$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: 7FONTCfYk3NQ3LfAAjqLmULgkdqN3sMAwM3+F3nZs2o= Subject key identifier: 99:11:B3:74:85:24:3E:71:2E:30:FA:E6:A0:E3:68:88:AF:45:88:D4 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019A503E3D190255F0BC64ADE413B74E452F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1716 Signing time: Tue 04 Nov 2025 19:00:47 +0000 Manifest this update: Tue 04 Nov 2025 19:00:47 +0000 Manifest next update: Wed 05 Nov 2025 19:00:47 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: ZXgawDgw03VMfNJrfYcwytWDP6c5uQ1S24WyVd9f+8o=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3e:3d:19:02:55:f0:bc:64:ad:e4:13:b7:4e:45:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Nov 4 19:00:47 2025 GMT Not After : Nov 5 19:00:47 2025 GMT Subject: CN=9911b37485243e712e30fae6a0e36888af4588d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:de:8c:04:e0:fb:7f:47:c9:dc:33:e5:97: c7:ab:26:8c:b0:d2:0f:4f:29:a2:ef:ce:0c:3f:f3: 6c:e2:cf:3a:0c:00:5e:36:64:b4:9d:04:4b:ff:5d: a1:74:d0:51:67:b4:aa:58:37:f9:45:83:65:f0:24: e7:3b:4e:c1:26:4d:6c:2f:21:92:8c:cf:15:b2:0d: ee:e5:b8:fa:b4:48:8a:da:5f:e5:02:d5:9d:36:6b: 7c:14:39:c3:f9:fa:76:40:26:7b:0d:23:5c:92:7d: 7d:59:36:06:f9:b8:e7:ca:09:7c:cc:31:6b:82:32: 93:c1:9b:f4:be:b2:8d:f9:95:fb:6b:4e:ed:b0:9e: 0a:6c:c2:9c:76:eb:78:bf:77:5f:27:4e:cb:5d:0a: 19:28:e3:9d:d7:79:5e:da:24:2b:3d:69:ab:94:c5: f3:08:6f:d6:5d:22:98:c4:85:c8:54:bf:cc:99:a9: b9:81:c6:ba:df:32:67:ce:00:20:19:db:4e:52:a4: c3:57:7f:f1:44:5e:34:ab:c7:30:d2:09:bc:9c:48: 92:2f:9b:47:d8:bd:7c:bd:ce:73:6a:c3:a7:0e:61: cd:7f:1c:65:b7:d1:a0:74:1e:3a:43:4f:87:1e:94: 85:09:d5:5b:36:4b:48:c0:b4:e4:0a:8e:08:ab:04: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:B3:74:85:24:3E:71:2E:30:FA:E6:A0:E3:68:88:AF:45:88:D4 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:82:da:b7:64:01:0c:06:8e:99:c9:40:6f:97:aa:64:11:9c: d4:1d:f8:f0:9c:3e:19:9e:e9:c1:fc:51:8d:45:0a:fd:47:5d: 30:ff:d1:95:c6:50:66:e7:00:a8:05:a1:4b:05:24:3c:a0:84: a3:3f:37:6b:7e:56:ba:1f:14:13:70:55:81:66:0c:32:c0:4d: 71:73:de:ad:74:b9:d0:e0:97:e3:5a:70:7d:b9:b3:b4:ac:86: d1:62:27:72:94:c9:16:9c:a4:17:37:e6:3a:fb:bc:b6:14:34: 93:bd:b3:4a:f0:3e:cc:bc:72:34:29:32:42:e5:08:5d:d1:49: 39:ea:ed:51:6e:91:8c:02:bc:4e:30:ca:90:e1:e5:5d:18:dc: 51:74:f3:8f:f9:7b:99:50:19:93:b2:cf:06:26:81:e7:25:a8: 4c:bb:88:c8:3b:c1:c0:ec:1e:64:f2:fc:85:c7:d0:27:69:82: 1b:41:bf:7b:7b:fb:8b:0c:2a:f2:be:1b:ab:dd:34:01:ef:db: ef:9d:cd:9f:c8:df:b4:bc:03:59:39:9e:f9:6a:18:6a:c5:9c: 59:11:ea:a1:52:9f:cb:e1:4f:c2:62:e0:5c:f3:9a:6c:75:5d: 61:92:86:a1:45:af:dd:05:7c:1e:69:7c:d0:97:c2:51:e3:c1: bf:d7:ec:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPj0ZAlXwvGSt5BO3TkUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMTA0MTkwMDQ3WhcNMjUxMTA1MTkwMDQ3WjAzMTEwLwYDVQQD Eyg5OTExYjM3NDg1MjQzZTcxMmUzMGZhZTZhMGUzNjg4OGFmNDU4OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWLejATg+39Hydwz5ZfHqyaMsNIP Tymi784MP/Ns4s86DABeNmS0nQRL/12hdNBRZ7SqWDf5RYNl8CTnO07BJk1sLyGS jM8Vsg3u5bj6tEiK2l/lAtWdNmt8FDnD+fp2QCZ7DSNckn19WTYG+bjnygl8zDFr gjKTwZv0vrKN+ZX7a07tsJ4KbMKcdut4v3dfJ07LXQoZKOOd13le2iQrPWmrlMXz CG/WXSKYxIXIVL/Mmam5gca63zJnzgAgGdtOUqTDV3/xRF40q8cw0gm8nEiSL5tH 2L18vc5zasOnDmHNfxxlt9GgdB46Q0+HHpSFCdVbNktIwLTkCo4IqwS2PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkRs3SFJD5xLjD65qDjaIivRYjUMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXILat2QB DAaOmclAb5eqZBGc1B348Jw+GZ7pwfxRjUUK/UddMP/RlcZQZucAqAWhSwUkPKCE oz83a35Wuh8UE3BVgWYMMsBNcXPerXS50OCX41pwfbmztKyG0WIncpTJFpykFzfm Ovu8thQ0k72zSvA+zLxyNCkyQuUIXdFJOertUW6RjAK8TjDKkOHlXRjcUXTzj/l7 mVAZk7LPBiaB5yWoTLuIyDvBwOweZPL8hcfQJ2mCG0G/e3v7iwwq8r4bq900Ae/b 753Nn8jftLwDWTme+WoYasWcWRHqoVKfy+FPwmLgXPOabHVdYZKGoUWv3QV8Hml8 0JfCUePBv9fsbQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:00:26 2025 by rpki-client