$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: wrLExJNM2658DrUROZMx2sO+MDkC1EAn7lwu1EROiWM= Subject key identifier: 0E:66:6D:3C:BD:2E:54:06:6F:DC:30:3E:57:F2:73:26:CA:19:FE:9B Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 01987AF76448FC7451BB55014577623A7651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1623 Signing time: Tue 05 Aug 2025 16:01:29 +0000 Manifest this update: Tue 05 Aug 2025 16:01:29 +0000 Manifest next update: Wed 06 Aug 2025 16:01:29 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: wJ11lx8hrozofIZxHOv4TLV8U2A9o8nTnj4WlhfN2No=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:f7:64:48:fc:74:51:bb:55:01:45:77:62:3a:76:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Aug 5 16:01:29 2025 GMT Not After : Aug 6 16:01:29 2025 GMT Subject: CN=0e666d3cbd2e54066fdc303e57f27326ca19fe9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:76:97:6b:63:73:14:99:64:7a:89:56:03: 5d:85:80:d6:98:dc:a4:07:b0:69:07:99:a4:50:30: 0a:72:55:1d:63:7f:30:c1:56:8d:dd:54:0a:69:f0: 61:a3:aa:25:ba:a8:78:5e:c7:39:64:63:9e:4b:ce: e9:b7:de:66:eb:ff:d0:96:24:fd:e7:a4:ac:ac:a9: a8:1c:6f:35:c7:7b:92:a3:02:93:62:0b:0c:14:22: 50:b8:80:83:ad:9d:05:f3:e4:89:ce:f2:ea:f7:4f: 5c:3e:4b:77:ae:d6:00:7a:f8:3e:df:79:af:56:9c: 6e:6b:ae:87:f3:92:b3:04:24:19:f0:b3:90:d0:1a: 5d:64:a1:26:5f:60:b8:b1:cd:77:84:2b:4d:5a:ae: f8:09:02:aa:a8:0a:25:da:13:f9:dd:d7:05:dc:45: a9:eb:c5:b8:f9:11:a5:f2:c0:17:f8:a9:8a:71:a9: 84:71:d1:3d:e8:6b:19:e5:b6:52:31:ed:aa:97:35: ab:df:88:e5:2d:64:64:fe:47:d7:b7:c4:4e:8f:6c: 85:ad:36:a2:4c:09:e4:d9:64:7c:9b:fb:07:94:6d: c4:ac:3b:58:6d:cd:d8:69:f9:8b:89:c2:f8:5b:14: 04:3d:b2:9a:d7:98:e5:19:5a:76:02:35:cc:e5:c6: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:66:6D:3C:BD:2E:54:06:6F:DC:30:3E:57:F2:73:26:CA:19:FE:9B X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4a:c7:48:74:29:be:c4:e1:83:46:3e:25:48:ed:1b:79:e8: 3c:48:f2:ac:76:ba:69:40:fc:35:1a:1d:0f:ea:c4:b3:96:42: 05:75:e9:ab:48:da:e9:46:c7:6f:38:50:31:4a:b5:aa:aa:33: 4c:ab:62:f4:5e:09:4a:e2:f7:21:31:fe:88:05:ac:0d:6a:eb: 1a:5b:91:54:66:a4:a4:3a:d1:95:39:f7:8a:99:98:b1:77:ef: ff:8d:27:93:45:4e:82:5f:89:4d:9b:e4:b8:39:1d:f3:05:fe: 5c:09:97:ca:67:08:4a:1c:e8:88:68:56:18:e5:f3:76:aa:01: 78:9b:55:38:52:8c:9d:87:81:01:93:80:e9:b7:d6:f0:7c:a6: cd:3d:9c:e2:2e:2f:bf:a7:3c:38:03:b2:54:26:74:37:25:0b: 2f:bc:c6:99:1a:87:0e:1d:86:ea:57:7e:45:3a:9d:c1:38:5c: ae:cb:43:bf:61:d4:89:ba:f7:34:4a:e4:30:ac:c1:f1:d2:02: 6b:72:e9:1a:c5:2f:ce:1b:8b:f4:d0:2b:11:c5:3b:1a:e9:16: 98:65:ca:06:e4:24:e9:10:4e:b7:46:cb:eb:cd:27:d2:10:21: 3a:10:5c:ce:60:6b:a2:13:61:6a:6c:0f:59:85:7b:c4:94:9e: 01:c9:cf:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh692RI/HRRu1UBRXdiOnZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwODA1MTYwMTI5WhcNMjUwODA2MTYwMTI5WjAzMTEwLwYDVQQD EygwZTY2NmQzY2JkMmU1NDA2NmZkYzMwM2U1N2YyNzMyNmNhMTlmZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLF2l2tjcxSZZHqJVgNdhYDWmNyk B7BpB5mkUDAKclUdY38wwVaN3VQKafBho6oluqh4Xsc5ZGOeS87pt95m6//QliT9 56SsrKmoHG81x3uSowKTYgsMFCJQuICDrZ0F8+SJzvLq909cPkt3rtYAevg+33mv Vpxua66H85KzBCQZ8LOQ0BpdZKEmX2C4sc13hCtNWq74CQKqqAol2hP53dcF3EWp 68W4+RGl8sAX+KmKcamEcdE96GsZ5bZSMe2qlzWr34jlLWRk/kfXt8ROj2yFrTai TAnk2WR8m/sHlG3ErDtYbc3YafmLicL4WxQEPbKa15jlGVp2AjXM5caAZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5mbTy9LlQGb9wwPlfycybKGf6bMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkrHSHQp vsThg0Y+JUjtG3noPEjyrHa6aUD8NRodD+rEs5ZCBXXpq0ja6UbHbzhQMUq1qqoz TKti9F4JSuL3ITH+iAWsDWrrGluRVGakpDrRlTn3ipmYsXfv/40nk0VOgl+JTZvk uDkd8wX+XAmXymcIShzoiGhWGOXzdqoBeJtVOFKMnYeBAZOA6bfW8HymzT2c4i4v v6c8OAOyVCZ0NyULL7zGmRqHDh2G6ld+RTqdwThcrstDv2HUibr3NErkMKzB8dIC a3LpGsUvzhuL9NArEcU7GukWmGXKBuQk6RBOt0bL680n0hAhOhBczmBrohNhamwP WYV7xJSeAcnPiw== -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:35 2025 by rpki-client