$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: xFv8AlzeAIP/0kL9SiR+83eEmkpF8zQCCdfpTlJvfmU= Subject key identifier: A7:93:E0:D6:85:8F:06:F3:9F:E1:29:17:9F:16:06:4A:D1:F0:2C:01 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 01A0D64C13EE4F761689ADD73097B9704A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1A77 Signing time: Fri 25 Sep 2026 02:01:45 +0000 Manifest this update: Fri 25 Sep 2026 02:01:45 +0000 Manifest next update: Sat 26 Sep 2026 02:01:45 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: NFiBoWOgxGzBTpydIuBL4Lzt6qOUAacZs5HiRUyGffs=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:4c:13:ee:4f:76:16:89:ad:d7:30:97:b9:70:4a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Sep 25 02:01:45 2026 GMT Not After : Sep 26 02:01:45 2026 GMT Subject: CN=a793e0d6858f06f39fe129179f16064ad1f02c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:8d:50:d9:56:87:5d:f6:21:53:83:28:43: 14:25:ba:bb:a7:d5:9a:38:58:34:df:7f:d4:40:27: a3:3c:3a:18:91:b5:d4:42:d1:12:fb:82:c9:0f:ec: 3e:cd:b9:8e:35:6d:1a:62:56:b5:26:87:94:e7:6d: 61:66:14:2e:35:92:8a:f6:51:cb:14:c0:32:1d:d1: eb:b3:11:08:52:5b:54:69:02:7f:91:c8:99:d6:f1: d9:1b:56:37:53:24:12:dc:88:7a:9a:0b:b7:98:88: a6:c0:bc:24:87:ea:b7:ab:07:c1:b9:73:23:dd:56: 72:e6:38:a7:1f:84:08:e9:0a:f2:33:2b:c7:76:37: e4:c6:67:47:10:72:5f:a8:e3:98:be:62:91:8e:2d: e3:0b:54:95:4a:89:77:65:12:a7:cd:2f:f4:f9:10: ce:c4:88:d2:97:34:1f:59:72:29:af:29:1d:1c:e0: 8b:61:a0:05:28:db:d8:fb:e1:9d:3f:a4:5b:66:6a: ca:46:5a:e6:30:1e:28:74:51:e4:1d:69:5c:92:97: 05:61:a3:96:1a:73:5c:ce:a0:eb:25:a1:90:00:ae: 7c:1c:50:08:3f:3b:dd:99:5c:af:25:1b:24:f8:8b: b3:3b:bf:77:b9:20:b4:0b:71:3e:a2:56:28:ff:bd: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:93:E0:D6:85:8F:06:F3:9F:E1:29:17:9F:16:06:4A:D1:F0:2C:01 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:62:69:eb:c3:aa:95:25:e1:36:af:30:5e:d9:19:6f:60:b5: e8:66:45:2c:ea:c2:80:02:93:94:a8:ec:94:df:98:db:a7:04: 8c:e1:d1:34:e6:1c:ba:d8:1a:1a:01:b0:3d:cc:62:4a:8f:41: cf:0a:a1:0f:8d:d4:26:64:be:db:09:b9:d3:97:c9:96:fc:ab: 22:d2:07:79:49:7c:a4:a0:94:6d:30:09:52:35:2c:13:25:44: 1f:71:57:9e:7c:32:e6:19:51:27:9b:b2:af:b6:e9:ec:89:6f: 9b:f7:23:6a:78:6a:26:59:03:a9:eb:d6:7b:63:54:79:59:db: 21:c7:93:22:42:6e:55:91:7f:7e:10:40:0f:c4:88:af:71:20: c2:63:67:b5:d1:3c:de:73:8c:39:b9:72:cd:97:4a:2e:31:ba: 13:67:fd:5b:6a:6f:2d:d7:19:68:00:fe:37:e8:a5:99:a4:76: fb:64:e1:f4:c5:10:53:c5:2d:c8:df:ec:a0:e0:3b:23:f0:63: 26:44:7c:47:80:48:f2:da:16:61:ec:c4:3c:76:da:3c:6c:4d: 15:c9:2e:c4:bd:c3:2a:ee:de:5c:a0:c8:0a:88:7c:47:e1:1b: 0c:b2:1e:95:af:5a:fd:87:2d:3e:71:ce:0b:f1:81:32:34:42: 04:f0:12:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWTBPuT3YWia3XMJe5cEp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwOTI1MDIwMTQ1WhcNMjYwOTI2MDIwMTQ1WjAzMTEwLwYDVQQD EyhhNzkzZTBkNjg1OGYwNmYzOWZlMTI5MTc5ZjE2MDY0YWQxZjAyYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz+NUNlWh132IVODKEMUJbq7p9Wa OFg033/UQCejPDoYkbXUQtES+4LJD+w+zbmONW0aYla1JoeU521hZhQuNZKK9lHL FMAyHdHrsxEIUltUaQJ/kciZ1vHZG1Y3UyQS3Ih6mgu3mIimwLwkh+q3qwfBuXMj 3VZy5jinH4QI6QryMyvHdjfkxmdHEHJfqOOYvmKRji3jC1SVSol3ZRKnzS/0+RDO xIjSlzQfWXIprykdHOCLYaAFKNvY++GdP6RbZmrKRlrmMB4odFHkHWlckpcFYaOW GnNczqDrJaGQAK58HFAIPzvdmVyvJRsk+IuzO793uSC0C3E+olYo/71eBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeT4NaFjwbzn+EpF58WBkrR8CwBMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWJp68Oq lSXhNq8wXtkZb2C16GZFLOrCgAKTlKjslN+Y26cEjOHRNOYcutgaGgGwPcxiSo9B zwqhD43UJmS+2wm505fJlvyrItIHeUl8pKCUbTAJUjUsEyVEH3FXnnwy5hlRJ5uy r7bp7Ilvm/cjanhqJlkDqevWe2NUeVnbIceTIkJuVZF/fhBAD8SIr3EgwmNntdE8 3nOMOblyzZdKLjG6E2f9W2pvLdcZaAD+N+ilmaR2+2Th9MUQU8UtyN/soOA7I/Bj JkR8R4BI8toWYezEPHbaPGxNFckuxL3DKu7eXKDICoh8R+EbDLIela9a/YctPnHO C/GBMjRCBPASAg== -----END CERTIFICATE-----Generated at Fri Sep 25 05:16:40 2026 by rpki-client