$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: CtZdIZo0Paxq69h34GvD6RvzVPtw3FkqGppEzOfpIPw= Subject key identifier: 1F:94:AB:31:AE:B6:B7:C0:8E:9B:2D:7D:70:21:F8:57:7E:94:9A:4E Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019F126541CF9977D36448F968C17308E106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 198D Signing time: Mon 29 Jun 2026 08:00:53 +0000 Manifest this update: Mon 29 Jun 2026 08:00:53 +0000 Manifest next update: Tue 30 Jun 2026 08:00:53 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: Ttg/d4rdnPTNlHQg/5QKcH9RENIehkFNPafepy12Uvw=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:65:41:cf:99:77:d3:64:48:f9:68:c1:73:08:e1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jun 29 08:00:53 2026 GMT Not After : Jun 30 08:00:53 2026 GMT Subject: CN=1f94ab31aeb6b7c08e9b2d7d7021f8577e949a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:46:01:2b:41:35:27:f1:22:e0:f5:37:45: d4:50:73:b4:de:33:29:91:7c:91:e1:df:87:98:c3: 19:61:9d:08:c2:ed:05:c6:bf:a1:d6:d1:01:eb:f1: 6b:f2:f4:e3:12:9d:d1:5f:64:35:9e:db:dd:66:b4: 0d:e3:ab:c3:9c:3e:83:6d:32:52:c0:e6:2c:5a:23: bf:c6:a3:b7:da:bb:ad:2b:68:27:c7:37:1a:8a:92: 0f:12:21:f4:0f:8f:6f:f9:41:21:57:11:19:01:63: ce:96:fe:e1:4c:48:66:33:e9:8d:a9:ab:7a:a7:4f: da:74:95:15:ac:cd:c0:43:2a:57:ea:50:1a:24:71: 61:a8:8f:19:5e:53:a0:9a:cb:fe:40:19:88:b2:ea: 8f:55:c6:b4:24:92:f9:d1:85:1a:5c:d7:7d:1a:11: b7:96:1b:5d:9f:f7:f0:8f:94:0f:73:40:65:e0:a3: 81:5f:5c:9f:69:a5:65:ae:73:99:a9:55:ad:0d:c5: 3b:64:7d:ee:39:3e:01:e3:63:9f:cf:16:62:77:99: 4f:22:63:6e:9d:d9:c6:89:10:0b:c9:90:29:05:4d: 95:de:13:87:69:7b:25:93:96:5a:35:ae:25:c2:c8: a5:33:5f:75:c8:e2:50:62:8f:b0:8e:68:ae:89:22: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:94:AB:31:AE:B6:B7:C0:8E:9B:2D:7D:70:21:F8:57:7E:94:9A:4E X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e9:82:1f:b2:b6:d5:be:7e:83:29:9d:84:bb:90:a8:74:a7: 3e:a0:d7:6f:31:56:02:92:d6:60:11:40:6c:98:c5:3d:23:3c: 7b:ca:1b:34:58:18:e3:b8:eb:24:8e:94:85:ea:3f:b4:e1:39: 82:93:37:da:97:de:70:e7:43:f5:f6:2d:fe:08:be:9b:f2:c7: ed:b6:4e:c7:0b:ce:a6:8f:e8:6c:52:09:b2:2a:4b:43:e8:a1: c6:a0:e4:26:fd:5a:36:2a:55:b2:9b:1b:6b:3b:2a:ae:2d:ac: 97:39:a9:ee:5c:0c:8c:af:fa:8b:24:b4:9e:93:d4:e5:0a:e2: d8:6c:cb:0f:9b:7e:2c:53:50:bb:2d:1d:9c:71:89:8e:2e:28: fe:3b:35:8b:38:7b:5b:38:35:f4:d5:39:7e:ad:1a:28:b1:0d: 65:26:df:82:04:3c:4d:9c:a1:96:38:4f:c6:ca:af:c6:40:b8: 04:b0:0d:4e:1b:ef:8b:65:ef:44:06:6e:e0:3a:4d:c7:21:15: 4d:49:78:1c:b6:8e:e4:1d:90:96:91:3f:a8:df:9a:41:22:1d: 5e:f4:5d:21:16:21:16:1f:28:91:cc:f2:e5:8c:b2:b9:15:34: 57:20:87:e2:b6:e3:fc:da:19:fc:f5:a1:ec:bb:f7:35:c7:db: 91:d6:57:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SZUHPmXfTZEj5aMFzCOEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwNjI5MDgwMDUzWhcNMjYwNjMwMDgwMDUzWjAzMTEwLwYDVQQD EygxZjk0YWIzMWFlYjZiN2MwOGU5YjJkN2Q3MDIxZjg1NzdlOTQ5YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2lGAStBNSfxIuD1N0XUUHO03jMp kXyR4d+HmMMZYZ0Iwu0Fxr+h1tEB6/Fr8vTjEp3RX2Q1ntvdZrQN46vDnD6DbTJS wOYsWiO/xqO32rutK2gnxzcaipIPEiH0D49v+UEhVxEZAWPOlv7hTEhmM+mNqat6 p0/adJUVrM3AQypX6lAaJHFhqI8ZXlOgmsv+QBmIsuqPVca0JJL50YUaXNd9GhG3 lhtdn/fwj5QPc0Bl4KOBX1yfaaVlrnOZqVWtDcU7ZH3uOT4B42OfzxZid5lPImNu ndnGiRALyZApBU2V3hOHaXslk5ZaNa4lwsilM191yOJQYo+wjmiuiSI/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+UqzGutrfAjpstfXAh+Fd+lJpOMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOmCH7K2 1b5+gymdhLuQqHSnPqDXbzFWApLWYBFAbJjFPSM8e8obNFgY47jrJI6Uheo/tOE5 gpM32pfecOdD9fYt/gi+m/LH7bZOxwvOpo/obFIJsipLQ+ihxqDkJv1aNipVspsb azsqri2slzmp7lwMjK/6iyS0npPU5Qri2GzLD5t+LFNQuy0dnHGJji4o/js1izh7 Wzg19NU5fq0aKLENZSbfggQ8TZyhljhPxsqvxkC4BLANThvvi2XvRAZu4DpNxyEV TUl4HLaO5B2QlpE/qN+aQSIdXvRdIRYhFh8okczy5YyyuRU0VyCH4rbj/NoZ/PWh 7Lv3NcfbkdZXow== -----END CERTIFICATE-----Generated at Mon Jun 29 15:07:06 2026 by rpki-client