$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json) Hash identifier: MSdqQjBAoSpfIcEQZCzAy5/3+ui5flWDckrnfKH+NEg= Subject key identifier: EF:15:9B:17:9C:AC:78:0A:50:D2:8B:3B:7C:98:6A:B5:E1:63:9A:46 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019A25F823772A3B3BEDA984738DA790C31B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft Manifest number: 1715 Signing time: Mon 27 Oct 2025 14:00:10 +0000 Manifest this update: Mon 27 Oct 2025 14:00:10 +0000 Manifest next update: Tue 28 Oct 2025 14:00:10 +0000 Files and hashes: 1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=) 2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: vqv+lMcum7vXp1dksbgwaIhauR5oFSODaz8Tvy53TKQ=) 3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=) 4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=) 5: Y8SRLYUIdW_joHTz3PksrXah_rw.roa (hash: VwC43mv96BdBo/MF0MD6doZlRHk6o8P7NRY9bJBrem0=) 6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=) 7: eeBJ8THWmjzQcGoaeafXUKnM3oI.roa (hash: sKx/pHZQstUAOq64IcMsxEnWLROmY7DGo9QHgBCkTRM=) 8: haVl-IddpVIOhoadpyJZ_a5CgAY.roa (hash: xEVD5o+b6swUkv0iGkz/lglqYHWH3tPCrwBEj8vxyI4=) 9: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=) 10: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:f8:23:77:2a:3b:3b:ed:a9:84:73:8d:a7:90:c3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Oct 27 14:00:10 2025 GMT Not After : Oct 28 14:00:10 2025 GMT Subject: CN=ef159b179cac780a50d28b3b7c986ab5e1639a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:66:ad:69:aa:5b:c5:a1:48:78:ef:20:76: a3:9f:68:7e:2c:02:6c:82:7b:17:b9:e7:18:72:05: e7:24:5c:3b:28:1f:76:e6:d0:56:aa:d4:79:08:33: 4d:5f:27:08:78:4b:2f:b9:23:89:6a:a0:2f:40:3a: 93:bd:46:51:dd:eb:dc:05:c9:dc:84:d3:9e:99:2c: c0:df:39:14:b9:5c:ad:37:86:2f:52:ff:8b:90:87: de:5b:f6:1f:c0:13:92:e8:ba:9b:74:16:56:ab:5c: d4:5f:40:b2:6a:a7:bd:75:17:11:2a:c7:d5:20:2b: 89:a1:90:70:f3:b6:8b:6b:9f:a8:8e:3a:cd:1e:0e: 2e:e1:50:c9:9b:01:ea:de:ec:08:7c:61:46:23:16: 28:fe:4f:8e:b6:60:49:48:31:21:81:bd:6d:55:73: 9c:e5:2e:ea:d7:73:b4:9a:6b:08:83:3d:93:e8:ac: ce:38:88:8a:aa:bc:27:67:7b:dd:6e:c7:28:19:87: a2:5d:1d:e4:0c:c0:59:ea:46:be:d3:32:69:55:fe: 84:8b:65:43:b7:eb:f0:1e:4e:d5:06:02:0f:10:2e: 8f:f5:18:43:11:06:a9:c4:8c:8e:3c:7d:bb:ee:b2: 3d:8d:6a:02:cd:ed:e6:9e:d1:63:dd:bf:4e:38:cb: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:15:9B:17:9C:AC:78:0A:50:D2:8B:3B:7C:98:6A:B5:E1:63:9A:46 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c0:bf:ee:0d:65:24:58:8e:9c:52:19:3a:26:57:de:44:01: 1b:dc:47:0b:3a:d1:7e:4e:47:59:99:70:20:d5:86:f2:4d:d4: 8c:ed:44:07:97:fe:50:e9:7a:12:be:3f:ec:c5:10:99:ef:8d: c5:81:19:22:0f:1e:90:b0:86:77:ef:00:bb:84:5d:15:ee:8c: c0:4e:75:8f:6f:ce:73:30:5a:03:44:c9:78:e4:7f:b8:0b:ba: d3:86:be:dc:82:31:51:07:7c:63:cf:be:49:9d:08:ca:1f:d4: 10:ce:3c:1b:57:da:f6:39:9e:4d:82:84:de:f6:04:6c:52:e8: ca:c6:88:ab:bd:cf:c9:1f:75:7c:7c:c4:22:ea:48:b2:29:e7: 28:bd:20:6b:e2:3e:88:23:44:b2:b4:9a:93:1f:3d:31:d1:1e: 8c:d0:7f:0d:ac:6c:37:50:cf:fc:48:da:0c:bc:e9:70:f1:b6: 55:d2:60:13:8b:a0:38:4e:fd:96:f6:30:31:e0:ff:8a:17:64: 9a:e4:d2:af:72:a0:47:7f:5d:31:53:b9:79:d9:99:de:13:91: 7a:ec:73:1d:48:e9:7c:3c:de:8d:3c:d4:f7:a6:aa:09:a0:10: 06:23:74:86:21:e4:28:58:b7:e8:24:2d:ca:1b:c5:1b:9a:fd: 4a:c5:e5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZol+CN3Kjs77amEc42nkMMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjUxMDI3MTQwMDEwWhcNMjUxMDI4MTQwMDEwWjAzMTEwLwYDVQQD EyhlZjE1OWIxNzljYWM3ODBhNTBkMjhiM2I3Yzk4NmFiNWUxNjM5YTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGxmrWmqW8WhSHjvIHajn2h+LAJs gnsXuecYcgXnJFw7KB925tBWqtR5CDNNXycIeEsvuSOJaqAvQDqTvUZR3evcBcnc hNOemSzA3zkUuVytN4YvUv+LkIfeW/YfwBOS6LqbdBZWq1zUX0Cyaqe9dRcRKsfV ICuJoZBw87aLa5+ojjrNHg4u4VDJmwHq3uwIfGFGIxYo/k+OtmBJSDEhgb1tVXOc 5S7q13O0mmsIgz2T6KzOOIiKqrwnZ3vdbscoGYeiXR3kDMBZ6ka+0zJpVf6Ei2VD t+vwHk7VBgIPEC6P9RhDEQapxIyOPH277rI9jWoCze3mntFj3b9OOMs1fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8VmxecrHgKUNKLO3yYarXhY5pGMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsC/7g1l JFiOnFIZOiZX3kQBG9xHCzrRfk5HWZlwINWG8k3UjO1EB5f+UOl6Er4/7MUQme+N xYEZIg8ekLCGd+8Au4RdFe6MwE51j2/OczBaA0TJeOR/uAu604a+3IIxUQd8Y8++ SZ0Iyh/UEM48G1fa9jmeTYKE3vYEbFLoysaIq73PyR91fHzEIupIsinnKL0ga+I+ iCNEsrSakx89MdEejNB/DaxsN1DP/EjaDLzpcPG2VdJgE4ugOE79lvYwMeD/ihdk muTSr3KgR39dMVO5edmZ3hOReuxzHUjpfDzejTzU96aqCaAQBiN0hiHkKFi36CQt yhvFG5r9SsXljw== -----END CERTIFICATE-----Generated at Mon Oct 27 16:57:51 2025 by rpki-client