$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: ujHBJuQkslIugsZlmnho9mv9iz/aKQteUgfj6gZVLpM= Subject key identifier: E1:81:E9:3A:A6:82:BA:72:07:B9:F1:F2:54:3F:9B:19:50:8D:4D:BB Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019A4C6109D2E07E9BD63348BF411D5FBCD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1714 Signing time: Tue 04 Nov 2025 01:00:18 +0000 Manifest this update: Tue 04 Nov 2025 01:00:18 +0000 Manifest next update: Wed 05 Nov 2025 01:00:18 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: xleJ/asL9hytX2PkdSvwOO2O6NwJrU0isZjQAM2y9OU=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:09:d2:e0:7e:9b:d6:33:48:bf:41:1d:5f:bc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Nov 4 01:00:18 2025 GMT Not After : Nov 5 01:00:18 2025 GMT Subject: CN=e181e93aa682ba7207b9f1f2543f9b19508d4dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:23:6c:1c:b2:c9:c0:28:e7:55:cc:23:ff: eb:2a:6c:7e:98:c9:e1:bd:3b:24:ea:ef:c1:40:95: 9c:ac:4e:93:b9:11:d4:5d:58:ab:0b:8e:3f:36:9b: 8d:13:af:87:51:a3:cd:47:23:36:db:21:8f:bd:1c: 13:0a:84:50:7b:2e:1d:de:60:43:85:a1:a2:b0:de: a0:5d:21:13:59:b1:a2:86:d2:ee:cb:3c:92:e0:d1: c1:33:71:3d:38:73:26:c0:16:53:23:90:ed:26:8c: 01:e1:61:05:77:4d:16:d8:8b:a2:06:d9:9d:db:79: ce:e2:f4:79:c3:e3:5c:c0:a6:ae:bb:ba:79:51:b5: f6:8b:c5:78:1c:28:34:be:5d:12:19:f8:26:a0:b5: 85:bb:ca:f7:d8:07:67:67:5a:ae:1f:8f:b7:eb:7a: c4:7a:30:01:88:1b:d5:cc:db:9e:4d:93:5a:8f:52: 00:54:cd:5d:15:7c:dc:ec:93:ed:d8:b1:dd:e8:1c: bd:ab:56:97:48:4f:09:80:05:ee:1c:5c:18:8d:23: 6f:59:4f:72:36:36:4f:67:b1:b9:ba:5b:d1:4f:28: 5e:91:07:cb:b5:c7:2d:86:38:1a:ff:a3:a8:fe:78: 37:10:38:4c:60:6e:54:3c:7b:eb:c7:65:b7:d3:c8: 65:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:81:E9:3A:A6:82:BA:72:07:B9:F1:F2:54:3F:9B:19:50:8D:4D:BB X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:da:dc:e0:4d:e8:f5:ab:b7:3d:a0:de:ff:9b:0c:8e:1d:23: 8c:d4:4a:5a:0a:53:23:90:b0:32:ec:1c:f1:9d:47:b7:ff:5f: 8d:d5:ba:18:98:a1:32:c5:dc:5e:64:0a:30:57:1b:c1:9b:4c: 8d:32:6c:69:74:6f:7b:e4:2a:e5:d1:d1:7b:00:86:1b:a6:be: 99:c1:98:27:dd:cb:2a:c6:b0:eb:3e:6d:b0:54:c8:bd:98:eb: c6:a4:c6:b8:62:6e:7c:ae:57:bc:ae:a2:25:d5:2d:1b:02:14: f2:26:92:86:24:b8:c2:99:95:6f:59:36:be:e6:1f:eb:7f:d2: 58:a5:d0:0e:d5:38:f3:28:a8:5b:ca:09:cc:c4:48:5f:a8:41: 5e:25:bb:a3:f5:bb:bc:c0:8a:fa:ff:f9:ea:44:34:d3:23:be: 0f:1a:5f:ff:7d:12:97:53:86:5a:e7:45:6e:6f:23:a1:54:64: 21:fd:35:4a:23:75:61:2b:d5:ad:67:ca:b3:2a:cb:9f:18:ea: e4:3e:29:a0:30:32:b6:fe:f2:78:a8:f7:86:45:e2:3b:b4:17: b0:e7:ce:ce:2c:c7:48:11:f2:b8:ed:6e:aa:2d:eb:6d:38:9c: ea:2d:24:d4:10:d3:96:3a:32:b1:ac:c0:a1:97:83:6b:b6:67: 2b:8e:a5:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYQnS4H6b1jNIv0EdX7zSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMTA0MDEwMDE4WhcNMjUxMTA1MDEwMDE4WjAzMTEwLwYDVQQD EyhlMTgxZTkzYWE2ODJiYTcyMDdiOWYxZjI1NDNmOWIxOTUwOGQ0ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLAjbByyycAo51XMI//rKmx+mMnh vTsk6u/BQJWcrE6TuRHUXVirC44/NpuNE6+HUaPNRyM22yGPvRwTCoRQey4d3mBD haGisN6gXSETWbGihtLuyzyS4NHBM3E9OHMmwBZTI5DtJowB4WEFd00W2IuiBtmd 23nO4vR5w+NcwKauu7p5UbX2i8V4HCg0vl0SGfgmoLWFu8r32AdnZ1quH4+363rE ejABiBvVzNueTZNaj1IAVM1dFXzc7JPt2LHd6By9q1aXSE8JgAXuHFwYjSNvWU9y NjZPZ7G5ulvRTyhekQfLtccthjga/6Oo/ng3EDhMYG5UPHvrx2W308hlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGB6TqmgrpyB7nx8lQ/mxlQjU27MB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9rc4E3o 9au3PaDe/5sMjh0jjNRKWgpTI5CwMuwc8Z1Ht/9fjdW6GJihMsXcXmQKMFcbwZtM jTJsaXRve+Qq5dHRewCGG6a+mcGYJ93LKsaw6z5tsFTIvZjrxqTGuGJufK5XvK6i JdUtGwIU8iaShiS4wpmVb1k2vuYf63/SWKXQDtU48yioW8oJzMRIX6hBXiW7o/W7 vMCK+v/56kQ00yO+Dxpf/30Sl1OGWudFbm8joVRkIf01SiN1YSvVrWfKsyrLnxjq 5D4poDAytv7yeKj3hkXiO7QXsOfOzizHSBHyuO1uqi3rbTic6i0k1BDTljoysazA oZeDa7ZnK46ljg== -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:05 2025 by rpki-client