$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: ENV0Gshmwn+hr3zKVOInzdIe3BbaH+hfnCd5rrN+oHI= Subject key identifier: E7:51:29:E0:9C:62:30:F3:22:FF:15:4E:49:0A:2E:90:1D:58:F6:DC Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 0196B7104C109AADD58D24FFA2DBE26C8F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1539 Signing time: Fri 09 May 2025 22:00:20 +0000 Manifest this update: Fri 09 May 2025 22:00:20 +0000 Manifest next update: Sat 10 May 2025 22:00:20 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: wPCpKB1dDQSibU7v/U7ZTSuovDlyW24rghiCIBK5x7Y=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:10:4c:10:9a:ad:d5:8d:24:ff:a2:db:e2:6c:8f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: May 9 22:00:20 2025 GMT Not After : May 10 22:00:20 2025 GMT Subject: CN=e75129e09c6230f322ff154e490a2e901d58f6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:ff:c8:41:66:32:ba:43:6b:06:58:c7:7f: 55:75:4d:04:4c:68:aa:05:3b:44:2c:4f:2e:58:4d: 8f:3d:76:1a:af:42:a8:2d:d7:6d:17:ae:85:4f:e2: 57:37:a0:e0:4d:50:16:ec:62:9d:33:e7:f2:e7:1a: 9c:eb:da:b2:76:ab:fb:87:3e:f0:28:cc:39:af:4f: 7d:f7:21:a3:99:16:34:f3:4c:0c:ac:c5:1b:40:be: e0:f6:10:e4:14:2f:52:2f:15:a9:1d:c2:94:e5:6b: 0d:e0:be:c3:df:c5:2d:82:df:cf:95:82:7c:6a:26: 4e:cd:7b:2e:37:80:b8:ea:00:c1:40:92:3b:e2:b3: 14:18:6d:cf:6d:44:84:3e:a3:cd:1e:61:dc:c1:b2: 2d:83:d2:37:aa:77:0d:a8:14:93:77:f0:6a:fc:3f: 9f:00:70:84:ba:be:a6:c9:76:cc:50:fc:43:b5:fe: d0:3e:4a:7b:7c:3f:d6:d9:ce:76:29:b8:5c:67:99: 8f:9a:e2:06:07:69:4a:7d:43:33:29:42:14:44:2b: 2d:49:20:ec:8b:fb:c7:79:4b:3f:9f:75:bf:7a:0d: 5f:6d:1a:65:b2:f3:5e:a1:6f:8b:25:19:a5:bd:7d: a5:9c:97:0c:81:f7:bd:e8:0b:56:d4:a4:27:fe:cd: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:51:29:E0:9C:62:30:F3:22:FF:15:4E:49:0A:2E:90:1D:58:F6:DC X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6a:37:43:43:7c:97:9c:1c:27:64:db:ea:a0:2e:60:de:20: ed:1c:aa:db:59:a9:5a:85:31:04:f9:30:ad:aa:66:f7:86:9e: a1:d2:60:d1:a9:c4:ba:2d:98:6b:6b:80:a7:4a:68:58:f6:a5: 48:de:ca:e8:30:9f:98:e6:be:ff:b7:0a:76:4d:ca:b1:ec:b7: 2a:e3:c4:87:5d:ba:e4:90:bc:b3:35:63:82:d5:c2:ae:c3:d3: 72:47:78:ac:32:54:4b:76:9a:d1:ab:bd:39:63:46:75:f8:99: 29:23:09:03:7e:89:55:b1:bf:c0:0b:2c:27:f2:3b:78:0a:36: 22:e3:49:95:b0:5a:5c:da:fc:c4:c3:86:39:46:57:52:78:65: 17:a7:34:69:15:a8:30:1b:a6:14:bc:7c:9f:e9:06:bc:95:31: 8c:10:d9:b9:a4:37:ba:ab:5b:65:b8:c3:54:90:f2:94:89:77: 90:03:51:3e:30:54:c5:00:a4:24:2a:b2:a3:d1:65:2d:44:b4: af:f8:aa:e8:30:f5:ea:22:b0:ee:b1:e7:ad:b3:d1:b4:a9:60: 83:38:a0:ec:ad:ff:17:0f:30:f4:c7:8f:9f:87:ca:20:ec:4b: df:11:e7:d6:f9:2c:44:46:67:7f:98:e3:8a:f0:67:aa:09:cf: ce:22:81:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa3EEwQmq3VjST/otvibI9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwNTA5MjIwMDIwWhcNMjUwNTEwMjIwMDIwWjAzMTEwLwYDVQQD EyhlNzUxMjllMDljNjIzMGYzMjJmZjE1NGU0OTBhMmU5MDFkNThmNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nr/yEFmMrpDawZYx39VdU0ETGiq BTtELE8uWE2PPXYar0KoLddtF66FT+JXN6DgTVAW7GKdM+fy5xqc69qydqv7hz7w KMw5r0999yGjmRY080wMrMUbQL7g9hDkFC9SLxWpHcKU5WsN4L7D38Utgt/PlYJ8 aiZOzXsuN4C46gDBQJI74rMUGG3PbUSEPqPNHmHcwbItg9I3qncNqBSTd/Bq/D+f AHCEur6myXbMUPxDtf7QPkp7fD/W2c52KbhcZ5mPmuIGB2lKfUMzKUIURCstSSDs i/vHeUs/n3W/eg1fbRplsvNeoW+LJRmlvX2lnJcMgfe96AtW1KQn/s1syQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdRKeCcYjDzIv8VTkkKLpAdWPbcMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWo3Q0N8 l5wcJ2Tb6qAuYN4g7Ryq21mpWoUxBPkwrapm94aeodJg0anEui2Ya2uAp0poWPal SN7K6DCfmOa+/7cKdk3Ksey3KuPEh1265JC8szVjgtXCrsPTckd4rDJUS3aa0au9 OWNGdfiZKSMJA36JVbG/wAssJ/I7eAo2IuNJlbBaXNr8xMOGOUZXUnhlF6c0aRWo MBumFLx8n+kGvJUxjBDZuaQ3uqtbZbjDVJDylIl3kANRPjBUxQCkJCqyo9FlLUS0 r/iq6DD16iKw7rHnrbPRtKlggzig7K3/Fw8w9MePn4fKIOxL3xHn1vksREZnf5jj ivBnqgnPziKBEA== -----END CERTIFICATE-----Generated at Sat May 10 04:08:52 2025 by rpki-client