$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: QNAoWwXK86Sgbb0KCzsH0bkMaQ72HvhEXekDbfV4bvs= Subject key identifier: A1:69:6A:85:22:65:15:48:7E:FE:D5:12:5F:E3:F1:31:A1:7A:BB:80 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019FF8DAC20C16DD8934E384B2D3AF74F79D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 1A0B Signing time: Thu 13 Aug 2026 02:01:53 +0000 Manifest this update: Thu 13 Aug 2026 02:01:53 +0000 Manifest next update: Fri 14 Aug 2026 02:01:53 +0000 Files and hashes: 1: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 2: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 3: 4OwitvkmkhKV2LtZpk1QLZTpl4E.asa (hash: aGnCO3oIRNu7nbl3yxascrT5ogI+38YhsT0IaT24+Ps=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: 6IqI9gfABI1V0avL-WdqDQ9gNGk.asa (hash: x/3Qd9UB9tmsdebQBpFmyTkyhk8Goo0sm80nqeO+7ZQ=) 6: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: IIZ_mGH3X6355DF3JRICMRfOqTQ.asa (hash: TxemWnQodUkymHC8e+RcAhRi9Z78sNJiYQ7hSaXm0gs=) 10: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: ZVrUOXJL38Hk5iGrZMlHS+gY10R6cQKFb8Qbrkj0C7o=) 11: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 12: prkwm3Nwi4i7nBXudHI4KuKfmHI.asa (hash: krdyRxkzH8bZP80JYgy+3OWYOrwBKzT/IXHhrb1NwSs=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f8:da:c2:0c:16:dd:89:34:e3:84:b2:d3:af:74:f7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Aug 13 02:01:53 2026 GMT Not After : Aug 14 02:01:53 2026 GMT Subject: CN=a1696a85226515487efed5125fe3f131a17abb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:bc:30:49:70:79:30:0d:aa:72:a7:86:b0: c3:33:09:53:65:be:eb:3e:a1:7e:95:e0:18:83:2e: 39:55:2a:a5:69:ff:52:30:c2:9c:7e:dd:53:7c:d2: 52:ca:9d:78:6c:bc:3e:62:cb:f5:2b:bf:cf:6b:f9: ca:c0:8b:dd:3f:3e:8e:03:37:87:fb:5a:6a:aa:df: 0b:d2:b7:4e:00:5b:e3:9c:8f:ea:76:6f:6f:0b:26: e3:ca:7f:f6:17:64:8a:23:5b:c3:a0:9f:a7:ad:ab: e3:43:0e:91:d1:11:a2:ab:ff:34:9d:96:d7:6a:c4: d1:f5:b1:46:2f:c6:98:aa:2c:f7:cc:46:97:af:a6: 56:ec:e1:d5:04:fc:21:eb:5d:ac:9b:0c:e7:b5:47: 49:7f:c9:6d:76:6c:e1:5b:b6:5e:07:21:c3:96:44: 8b:1a:1c:00:4a:d9:d5:fb:9a:96:d6:07:71:e1:45: 00:80:3e:0a:31:ed:6a:b8:92:cc:b5:34:59:f9:32: 38:9d:21:19:42:6f:7b:55:3a:36:5f:f2:51:b5:8a: 4a:66:07:e5:4c:46:4d:59:c2:19:38:65:d2:c4:0f: 2d:3a:25:89:8f:dc:87:66:76:6d:8e:94:00:ff:a6: 65:b6:a4:ad:06:e0:56:4e:35:a4:85:fc:e4:c3:4a: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:6A:85:22:65:15:48:7E:FE:D5:12:5F:E3:F1:31:A1:7A:BB:80 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c4:30:67:4a:4f:b0:c0:63:6e:aa:52:79:35:01:d8:3f:26: b4:8f:4d:9e:15:47:24:c0:3b:2e:50:1c:8d:15:be:d6:71:a9: 4e:65:76:e1:5f:a5:75:17:c2:b4:fc:00:57:41:ac:87:66:1f: bc:1b:e7:bf:02:fa:01:0b:fa:d1:f8:1a:89:65:c8:db:67:c2: c5:d1:37:39:aa:1a:c5:ef:1e:bc:f7:10:3a:f8:c6:62:cb:51: ed:ed:51:d1:75:d8:90:86:82:fa:ed:9e:98:9b:25:7e:aa:fb: 91:e4:67:ec:5b:62:89:86:7c:31:a7:25:e6:6d:b8:98:01:16: 9b:08:bf:c8:49:f0:ab:06:a5:5f:63:08:86:81:98:b8:3d:fa: 63:9f:53:41:77:e4:ed:d9:26:68:9a:5e:6c:23:be:8c:01:40: ec:e0:2a:16:42:37:f6:f8:a7:76:7e:b5:e8:8f:ff:63:c3:ff: 49:5e:7b:5b:ed:ce:37:7b:5d:2f:a0:39:0f:45:7d:f0:b2:e1: 68:3b:b1:9c:07:d3:b0:c8:dc:e9:c4:36:53:6a:23:1c:79:e8: 7b:b0:7a:12:a9:be:c1:30:a5:50:48:e2:1f:d3:e4:2d:1d:00: 27:8a:19:36:77:e6:6a:a0:8c:06:95:11:9b:72:67:3e:3c:10: 9d:15:c3:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/42sIMFt2JNOOEstOvdPedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwODEzMDIwMTUzWhcNMjYwODE0MDIwMTUzWjAzMTEwLwYDVQQD EyhhMTY5NmE4NTIyNjUxNTQ4N2VmZWQ1MTI1ZmUzZjEzMWExN2FiYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6W8MElweTANqnKnhrDDMwlTZb7r PqF+leAYgy45VSqlaf9SMMKcft1TfNJSyp14bLw+Ysv1K7/Pa/nKwIvdPz6OAzeH +1pqqt8L0rdOAFvjnI/qdm9vCybjyn/2F2SKI1vDoJ+nravjQw6R0RGiq/80nZbX asTR9bFGL8aYqiz3zEaXr6ZW7OHVBPwh612smwzntUdJf8ltdmzhW7ZeByHDlkSL GhwAStnV+5qW1gdx4UUAgD4KMe1quJLMtTRZ+TI4nSEZQm97VTo2X/JRtYpKZgfl TEZNWcIZOGXSxA8tOiWJj9yHZnZtjpQA/6ZltqStBuBWTjWkhfzkw0qL1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFpaoUiZRVIfv7VEl/j8TGheruAMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsQwZ0pP sMBjbqpSeTUB2D8mtI9NnhVHJMA7LlAcjRW+1nGpTmV24V+ldRfCtPwAV0Gsh2Yf vBvnvwL6AQv60fgaiWXI22fCxdE3Oaoaxe8evPcQOvjGYstR7e1R0XXYkIaC+u2e mJslfqr7keRn7FtiiYZ8Macl5m24mAEWmwi/yEnwqwalX2MIhoGYuD36Y59TQXfk 7dkmaJpebCO+jAFA7OAqFkI39vindn616I//Y8P/SV57W+3ON3tdL6A5D0V98LLh aDuxnAfTsMjc6cQ2U2ojHHnoe7B6Eqm+wTClUEjiH9PkLR0AJ4oZNnfmaqCMBpUR m3JnPjwQnRXDWg== -----END CERTIFICATE-----Generated at Thu Aug 13 07:50:09 2026 by rpki-client