$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: bXfzZrw17sY8LmIJuYyw8uG3U/0anCovhjvQs7E/MpQ= Subject key identifier: 4C:EF:2C:F3:9D:A3:66:80:4D:07:11:3E:57:EC:4B:59:D3:13:DC:3D Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 01974E8E91DB8697E4EECC879DAF8D32F1F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 159B Signing time: Sun 08 Jun 2025 08:00:55 +0000 Manifest this update: Sun 08 Jun 2025 08:00:55 +0000 Manifest next update: Mon 09 Jun 2025 08:00:55 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: PlVEFYBNanYB/V81P3n22Wt24/vXgjGEKSDWoewZ3rI=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=) 6: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 7: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4e:8e:91:db:86:97:e4:ee:cc:87:9d:af:8d:32:f1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jun 8 08:00:55 2025 GMT Not After : Jun 9 08:00:55 2025 GMT Subject: CN=4cef2cf39da366804d07113e57ec4b59d313dc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:51:2f:c3:e9:96:5f:6c:b8:70:8f:b6:59: 42:9b:c5:55:7e:c5:60:6a:d4:5e:91:35:cd:1b:17: b1:70:4a:4e:cb:7a:9b:97:16:19:8d:b5:bc:b1:67: 00:80:bb:73:af:40:e0:b6:12:b2:fc:9d:15:b7:ac: c6:ef:78:c4:8f:15:9f:67:b6:e2:0c:41:b3:e0:9d: dc:76:b3:a8:7f:1f:b1:f2:95:0e:0f:76:49:61:5a: c3:ab:52:33:d5:2c:53:f0:a5:7c:11:86:62:71:30: d3:f5:db:ae:e5:4d:82:87:24:95:80:9a:e0:b4:dd: f9:b2:dc:1a:aa:39:32:57:aa:1a:0c:60:e5:8c:dd: fc:8a:9b:59:67:ce:40:bc:c9:47:78:7e:15:45:7a: a9:5d:0f:fa:1a:05:39:7f:b4:81:34:8b:9e:28:78: 5d:51:cb:5e:d2:bd:4b:27:ea:d0:50:36:39:c5:47: 24:d0:fe:f1:02:3c:84:d1:cc:d3:82:4b:b7:7a:71: 2a:b9:52:ea:16:ff:a8:6b:05:ac:8e:6e:3f:1a:ac: 52:68:ad:b5:d9:04:3e:1e:59:55:dc:61:2f:50:cb: e1:68:c2:f9:5c:f0:4f:65:92:bd:7b:64:de:ce:53: ea:da:1f:bd:f6:cd:46:bd:8e:18:a2:34:b8:79:e2: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:2C:F3:9D:A3:66:80:4D:07:11:3E:57:EC:4B:59:D3:13:DC:3D X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:26:74:9a:18:30:5a:57:db:9f:2a:82:d6:4f:0c:ca:9a:56: 44:3f:56:46:90:77:d1:08:2d:13:de:19:d4:49:15:1a:8d:f7: 4a:05:85:c8:3f:fc:a0:c5:01:1e:30:80:bb:c9:f9:94:4e:ac: bd:71:cf:70:53:b4:a3:20:f0:75:1f:96:c4:80:88:9a:08:b5: 18:25:b3:48:58:3e:ab:0b:b8:25:52:4f:78:bd:d4:5f:25:81: 19:6c:74:9f:37:65:af:e1:b5:b4:35:2e:98:ba:5a:60:66:00: 98:6a:22:35:8f:0e:3e:4f:2c:0f:30:20:1d:10:ac:8c:50:a8: f5:50:1b:a1:45:41:45:ad:55:a9:4c:2c:12:89:89:2e:5b:5b: 86:53:67:59:ca:bd:8d:67:23:a2:09:ba:dd:61:37:ca:53:61: 0f:22:b0:51:be:9b:95:77:64:20:32:5c:5a:35:dd:cf:d7:35: cb:64:21:a3:e4:bd:3d:1c:1c:36:5b:8f:8a:a7:86:0d:7a:45: b1:08:cf:2f:59:09:54:87:26:2e:32:e2:37:3c:94:4d:e0:26: 99:b4:16:5b:38:4d:26:b6:c4:74:d4:07:4d:bc:fb:1d:c7:9e: f7:76:96:56:d4:c0:63:62:85:4d:a2:e0:23:3f:00:0c:8d:d3: 87:f9:6c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdOjpHbhpfk7syHna+NMvH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUwNjA4MDgwMDU1WhcNMjUwNjA5MDgwMDU1WjAzMTEwLwYDVQQD Eyg0Y2VmMmNmMzlkYTM2NjgwNGQwNzExM2U1N2VjNGI1OWQzMTNkYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonRRL8Ppll9suHCPtllCm8VVfsVg atRekTXNGxexcEpOy3qblxYZjbW8sWcAgLtzr0DgthKy/J0Vt6zG73jEjxWfZ7bi DEGz4J3cdrOofx+x8pUOD3ZJYVrDq1Iz1SxT8KV8EYZicTDT9duu5U2ChySVgJrg tN35stwaqjkyV6oaDGDljN38iptZZ85AvMlHeH4VRXqpXQ/6GgU5f7SBNIueKHhd Ucte0r1LJ+rQUDY5xUck0P7xAjyE0czTgku3enEquVLqFv+oawWsjm4/GqxSaK21 2QQ+HllV3GEvUMvhaML5XPBPZZK9e2TezlPq2h+99s1GvY4YojS4eeLbZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzvLPOdo2aATQcRPlfsS1nTE9w9MB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCZ0mhgw WlfbnyqC1k8MyppWRD9WRpB30QgtE94Z1EkVGo33SgWFyD/8oMUBHjCAu8n5lE6s vXHPcFO0oyDwdR+WxICImgi1GCWzSFg+qwu4JVJPeL3UXyWBGWx0nzdlr+G1tDUu mLpaYGYAmGoiNY8OPk8sDzAgHRCsjFCo9VAboUVBRa1VqUwsEomJLltbhlNnWcq9 jWcjogm63WE3ylNhDyKwUb6blXdkIDJcWjXdz9c1y2Qho+S9PRwcNluPiqeGDXpF sQjPL1kJVIcmLjLiNzyUTeAmmbQWWzhNJrbEdNQHTbz7Hcee93aWVtTAY2KFTaLg Iz8ADI3Th/ls8A== -----END CERTIFICATE-----Generated at Sun Jun 8 18:41:25 2025 by rpki-client