$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: apdChvmcNyzJyVUtRekA/li15+FlL5w6tcirpdPoewc= Subject key identifier: A6:11:B8:6C:C9:09:2B:B9:E0:D4:E9:87:19:6D:01:BD:03:01:13:F8 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 0197B7EAAC2F877573F8D004243B0F142A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 15BE Signing time: Sat 28 Jun 2025 19:01:39 +0000 Manifest this update: Sat 28 Jun 2025 19:01:39 +0000 Manifest next update: Sun 29 Jun 2025 19:01:39 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: oHarNL5pN+EtZGW6g/Oq02QVoSRnplcDW+M8hdfTXuc=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:ac:2f:87:75:73:f8:d0:04:24:3b:0f:14:2a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jun 28 19:01:39 2025 GMT Not After : Jun 29 19:01:39 2025 GMT Subject: CN=a611b86cc9092bb9e0d4e987196d01bd030113f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:42:70:ce:04:e9:ec:da:bc:24:90:f0:39: 4d:2b:51:96:e7:27:12:db:5d:e6:77:76:96:98:28: c3:e0:7d:56:f8:d1:5e:e4:47:80:4a:36:da:06:3f: ca:99:c8:19:c7:0d:a7:ef:7b:a2:bf:18:03:7c:60: 39:97:95:77:c9:51:13:06:95:cd:a0:a0:e7:c8:86: af:1c:94:91:c9:e7:f3:43:1e:e6:8f:4a:d4:e5:be: 9b:e9:a6:7e:bd:df:76:a5:2f:37:95:5d:f0:b9:dd: cc:5e:cb:9c:be:b6:0f:5e:83:15:02:ae:96:ba:c7: b8:fd:e4:79:8e:b5:d1:eb:94:49:50:fb:8f:e5:95: bb:63:93:7c:0a:a4:02:81:68:11:a0:79:3f:e2:cf: f9:f6:aa:e7:0a:1d:6f:99:9b:73:4f:e1:bf:c6:20: ff:be:2c:ba:2e:ff:21:74:4a:12:e8:59:61:a0:fb: 46:0a:e4:a6:c9:f7:f8:bc:88:79:08:f6:3b:c1:79: 9c:ac:ee:87:09:01:83:2b:b1:db:9a:8c:ec:fa:bc: 03:66:f0:c2:bd:c8:90:6b:3e:12:b4:76:93:10:de: 52:4d:8e:8f:1d:15:28:f2:3f:bd:35:7f:7a:25:3e: 4e:61:bb:aa:9f:be:38:94:b3:ee:e1:39:ca:ca:06: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:B8:6C:C9:09:2B:B9:E0:D4:E9:87:19:6D:01:BD:03:01:13:F8 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:61:26:af:c5:e7:bd:c6:0e:c6:6b:75:b4:2c:ff:2a:60:ab: d6:ce:85:de:38:36:c2:50:0c:a2:d6:6a:73:5c:7a:d9:af:1a: 63:d1:1a:e5:56:ce:2a:f2:6b:88:6a:77:9f:67:f0:ca:8d:89: 94:ac:08:a7:06:b4:37:03:70:fc:e7:b2:95:e6:d4:48:19:60: e8:11:88:25:c7:e8:49:2d:2e:45:93:2a:1c:9f:ec:de:fe:2e: 05:5b:93:de:f1:9d:d7:21:30:eb:b5:ae:ed:a6:93:2c:c8:18: ff:4f:e0:62:15:4f:21:4f:e8:52:e6:41:5b:66:e0:ae:2d:a6: 47:fe:12:f2:d2:30:73:e4:fc:90:00:4b:01:f1:99:fe:e2:f0: 02:27:63:50:5f:a6:9e:73:35:a8:6f:af:0f:81:b9:5a:fb:e9: 8a:53:f0:68:bf:7e:bb:b8:4e:bf:bd:21:c3:cf:2b:39:f4:5f: 23:64:08:d2:90:dc:9c:84:50:21:47:c2:6e:e4:7d:0a:24:d1: 2d:53:84:81:ab:ab:60:56:f9:3a:f1:9a:23:14:65:25:72:2d: 8c:7b:9a:65:30:64:4c:d1:a9:e4:e4:c8:4f:9a:11:8b:fc:49: 67:98:84:c0:5e:f9:19:e7:9a:e5:e3:61:34:66:66:7c:ef:4f: 53:f2:e6:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36qwvh3Vz+NAEJDsPFCqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUwNjI4MTkwMTM5WhcNMjUwNjI5MTkwMTM5WjAzMTEwLwYDVQQD EyhhNjExYjg2Y2M5MDkyYmI5ZTBkNGU5ODcxOTZkMDFiZDAzMDExM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwdCcM4E6ezavCSQ8DlNK1GW5ycS 213md3aWmCjD4H1W+NFe5EeASjbaBj/KmcgZxw2n73uivxgDfGA5l5V3yVETBpXN oKDnyIavHJSRyefzQx7mj0rU5b6b6aZ+vd92pS83lV3wud3MXsucvrYPXoMVAq6W use4/eR5jrXR65RJUPuP5ZW7Y5N8CqQCgWgRoHk/4s/59qrnCh1vmZtzT+G/xiD/ viy6Lv8hdEoS6FlhoPtGCuSmyff4vIh5CPY7wXmcrO6HCQGDK7Hbmozs+rwDZvDC vciQaz4StHaTEN5STY6PHRUo8j+9NX96JT5OYbuqn744lLPu4TnKygaAKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYRuGzJCSu54NTphxltAb0DARP4MB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWEmr8Xn vcYOxmt1tCz/KmCr1s6F3jg2wlAMotZqc1x62a8aY9Ea5VbOKvJriGp3n2fwyo2J lKwIpwa0NwNw/OeylebUSBlg6BGIJcfoSS0uRZMqHJ/s3v4uBVuT3vGd1yEw67Wu 7aaTLMgY/0/gYhVPIU/oUuZBW2bgri2mR/4S8tIwc+T8kABLAfGZ/uLwAidjUF+m nnM1qG+vD4G5WvvpilPwaL9+u7hOv70hw88rOfRfI2QI0pDcnIRQIUfCbuR9CiTR LVOEgaurYFb5OvGaIxRlJXItjHuaZTBkTNGp5OTIT5oRi/xJZ5iEwF75Geea5eNh NGZmfO9PU/Lm5w== -----END CERTIFICATE-----Generated at Sat Jun 28 22:46:41 2025 by rpki-client