$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: 7RCfrhwIEhaOdMpocSDuavH4U85LUS+oO9v/Bhjq9p0= Subject key identifier: 22:FC:72:A2:CC:E8:7A:44:D1:A5:D2:07:3C:52:80:7A:EC:62:DA:23 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 0197499EE24C9A06541960C56A37E1C1A5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1580 Signing time: Sat 07 Jun 2025 09:00:38 +0000 Manifest this update: Sat 07 Jun 2025 09:00:38 +0000 Manifest next update: Sun 08 Jun 2025 09:00:38 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: JhjbZRDWskmyrzL9gpP6kep9Zd0DkBfh2AgKqHGo/A0=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:9e:e2:4c:9a:06:54:19:60:c5:6a:37:e1:c1:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Jun 7 09:00:38 2025 GMT Not After : Jun 8 09:00:38 2025 GMT Subject: CN=22fc72a2cce87a44d1a5d2073c52807aec62da23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:bc:53:6c:d2:e7:e3:98:27:53:e3:59:e8: a6:03:94:b3:f5:29:ef:5f:6f:b0:8c:2a:1a:43:09: 70:73:76:79:cf:44:ed:3f:6e:cf:32:db:e2:45:c8: 08:eb:3c:14:a6:87:34:8d:38:f7:b1:2c:f0:8e:a9: 15:a7:31:9d:16:fd:5c:ca:72:0f:ec:de:48:d3:16: b4:d2:5b:d6:3e:05:7c:e1:21:94:68:eb:97:a5:0c: f8:f2:48:86:f6:57:bf:34:2f:bd:c3:85:18:a9:47: 4f:a7:e2:e5:a5:e6:8c:4a:8f:3f:9f:3d:c7:e8:b7: c1:d2:7d:68:90:bf:f6:ac:87:1d:45:96:9a:d0:f8: 8d:e1:44:41:90:dc:1d:61:8e:bd:9f:26:80:f8:56: 7a:28:b4:38:5f:ea:25:99:3c:10:9d:df:e6:18:24: 2e:31:86:71:ec:82:fa:2e:af:82:86:2d:57:73:a8: e5:e6:66:78:a8:f3:ef:e4:9b:ac:cc:37:17:15:1e: ee:89:d2:a2:d6:42:25:f3:24:aa:23:20:1b:db:ff: bf:27:e3:70:c8:10:72:d0:32:88:47:98:d0:e5:f6: 70:99:5e:02:4f:59:91:07:99:a0:96:97:e0:42:a3: f3:6d:84:19:59:af:22:b8:97:b0:1d:d8:54:31:b1: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FC:72:A2:CC:E8:7A:44:D1:A5:D2:07:3C:52:80:7A:EC:62:DA:23 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:77:20:60:90:62:bb:18:2b:9f:11:72:b7:56:a7:27:75:13: 7d:8f:54:17:1e:bb:8f:6a:4c:25:dc:d3:47:07:3c:53:6e:22: 47:33:26:ee:80:13:6c:05:59:05:57:e3:4f:0f:92:17:36:e7: 3d:db:27:80:95:20:0d:6f:bc:b2:61:ef:49:ad:b4:e5:e4:38: 4f:97:30:e6:d5:c8:53:56:24:7c:18:07:bc:ca:26:1c:34:21: 1c:9f:45:68:9b:4f:76:0c:81:8d:50:e6:70:34:12:3b:32:01: 24:9d:02:0c:a9:fa:32:01:6e:e0:b4:de:da:54:e5:b7:b9:3a: e9:b9:11:e3:f1:fc:d7:63:78:92:d3:de:58:6d:27:94:27:b4: dc:7f:22:f1:62:66:bc:6f:39:2c:89:54:be:30:c1:bd:3f:6c: f2:70:cb:87:56:a9:a3:00:64:d1:39:ab:18:62:85:bb:0e:85: 74:13:59:a3:93:d1:1e:7e:06:4f:9e:b7:65:22:90:6a:b4:89: 1d:d9:7d:f5:0e:6b:f8:a3:e6:55:4e:3b:ee:c0:96:1b:1a:19: 0d:31:46:d7:38:be:2e:d5:13:d0:30:f4:ad:29:23:39:dd:a6: 90:9e:be:0e:e4:08:96:49:d6:73:1a:d7:a3:7b:0d:63:3b:b3: 47:c2:68:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJnuJMmgZUGWDFajfhwaWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUwNjA3MDkwMDM4WhcNMjUwNjA4MDkwMDM4WjAzMTEwLwYDVQQD EygyMmZjNzJhMmNjZTg3YTQ0ZDFhNWQyMDczYzUyODA3YWVjNjJkYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYy8U2zS5+OYJ1PjWeimA5Sz9Snv X2+wjCoaQwlwc3Z5z0TtP27PMtviRcgI6zwUpoc0jTj3sSzwjqkVpzGdFv1cynIP 7N5I0xa00lvWPgV84SGUaOuXpQz48kiG9le/NC+9w4UYqUdPp+LlpeaMSo8/nz3H 6LfB0n1okL/2rIcdRZaa0PiN4URBkNwdYY69nyaA+FZ6KLQ4X+olmTwQnd/mGCQu MYZx7IL6Lq+Chi1Xc6jl5mZ4qPPv5JuszDcXFR7uidKi1kIl8ySqIyAb2/+/J+Nw yBBy0DKIR5jQ5fZwmV4CT1mRB5mglpfgQqPzbYQZWa8iuJewHdhUMbFchQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCL8cqLM6HpE0aXSBzxSgHrsYtojMB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtncgYJBi uxgrnxFyt1anJ3UTfY9UFx67j2pMJdzTRwc8U24iRzMm7oATbAVZBVfjTw+SFzbn PdsngJUgDW+8smHvSa205eQ4T5cw5tXIU1YkfBgHvMomHDQhHJ9FaJtPdgyBjVDm cDQSOzIBJJ0CDKn6MgFu4LTe2lTlt7k66bkR4/H812N4ktPeWG0nlCe03H8i8WJm vG85LIlUvjDBvT9s8nDLh1apowBk0TmrGGKFuw6FdBNZo5PRHn4GT563ZSKQarSJ Hdl99Q5r+KPmVU477sCWGxoZDTFG1zi+LtUT0DD0rSkjOd2mkJ6+DuQIlknWcxrX o3sNYzuzR8JojA== -----END CERTIFICATE-----Generated at Sat Jun 7 13:54:56 2025 by rpki-client