$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: pRTZp3AhGVZxc57UoRa+XHBmKayWqaUcxQIxdBKkafo= Subject key identifier: 87:23:D2:40:A1:2B:02:4C:64:40:39:74:B8:23:25:27:2B:01:6E:70 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019955302BD68BE3B732C8C87DBA0DFD8910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1694 Signing time: Wed 17 Sep 2025 01:00:44 +0000 Manifest this update: Wed 17 Sep 2025 01:00:44 +0000 Manifest next update: Thu 18 Sep 2025 01:00:44 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: OTyKzk9dliKOhzUWIsPKXOV8ujOJYztnky/xEvkqnxc=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:55:30:2b:d6:8b:e3:b7:32:c8:c8:7d:ba:0d:fd:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Sep 17 01:00:44 2025 GMT Not After : Sep 18 01:00:44 2025 GMT Subject: CN=8723d240a12b024c64403974b82325272b016e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:61:22:53:ae:53:53:48:c9:65:dc:16:d8: 2e:23:a4:2c:84:f2:e8:34:c0:fb:7b:31:77:b0:91: 2d:50:36:64:bc:8c:b1:1c:f0:78:fc:1b:59:75:a2: e0:eb:1a:9f:d1:4b:a6:e5:ff:cf:bd:b9:33:a7:f7: 51:eb:3f:27:af:b0:bd:8a:4a:61:c0:53:b6:93:7c: b5:90:8f:4a:16:d0:ad:43:f3:7f:73:01:7b:a4:14: 81:24:f5:7e:1f:2e:db:cd:6d:78:62:49:0a:33:59: 54:3b:c1:ce:3e:e4:b4:a1:3e:f5:7f:5b:e3:9c:8d: 8b:8e:0d:59:5f:bc:0d:d8:4d:62:ce:ad:1b:78:5f: 25:38:22:9a:01:1b:1c:d2:81:e7:46:d8:fe:0b:e4: 1c:4f:45:df:df:a9:b6:a6:a9:1b:98:f5:89:67:aa: aa:bb:4d:21:60:e3:98:fb:4b:04:f3:d6:b6:f7:fd: 1d:73:b5:4a:88:ea:b6:c1:28:b5:64:35:e4:25:1e: b5:3e:dc:c6:d7:4c:7a:01:3c:56:6a:6e:40:38:eb: c9:84:cb:a0:df:01:d9:8a:23:18:f8:03:a0:71:da: ee:79:b6:e7:ab:02:03:9c:d6:5d:e6:e7:ad:bc:3e: 32:50:14:6e:e8:ec:0b:01:bc:5e:85:e0:20:28:29: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:D2:40:A1:2B:02:4C:64:40:39:74:B8:23:25:27:2B:01:6E:70 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5e:94:ab:db:e5:d8:13:31:1d:bf:62:46:10:67:08:ad:7b: 28:36:70:cc:cc:7f:dd:1d:7e:4c:72:ab:6c:af:2e:e5:a5:50: 31:91:34:3d:33:55:9e:9a:35:cd:e1:66:eb:70:69:a0:04:7b: df:7c:08:53:3a:96:7f:49:94:be:01:08:f1:12:d0:b3:af:9b: fe:66:40:f3:a8:f1:9f:ea:35:38:91:6b:21:08:5d:4c:9b:37: 8a:9c:c1:b1:e4:97:a7:d4:a1:b6:ce:75:01:f7:97:e8:63:92: 1a:78:ba:b5:1f:c3:8a:25:41:bd:c8:e7:cb:3e:63:27:2e:ef: 82:ff:66:7a:d3:ba:81:fb:90:a9:79:cf:33:33:dc:00:19:c3: be:55:42:43:44:a0:80:74:08:4e:6f:ce:d9:db:c2:86:05:bf: fe:35:98:bf:db:bd:7b:cb:53:35:a6:a3:fe:1c:a9:d5:86:b8: ba:17:0f:2f:9d:3a:b4:40:1d:ae:01:b0:ed:6f:ee:09:60:d2: 6f:af:25:20:2f:6a:bb:2d:df:fe:ac:fa:fa:8b:5b:e5:d9:c9: e9:cd:4f:c7:0f:dc:32:cd:41:78:a6:55:c8:4e:9d:17:d1:90: 07:8e:cd:25:d6:6c:70:c1:7e:a6:8c:48:af:7e:6b:54:64:c3: 48:35:3c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlVMCvWi+O3MsjIfboN/YkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwOTE3MDEwMDQ0WhcNMjUwOTE4MDEwMDQ0WjAzMTEwLwYDVQQD Eyg4NzIzZDI0MGExMmIwMjRjNjQ0MDM5NzRiODIzMjUyNzJiMDE2ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5phIlOuU1NIyWXcFtguI6QshPLo NMD7ezF3sJEtUDZkvIyxHPB4/BtZdaLg6xqf0Uum5f/Pvbkzp/dR6z8nr7C9ikph wFO2k3y1kI9KFtCtQ/N/cwF7pBSBJPV+Hy7bzW14YkkKM1lUO8HOPuS0oT71f1vj nI2Ljg1ZX7wN2E1izq0beF8lOCKaARsc0oHnRtj+C+QcT0Xf36m2pqkbmPWJZ6qq u00hYOOY+0sE89a29/0dc7VKiOq2wSi1ZDXkJR61PtzG10x6ATxWam5AOOvJhMug 3wHZiiMY+AOgcdruebbnqwIDnNZd5uetvD4yUBRu6OwLAbxeheAgKCmS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcj0kChKwJMZEA5dLgjJScrAW5wMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF6Uq9vl 2BMxHb9iRhBnCK17KDZwzMx/3R1+THKrbK8u5aVQMZE0PTNVnpo1zeFm63BpoAR7 33wIUzqWf0mUvgEI8RLQs6+b/mZA86jxn+o1OJFrIQhdTJs3ipzBseSXp9Shts51 AfeX6GOSGni6tR/DiiVBvcjnyz5jJy7vgv9metO6gfuQqXnPMzPcABnDvlVCQ0Sg gHQITm/O2dvChgW//jWYv9u9e8tTNaaj/hyp1Ya4uhcPL506tEAdrgGw7W/uCWDS b68lIC9quy3f/qz6+otb5dnJ6c1Pxw/cMs1BeKZVyE6dF9GQB47NJdZscMF+poxI r35rVGTDSDU8yw== -----END CERTIFICATE-----Generated at Wed Sep 17 10:31:06 2025 by rpki-client