$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: ZTPIpF1vUdbJaPx/TKbmNAb/hxXluFEe0VaJBK3/w6k= Subject key identifier: 91:B7:B6:2E:AA:D6:C9:C2:0B:1D:F6:C0:FB:67:13:8F:CD:06:B4:88 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 0198D5BBD23961CAA50B481E282DF33CC36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1652 Signing time: Sat 23 Aug 2025 07:01:52 +0000 Manifest this update: Sat 23 Aug 2025 07:01:52 +0000 Manifest next update: Sun 24 Aug 2025 07:01:52 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: TDwgzus3Kpjb0um9pz0vQlQ+wXkNm8uKOW9VNM4iRKI=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:d2:39:61:ca:a5:0b:48:1e:28:2d:f3:3c:c3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Aug 23 07:01:52 2025 GMT Not After : Aug 24 07:01:52 2025 GMT Subject: CN=91b7b62eaad6c9c20b1df6c0fb67138fcd06b488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:c4:64:10:e0:44:3f:0e:5d:92:08:d6:68: 1c:a9:65:66:b7:81:04:e3:17:5f:b6:ce:14:c4:b8: d7:a2:a3:08:16:37:af:2f:52:6f:b3:1c:fd:fd:e8: 11:8f:57:ae:bb:45:0f:52:93:c1:8f:dd:a6:f3:e6: 44:92:43:5b:f8:fd:61:5a:a0:7c:b7:50:0e:6e:7b: b1:46:0a:92:3d:04:f4:f2:83:81:11:e1:46:db:5f: f6:ad:a2:c4:f2:22:86:5c:84:9b:2e:e5:1b:35:56: b2:32:a9:3f:81:8d:e0:07:f0:0c:e4:7d:1e:ba:d0: 26:a2:5d:c1:37:e0:a3:07:0b:06:db:e8:9d:d6:85: eb:7e:55:ef:cd:d8:03:20:5e:77:67:5b:5e:cf:bb: f2:26:1b:d8:06:e2:59:21:62:f7:35:6c:f9:6f:95: 92:fd:98:bf:9b:0c:ee:23:fb:1a:4b:e9:d7:df:c7: 7a:ef:32:cf:4c:7b:24:48:20:b3:aa:d0:a6:55:c3: db:93:28:15:c9:72:33:ce:5b:53:1e:6e:de:c6:86: 8e:3f:4e:19:1d:b9:db:12:2a:61:b7:1f:aa:a2:e4: d2:8a:a8:4c:3e:15:59:be:3e:f0:2f:67:c5:12:f6: 08:39:05:01:c1:29:ae:ce:f0:96:70:96:94:ea:de: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:B6:2E:AA:D6:C9:C2:0B:1D:F6:C0:FB:67:13:8F:CD:06:B4:88 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2d:68:64:54:a7:06:ea:6d:da:cc:c8:5f:c6:32:e8:70:e4: 08:cf:7e:bc:f2:22:73:55:25:75:fd:0b:e5:18:c1:95:d5:9a: 36:fb:c7:7c:7f:2b:8d:0d:89:f5:0c:81:3b:d5:7a:63:a9:2b: b6:2a:19:76:2b:d4:ab:77:88:22:9c:3c:73:34:1b:33:fb:12: b5:42:3a:d9:ec:f5:18:f6:3a:75:da:0f:33:9c:ba:ee:07:e6: 6e:e7:ee:cb:6e:b3:59:53:b5:1e:f8:d8:b0:3e:f9:c2:51:5a: 13:e3:ef:b0:da:f9:43:4a:eb:ca:b0:25:d8:48:d9:fd:22:34: 0f:71:3d:e9:ba:ff:df:e9:9d:d3:fc:d5:16:d3:24:f2:1e:e5: f4:f7:a6:7d:7b:ce:2e:63:64:0d:d2:76:b5:63:4a:82:71:1a: 7e:5e:0c:1c:67:4e:31:53:a6:8e:9c:22:76:48:fb:da:16:f1: 69:12:5d:c1:a6:ac:f1:e2:c7:41:ef:f2:d6:57:19:de:d4:d1: e2:74:6b:64:57:2d:40:5e:fc:cf:20:c7:d0:17:d4:75:0a:8f: cf:b4:21:6a:e3:83:bd:6f:4d:da:31:21:11:e1:c9:d2:e5:ff: 2c:a0:8a:d3:a3:4e:23:81:ff:7a:f4:4c:39:ae:f4:2a:86:68: 75:a7:07:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu9I5YcqlC0geKC3zPMNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwODIzMDcwMTUyWhcNMjUwODI0MDcwMTUyWjAzMTEwLwYDVQQD Eyg5MWI3YjYyZWFhZDZjOWMyMGIxZGY2YzBmYjY3MTM4ZmNkMDZiNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM7EZBDgRD8OXZII1mgcqWVmt4EE 4xdfts4UxLjXoqMIFjevL1Jvsxz9/egRj1euu0UPUpPBj92m8+ZEkkNb+P1hWqB8 t1AObnuxRgqSPQT08oOBEeFG21/2raLE8iKGXISbLuUbNVayMqk/gY3gB/AM5H0e utAmol3BN+CjBwsG2+id1oXrflXvzdgDIF53Z1tez7vyJhvYBuJZIWL3NWz5b5WS /Zi/mwzuI/saS+nX38d67zLPTHskSCCzqtCmVcPbkygVyXIzzltTHm7exoaOP04Z HbnbEiphtx+qouTSiqhMPhVZvj7wL2fFEvYIOQUBwSmuzvCWcJaU6t6C1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG3ti6q1snCCx32wPtnE4/NBrSIMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii1oZFSn Bupt2szIX8Yy6HDkCM9+vPIic1Uldf0L5RjBldWaNvvHfH8rjQ2J9QyBO9V6Y6kr tioZdivUq3eIIpw8czQbM/sStUI62ez1GPY6ddoPM5y67gfmbufuy26zWVO1HvjY sD75wlFaE+PvsNr5Q0rryrAl2EjZ/SI0D3E96br/3+md0/zVFtMk8h7l9PemfXvO LmNkDdJ2tWNKgnEafl4MHGdOMVOmjpwidkj72hbxaRJdwaas8eLHQe/y1lcZ3tTR 4nRrZFctQF78zyDH0BfUdQqPz7QhauODvW9N2jEhEeHJ0uX/LKCK06NOI4H/evRM Oa70KoZodacH0g== -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:41 2025 by rpki-client