$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: eG1491vXXRm6llrttdmYD2GCjOHHUKRfXXmrnJx7Ku4= Subject key identifier: 91:50:47:75:26:1C:56:37:FA:8F:F1:A1:BC:79:3A:33:49:A9:7D:18 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01A0B050834D0A6636215C2FDF897F22D560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1A7A Signing time: Thu 17 Sep 2026 17:01:01 +0000 Manifest this update: Thu 17 Sep 2026 17:01:01 +0000 Manifest next update: Fri 18 Sep 2026 17:01:01 +0000 Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=) 2: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=) 3: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=) 4: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: uAarJhGI2FlZ3l7yZWm9KMIHeGfEtFJkNhxOF3XATkk=) 5: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=) 6: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=) 7: OVwsXYypxA7SEcE0oqAv66KV2iw.roa (hash: p2ldypSF2XQKcxweJh6LjsaWiKlRwLKkcdSWL7M3990=) 8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=) 9: eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa (hash: tKohV45mbquQ6A1OYA4BBMCrfZiBK3eEB8vOzL2T2gM=) 10: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 14:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b0:50:83:4d:0a:66:36:21:5c:2f:df:89:7f:22:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Sep 17 17:01:01 2026 GMT Not After : Sep 18 17:01:01 2026 GMT Subject: CN=91504775261c5637fa8ff1a1bc793a3349a97d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:ba:b8:89:d5:b9:86:8d:7e:3a:05:c2:bf: 2e:55:70:16:83:9d:ed:14:3d:03:ad:48:24:9e:56: 22:f1:16:9d:52:94:aa:38:6c:e0:88:1e:e6:f0:d9: da:89:95:4c:73:d1:c6:f6:f1:e9:d9:63:ce:5b:02: 8a:be:00:d4:12:b2:bb:10:3f:74:01:73:9b:6c:50: e4:27:55:44:7b:22:55:86:ed:e8:02:1d:70:45:56: de:41:9e:ae:58:cd:ee:b6:85:ff:ba:09:5d:29:f0: 09:0f:ec:82:61:c4:63:de:df:98:b5:72:b3:05:6c: 23:a5:15:f4:ef:16:15:4b:3c:0b:22:c0:b9:05:16: 5e:66:ac:61:a8:25:44:8e:ac:f4:81:b4:7f:70:d1: c1:a6:1d:d5:b4:17:6e:e5:c9:cf:da:f4:85:ca:27: db:64:49:f8:4d:70:70:6e:02:cb:82:e0:31:76:44: a0:8d:5f:1f:56:aa:c7:1f:fe:9d:96:ac:51:5d:f5: 33:63:bc:e5:51:a7:91:58:ca:ce:d9:8f:2c:10:89: 51:b4:74:a1:5b:c6:f7:32:37:7e:c0:9f:58:88:e5: 09:06:ab:05:b5:90:65:eb:04:6d:b4:97:8b:62:7e: b5:db:d8:37:86:15:e7:fb:fa:f4:ab:3c:96:3d:c5: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:50:47:75:26:1C:56:37:FA:8F:F1:A1:BC:79:3A:33:49:A9:7D:18 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3f:12:8d:08:4c:9e:f1:87:89:a3:e2:21:20:cb:0a:0d:e1: 11:fa:3c:9e:28:30:d8:e5:d1:01:1f:28:86:44:ad:9a:80:1f: 6d:ec:90:b0:05:9f:7a:7c:8a:e3:14:01:84:54:f2:1b:d1:5b: d6:91:3b:2a:50:ab:da:0e:7d:1e:30:e1:01:3a:b5:2d:e6:ca: a3:4c:ae:e3:31:e8:8f:cb:70:8b:70:52:8b:46:65:e9:0c:d1: 0c:48:84:89:20:3d:c7:f6:cf:3f:ff:1a:5d:99:f3:6b:d2:76: 27:7b:23:74:02:d1:88:33:e6:92:39:ef:e3:75:df:fd:d9:56: 76:59:a4:d4:f6:20:e7:49:e4:4a:c6:cd:94:86:d0:74:ef:bc: ba:c6:47:e4:47:04:e0:3f:e9:7b:c2:67:09:84:2f:61:ee:8a: 79:f9:39:8e:81:c8:b5:62:3b:64:c4:cc:94:70:6d:5b:55:c7: a5:91:68:3e:e3:4d:cf:58:6b:1d:c3:02:b3:13:25:e3:a9:5e: e7:57:54:10:c7:3d:2f:05:a3:96:7d:78:d2:8c:57:c0:57:3a: 66:64:79:bf:a4:cc:4c:d3:de:72:45:79:57:1f:94:35:57:7a: 99:9f:5a:87:28:86:6d:7f:cd:10:ec:31:4e:19:f0:59:38:a6: 0a:cb:08:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCwUINNCmY2IVwv34l/ItVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwOTE3MTcwMTAxWhcNMjYwOTE4MTcwMTAxWjAzMTEwLwYDVQQD Eyg5MTUwNDc3NTI2MWM1NjM3ZmE4ZmYxYTFiYzc5M2EzMzQ5YTk3ZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOS6uInVuYaNfjoFwr8uVXAWg53t FD0DrUgknlYi8RadUpSqOGzgiB7m8NnaiZVMc9HG9vHp2WPOWwKKvgDUErK7ED90 AXObbFDkJ1VEeyJVhu3oAh1wRVbeQZ6uWM3utoX/ugldKfAJD+yCYcRj3t+YtXKz BWwjpRX07xYVSzwLIsC5BRZeZqxhqCVEjqz0gbR/cNHBph3VtBdu5cnP2vSFyifb ZEn4TXBwbgLLguAxdkSgjV8fVqrHH/6dlqxRXfUzY7zlUaeRWMrO2Y8sEIlRtHSh W8b3Mjd+wJ9YiOUJBqsFtZBl6wRttJeLYn6129g3hhXn+/r0qzyWPcVAuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFQR3UmHFY3+o/xobx5OjNJqX0YMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsz8SjQhM nvGHiaPiISDLCg3hEfo8nigw2OXRAR8ohkStmoAfbeyQsAWfenyK4xQBhFTyG9Fb 1pE7KlCr2g59HjDhATq1LebKo0yu4zHoj8twi3BSi0Zl6QzRDEiEiSA9x/bPP/8a XZnza9J2J3sjdALRiDPmkjnv43Xf/dlWdlmk1PYg50nkSsbNlIbQdO+8usZH5EcE 4D/pe8JnCYQvYe6Kefk5joHItWI7ZMTMlHBtW1XHpZFoPuNNz1hrHcMCsxMl46le 51dUEMc9LwWjln140oxXwFc6ZmR5v6TMTNPeckV5Vx+UNVd6mZ9ahyiGbX/NEOwx ThnwWTimCssI0g== -----END CERTIFICATE-----Generated at Thu Sep 17 21:53:05 2026 by rpki-client