$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: HC2NPfZpOpvjW4aoUebLnx9xN3JBP44/EZPLkXho7sQ= Subject key identifier: B0:F4:A5:52:B8:4F:CE:AF:54:5F:7B:09:E3:F6:E6:58:E1:A8:96:78 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019E5FA76A3BC2D586BCB0957CC4DD3FB33A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 196F Signing time: Mon 25 May 2026 15:01:07 +0000 Manifest this update: Mon 25 May 2026 15:01:07 +0000 Manifest next update: Tue 26 May 2026 15:01:07 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: flG8W5lzA9TNUtnSjCVGqHO4hMOEQDSh2xQToYBNozA=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:5f:a7:6a:3b:c2:d5:86:bc:b0:95:7c:c4:dd:3f:b3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: May 25 15:01:07 2026 GMT Not After : May 26 15:01:07 2026 GMT Subject: CN=b0f4a552b84fceaf545f7b09e3f6e658e1a89678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:e9:83:32:a2:4e:5b:93:3e:b1:72:b9:59: 08:66:7b:d7:23:c8:a7:70:3b:a2:01:ee:ef:78:f9: 35:1b:da:56:a0:55:40:f5:50:1c:77:17:46:23:ac: 92:4f:91:01:39:1a:fa:df:95:f1:6a:1d:da:30:58: bb:dd:f6:2f:01:82:ef:94:a2:90:77:1e:9e:02:6f: d3:91:51:84:61:5c:7c:45:e1:4c:66:a7:b4:41:ff: 8d:1e:54:91:59:a7:77:e8:58:19:22:3c:2b:7c:c1: 38:43:c3:36:ad:17:ee:05:35:03:27:f2:0a:15:ad: 64:1b:93:03:f0:e0:cf:f1:03:91:bc:11:e6:92:58: a5:99:a3:fb:cc:f8:64:69:e4:14:b1:01:93:b2:ac: 7d:62:ee:78:7b:16:bb:fa:a0:2e:e2:04:99:51:7d: fe:d7:c1:ce:b8:14:f1:a6:28:20:f3:6b:69:44:a5: ba:56:fc:3f:c0:5d:72:5b:38:70:03:40:78:05:51: 9e:94:4f:42:4d:ee:23:c2:51:3b:ad:2b:11:f7:1e: 39:49:a1:49:c2:3f:22:c9:38:ba:30:99:d1:72:ee: dc:f4:ab:15:16:1d:72:80:5b:df:ad:03:9c:72:18: 6b:a8:fe:24:9a:50:78:48:e6:22:17:5d:e9:71:27: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:A5:52:B8:4F:CE:AF:54:5F:7B:09:E3:F6:E6:58:E1:A8:96:78 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:df:52:47:6e:af:9f:97:c6:de:03:5c:cc:09:c5:87:ae:d1: 91:bd:cd:74:0a:7e:b9:a4:be:70:01:f3:6e:90:cd:94:68:51: aa:f6:fe:40:cf:cf:e9:33:5f:05:a7:8e:b1:33:24:11:60:0d: 50:9b:dd:ad:53:ad:6e:71:85:85:3f:64:3b:e6:9d:68:e8:0b: 11:9f:92:cc:a1:43:dc:6b:e7:24:ce:6b:ad:b0:d1:90:d7:ce: e8:34:f5:ff:04:11:28:e6:7c:4a:e3:5f:7c:69:3d:b6:53:be: 3e:38:45:bf:4b:03:4b:04:2c:00:58:7f:dd:b4:38:f6:7a:c0: c2:3c:aa:17:38:49:11:9a:a8:64:2f:a7:36:b2:04:59:3b:85: 0e:b3:fb:37:4b:09:b2:e7:1a:47:28:8b:ff:13:f5:ff:a8:b8: a6:12:1d:cb:fa:cb:36:3f:47:13:a5:57:c5:7f:bb:cb:49:1b: 39:cb:83:d3:c3:e3:01:75:6e:8d:36:b4:d9:16:45:df:99:11: ec:21:1e:0d:a5:89:c1:e1:33:f6:96:d5:fd:77:8d:47:49:21: 25:dc:e3:8f:b9:20:70:af:4c:0b:8c:3a:65:bc:f8:6f:9a:c5: 96:d9:3a:a5:10:99:0d:76:f9:60:f0:dd:09:26:2b:d9:c3:2b: 0f:d2:5c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5fp2o7wtWGvLCVfMTdP7M6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNTI1MTUwMTA3WhcNMjYwNTI2MTUwMTA3WjAzMTEwLwYDVQQD EyhiMGY0YTU1MmI4NGZjZWFmNTQ1ZjdiMDllM2Y2ZTY1OGUxYTg5Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRnpgzKiTluTPrFyuVkIZnvXI8in cDuiAe7vePk1G9pWoFVA9VAcdxdGI6yST5EBORr635Xxah3aMFi73fYvAYLvlKKQ dx6eAm/TkVGEYVx8ReFMZqe0Qf+NHlSRWad36FgZIjwrfME4Q8M2rRfuBTUDJ/IK Fa1kG5MD8ODP8QORvBHmklilmaP7zPhkaeQUsQGTsqx9Yu54exa7+qAu4gSZUX3+ 18HOuBTxpigg82tpRKW6Vvw/wF1yWzhwA0B4BVGelE9CTe4jwlE7rSsR9x45SaFJ wj8iyTi6MJnRcu7c9KsVFh1ygFvfrQOcchhrqP4kmlB4SOYiF13pcSdlKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD0pVK4T86vVF97CeP25ljhqJZ4MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd9SR26v n5fG3gNczAnFh67Rkb3NdAp+uaS+cAHzbpDNlGhRqvb+QM/P6TNfBaeOsTMkEWAN UJvdrVOtbnGFhT9kO+adaOgLEZ+SzKFD3GvnJM5rrbDRkNfO6DT1/wQRKOZ8SuNf fGk9tlO+PjhFv0sDSwQsAFh/3bQ49nrAwjyqFzhJEZqoZC+nNrIEWTuFDrP7N0sJ sucaRyiL/xP1/6i4phIdy/rLNj9HE6VXxX+7y0kbOcuD08PjAXVujTa02RZF35kR 7CEeDaWJweEz9pbV/XeNR0khJdzjj7kgcK9MC4w6Zbz4b5rFltk6pRCZDXb5YPDd CSYr2cMrD9Jc9Q== -----END CERTIFICATE-----Generated at Mon May 25 23:26:19 2026 by rpki-client