$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: bGdPM5+1BixuhB7eqS2u2Gj9d2TLgreUXnt0tfGMMIE= Subject key identifier: 38:82:FF:1C:69:2F:E5:82:BF:DA:C3:42:F7:6C:07:54:09:04:6C:16 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019843D14483412A01BC581086F7F9E52DA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 161A Signing time: Fri 25 Jul 2025 23:00:44 +0000 Manifest this update: Fri 25 Jul 2025 23:00:44 +0000 Manifest next update: Sat 26 Jul 2025 23:00:44 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: QEKF6l+ksPuWpotr0WghbXHYKwWdkBwIVeQNXSEg5ao=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 7: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:43:d1:44:83:41:2a:01:bc:58:10:86:f7:f9:e5:2d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jul 25 23:00:44 2025 GMT Not After : Jul 26 23:00:44 2025 GMT Subject: CN=3882ff1c692fe582bfdac342f76c075409046c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:bd:08:42:ec:a0:47:08:2b:7d:75:f9:ae: d5:7e:ec:b5:e6:94:41:13:db:38:ab:bc:d3:eb:82: 09:20:ce:b8:e7:46:96:21:b5:d0:f8:db:be:59:ac: f2:a2:7a:b6:42:fe:b3:ac:77:df:90:78:d2:a9:1e: d8:72:48:1e:f7:31:51:69:6d:88:0e:07:4e:5d:6b: 41:1a:64:79:3e:ef:e5:9a:71:de:c1:9f:fe:ca:2f: a4:53:50:7f:84:8e:e4:e1:04:a1:1f:59:95:5b:67: b3:d2:ae:57:43:52:55:58:c8:36:ed:e7:0e:e3:dc: ff:39:2d:d5:f7:35:93:69:ac:de:db:33:22:e7:3c: 00:30:53:07:51:9d:96:bb:76:0d:7e:c6:e8:98:20: dd:63:de:b1:26:0e:d0:88:c5:1e:3d:40:94:74:5a: 91:a2:be:80:1c:bd:2e:d3:64:22:92:ea:33:96:0a: 6b:af:99:6b:c9:e1:08:f2:49:a5:85:3a:8f:d4:b8: 4e:e3:6d:49:3d:64:40:8e:2d:0c:e4:b7:c2:35:5c: 4f:7f:9b:17:05:c4:cd:71:8d:0c:03:4a:d7:d6:87: 43:e4:22:e6:0d:d6:44:17:f8:e3:06:32:49:d1:c3: 82:89:2b:fc:df:c2:7a:d1:ec:f1:24:a6:28:d1:2b: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:82:FF:1C:69:2F:E5:82:BF:DA:C3:42:F7:6C:07:54:09:04:6C:16 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:36:d5:52:78:d8:16:01:c8:9c:cb:4d:a2:f3:66:96:91:1a: 41:22:6a:46:ad:35:62:9e:86:87:63:e2:4c:c6:af:2b:7b:1b: e3:c8:d0:4e:82:26:64:de:8f:cc:69:e8:27:71:88:f8:3e:1e: 04:84:44:65:c9:44:cc:b1:86:84:a6:db:d9:c7:77:52:fb:61: 72:bd:18:31:b2:36:5d:7a:8e:56:c9:a5:f0:9f:26:57:13:0d: c2:c8:87:73:d1:bd:7c:dc:c3:42:6c:31:ee:25:9b:0e:aa:3f: 63:dd:ed:54:e3:db:ce:c0:af:e8:e4:f1:ed:d1:07:d9:fc:13: 46:bd:c9:5a:11:87:c1:38:fe:ee:13:fe:46:0a:17:98:a0:6f: 72:0d:45:63:d4:f6:a0:7c:aa:21:4d:83:ff:1a:82:d9:4f:73: 75:b9:46:bd:73:01:77:50:74:58:23:94:53:b7:a9:58:8f:42: 8a:2c:45:99:0c:08:92:46:bd:5e:07:45:26:45:1b:6f:50:a3: f6:c3:b2:33:b2:38:0a:e0:52:85:a5:57:f7:93:58:82:4c:9a: 01:eb:e4:ae:4f:63:33:d1:6b:f4:d9:4b:34:f3:94:16:44:b4: f2:19:ef:d2:8f:9a:59:51:0b:22:b8:68:46:05:26:8a:03:67: 3e:22:b8:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhD0USDQSoBvFgQhvf55S2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwNzI1MjMwMDQ0WhcNMjUwNzI2MjMwMDQ0WjAzMTEwLwYDVQQD EygzODgyZmYxYzY5MmZlNTgyYmZkYWMzNDJmNzZjMDc1NDA5MDQ2YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsK9CELsoEcIK311+a7Vfuy15pRB E9s4q7zT64IJIM6450aWIbXQ+Nu+Wazyonq2Qv6zrHffkHjSqR7Yckge9zFRaW2I DgdOXWtBGmR5Pu/lmnHewZ/+yi+kU1B/hI7k4QShH1mVW2ez0q5XQ1JVWMg27ecO 49z/OS3V9zWTaaze2zMi5zwAMFMHUZ2Wu3YNfsbomCDdY96xJg7QiMUePUCUdFqR or6AHL0u02Qikuozlgprr5lryeEI8kmlhTqP1LhO421JPWRAji0M5LfCNVxPf5sX BcTNcY0MA0rX1odD5CLmDdZEF/jjBjJJ0cOCiSv838J60ezxJKYo0SsNswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiC/xxpL+WCv9rDQvdsB1QJBGwWMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTbVUnjY FgHInMtNovNmlpEaQSJqRq01Yp6Gh2PiTMavK3sb48jQToImZN6PzGnoJ3GI+D4e BIREZclEzLGGhKbb2cd3Uvthcr0YMbI2XXqOVsml8J8mVxMNwsiHc9G9fNzDQmwx 7iWbDqo/Y93tVOPbzsCv6OTx7dEH2fwTRr3JWhGHwTj+7hP+RgoXmKBvcg1FY9T2 oHyqIU2D/xqC2U9zdblGvXMBd1B0WCOUU7epWI9CiixFmQwIkka9XgdFJkUbb1Cj 9sOyM7I4CuBShaVX95NYgkyaAevkrk9jM9Fr9NlLNPOUFkS08hnv0o+aWVELIrho RgUmigNnPiK4ng== -----END CERTIFICATE-----Generated at Sat Jul 26 06:48:45 2025 by rpki-client