$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: il5qBw0i3Dsc6l9w8oFXW5Gm9MUVjY3EpJZ2GqagFqQ= Subject key identifier: E6:47:D0:59:15:52:73:41:41:62:0E:A1:C3:FA:49:7C:6E:7E:FF:A1 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 01984AAE8008F45D59BF999600A16BC633A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 160A Signing time: Sun 27 Jul 2025 07:00:06 +0000 Manifest this update: Sun 27 Jul 2025 07:00:06 +0000 Manifest next update: Mon 28 Jul 2025 07:00:06 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: jZyVET9DE7gfMrRJ4bMrPbd3s6Ttb4gStuonoSBGvjQ=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:ae:80:08:f4:5d:59:bf:99:96:00:a1:6b:c6:33:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jul 27 07:00:06 2025 GMT Not After : Jul 28 07:00:06 2025 GMT Subject: CN=e647d0591552734141620ea1c3fa497c6e7effa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:33:5e:70:d3:a5:2c:94:f8:a5:84:f5:99: b6:2c:ae:2b:7e:78:1a:4c:ce:25:e5:88:42:47:12: fd:ab:fa:7a:7b:0a:35:c8:4a:66:76:ea:25:a3:84: ac:a6:e1:55:cd:e6:8f:e7:b9:95:64:f6:88:5d:34: db:c1:a0:9e:d9:3a:5a:e1:6c:e6:21:37:2d:99:ef: 28:2f:0e:3e:fc:00:53:30:84:f8:45:21:e9:7e:e0: 74:fd:48:b2:68:59:99:31:82:c6:8e:fc:0a:a5:9a: d5:88:17:cc:d5:f6:40:87:b0:52:b1:0e:81:4e:04: 90:6f:d3:ce:6a:30:e9:49:92:05:95:80:f1:28:18: 14:fb:4f:39:3c:ca:cb:ba:93:32:0a:5b:0f:c2:96: d2:ff:cf:eb:38:87:4b:2e:46:f8:fa:00:b6:34:75: d5:03:75:1c:91:2a:32:a8:42:ff:61:26:24:63:23: 6f:75:b3:ac:a9:ba:21:a7:67:82:a5:27:b6:fb:0b: b8:df:8f:5f:dc:48:f2:93:66:9f:b9:60:02:11:78: fc:64:e6:39:7c:2c:83:27:97:fd:85:ca:3b:38:72: 0c:90:30:2c:26:a8:53:c7:22:88:7f:0c:f2:0a:2d: 16:19:44:0c:9f:f3:d3:c6:13:1e:73:16:f3:bc:8e: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:47:D0:59:15:52:73:41:41:62:0E:A1:C3:FA:49:7C:6E:7E:FF:A1 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:68:4a:44:fc:30:72:5d:b6:8a:e0:58:ed:18:9d:c9:8c: cd:4d:52:c1:9e:f1:07:4d:aa:56:47:a9:1b:6c:3e:f6:17:73: 18:c5:2e:06:34:69:76:6d:85:9b:ba:d1:40:ee:8a:85:e8:7c: e7:81:c6:b0:df:38:fd:6e:57:b6:61:06:9a:db:1b:4b:57:d6: d6:84:84:cd:22:54:72:0f:44:2e:0b:3e:87:74:7e:82:92:3e: a6:e8:f7:7c:3f:56:50:f9:7b:f6:f3:a5:db:22:08:b4:7f:f1: 74:23:a2:08:ed:95:13:35:e0:7b:b5:fc:9e:87:55:37:34:b8: 50:12:3f:42:b9:7b:64:1e:b5:0f:76:dd:a6:5c:2e:16:94:d6: d1:51:61:7c:8c:1e:7d:1a:c7:4c:69:de:45:7d:5a:ff:4d:a0: b5:16:b4:32:67:f3:88:bf:cf:1a:1f:ab:73:48:10:5b:cf:27: ab:7a:de:2c:05:d5:7d:1a:15:fd:2f:51:88:3c:3d:24:5d:be: 29:22:ca:96:e9:8d:15:9c:e6:6a:58:5a:69:71:d4:5e:19:13: be:5f:fb:5a:cc:44:f0:77:42:31:ff:db:38:22:6a:50:c0:46: 31:5e:96:9a:83:77:46:d9:bf:7a:8b:db:bf:4c:28:7b:a5:21: 13:85:51:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKroAI9F1Zv5mWAKFrxjOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwNzI3MDcwMDA2WhcNMjUwNzI4MDcwMDA2WjAzMTEwLwYDVQQD EyhlNjQ3ZDA1OTE1NTI3MzQxNDE2MjBlYTFjM2ZhNDk3YzZlN2VmZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YIzXnDTpSyU+KWE9Zm2LK4rfnga TM4l5YhCRxL9q/p6ewo1yEpmduolo4SspuFVzeaP57mVZPaIXTTbwaCe2Tpa4Wzm ITctme8oLw4+/ABTMIT4RSHpfuB0/UiyaFmZMYLGjvwKpZrViBfM1fZAh7BSsQ6B TgSQb9POajDpSZIFlYDxKBgU+085PMrLupMyClsPwpbS/8/rOIdLLkb4+gC2NHXV A3UckSoyqEL/YSYkYyNvdbOsqbohp2eCpSe2+wu4349f3Ejyk2afuWACEXj8ZOY5 fCyDJ5f9hco7OHIMkDAsJqhTxyKIfwzyCi0WGUQMn/PTxhMecxbzvI6wzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZH0FkVUnNBQWIOocP6SXxufv+hMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0doSkT8 MHJdtorgWO0YncmMzU1SwZ7xB02qVkepG2w+9hdzGMUuBjRpdm2Fm7rRQO6Kheh8 54HGsN84/W5XtmEGmtsbS1fW1oSEzSJUcg9ELgs+h3R+gpI+puj3fD9WUPl79vOl 2yIItH/xdCOiCO2VEzXge7X8nodVNzS4UBI/Qrl7ZB61D3bdplwuFpTW0VFhfIwe fRrHTGneRX1a/02gtRa0MmfziL/PGh+rc0gQW88nq3reLAXVfRoV/S9RiDw9JF2+ KSLKlumNFZzmalhaaXHUXhkTvl/7WsxE8HdCMf/bOCJqUMBGMV6WmoN3Rtm/eovb v0woe6UhE4VRww== -----END CERTIFICATE-----Generated at Sun Jul 27 12:06:11 2025 by rpki-client