$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: A8jeqYsns/aqmYUqfvtj9/b2sBhy71cEdEHnU+X3KQE= Subject key identifier: E9:A1:E6:61:CD:4A:FD:27:C3:78:1B:93:1B:C0:E1:16:F4:20:E8:36 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FBCC585B590333018D1DA1E3412C3BAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A25 Signing time: Sat 01 Aug 2026 10:01:29 +0000 Manifest this update: Sat 01 Aug 2026 10:01:29 +0000 Manifest next update: Sun 02 Aug 2026 10:01:29 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: /v2/aB0RPWYy+4JAVUX/BT3gpshUP+FpP7CWFa30QPw=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Aug 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:bc:c5:85:b5:90:33:30:18:d1:da:1e:34:12:c3:ba:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 1 10:01:29 2026 GMT Not After : Aug 2 10:01:29 2026 GMT Subject: CN=e9a1e661cd4afd27c3781b931bc0e116f420e836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:7f:61:88:8c:48:ec:ef:bc:35:77:fb:1b: 3f:5b:fa:dd:9a:cf:43:64:33:3a:11:e5:c4:f8:86: 59:6e:75:2d:fb:d8:31:87:1c:45:59:7a:69:c7:0d: 5a:7c:60:4d:b0:64:1d:ce:e3:b8:05:12:ee:21:23: 32:8f:a9:33:06:6a:54:10:10:66:5d:19:bc:c1:b5: e7:d8:c8:5e:30:95:61:6b:5d:e1:23:e6:36:a7:89: 17:10:5d:2c:5a:e1:1d:79:e5:cb:ed:a1:97:82:3c: 37:e1:38:08:f0:ee:49:51:6d:b7:98:5c:b1:65:03: 42:41:08:94:49:b1:69:0b:b8:e0:88:e2:a5:20:2f: bd:77:57:b7:fe:2b:7d:f7:2c:d7:4d:32:9c:0b:62: 2b:9a:62:1a:74:54:fc:a8:ba:aa:c7:37:7e:bb:b7: ca:ad:78:de:0a:b4:be:37:eb:c6:40:a5:e6:6f:95: 77:35:dc:15:b7:3b:5f:f9:c8:15:90:8a:8c:b0:4a: 00:49:31:e5:d0:91:e8:08:f4:50:79:88:d1:81:87: e7:a6:3c:b6:36:c0:0c:dd:f8:01:fd:d7:b3:e9:ea: d6:7b:e6:23:9d:a4:14:38:bb:72:96:9f:bc:d3:1d: cc:09:5f:eb:ad:3b:b3:d9:b2:2f:82:83:af:0b:58: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A1:E6:61:CD:4A:FD:27:C3:78:1B:93:1B:C0:E1:16:F4:20:E8:36 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:55:10:30:91:a3:64:aa:21:14:34:59:6c:ee:24:14:2a:75: 18:3c:67:13:f0:b8:7a:4e:86:03:cd:dc:55:1b:57:c2:1e:ae: b0:36:72:ff:f3:a7:df:e1:67:a8:38:51:8b:54:72:84:bb:8d: 18:e0:72:74:b4:db:47:b2:a5:36:63:6d:03:25:bd:1b:a5:a3: d6:be:99:31:b7:38:40:09:2a:70:65:43:6f:6c:b1:be:17:86: 97:7d:ff:8c:56:ad:19:b1:53:85:2a:9e:08:ce:6a:70:d9:a1: 69:bf:04:94:3d:3d:22:7c:ca:53:ff:d5:8f:35:1a:6e:18:e9: 44:26:6a:31:c7:26:6c:73:c3:bd:25:e0:b4:1a:63:15:c1:78: e6:c6:9b:46:f4:74:5e:28:f1:29:48:ee:14:58:6b:cb:70:65: 03:b4:76:31:8e:7d:df:ad:9b:f3:17:e2:10:4a:b6:7a:54:6e: ee:cd:8a:17:7d:d1:e4:04:42:c7:33:1c:f3:23:45:b0:69:ee: 20:5c:f9:03:64:92:a3:1a:23:f1:c7:e0:72:2c:25:bf:50:7b: 07:1e:8d:80:db:75:69:2b:59:8f:7c:57:74:36:fa:7f:13:6c: f7:19:7f:f1:99:bc:66:2a:9a:2a:ac:9d:5f:97:0f:68:93:57: ae:9e:22:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+8xYW1kDMwGNHaHjQSw7rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODAxMTAwMTI5WhcNMjYwODAyMTAwMTI5WjAzMTEwLwYDVQQD EyhlOWExZTY2MWNkNGFmZDI3YzM3ODFiOTMxYmMwZTExNmY0MjBlODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSF/YYiMSOzvvDV3+xs/W/rdms9D ZDM6EeXE+IZZbnUt+9gxhxxFWXppxw1afGBNsGQdzuO4BRLuISMyj6kzBmpUEBBm XRm8wbXn2MheMJVha13hI+Y2p4kXEF0sWuEdeeXL7aGXgjw34TgI8O5JUW23mFyx ZQNCQQiUSbFpC7jgiOKlIC+9d1e3/it99yzXTTKcC2IrmmIadFT8qLqqxzd+u7fK rXjeCrS+N+vGQKXmb5V3NdwVtztf+cgVkIqMsEoASTHl0JHoCPRQeYjRgYfnpjy2 NsAM3fgB/dez6erWe+YjnaQUOLtylp+80x3MCV/rrTuz2bIvgoOvC1iXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmh5mHNSv0nw3gbkxvA4Rb0IOg2MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFUQMJGj ZKohFDRZbO4kFCp1GDxnE/C4ek6GA83cVRtXwh6usDZy//On3+FnqDhRi1RyhLuN GOBydLTbR7KlNmNtAyW9G6Wj1r6ZMbc4QAkqcGVDb2yxvheGl33/jFatGbFThSqe CM5qcNmhab8ElD09InzKU//VjzUabhjpRCZqMccmbHPDvSXgtBpjFcF45sabRvR0 XijxKUjuFFhry3BlA7R2MY59362b8xfiEEq2elRu7s2KF33R5ARCxzMc8yNFsGnu IFz5A2SSoxoj8cfgciwlv1B7Bx6NgNt1aStZj3xXdDb6fxNs9xl/8Zm8ZiqaKqyd X5cPaJNXrp4iRg== -----END CERTIFICATE-----Generated at Sat Aug 1 14:53:13 2026 by rpki-client