$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: SaChM5Fo+s4qZqBvukfgEBr9nvRUZ+0xktixufP7kp0= Subject key identifier: CA:AA:D7:86:76:75:C6:F2:52:66:A8:D1:73:41:13:F1:0C:7D:94:A1 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019FAAF5A8CD42FC90E9D539B9DF4346C900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 19DC Signing time: Tue 28 Jul 2026 23:00:53 +0000 Manifest this update: Tue 28 Jul 2026 23:00:53 +0000 Manifest next update: Wed 29 Jul 2026 23:00:53 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: ZhvmlEhwlIzsxHSjQfae2OuejQmES82pdJ8aHq7yhXM=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:a8:cd:42:fc:90:e9:d5:39:b9:df:43:46:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jul 28 23:00:53 2026 GMT Not After : Jul 29 23:00:53 2026 GMT Subject: CN=caaad7867675c6f25266a8d1734113f10c7d94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:33:3e:81:84:ca:8c:35:8e:22:ff:bc:97: 25:86:70:3a:70:9e:cf:04:9f:3c:b2:81:19:0a:70: 88:4b:96:5a:26:d0:b0:db:2b:ea:21:85:37:5e:de: 2f:02:68:ea:f8:f9:0d:25:00:64:d5:14:9b:3b:40: 45:66:9c:65:0e:d9:68:9c:47:92:e3:b4:e2:14:ba: 71:f3:90:78:ca:69:ab:52:04:02:32:7a:3f:54:6c: 18:7a:bb:79:90:b5:34:4d:ac:ca:44:f6:90:9e:51: 18:df:01:32:e0:f5:f0:d9:e6:3a:43:31:54:8c:2d: 01:a9:d3:49:10:31:30:ba:21:bd:08:57:98:c0:7f: ac:1b:4c:a9:0f:54:c3:ca:db:69:04:a7:98:5e:d8: e1:f2:7e:8b:37:98:4c:10:ac:33:f1:db:b6:cf:00: b6:b3:68:5e:d3:67:3c:7a:3d:dd:83:e6:ce:a6:33: b0:fb:9f:13:1e:55:96:61:e5:01:02:d7:78:21:9d: e0:6c:a0:f4:ec:21:00:1a:c5:71:a2:42:2b:aa:b9: 49:95:08:33:b5:d7:54:d8:f2:eb:d4:ee:4c:49:30: 72:4c:1a:c9:5a:0e:2d:5e:27:26:a5:de:fc:1d:04: 21:4b:a3:16:1f:70:43:27:18:c0:c3:0f:0c:09:30: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:D7:86:76:75:C6:F2:52:66:A8:D1:73:41:13:F1:0C:7D:94:A1 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3d:c2:1a:ef:df:b1:7c:fa:7b:8d:d2:8b:26:54:97:eb:03: 6a:bd:bb:f0:1b:c3:f8:b5:08:ef:fe:eb:79:26:28:ac:1b:1c: 30:2d:5b:59:65:fe:cc:19:58:bf:39:b3:e0:4c:d6:50:96:51: 59:af:18:fa:da:3f:aa:d0:40:c0:ba:ec:6e:72:90:83:91:0e: e9:36:4c:16:7c:6f:dc:ec:57:80:b7:25:96:22:4f:90:24:24: e2:1a:12:50:21:d7:b2:94:ff:db:4e:65:f7:13:b4:1f:b2:42: 0b:7d:93:80:93:b6:61:9e:ab:03:1f:46:ff:15:45:91:70:6a: f9:b4:88:9a:d5:7c:f7:71:a3:75:53:0e:26:4f:9a:22:cd:1c: e3:af:e0:af:b4:be:07:e0:d5:34:cd:29:95:7e:4a:1b:14:a9: ee:4f:ff:28:6e:fe:43:72:9b:26:70:d0:f8:7f:45:b7:5a:e5: 90:2e:aa:dd:e1:5a:9d:07:bb:6b:22:e5:c2:60:7f:37:0f:6a: 46:9a:97:74:ea:1d:7d:26:9f:e7:8e:9c:61:f5:10:e5:29:ee: ad:5f:86:a6:ec:c6:18:10:f9:a6:fb:72:01:40:3f:56:c1:51: 5a:82:4c:fd:3d:ee:6a:0d:a5:34:24:56:f8:1e:e5:6c:05:47: a2:87:17:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9ajNQvyQ6dU5ud9DRskAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwNzI4MjMwMDUzWhcNMjYwNzI5MjMwMDUzWjAzMTEwLwYDVQQD EyhjYWFhZDc4Njc2NzVjNmYyNTI2NmE4ZDE3MzQxMTNmMTBjN2Q5NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5MzPoGEyow1jiL/vJclhnA6cJ7P BJ88soEZCnCIS5ZaJtCw2yvqIYU3Xt4vAmjq+PkNJQBk1RSbO0BFZpxlDtlonEeS 47TiFLpx85B4ymmrUgQCMno/VGwYert5kLU0TazKRPaQnlEY3wEy4PXw2eY6QzFU jC0BqdNJEDEwuiG9CFeYwH+sG0ypD1TDyttpBKeYXtjh8n6LN5hMEKwz8du2zwC2 s2he02c8ej3dg+bOpjOw+58THlWWYeUBAtd4IZ3gbKD07CEAGsVxokIrqrlJlQgz tddU2PLr1O5MSTByTBrJWg4tXicmpd78HQQhS6MWH3BDJxjAww8MCTANLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqq14Z2dcbyUmao0XNBE/EMfZShMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdj3CGu/f sXz6e43SiyZUl+sDar278BvD+LUI7/7reSYorBscMC1bWWX+zBlYvzmz4EzWUJZR Wa8Y+to/qtBAwLrsbnKQg5EO6TZMFnxv3OxXgLclliJPkCQk4hoSUCHXspT/205l 9xO0H7JCC32TgJO2YZ6rAx9G/xVFkXBq+bSImtV893GjdVMOJk+aIs0c46/gr7S+ B+DVNM0plX5KGxSp7k//KG7+Q3KbJnDQ+H9Ft1rlkC6q3eFanQe7ayLlwmB/Nw9q RpqXdOodfSaf546cYfUQ5SnurV+GpuzGGBD5pvtyAUA/VsFRWoJM/T3uag2lNCRW +B7lbAVHoocX+g== -----END CERTIFICATE-----Generated at Wed Jul 29 03:10:18 2026 by rpki-client