$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: mcdX+99Fty/s8uN8s58udym7HY8OpRnQI9rpUq43OvY= Subject key identifier: D4:BC:61:A8:28:C6:EE:B6:1C:C8:09:54:E4:62:E1:C9:20:C8:15:AE Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 0199FD3473406F525D7BEFDB916D7078778F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 16EB Signing time: Sun 19 Oct 2025 16:01:36 +0000 Manifest this update: Sun 19 Oct 2025 16:01:36 +0000 Manifest next update: Mon 20 Oct 2025 16:01:36 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: lopO36t07QJDKs8voYHBLnCUmxZdfuC4TmDcrbveCo8=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:73:40:6f:52:5d:7b:ef:db:91:6d:70:78:77:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Oct 19 16:01:36 2025 GMT Not After : Oct 20 16:01:36 2025 GMT Subject: CN=d4bc61a828c6eeb61cc80954e462e1c920c815ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:d7:21:ef:c3:ac:86:bf:88:2d:36:f6:41: 9a:29:b8:27:c3:85:45:1b:4b:da:a8:57:5c:05:4f: 65:9e:59:17:81:c2:16:29:ef:59:60:54:3e:be:2b: fb:50:36:53:f8:72:bb:5b:1a:dd:7a:13:c3:23:ee: e6:9d:d9:47:bc:63:54:45:39:ea:ae:6b:86:fe:aa: f5:b6:50:64:41:8b:c4:63:e4:ca:e2:7a:99:60:d5: 19:e3:59:a4:d1:8b:92:fd:ae:8b:fa:4f:b5:9c:14: cd:2b:47:fe:6a:be:66:bf:4a:16:f8:c6:b5:86:aa: e0:8f:cb:6b:75:15:e2:77:4d:52:ca:63:67:fc:20: f9:59:d0:72:49:30:f4:99:ab:00:d3:ac:21:f6:57: bc:cc:51:c9:b2:10:1d:bc:aa:7e:f7:6e:db:42:fa: 09:44:0c:1d:58:91:c4:f2:cb:b2:4f:5b:24:14:e8: 68:31:5d:f0:13:06:0f:56:84:5b:1d:e4:e9:e0:f9: 9e:4a:d7:37:37:3f:e0:44:61:b5:84:7c:da:ec:13: 51:30:94:cb:45:bf:7b:25:f3:1f:29:1c:08:a3:01: 54:e9:dc:0a:6c:57:a2:12:48:81:83:ee:51:19:8f: 91:c2:75:18:ff:be:19:ae:3e:8f:a5:e6:89:73:8b: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BC:61:A8:28:C6:EE:B6:1C:C8:09:54:E4:62:E1:C9:20:C8:15:AE X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c7:a2:d0:ce:31:ac:e6:d3:cb:24:19:25:bb:eb:b5:9f:fa: 13:59:be:16:fc:a4:8a:96:b4:f0:58:22:32:44:58:ba:47:f3: 1b:2c:68:0a:6a:bf:47:17:f4:1b:93:8a:b2:ca:28:83:48:a1: f5:aa:21:a3:be:07:fd:63:99:93:0f:9d:b1:e5:2e:3e:d9:5f: e3:30:07:33:b8:71:3a:d5:75:7c:c7:19:ed:28:20:26:2e:49: 97:d1:b3:39:01:5f:ce:d6:50:8f:81:ae:b6:2a:21:70:07:b7: c6:ff:50:07:c0:4a:12:10:06:1a:60:1d:0f:5e:bf:1d:a6:12: dd:79:89:62:c5:2a:37:51:b6:bb:0b:c8:11:45:00:5e:08:7f: af:f4:ac:fa:55:b6:c0:71:70:0a:68:00:f5:17:1d:f6:44:49: d5:01:07:78:a7:db:92:df:02:fb:0d:c7:d9:9f:ee:f0:04:bd: 09:ea:8a:1f:51:7e:f0:80:21:41:66:0d:3c:b9:83:75:3a:f0: af:08:5c:d4:b3:61:97:c7:66:e6:48:ee:31:e5:24:1b:9e:5f: 6e:78:e3:c4:44:0f:7b:08:e9:21:53:e0:fc:17:15:25:ae:d5: cb:2d:b2:0f:bd:c0:88:97:bf:7c:f8:a9:9b:65:81:4c:75:c2: 06:60:0b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NHNAb1Jde+/bkW1weHePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMDE5MTYwMTM2WhcNMjUxMDIwMTYwMTM2WjAzMTEwLwYDVQQD EyhkNGJjNjFhODI4YzZlZWI2MWNjODA5NTRlNDYyZTFjOTIwYzgxNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi87XIe/DrIa/iC029kGaKbgnw4VF G0vaqFdcBU9lnlkXgcIWKe9ZYFQ+viv7UDZT+HK7WxrdehPDI+7mndlHvGNURTnq rmuG/qr1tlBkQYvEY+TK4nqZYNUZ41mk0YuS/a6L+k+1nBTNK0f+ar5mv0oW+Ma1 hqrgj8trdRXid01SymNn/CD5WdBySTD0masA06wh9le8zFHJshAdvKp+927bQvoJ RAwdWJHE8suyT1skFOhoMV3wEwYPVoRbHeTp4PmeStc3Nz/gRGG1hHza7BNRMJTL Rb97JfMfKRwIowFU6dwKbFeiEkiBg+5RGY+RwnUY/74Zrj6PpeaJc4tK7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS8Yagoxu62HMgJVORi4ckgyBWuMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsei0M4x rObTyyQZJbvrtZ/6E1m+Fvykipa08FgiMkRYukfzGyxoCmq/Rxf0G5OKssoog0ih 9aoho74H/WOZkw+dseUuPtlf4zAHM7hxOtV1fMcZ7SggJi5Jl9GzOQFfztZQj4Gu tiohcAe3xv9QB8BKEhAGGmAdD16/HaYS3XmJYsUqN1G2uwvIEUUAXgh/r/Ss+lW2 wHFwCmgA9Rcd9kRJ1QEHeKfbkt8C+w3H2Z/u8AS9CeqKH1F+8IAhQWYNPLmDdTrw rwhc1LNhl8dm5kjuMeUkG55fbnjjxEQPewjpIVPg/BcVJa7Vyy2yD73AiJe/fPip m2WBTHXCBmALmw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:27:34 2025 by rpki-client