$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: g1XvIQ1wNdLkKMgH4QQ2gZoUeyU6mo1g0aoGtZvL76o= Subject key identifier: E4:22:52:FA:90:B6:63:32:1C:69:8E:5C:85:7A:27:C3:46:6B:2F:8C Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019FFA243E4BDAA863FD38E33E9CE84EE3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1A05 Signing time: Thu 13 Aug 2026 08:01:46 +0000 Manifest this update: Thu 13 Aug 2026 08:01:46 +0000 Manifest next update: Fri 14 Aug 2026 08:01:46 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: qZ3yi/ktoM1ltwfQBlWXd94hKR4urJSX6lLsTZgM9YI=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 08:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fa:24:3e:4b:da:a8:63:fd:38:e3:3e:9c:e8:4e:e3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Aug 13 08:01:46 2026 GMT Not After : Aug 14 08:01:46 2026 GMT Subject: CN=e42252fa90b663321c698e5c857a27c3466b2f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:87:d9:79:cd:d5:26:ed:7d:5f:20:ec:1d: 1f:ed:22:c0:55:b5:f4:68:b1:93:0f:85:4f:40:a1: 3b:62:7e:b4:d0:20:93:95:58:2f:cd:a9:15:a6:bb: 40:6c:6c:26:4e:29:99:fe:1a:20:71:fb:a4:e3:b8: b5:68:ac:36:68:f2:a0:af:34:23:17:61:e4:3a:31: 1f:bc:7c:23:b8:e9:3b:f0:86:29:c8:22:40:49:bf: 3a:1b:c5:9a:14:19:e5:06:b3:b5:fd:2e:fc:eb:de: 1b:f3:db:d4:c9:0f:6c:2f:d8:4a:e3:1f:c5:a9:49: bd:25:2e:b9:3e:ab:be:47:19:a6:2d:44:8f:ef:4f: f6:97:c3:dc:59:a4:0e:1b:8e:d1:86:b6:e4:e7:2b: 25:f6:07:fe:74:bc:9f:b6:a5:40:b8:50:96:93:64: 6e:e8:07:89:4b:10:09:c6:62:90:1c:e1:5f:17:d2: 58:f1:7e:1a:17:60:17:34:ca:4b:84:31:ac:c6:4e: d8:0a:61:d4:c3:dc:9d:51:ea:92:ca:3b:ed:ee:79: cd:d6:f4:99:0c:fb:fc:7b:c4:98:0a:b9:52:43:d9: 6c:c2:71:e0:e0:44:71:f3:14:68:34:42:92:a5:0c: 14:1f:78:1d:c1:0f:66:1c:32:d8:2f:72:54:a8:79: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:22:52:FA:90:B6:63:32:1C:69:8E:5C:85:7A:27:C3:46:6B:2F:8C X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b2:c9:fe:bb:ce:a3:3c:6b:84:75:e5:6b:2c:55:e4:d3:2b: c8:86:70:b0:fd:29:dd:39:60:25:80:00:4d:ef:66:16:be:94: 9e:b7:54:1e:13:88:72:81:4c:d2:7e:62:01:53:e1:04:0d:91: 85:9e:9a:51:ba:dd:ca:82:2d:12:03:a0:1f:bf:28:1d:a0:0c: 63:fe:ab:78:4a:24:3f:c3:f6:2f:33:b7:80:96:3d:24:7e:83: 66:c4:75:84:4a:50:91:6c:0d:91:d2:76:13:63:82:e7:ff:c2: 3c:90:0d:34:4b:1f:7b:18:37:79:e7:dd:76:c1:76:22:33:98: 1c:37:97:6a:b5:9d:ee:b4:69:93:32:7d:54:70:c1:83:c1:f2: 9e:ba:98:16:ee:5d:51:77:f7:ec:d6:ec:30:38:ac:61:60:52: a2:25:c7:92:ed:0d:19:ec:c0:72:b2:1e:44:9c:f8:32:37:75: 5b:04:9f:fc:93:09:38:b1:c9:f1:86:a0:9b:ad:3b:41:10:6c: 54:a2:54:24:4d:8c:2c:a9:95:45:d3:25:85:82:0f:5c:e5:f8: e4:38:83:eb:87:56:1e:0b:e6:ba:8d:4e:bb:63:cf:e0:d5:a5: ee:47:b6:c3:38:bf:37:c3:12:38:bf:22:51:cc:da:11:36:7b: 9d:ac:7e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/6JD5L2qhj/TjjPpzoTuOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwODEzMDgwMTQ2WhcNMjYwODE0MDgwMTQ2WjAzMTEwLwYDVQQD EyhlNDIyNTJmYTkwYjY2MzMyMWM2OThlNWM4NTdhMjdjMzQ2NmIyZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0iH2XnN1SbtfV8g7B0f7SLAVbX0 aLGTD4VPQKE7Yn600CCTlVgvzakVprtAbGwmTimZ/hogcfuk47i1aKw2aPKgrzQj F2HkOjEfvHwjuOk78IYpyCJASb86G8WaFBnlBrO1/S78694b89vUyQ9sL9hK4x/F qUm9JS65Pqu+RxmmLUSP70/2l8PcWaQOG47Rhrbk5ysl9gf+dLyftqVAuFCWk2Ru 6AeJSxAJxmKQHOFfF9JY8X4aF2AXNMpLhDGsxk7YCmHUw9ydUeqSyjvt7nnN1vSZ DPv8e8SYCrlSQ9lswnHg4ERx8xRoNEKSpQwUH3gdwQ9mHDLYL3JUqHl3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQiUvqQtmMyHGmOXIV6J8NGay+MMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbLJ/rvO ozxrhHXlayxV5NMryIZwsP0p3TlgJYAATe9mFr6UnrdUHhOIcoFM0n5iAVPhBA2R hZ6aUbrdyoItEgOgH78oHaAMY/6reEokP8P2LzO3gJY9JH6DZsR1hEpQkWwNkdJ2 E2OC5//CPJANNEsfexg3eefddsF2IjOYHDeXarWd7rRpkzJ9VHDBg8HynrqYFu5d UXf37NbsMDisYWBSoiXHku0NGezAcrIeRJz4Mjd1WwSf/JMJOLHJ8Yagm607QRBs VKJUJE2MLKmVRdMlhYIPXOX45DiD64dWHgvmuo1Ou2PP4NWl7ke2wzi/N8MSOL8i UczaETZ7nax+RA== -----END CERTIFICATE-----Generated at Thu Aug 13 18:13:53 2026 by rpki-client