$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: vN2jb71iD+p4dw8LRCkapJHf98Gep2fFoUsz8hGXV8Q= Subject key identifier: E8:E1:FF:04:E3:67:29:DE:8C:8D:FE:A5:3A:35:E7:00:B8:99:95:25 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 01985231A7976D7282F3EEB39D0778355E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1609 Signing time: Mon 28 Jul 2025 18:00:42 +0000 Manifest this update: Mon 28 Jul 2025 18:00:42 +0000 Manifest next update: Tue 29 Jul 2025 18:00:42 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: Jqa1kmEsD4NIMyXDaD06S5KMEzGiI504AMRgvHsCanE=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Jul 2025 14:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:52:31:a7:97:6d:72:82:f3:ee:b3:9d:07:78:35:5e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Jul 28 18:00:42 2025 GMT Not After : Jul 29 18:00:42 2025 GMT Subject: CN=e8e1ff04e36729de8c8dfea53a35e700b8999525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:1a:ab:a7:f1:27:af:0d:35:e0:b3:5f:09: 50:de:4a:3b:ad:4e:9c:a5:7d:37:fc:32:83:d7:16: 5e:94:93:57:fc:64:e4:46:c5:58:56:22:cb:22:6d: 3f:8e:b1:f3:4b:40:0a:39:31:97:d7:ff:12:7d:7d: 4a:d5:a2:b0:1a:0b:1c:a3:fa:f6:b3:ec:bf:e3:3b: a8:b6:38:98:f4:18:50:0b:5a:e3:41:ac:e3:05:d6: 93:f6:94:42:e5:82:11:d9:bf:a1:52:62:d9:f2:6a: 14:d5:4f:3c:d1:dd:36:e5:00:e9:e7:18:f1:25:22: 7c:e2:3c:98:49:9e:4c:87:24:e4:ba:d4:eb:e2:9b: b9:8f:ad:90:2a:fe:82:26:fa:c4:04:a5:1d:ae:bf: 68:8b:85:d4:94:4d:97:3c:02:2c:9d:33:9c:2e:f5: 41:c2:2c:e2:6d:ac:d0:de:0e:94:02:da:74:30:09: 8f:85:b6:de:72:ed:55:54:d4:8e:2b:ed:bf:8e:f0: cc:3b:6f:6f:e2:3b:4e:bc:06:45:26:32:d2:0a:a2: c1:3d:96:ea:5c:ee:a9:91:53:29:95:f0:85:ca:50: 58:35:59:c4:9f:fe:b6:15:42:74:38:f6:ef:5c:27: cb:07:7c:b6:bc:b3:f7:b9:4b:05:74:09:ef:c1:02: 65:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E1:FF:04:E3:67:29:DE:8C:8D:FE:A5:3A:35:E7:00:B8:99:95:25 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:62:f0:d8:b3:52:57:8e:7c:74:46:bb:60:41:7c:64:10: 21:cb:92:62:83:98:dc:e6:ab:8d:65:46:56:c6:60:f1:c3:65: 42:03:97:d5:17:a7:c4:0f:58:b5:58:6e:36:9b:fc:62:99:af: fb:8b:ed:16:9e:99:12:3b:ff:af:a3:64:30:7d:73:eb:f4:12: 67:6d:78:9f:f6:71:ff:11:98:47:40:56:fe:14:e1:06:19:4a: d0:95:71:db:1d:0c:35:00:c8:4c:45:68:30:fd:5b:d6:1b:69: 5e:86:e2:1e:20:8d:2b:a0:a9:ca:85:40:ee:90:13:ab:e9:58: d4:ae:17:a0:94:31:7d:20:2e:dc:10:4d:31:3a:03:f4:34:25: 14:6c:c1:44:41:57:46:13:96:61:b9:f7:09:2f:d1:d4:de:f0: 37:8b:26:ef:03:fd:93:c1:c1:b2:18:22:ca:c8:dc:e9:79:c2: e3:ad:61:be:50:30:a2:bf:0f:70:be:95:4e:7d:87:38:c9:5b: 48:8c:54:31:92:dc:9c:d1:0f:af:b1:f5:0e:1e:d4:2b:ef:45: e7:f3:ae:18:49:59:d2:86:6e:15:5e:d0:b1:bd:42:97:a8:27: 5c:9b:b7:e1:1a:6f:50:7c:65:07:2d:27:44:a9:94:6e:8f:c3: 7d:51:28:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhSMaeXbXKC8+6znQd4NV5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUwNzI4MTgwMDQyWhcNMjUwNzI5MTgwMDQyWjAzMTEwLwYDVQQD EyhlOGUxZmYwNGUzNjcyOWRlOGM4ZGZlYTUzYTM1ZTcwMGI4OTk5NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldQaq6fxJ68NNeCzXwlQ3ko7rU6c pX03/DKD1xZelJNX/GTkRsVYViLLIm0/jrHzS0AKOTGX1/8SfX1K1aKwGgsco/r2 s+y/4zuotjiY9BhQC1rjQazjBdaT9pRC5YIR2b+hUmLZ8moU1U880d025QDp5xjx JSJ84jyYSZ5MhyTkutTr4pu5j62QKv6CJvrEBKUdrr9oi4XUlE2XPAIsnTOcLvVB wizibazQ3g6UAtp0MAmPhbbecu1VVNSOK+2/jvDMO29v4jtOvAZFJjLSCqLBPZbq XO6pkVMplfCFylBYNVnEn/62FUJ0OPbvXCfLB3y2vLP3uUsFdAnvwQJlRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjh/wTjZynejI3+pTo15wC4mZUlMB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ9i8Niz UleOfHRGu2BBfGQQIcuSYoOY3OarjWVGVsZg8cNlQgOX1RenxA9YtVhuNpv8Ypmv +4vtFp6ZEjv/r6NkMH1z6/QSZ214n/Zx/xGYR0BW/hThBhlK0JVx2x0MNQDITEVo MP1b1htpXobiHiCNK6CpyoVA7pATq+lY1K4XoJQxfSAu3BBNMToD9DQlFGzBREFX RhOWYbn3CS/R1N7wN4sm7wP9k8HBshgiysjc6XnC461hvlAwor8PcL6VTn2HOMlb SIxUMZLcnNEPr7H1Dh7UK+9F5/OuGElZ0oZuFV7Qsb1Cl6gnXJu34RpvUHxlBy0n RKmUbo/DfVEo/A== -----END CERTIFICATE-----Generated at Mon Jul 28 23:05:18 2025 by rpki-client