$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: IA3z9AYvGuhyAsqqU98FPPXIsLBMaljcgo12hfwpNxs= Subject key identifier: 60:9A:8F:32:77:DB:AF:5B:C4:75:45:37:E2:3E:0E:A9:07:1C:30:70 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019E99964074AC7180490EB52AB0223612C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 198D Signing time: Fri 05 Jun 2026 21:00:21 +0000 Manifest this update: Fri 05 Jun 2026 21:00:21 +0000 Manifest next update: Sat 06 Jun 2026 21:00:21 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: h9zk1F8CbwJdJVNskcQARFJWtsxQkKJ+q4iyAdZSgzw=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:99:96:40:74:ac:71:80:49:0e:b5:2a:b0:22:36:12:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jun 5 21:00:21 2026 GMT Not After : Jun 6 21:00:21 2026 GMT Subject: CN=609a8f3277dbaf5bc4754537e23e0ea9071c3070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:d2:0c:e7:a3:1d:48:f7:3e:23:1f:1c:22: d1:fb:9c:b0:c1:94:6b:38:82:92:ff:f5:24:c2:39: 5f:6b:30:2f:44:b9:e9:e9:7a:ae:6e:1d:da:1f:38: c6:aa:76:07:9c:5c:58:6e:7b:37:cc:80:0b:55:81: d5:38:ed:0d:80:4d:b6:43:5c:b6:de:11:3a:90:ab: d1:36:f9:c3:87:b4:23:e1:d0:d8:42:8e:48:a5:df: 21:c0:ef:27:46:3e:32:72:95:fd:9d:18:87:64:4c: 8a:47:dc:fa:02:43:ef:d1:36:2a:04:14:d3:72:54: f3:c5:3a:31:71:9a:a0:9d:7e:e1:ea:0b:52:71:00: 9e:bd:9d:74:5f:ff:e9:74:86:9e:00:23:7b:25:b0: 06:38:d9:f4:3f:50:ec:d3:ca:ef:70:04:8c:e5:c7: 73:2c:6f:0f:c2:bb:91:98:81:9d:08:64:16:f4:3b: 5c:cf:02:24:e0:e3:0c:07:e8:a1:e0:05:b1:f1:0e: 7d:65:5e:de:05:56:93:cb:8c:84:83:25:ad:b6:89: 39:b5:fe:cf:2e:04:a0:e2:54:56:b5:4d:25:5c:04: df:15:08:d4:12:fd:d3:e3:37:84:55:f4:00:57:97: 16:5d:cd:a6:e0:b9:83:38:56:56:c8:b5:81:29:79: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9A:8F:32:77:DB:AF:5B:C4:75:45:37:E2:3E:0E:A9:07:1C:30:70 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6b:e7:4c:6b:b4:21:ac:88:ad:15:5b:6e:7f:77:6a:1a:4b: c7:ce:3b:e9:54:a8:89:ab:29:a6:41:1c:fa:9a:f6:3d:da:19: 8d:73:c4:a1:87:00:89:c1:45:71:e8:92:83:6d:56:62:54:a0: 2b:c5:34:99:5c:6b:b9:d6:9a:68:f9:fd:bf:0a:88:38:7c:51: 13:56:a3:f7:d0:3b:93:86:35:c0:60:ce:60:e7:f5:0a:18:7a: 16:56:75:e8:51:9f:02:3c:35:b9:7d:b1:dd:c5:d3:a3:07:2a: 6a:c1:0e:ff:65:26:b7:7d:e0:f9:19:30:d3:84:32:fa:1b:1d: 97:f5:93:a8:87:5f:9f:09:e9:d0:de:a6:ea:ed:fc:72:9a:97: 80:0e:75:1b:5a:48:d6:84:e1:b9:17:14:f2:11:9e:c8:0d:a3: 8d:ae:a0:eb:c9:8e:1f:00:68:2c:a6:df:73:47:96:45:9a:99: 46:e2:c8:47:be:8b:cb:4a:42:8f:4e:cc:c2:5b:a2:2a:3f:83: 32:01:60:35:8e:db:b4:ec:ed:88:ae:e0:4b:83:f9:f1:61:12: 0e:cc:b8:00:fd:9b:db:3a:e0:60:3c:73:4f:e8:87:cf:c6:8b: 39:7f:a9:5b:60:47:19:af:33:51:ca:9f:61:b2:14:48:c5:44: 98:9d:ef:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6ZlkB0rHGASQ61KrAiNhLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNjA1MjEwMDIxWhcNMjYwNjA2MjEwMDIxWjAzMTEwLwYDVQQD Eyg2MDlhOGYzMjc3ZGJhZjViYzQ3NTQ1MzdlMjNlMGVhOTA3MWMzMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEXSDOejHUj3PiMfHCLR+5ywwZRr OIKS//UkwjlfazAvRLnp6Xqubh3aHzjGqnYHnFxYbns3zIALVYHVOO0NgE22Q1y2 3hE6kKvRNvnDh7Qj4dDYQo5Ipd8hwO8nRj4ycpX9nRiHZEyKR9z6AkPv0TYqBBTT clTzxToxcZqgnX7h6gtScQCevZ10X//pdIaeACN7JbAGONn0P1Ds08rvcASM5cdz LG8PwruRmIGdCGQW9DtczwIk4OMMB+ih4AWx8Q59ZV7eBVaTy4yEgyWttok5tf7P LgSg4lRWtU0lXATfFQjUEv3T4zeEVfQAV5cWXc2m4LmDOFZWyLWBKXnEuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCajzJ3269bxHVFN+I+DqkHHDBwMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWvnTGu0 IayIrRVbbn93ahpLx8476VSoiasppkEc+pr2PdoZjXPEoYcAicFFceiSg21WYlSg K8U0mVxrudaaaPn9vwqIOHxRE1aj99A7k4Y1wGDOYOf1Chh6FlZ16FGfAjw1uX2x 3cXTowcqasEO/2Umt33g+Rkw04Qy+hsdl/WTqIdfnwnp0N6m6u38cpqXgA51G1pI 1oThuRcU8hGeyA2jja6g68mOHwBoLKbfc0eWRZqZRuLIR76Ly0pCj07MwluiKj+D MgFgNY7btOztiK7gS4P58WESDsy4AP2b2zrgYDxzT+iHz8aLOX+pW2BHGa8zUcqf YbIUSMVEmJ3vsA== -----END CERTIFICATE-----Generated at Sat Jun 6 00:20:33 2026 by rpki-client