$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: I8TDDwJnZPSmzc5P1MaiQaNiPNT9jgGeDWpxROWWWdI= Subject key identifier: A7:96:76:5B:F8:B9:F8:CD:7A:C8:22:BF:CD:78:85:B8:28:83:A5:12 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019F32272B374F45886B6274334889976DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 19DC Signing time: Sun 05 Jul 2026 12:00:55 +0000 Manifest this update: Sun 05 Jul 2026 12:00:55 +0000 Manifest next update: Mon 06 Jul 2026 12:00:55 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: ZUPjolnWQAm3pzYcye1SxNsBavgX8xST34DtigSYNjE=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 06 Jul 2026 07:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:32:27:2b:37:4f:45:88:6b:62:74:33:48:89:97:6d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jul 5 12:00:55 2026 GMT Not After : Jul 6 12:00:55 2026 GMT Subject: CN=a796765bf8b9f8cd7ac822bfcd7885b82883a512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:9d:53:dc:28:af:db:28:2c:e7:c7:74:08: 55:e5:71:5e:b3:93:c1:5d:35:07:70:43:f9:3f:ac: 9b:4e:1b:0a:9d:cc:ac:07:3b:46:86:82:cb:2a:2c: 66:0e:b9:e9:bf:10:cb:44:37:a3:70:ac:ef:f7:c2: 7a:04:dd:87:3b:1b:ee:8e:47:e9:63:cb:11:ee:45: 36:fe:e6:3c:24:76:2e:ca:8a:c3:57:ee:2d:92:71: 96:20:cf:68:af:b3:49:c1:22:89:b0:ff:4c:32:74: 83:d5:f3:b2:da:86:70:dd:67:ce:74:78:8c:2e:75: d9:6e:28:8a:5d:87:21:82:56:32:ea:2b:80:5a:38: 5c:68:6c:76:a2:0c:fa:fe:2b:19:51:2e:1b:b5:48: 71:6f:99:5e:29:4d:90:32:55:53:a8:96:12:b5:76: 4b:87:3f:54:e8:cd:9d:49:0b:bd:f5:4b:b8:b7:98: 76:cc:77:d3:03:27:68:58:14:e9:e7:66:4b:8d:76: 5e:be:2b:37:8d:86:b6:3c:41:5c:60:3f:a6:e6:15: 1e:30:89:92:65:fa:65:c7:1f:77:1e:fb:47:2c:f0: 31:2c:07:0c:a1:c1:3b:91:bc:03:ae:cd:83:9f:6e: 25:84:b9:e7:de:51:76:33:61:ca:30:a3:cd:db:5c: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:96:76:5B:F8:B9:F8:CD:7A:C8:22:BF:CD:78:85:B8:28:83:A5:12 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:df:d3:6c:7a:40:d8:d0:bd:0e:6e:4d:3c:76:3e:0c:46:3b: 3a:ea:ee:20:8d:2d:68:f4:d6:22:82:12:db:25:de:70:6e:be: 43:21:d5:99:3c:5a:84:89:ea:4c:d0:08:bf:c9:57:9a:a0:71: 11:20:36:b0:c1:54:50:b6:c9:32:db:f8:ac:40:82:3e:03:f9: 34:03:ff:ab:ce:ac:c5:82:02:32:d1:df:7a:e9:75:2f:32:f7: e2:b4:1f:2b:fe:3c:eb:20:c3:8e:0d:a5:1f:0d:ac:bc:2e:77: 7b:12:77:69:fc:75:f7:ee:c4:d5:ba:1f:45:e8:b1:19:0f:bf: ba:4b:cc:c2:e2:1c:93:8d:4c:cc:71:fe:b9:11:52:b0:e1:ea: 8c:56:5e:e0:1d:11:68:5b:17:39:cb:3e:b3:f6:dc:1f:a0:da: f8:b8:af:69:3e:c9:da:e6:dd:f7:f1:bb:6c:43:8e:2f:e8:9d: e3:9b:5f:22:6b:f2:37:9f:ac:d5:71:fc:43:a9:4e:52:e2:58: 90:9f:27:1a:51:51:a4:d1:60:41:f8:b7:c2:a7:d7:0e:5c:54: 06:e2:c7:02:1d:d1:45:48:6b:e6:8e:f4:57:3d:c0:1b:e5:93: 0e:c1:d5:7b:2a:b4:06:f2:7e:f4:54:ae:22:6f:32:a3:03:f5: 8a:09:43:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8yJys3T0WIa2J0M0iJl239MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNzA1MTIwMDU1WhcNMjYwNzA2MTIwMDU1WjAzMTEwLwYDVQQD EyhhNzk2NzY1YmY4YjlmOGNkN2FjODIyYmZjZDc4ODViODI4ODNhNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPCdU9wor9soLOfHdAhV5XFes5PB XTUHcEP5P6ybThsKncysBztGhoLLKixmDrnpvxDLRDejcKzv98J6BN2HOxvujkfp Y8sR7kU2/uY8JHYuyorDV+4tknGWIM9or7NJwSKJsP9MMnSD1fOy2oZw3WfOdHiM LnXZbiiKXYchglYy6iuAWjhcaGx2ogz6/isZUS4btUhxb5leKU2QMlVTqJYStXZL hz9U6M2dSQu99Uu4t5h2zHfTAydoWBTp52ZLjXZevis3jYa2PEFcYD+m5hUeMImS Zfplxx93HvtHLPAxLAcMocE7kbwDrs2Dn24lhLnn3lF2M2HKMKPN21yLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeWdlv4ufjNesgiv814hbgog6USMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad/TbHpA 2NC9Dm5NPHY+DEY7OuruII0taPTWIoIS2yXecG6+QyHVmTxahInqTNAIv8lXmqBx ESA2sMFUULbJMtv4rECCPgP5NAP/q86sxYICMtHfeul1LzL34rQfK/486yDDjg2l Hw2svC53exJ3afx19+7E1bofReixGQ+/ukvMwuIck41MzHH+uRFSsOHqjFZe4B0R aFsXOcs+s/bcH6Da+LivaT7J2ubd9/G7bEOOL+id45tfImvyN5+s1XH8Q6lOUuJY kJ8nGlFRpNFgQfi3wqfXDlxUBuLHAh3RRUhr5o70Vz3AG+WTDsHVeyq0BvJ+9FSu Im8yowP1iglDIA== -----END CERTIFICATE-----Generated at Sun Jul 5 13:19:49 2026 by rpki-client