$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: b/UNMLDk7f0GlFSxoT2kA2hUvIspR0rAIIoHe4124DQ= Subject key identifier: B2:90:C2:C2:19:B1:B4:20:A1:B4:BB:0F:90:54:F8:82:1C:BB:2C:E1 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019747E7552A0621899B196C6AA38C4EC995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1584 Signing time: Sat 07 Jun 2025 01:00:32 +0000 Manifest this update: Sat 07 Jun 2025 01:00:32 +0000 Manifest next update: Sun 08 Jun 2025 01:00:32 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: WU/MmN2Sx0448Cb7GNEhdc1FRzO+a6FhQ0Ggj/YThIw=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:55:2a:06:21:89:9b:19:6c:6a:a3:8c:4e:c9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jun 7 01:00:32 2025 GMT Not After : Jun 8 01:00:32 2025 GMT Subject: CN=b290c2c219b1b420a1b4bb0f9054f8821cbb2ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:be:70:d3:a7:8d:03:64:9b:1d:a2:f6:c4: 1e:2a:bd:66:dc:f7:30:95:c9:72:b2:00:17:1f:05: ae:fd:58:49:77:2a:1d:ed:22:9d:03:0c:10:93:06: b3:d3:f7:04:92:bd:9d:8a:7a:6f:88:55:b4:37:67: 60:1d:7f:5f:32:92:81:97:e6:1a:ea:4c:0f:a0:16: 91:17:fe:ba:87:59:e4:40:5d:b1:f6:e4:29:9c:57: 42:9b:a8:a5:b5:80:c6:dc:84:5f:cb:66:ae:bd:58: ce:90:e0:45:94:72:73:93:0d:b1:f1:ca:01:fc:88: 80:8b:56:00:89:55:95:9b:c2:59:bc:c5:91:7b:3e: 3a:f5:da:10:9b:28:3c:55:af:ea:0b:be:66:11:5c: f7:c2:19:7e:bf:e5:63:1e:48:f4:07:51:03:8c:49: 2a:5c:20:68:52:4d:97:e4:f3:6d:f3:14:df:0d:10: 94:d4:05:5a:aa:0c:63:7e:bd:c6:43:0d:95:bf:b4: 8c:85:e4:3a:d3:3d:f0:b8:63:54:75:6e:80:1a:66: 06:e0:05:82:74:2b:dd:7b:0f:c3:97:fa:6d:9a:d8: 1f:4a:2d:39:73:14:eb:05:6d:57:0a:8a:a5:9e:90: 81:7e:90:2f:2a:3c:db:30:09:0c:a5:e7:7d:ce:56: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:90:C2:C2:19:B1:B4:20:A1:B4:BB:0F:90:54:F8:82:1C:BB:2C:E1 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:83:59:5a:22:b2:3f:67:c3:9c:50:16:5c:ae:d3:53:47:40: 10:70:b5:f4:3c:4a:c5:f4:ab:56:1d:18:0e:2a:2d:2d:1f:07: 79:46:bd:04:99:6e:db:06:33:ab:ba:5a:22:dd:b8:3e:d0:5d: e6:5a:5f:2d:e2:99:2a:46:f3:91:a2:08:cb:4d:c6:d0:42:ea: 11:f1:3a:90:82:80:2a:79:5f:df:c6:e4:61:97:95:60:d9:6f: 93:08:73:a1:0e:33:01:69:31:7e:f2:53:88:cb:97:91:fa:f4: 6c:12:fc:03:7d:27:c6:73:12:d2:c9:60:72:e7:46:d7:98:4d: 49:7d:51:92:d1:e3:39:8b:c1:dd:9a:cb:4c:9e:2d:f6:cc:6b: 40:e0:0b:ec:0d:5f:61:f9:0a:85:0c:54:db:bf:ec:ce:7b:01: 12:9e:06:2f:c6:23:fd:b2:57:04:12:31:35:af:90:56:48:75: ab:5f:a1:54:6a:8b:b4:c6:aa:d3:5b:50:76:5d:6c:1f:70:c1: 32:80:78:20:7a:62:83:53:d7:0c:96:8a:ca:0f:10:10:03:b7: 4b:fa:b0:5e:85:d5:81:a7:1a:f6:87:cb:20:95:cc:db:e5:d3: aa:7b:05:02:0f:cd:e0:77:eb:6d:b2:77:48:7c:35:0e:8d:ff: 65:53:be:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH51UqBiGJmxlsaqOMTsmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwNjA3MDEwMDMyWhcNMjUwNjA4MDEwMDMyWjAzMTEwLwYDVQQD EyhiMjkwYzJjMjE5YjFiNDIwYTFiNGJiMGY5MDU0Zjg4MjFjYmIyY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22++cNOnjQNkmx2i9sQeKr1m3Pcw lclysgAXHwWu/VhJdyod7SKdAwwQkwaz0/cEkr2dinpviFW0N2dgHX9fMpKBl+Ya 6kwPoBaRF/66h1nkQF2x9uQpnFdCm6iltYDG3IRfy2auvVjOkOBFlHJzkw2x8coB /IiAi1YAiVWVm8JZvMWRez469doQmyg8Va/qC75mEVz3whl+v+VjHkj0B1EDjEkq XCBoUk2X5PNt8xTfDRCU1AVaqgxjfr3GQw2Vv7SMheQ60z3wuGNUdW6AGmYG4AWC dCvdew/Dl/ptmtgfSi05cxTrBW1XCoqlnpCBfpAvKjzbMAkMped9zlZh5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKQwsIZsbQgobS7D5BU+IIcuyzhMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4NZWiKy P2fDnFAWXK7TU0dAEHC19DxKxfSrVh0YDiotLR8HeUa9BJlu2wYzq7paIt24PtBd 5lpfLeKZKkbzkaIIy03G0ELqEfE6kIKAKnlf38bkYZeVYNlvkwhzoQ4zAWkxfvJT iMuXkfr0bBL8A30nxnMS0slgcudG15hNSX1RktHjOYvB3ZrLTJ4t9sxrQOAL7A1f YfkKhQxU27/sznsBEp4GL8Yj/bJXBBIxNa+QVkh1q1+hVGqLtMaq01tQdl1sH3DB MoB4IHpig1PXDJaKyg8QEAO3S/qwXoXVgaca9ofLIJXM2+XTqnsFAg/N4HfrbbJ3 SHw1Do3/ZVO+sQ== -----END CERTIFICATE-----Generated at Sat Jun 7 03:08:40 2025 by rpki-client