$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: W2v5kXvWx9Me6u5kHmAuEPnqmaaqW475kOjJ+GhFtnk= Subject key identifier: 51:77:8F:80:17:6C:C6:9C:AD:8A:D1:CC:78:3E:7E:DD:3C:DE:8F:02 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019EF94A812FFD2DB20FD3CEC672F70DC473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 1986 Signing time: Wed 24 Jun 2026 11:01:09 +0000 Manifest this update: Wed 24 Jun 2026 11:01:09 +0000 Manifest next update: Thu 25 Jun 2026 11:01:09 +0000 Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=) 2: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=) 3: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=) 4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=) 5: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=) 6: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=) 7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=) 8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=) 9: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: xGSPzK6SzB7gRQcsJzm+e5+SyJDKW0CKfOR55yajCio=) 10: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=) 11: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=) 12: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=) 13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:f9:4a:81:2f:fd:2d:b2:0f:d3:ce:c6:72:f7:0d:c4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Jun 24 11:01:09 2026 GMT Not After : Jun 25 11:01:09 2026 GMT Subject: CN=51778f80176cc69cad8ad1cc783e7edd3cde8f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:84:c9:6e:0b:e7:d8:1b:86:99:9c:92:8f: ea:86:4a:6d:21:cd:f2:ce:76:53:24:c5:21:58:3d: 02:c9:f7:2f:32:c6:09:55:84:3b:72:d0:62:13:74: 49:a3:a0:d3:52:20:bb:75:e1:4f:9f:4e:b9:34:1d: fd:74:4f:7b:e3:34:44:1b:76:85:57:78:ec:75:ea: e3:13:ae:f6:3c:92:08:fc:1c:f4:e1:7b:7c:61:3f: 15:b0:8a:f3:fd:04:7b:14:ad:40:20:00:05:48:38: 2d:e6:85:b5:3f:1b:70:76:89:6c:72:ad:5c:66:22: c3:b3:f9:1c:58:ec:d1:60:f4:ca:4a:ee:44:c3:e3: f7:e4:2b:78:ac:12:e3:d2:c6:a3:b5:49:11:e7:c1: 97:8e:0a:47:86:93:72:33:a9:de:c4:d8:6a:80:f3: 0f:e8:d4:a1:86:a6:fd:99:dd:14:96:ec:f5:37:24: db:15:ef:25:2b:74:0f:dd:21:d0:90:df:7c:d3:bf: 71:51:cc:97:74:2c:73:4c:2c:26:8b:9b:d6:f0:72: ec:4d:8c:e0:26:a0:37:8b:a5:ba:c5:89:62:2a:34: a3:b5:e7:82:ba:20:fe:28:ee:5c:5d:bc:b6:a9:30: 61:03:b9:10:85:ec:53:36:65:5d:85:ef:86:15:a9: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:77:8F:80:17:6C:C6:9C:AD:8A:D1:CC:78:3E:7E:DD:3C:DE:8F:02 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:47:21:c5:3c:e4:f0:94:99:54:24:d1:5e:64:ce:58:a5:da: 21:f5:e0:b2:67:82:09:be:d6:38:a3:96:7a:09:a5:14:ed:46: 4b:24:2c:3b:f5:f3:26:04:47:1d:82:ce:49:66:f9:8b:b4:fb: d9:5e:74:0e:b9:0a:e2:62:f1:0b:51:6b:49:47:94:7b:db:ba: eb:32:c4:23:15:c2:47:a6:8e:69:f6:93:45:07:cd:a4:91:1c: 6a:f2:10:8e:1c:90:26:ac:01:ac:7b:4e:9c:cb:c9:66:0e:a8: 41:70:91:02:ed:f3:fb:ee:6d:8e:6b:63:f7:df:03:3b:91:e5: 0d:64:3b:cb:ac:bf:86:80:22:18:15:4c:1e:1b:bf:8e:e3:e2: 51:7b:9c:f7:31:45:44:d3:06:57:51:7e:27:70:ea:c9:d5:95: 5e:a5:39:76:06:db:a3:b7:99:e6:98:28:37:aa:d5:c8:08:7b: 41:be:24:e9:12:a3:e6:81:2b:53:31:34:79:3d:43:6a:5d:e6: 6a:80:c7:ec:24:ba:a4:cd:8e:b8:3b:8d:d3:d7:e1:a6:68:9e: e7:7f:54:76:dd:6a:15:3a:81:89:b2:c6:6a:bd:43:f7:8b:94: 98:70:c9:88:29:9f:aa:8b:76:91:99:3d:de:20:1d:ed:b6:03: d5:ae:e6:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ75SoEv/S2yD9POxnL3DcRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwNjI0MTEwMTA5WhcNMjYwNjI1MTEwMTA5WjAzMTEwLwYDVQQD Eyg1MTc3OGY4MDE3NmNjNjljYWQ4YWQxY2M3ODNlN2VkZDNjZGU4ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWqEyW4L59gbhpmcko/qhkptIc3y znZTJMUhWD0CyfcvMsYJVYQ7ctBiE3RJo6DTUiC7deFPn065NB39dE974zREG3aF V3jsderjE672PJII/Bz04Xt8YT8VsIrz/QR7FK1AIAAFSDgt5oW1Pxtwdolscq1c ZiLDs/kcWOzRYPTKSu5Ew+P35Ct4rBLj0sajtUkR58GXjgpHhpNyM6nexNhqgPMP 6NShhqb9md0Uluz1NyTbFe8lK3QP3SHQkN98079xUcyXdCxzTCwmi5vW8HLsTYzg JqA3i6W6xYliKjSjteeCuiD+KO5cXby2qTBhA7kQhexTNmVdhe+GFalb3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFF3j4AXbMacrYrRzHg+ft083o8CMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0chxTzk 8JSZVCTRXmTOWKXaIfXgsmeCCb7WOKOWegmlFO1GSyQsO/XzJgRHHYLOSWb5i7T7 2V50DrkK4mLxC1FrSUeUe9u66zLEIxXCR6aOafaTRQfNpJEcavIQjhyQJqwBrHtO nMvJZg6oQXCRAu3z++5tjmtj998DO5HlDWQ7y6y/hoAiGBVMHhu/juPiUXuc9zFF RNMGV1F+J3DqydWVXqU5dgbbo7eZ5pgoN6rVyAh7Qb4k6RKj5oErUzE0eT1Dal3m aoDH7CS6pM2OuDuN09fhpmie539Udt1qFTqBibLGar1D94uUmHDJiCmfqot2kZk9 3iAd7bYD1a7mDw== -----END CERTIFICATE-----Generated at Wed Jun 24 18:04:00 2026 by rpki-client