$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: skFZ9TIS7CWh1WCQtYS2+xJJRUKN5nq0RuCoNXUi6Aw= Subject key identifier: 33:A2:48:DB:D4:B1:BD:94:44:F4:0B:53:59:80:D9:80:27:E3:95:11 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A085D46FD3A2E94C4A194C552E5147657B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A92 Signing time: Wed 09 Sep 2026 11:01:26 +0000 Manifest this update: Wed 09 Sep 2026 11:01:26 +0000 Manifest next update: Thu 10 Sep 2026 11:01:26 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: XvjIi0JPZiwjU0XgVhN8ovyPb5D0iiH+3orVF7Q1uoo=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=) 12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:85:d4:6f:d3:a2:e9:4c:4a:19:4c:55:2e:51:47:65:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 9 11:01:26 2026 GMT Not After : Sep 10 11:01:26 2026 GMT Subject: CN=33a248dbd4b1bd9444f40b535980d98027e39511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:05:9b:30:c5:3f:41:71:8f:71:8d:da:06: fd:4d:8b:14:d0:3c:3b:7e:9d:01:25:d3:1c:7d:e8: 7b:f8:83:10:0e:a0:1b:e9:35:de:5c:f1:d3:ba:a7: 2e:c9:e4:cf:ca:07:a6:af:8f:9b:5f:3d:55:8a:b3: ac:99:41:35:fc:1b:64:a9:e0:4c:13:0d:34:1a:5f: 42:c2:91:58:9f:48:90:4a:20:59:84:36:b5:0e:fc: ba:2b:e9:40:70:5f:15:93:e9:64:46:25:69:54:4b: 94:8d:e2:7e:cd:ab:b7:5b:fa:34:e5:57:75:8f:75: c2:0c:be:bf:12:1b:22:6a:f1:cc:5e:8d:d2:90:0a: 4e:b0:1f:61:21:6d:f4:eb:2c:e1:a0:65:e2:11:f7: ee:62:a7:17:4a:08:3c:5e:3b:89:65:f0:7f:eb:3d: 7a:43:a9:af:6c:33:6a:e1:b4:fb:0a:0f:ba:60:b3: 20:d0:cb:50:91:43:7b:05:18:ad:57:02:17:db:24: 64:e8:61:c0:05:fd:d1:63:99:bd:2e:1f:2d:54:c5: 01:a6:e6:4b:82:1c:1c:df:27:a3:b2:2b:8f:c9:6f: 05:66:3c:a2:65:e7:5c:48:f7:07:84:d4:5a:6d:bf: f5:28:f2:74:b8:f8:e5:5d:36:07:1f:76:56:37:64: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A2:48:DB:D4:B1:BD:94:44:F4:0B:53:59:80:D9:80:27:E3:95:11 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d8:c2:e8:98:80:75:23:eb:bb:3d:2b:f6:89:f8:ce:0d:05: 4a:05:0c:64:89:7c:db:c0:85:ac:a6:11:22:ab:9e:3b:1f:9d: e7:ff:8f:c4:0e:37:2b:51:89:7f:99:c6:46:24:a5:6c:9e:8a: 5a:78:f1:e9:fa:ce:65:9a:4f:ff:99:19:44:e4:36:35:cf:3a: fb:34:ca:77:88:85:c7:91:ee:f8:b6:37:81:ec:4f:72:ad:b3: a6:4f:76:c0:cd:83:38:b7:ad:97:8d:e2:9b:f4:1b:98:b6:d9: 28:4c:86:5f:e0:f8:01:99:22:fc:f0:09:a4:8b:a2:0e:50:4d: 49:ef:b7:e1:52:2e:94:c4:7b:7d:74:2f:af:c5:b8:8a:1a:83: d2:ac:fd:cc:d3:ea:21:0c:a5:82:8a:4d:89:1e:50:87:f1:08: 56:82:10:4d:6c:cc:5a:3a:fd:02:7c:2b:52:9c:53:5e:62:00: 04:b4:09:97:da:f5:a5:e0:b9:23:10:6c:7c:33:19:ae:1f:d9: 0d:f0:1c:a9:dc:ed:c9:50:0c:49:f2:b4:73:5c:55:06:9c:cf: b5:45:8a:86:3c:ac:78:c7:c2:71:b8:b3:4d:ed:2b:3b:a5:0b: 1d:82:ca:5b:46:65:00:cd:64:7c:38:bb:e4:16:b8:75:0d:c7: 35:f8:53:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCF1G/ToulMShlMVS5RR2V7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTA5MTEwMTI2WhcNMjYwOTEwMTEwMTI2WjAzMTEwLwYDVQQD EygzM2EyNDhkYmQ0YjFiZDk0NDRmNDBiNTM1OTgwZDk4MDI3ZTM5NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb0FmzDFP0Fxj3GN2gb9TYsU0Dw7 fp0BJdMcfeh7+IMQDqAb6TXeXPHTuqcuyeTPygemr4+bXz1VirOsmUE1/BtkqeBM Ew00Gl9CwpFYn0iQSiBZhDa1Dvy6K+lAcF8Vk+lkRiVpVEuUjeJ+zau3W/o05Vd1 j3XCDL6/EhsiavHMXo3SkApOsB9hIW306yzhoGXiEffuYqcXSgg8XjuJZfB/6z16 Q6mvbDNq4bT7Cg+6YLMg0MtQkUN7BRitVwIX2yRk6GHABf3RY5m9Lh8tVMUBpuZL ghwc3yejsiuPyW8FZjyiZedcSPcHhNRabb/1KPJ0uPjlXTYHH3ZWN2ToZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOiSNvUsb2URPQLU1mA2YAn45URMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9jC6JiA dSPruz0r9on4zg0FSgUMZIl828CFrKYRIqueOx+d5/+PxA43K1GJf5nGRiSlbJ6K Wnjx6frOZZpP/5kZROQ2Nc86+zTKd4iFx5Hu+LY3gexPcq2zpk92wM2DOLetl43i m/QbmLbZKEyGX+D4AZki/PAJpIuiDlBNSe+34VIulMR7fXQvr8W4ihqD0qz9zNPq IQylgopNiR5Qh/EIVoIQTWzMWjr9AnwrUpxTXmIABLQJl9r1peC5IxBsfDMZrh/Z DfAcqdztyVAMSfK0c1xVBpzPtUWKhjyseMfCcbizTe0rO6ULHYLKW0ZlAM1kfDi7 5Ba4dQ3HNfhTzg== -----END CERTIFICATE-----Generated at Wed Sep 9 19:42:11 2026 by rpki-client