xszwr+qIiqoJu77BcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwNjI4MTQwMTEyWhcNMjUwNjI5MTQwMTEyWjAzMTEwLwYDVQQD Eyg3MzRlYTFiYTUxYTBmM2ExN2M0Mzc4MjE5NGZkY2JlMzlhYTA1MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY70Ezyp2k9Fa9uBKKuSY8vLj54Z 18XmIYntaGO2nODqxe4XZF8pDHINjAFqM/32HP14xIlh7X5jfnfbukNW+pBUyHWP c8iTR4qU+GbAaI1of2aDC4G5GN38YoanABe51Mx1pu2vQlT96HHFXJMPCLo5F3RB OgiRyKb8+KPnGGa3kWvCKsNIbJS1feTZ1WZFmA7vXT/P4vN9ediJt9zRcrUmZpoX Ql5+NdvSmAcCx3RET3eBzOWFXeR5SjFT+srPbn7RSW4RmXV8F1OQOIejhH5fYeRb +yIic0bII1ltBUZarToRKgzqucA5SFDd6U9rBV3wQNa1P7ocgDpboETNWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNOobpRoPOhfEN4IZT9y+OaoFNyMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPcotKLL qgYr5xcTm8tcA5gHc/lQ6vncFsGd8C5somBGOOriEnYTRQ29FQi6cmZN1Y/7ehZR WFZd0PDV3OuR12sduKiw+2zoOfZFCuka0XfmZG66J8jV2SMjoE2ePx574tPrQZs0 VTTKHx9jpKJrin2K3Zg6Xtd04+VH0yTWwFByQeAK6rU5jUmNyaTQhU4zm+MD7nIA 3JeKOSiKzL2LAjKjECgs3/Ushq2Ko8TF6uIbONyilcjE8BbSpQRSQnGz7DYKCU/L r+VzAcETukP6+XPQtKssbv5Sea9rmn60Jw/mrCYozMdi6mcp7p/7pYAFAYW3LMbU 2lljJxFKV/M78A== -----END CERTIFICATE-----Generated at Sat Jun 28 23:09:24 2025 by rpki-client