$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: l0wXZ5tzxnj2/8MawZh7wvbq2VeZdlpGUHWU3JCO608= Subject key identifier: 3D:97:C3:F0:C8:D4:AF:4E:68:8C:51:8F:37:2E:82:10:80:76:03:13 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A04BAD4E0BD41BE0106CC1241A5A466840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A71 Signing time: Sat 29 Aug 2026 04:00:43 +0000 Manifest this update: Sat 29 Aug 2026 04:00:43 +0000 Manifest next update: Sun 30 Aug 2026 04:00:43 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: KEN_6778skmDEY7gNu3YCezz4t4.roa (hash: BiBuCJMi4yMgx4Ww2BvIGPWYoCad7r7CF2uQBSh9UqA=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: +lduWBPXo5LjnhMiOWeGbKzUwwRqUmnTp1ghjsDI2Nw=) 6: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Aug 2026 02:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:4b:ad:4e:0b:d4:1b:e0:10:6c:c1:24:1a:5a:46:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 29 04:00:43 2026 GMT Not After : Aug 30 04:00:43 2026 GMT Subject: CN=3d97c3f0c8d4af4e688c518f372e821080760313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:88:59:41:c1:49:55:b8:34:e2:62:f4:39:38: 16:2e:64:9e:e6:c2:c9:74:3e:a7:88:88:ab:fc:2c: d3:8f:23:b9:a3:96:f5:4a:14:87:d1:47:a5:8a:df: b7:fd:36:a4:71:be:20:ed:3e:d8:7c:24:d9:85:9d: 05:57:8c:fc:89:bc:fd:a3:2f:b4:dc:55:de:9f:5b: 36:2f:76:cc:20:e1:bd:4a:58:43:c7:34:0b:4b:00: 48:9c:26:ca:e8:7a:76:da:06:49:10:69:c1:35:5d: bb:df:24:0f:0f:b0:41:47:d0:f8:bf:5c:83:1a:73: 0b:27:9e:17:a8:c9:22:35:15:96:03:52:99:37:81: f4:b0:b7:2a:66:df:7e:68:f2:22:f6:f7:83:6e:bc: 1f:28:da:50:80:cb:ba:5d:f0:ff:f0:2f:01:45:ef: 5e:46:64:5f:c6:d5:0a:1f:4b:4e:87:3c:ed:02:63: 5b:c0:5f:96:42:a2:d6:93:8e:68:3f:1d:3e:37:fc: 87:0c:c1:60:7e:56:a1:e0:1f:e4:e7:92:e0:ce:b9: 0d:89:3e:0f:78:59:56:60:89:31:fc:87:3d:b3:1a: e2:6a:58:50:9c:0f:a6:8c:fd:1e:34:c4:43:cb:02: cc:50:c8:ea:ba:23:c0:3f:1f:b0:09:99:5a:50:3d: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:C3:F0:C8:D4:AF:4E:68:8C:51:8F:37:2E:82:10:80:76:03:13 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8f:08:58:c8:ee:66:28:08:38:0b:a2:72:bd:53:91:1c:ad: 2f:4a:80:93:96:ed:38:64:93:78:51:ab:6c:97:46:e7:15:7f: 4e:ce:0c:81:97:fc:af:66:7d:39:11:dc:60:60:91:e9:5e:5d: 0d:79:a8:ee:53:41:5f:b0:ad:73:5a:10:48:41:51:59:a5:a1: 0d:5b:f3:02:81:48:1c:fc:02:22:40:50:07:17:53:ea:ff:60: 3c:fc:9c:8d:15:fd:fb:8f:72:c0:0e:ab:15:c4:44:01:75:6f: 6f:95:8f:cd:bd:bb:48:82:f8:07:c4:73:87:85:f0:2b:4d:01: 9d:92:e2:ab:dc:f8:7b:7a:96:0f:3e:ba:81:82:00:a7:c6:69: 3a:8f:fc:9a:2e:bd:51:19:0b:3a:b9:41:17:57:59:60:0f:18: c6:f3:d0:46:db:1c:f6:6d:9d:b9:cb:98:ed:34:a6:69:43:94: e3:43:cb:6d:c0:d5:54:80:ab:5c:71:3d:68:fc:a6:1b:26:02: f2:6b:a4:53:34:20:ef:ab:16:a3:51:0d:4a:f7:29:23:7d:27: 97:48:8f:fa:9d:f3:52:c4:66:99:ef:54:2d:23:65:a1:76:a0: dd:64:4d:4d:73:f5:51:5e:e5:db:bb:61:11:b3:5f:8a:92:41: ad:5f:6a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBLrU4L1BvgEGzBJBpaRmhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODI5MDQwMDQzWhcNMjYwODMwMDQwMDQzWjAzMTEwLwYDVQQD EygzZDk3YzNmMGM4ZDRhZjRlNjg4YzUxOGYzNzJlODIxMDgwNzYwMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YhZQcFJVbg04mL0OTgWLmSe5sLJ dD6niIir/CzTjyO5o5b1ShSH0Uelit+3/Takcb4g7T7YfCTZhZ0FV4z8ibz9oy+0 3FXen1s2L3bMIOG9SlhDxzQLSwBInCbK6Hp22gZJEGnBNV273yQPD7BBR9D4v1yD GnMLJ54XqMkiNRWWA1KZN4H0sLcqZt9+aPIi9veDbrwfKNpQgMu6XfD/8C8BRe9e RmRfxtUKH0tOhzztAmNbwF+WQqLWk45oPx0+N/yHDMFgflah4B/k55LgzrkNiT4P eFlWYIkx/Ic9sxrialhQnA+mjP0eNMRDywLMUMjquiPAPx+wCZlaUD0jywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2Xw/DI1K9OaIxRjzcughCAdgMTMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI8IWMju ZigIOAuicr1TkRytL0qAk5btOGSTeFGrbJdG5xV/Ts4MgZf8r2Z9ORHcYGCR6V5d DXmo7lNBX7Ctc1oQSEFRWaWhDVvzAoFIHPwCIkBQBxdT6v9gPPycjRX9+49ywA6r FcREAXVvb5WPzb27SIL4B8Rzh4XwK00BnZLiq9z4e3qWDz66gYIAp8ZpOo/8mi69 URkLOrlBF1dZYA8YxvPQRtsc9m2ducuY7TSmaUOU40PLbcDVVICrXHE9aPymGyYC 8mukUzQg76sWo1ENSvcpI30nl0iP+p3zUsRmme9ULSNloXag3WRNTXP1UV7l27th EbNfipJBrV9qkg== -----END CERTIFICATE-----Generated at Sat Aug 29 11:04:26 2026 by rpki-client