$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: qIHvQQlweGlvs9mkcBPcmqzkkyxhpN8tDVscT3h4Q50= Subject key identifier: C7:CD:28:99:A8:87:23:18:49:D8:98:4D:DB:85:00:0C:12:6D:66:3A Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A04205D24B09162268ED4138EAD5B7F121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A6C Signing time: Thu 27 Aug 2026 07:01:12 +0000 Manifest this update: Thu 27 Aug 2026 07:01:12 +0000 Manifest next update: Fri 28 Aug 2026 07:01:12 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: KEN_6778skmDEY7gNu3YCezz4t4.roa (hash: BiBuCJMi4yMgx4Ww2BvIGPWYoCad7r7CF2uQBSh9UqA=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: Lx0sxehSkpDKN43w8IDyviwoNUlmsL4rvAYVaAuOCoE=) 6: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:42:05:d2:4b:09:16:22:68:ed:41:38:ea:d5:b7:f1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 27 07:01:12 2026 GMT Not After : Aug 28 07:01:12 2026 GMT Subject: CN=c7cd2899a887231849d8984ddb85000c126d663a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:d2:c0:cd:9a:7d:3a:7d:89:5e:84:d4:2e: 92:9e:a6:85:26:38:af:23:e1:08:aa:ee:00:dd:05: 82:1d:f4:75:33:c9:26:19:c1:ee:b8:2c:b1:5c:ad: ce:ae:f2:f8:8a:00:80:ce:6f:66:5c:32:3c:f9:9d: 08:e0:f9:e8:bc:09:a0:e4:a5:9f:80:80:f8:56:9a: 71:f4:b8:71:27:9e:1b:9a:0c:f7:04:61:df:77:77: d0:62:3e:55:f8:a5:71:04:dd:50:5e:f2:17:ff:80: 73:b2:80:70:6a:5e:a7:44:0b:e0:c9:84:e8:8d:d8: e0:40:a9:e1:d5:36:1a:de:63:32:eb:12:8d:a2:91: a3:dc:6e:a5:f7:ea:8e:d8:46:3a:ac:bd:e5:0c:a7: b4:89:05:68:10:ec:23:3d:32:08:ae:a0:9e:a7:a5: a4:14:81:f0:db:2f:20:da:71:fe:e6:2d:bc:3c:d1: 6e:13:14:1b:08:02:87:86:85:b4:8a:2f:cd:af:05: a5:38:3a:9a:2d:9d:31:57:8e:86:e1:5f:1a:8d:e9: b7:d7:0d:c1:6e:7f:e8:2b:90:b1:1c:b8:c0:8a:d1: d9:cd:c9:61:5e:7b:f0:25:c3:fe:48:ba:63:68:10: 8c:95:02:48:78:de:d3:6f:08:0a:68:22:15:2d:f3: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:28:99:A8:87:23:18:49:D8:98:4D:DB:85:00:0C:12:6D:66:3A X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:6a:42:62:a5:65:19:86:99:6b:2e:d4:d9:86:74:f3:3e: 72:03:a4:1c:af:98:24:c8:08:bd:4c:8d:d0:9d:17:4a:06:be: e7:9a:2f:b9:6f:65:1e:1f:1e:c3:24:84:5c:c3:f3:5e:a6:5f: 06:9a:4b:84:6c:e7:9a:05:de:a5:f6:35:4b:e9:fc:9f:52:7a: e4:d7:9f:d4:45:66:96:d6:64:44:2d:15:8d:fc:a2:74:c8:ca: e5:e3:70:6d:fc:9b:77:b4:e4:1c:81:d8:db:78:bb:0c:19:15: 41:79:94:06:e4:e9:69:21:48:ac:b1:10:ba:10:c1:de:31:43: 48:6c:7a:8b:0d:ff:96:70:79:e2:a3:0f:c4:d8:c0:95:86:76: 91:e4:82:3e:05:c3:8a:4c:6c:a3:7f:9a:43:2f:7b:5d:f7:f7: 6e:d7:b6:dc:9d:fb:da:06:85:7f:aa:26:b8:4b:2c:c7:a9:47: 1a:22:74:1a:c6:79:86:41:ff:d7:76:e7:8d:c1:35:d0:71:91: 0d:a2:9a:0f:8f:19:81:a8:5b:12:02:23:fe:97:f9:fd:4f:3e: df:0a:6e:03:7a:b9:0b:cc:af:62:1e:ca:80:81:92:e5:64:4c: 3c:1f:4d:c7:e3:4c:a3:8f:f9:80:db:ee:3f:56:66:58:a2:40: 52:98:5d:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBCBdJLCRYiaO1BOOrVt/EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODI3MDcwMTEyWhcNMjYwODI4MDcwMTEyWjAzMTEwLwYDVQQD EyhjN2NkMjg5OWE4ODcyMzE4NDlkODk4NGRkYjg1MDAwYzEyNmQ2NjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d7SwM2afTp9iV6E1C6SnqaFJjiv I+EIqu4A3QWCHfR1M8kmGcHuuCyxXK3OrvL4igCAzm9mXDI8+Z0I4PnovAmg5KWf gID4Vppx9LhxJ54bmgz3BGHfd3fQYj5V+KVxBN1QXvIX/4BzsoBwal6nRAvgyYTo jdjgQKnh1TYa3mMy6xKNopGj3G6l9+qO2EY6rL3lDKe0iQVoEOwjPTIIrqCep6Wk FIHw2y8g2nH+5i28PNFuExQbCAKHhoW0ii/NrwWlODqaLZ0xV46G4V8ajem31w3B bn/oK5CxHLjAitHZzclhXnvwJcP+SLpjaBCMlQJIeN7TbwgKaCIVLfMQqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfNKJmohyMYSdiYTduFAAwSbWY6MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegNqQmKl ZRmGmWsu1NmGdPM+cgOkHK+YJMgIvUyN0J0XSga+55ovuW9lHh8ewySEXMPzXqZf BppLhGznmgXepfY1S+n8n1J65Nef1EVmltZkRC0VjfyidMjK5eNwbfybd7TkHIHY 23i7DBkVQXmUBuTpaSFIrLEQuhDB3jFDSGx6iw3/lnB54qMPxNjAlYZ2keSCPgXD ikxso3+aQy97Xff3bte23J372gaFf6omuEssx6lHGiJ0GsZ5hkH/13bnjcE10HGR DaKaD48ZgahbEgIj/pf5/U8+3wpuA3q5C8yvYh7KgIGS5WRMPB9Nx+NMo4/5gNvu P1ZmWKJAUphd4w== -----END CERTIFICATE-----Generated at Thu Aug 27 14:15:52 2026 by rpki-client