$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: XkVtWpsOYbxexQUZMqXciz2Kaxy7dyi9rISpo/1UxJQ= Subject key identifier: ED:7D:83:EA:7E:69:25:56:93:DE:78:45:3E:04:FE:46:BF:7C:07:04 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A020AE972F6D2BE8D1EBDB7D089EF5A3F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A5A Signing time: Thu 20 Aug 2026 19:38:27 +0000 Manifest this update: Thu 20 Aug 2026 19:38:27 +0000 Manifest next update: Fri 21 Aug 2026 19:38:27 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 2wqqH4KnRfUDLIbUMDKyRXjEWOh69k2F81oo2MkpDLk=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 7: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 8: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 19:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:20:ae:97:2f:6d:2b:e8:d1:eb:db:7d:08:9e:f5:a3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 20 19:38:27 2026 GMT Not After : Aug 21 19:38:27 2026 GMT Subject: CN=ed7d83ea7e69255693de78453e04fe46bf7c0704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:b1:c1:f7:d8:df:4a:c6:ac:26:25:35:d4: 56:ab:c7:39:1e:21:e7:6b:11:15:f2:96:be:c8:64: 44:03:1b:81:7d:0e:c6:50:1a:db:17:6e:8d:8f:cf: 60:5f:2f:81:f8:d8:5e:57:72:04:8c:fd:33:4f:e1: 9a:40:a7:d9:88:d2:a4:db:ca:99:72:04:2e:64:18: 8c:83:f4:bd:85:8a:c3:e7:74:c4:cc:bd:26:be:0d: 90:90:e5:0c:86:49:4f:4b:3b:b0:43:b2:95:22:e0: 97:77:c8:45:ad:b8:bd:96:0e:6c:f3:af:27:c6:24: f2:80:5c:2a:7c:62:c5:67:f8:c8:6a:c8:0e:9a:ca: 29:43:44:09:f6:21:ec:f2:9d:b1:32:c9:c1:18:5d: 81:6d:c2:da:8d:fa:4e:65:f4:cd:05:ca:bd:6e:63: 56:b3:2f:ab:a1:c3:bb:8b:d0:48:b6:af:b3:d4:b9: 57:99:ed:57:7a:0b:2e:bd:9e:47:87:c7:7f:db:08: f3:4b:e8:b8:f6:37:11:c5:0b:57:bf:ec:66:bd:58: 8f:46:fb:64:14:d9:07:a9:64:ed:e7:b9:03:34:d9: 8d:be:3d:14:4a:44:34:1c:d6:c5:2f:2c:1e:f0:9d: 99:68:fa:c5:6a:40:18:59:ef:50:21:3f:32:3e:08: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:83:EA:7E:69:25:56:93:DE:78:45:3E:04:FE:46:BF:7C:07:04 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:35:4b:66:e4:c9:36:ac:f4:3f:6f:6f:2d:42:1a:33:c7:ea: a0:3d:b5:6c:d3:fe:8e:f7:53:e2:99:6f:9b:7f:d9:9c:55:b3: 3b:ee:aa:e1:b8:a8:89:60:34:21:cc:8b:1d:b7:f7:9f:81:19: 04:de:13:31:3c:04:a1:3c:bd:a3:fa:bc:fd:f8:68:29:22:33: c8:16:2f:dc:c3:75:03:f8:1d:ea:f8:fe:d1:4f:ef:86:4c:31: ed:92:bd:1a:04:18:44:51:6d:c6:98:8e:2b:59:6c:59:de:74: 3a:55:26:6f:b3:a7:e2:03:53:86:94:55:75:a5:71:44:b4:99: 92:8d:16:12:ce:2b:77:21:41:6d:ec:a3:88:03:9c:1f:66:d9: 5c:6b:d5:c9:6c:f8:88:0b:af:94:4d:29:df:42:12:7e:94:9a: 88:65:1f:33:65:a5:aa:1e:6f:5b:20:56:be:f9:e5:04:84:0b: 09:4c:cd:29:99:2a:ee:c3:27:f0:6c:cf:d0:07:e1:03:b7:2c: 95:a4:6e:94:ba:0d:54:e9:30:f7:8c:dc:21:7f:b4:50:77:f9: 3b:c0:03:c5:05:fb:4e:63:58:67:da:69:77:b6:91:ed:b5:70: 6e:60:cf:c4:b7:af:4a:03:60:f1:47:d1:a6:13:42:dd:0e:a4: 62:66:2c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAgrpcvbSvo0evbfQie9aP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODIwMTkzODI3WhcNMjYwODIxMTkzODI3WjAzMTEwLwYDVQQD EyhlZDdkODNlYTdlNjkyNTU2OTNkZTc4NDUzZTA0ZmU0NmJmN2MwNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1uxwffY30rGrCYlNdRWq8c5HiHn axEV8pa+yGREAxuBfQ7GUBrbF26Nj89gXy+B+NheV3IEjP0zT+GaQKfZiNKk28qZ cgQuZBiMg/S9hYrD53TEzL0mvg2QkOUMhklPSzuwQ7KVIuCXd8hFrbi9lg5s868n xiTygFwqfGLFZ/jIasgOmsopQ0QJ9iHs8p2xMsnBGF2BbcLajfpOZfTNBcq9bmNW sy+rocO7i9BItq+z1LlXme1XegsuvZ5Hh8d/2wjzS+i49jcRxQtXv+xmvViPRvtk FNkHqWTt57kDNNmNvj0USkQ0HNbFLywe8J2ZaPrFakAYWe9QIT8yPgij6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO19g+p+aSVWk954RT4E/ka/fAcEMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjVLZuTJ Nqz0P29vLUIaM8fqoD21bNP+jvdT4plvm3/ZnFWzO+6q4bioiWA0IcyLHbf3n4EZ BN4TMTwEoTy9o/q8/fhoKSIzyBYv3MN1A/gd6vj+0U/vhkwx7ZK9GgQYRFFtxpiO K1lsWd50OlUmb7On4gNThpRVdaVxRLSZko0WEs4rdyFBbeyjiAOcH2bZXGvVyWz4 iAuvlE0p30ISfpSaiGUfM2Wlqh5vWyBWvvnlBIQLCUzNKZkq7sMn8GzP0AfhA7cs laRulLoNVOkw94zcIX+0UHf5O8ADxQX7TmNYZ9ppd7aR7bVwbmDPxLevSgNg8UfR phNC3Q6kYmYs6A== -----END CERTIFICATE-----Generated at Fri Aug 21 05:12:52 2026 by rpki-client