$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: dSOO5hNZXjj7sUkTqW4hKbrbQXltTBpLTrNRsLhpICc= Subject key identifier: 22:34:CB:6C:55:DE:EC:24:EA:7D:0E:A6:B3:A7:D7:60:EF:6A:3A:2A Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FC66DB0BA45EBBEBBC2066E142B24808B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A2A Signing time: Mon 03 Aug 2026 07:01:45 +0000 Manifest this update: Mon 03 Aug 2026 07:01:45 +0000 Manifest next update: Tue 04 Aug 2026 07:01:45 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: li+ObbxYIi7OhVFkPbFxajYRPTxpeN/2FW4fttz463E=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:c6:6d:b0:ba:45:eb:be:bb:c2:06:6e:14:2b:24:80:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 3 07:01:45 2026 GMT Not After : Aug 4 07:01:45 2026 GMT Subject: CN=2234cb6c55deec24ea7d0ea6b3a7d760ef6a3a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:c0:ad:c3:fc:76:09:be:ff:9b:ed:10:b8: 82:6a:30:a2:f5:d2:32:6a:a3:03:1f:df:d1:70:db: 4f:2f:98:9e:c0:b5:cb:60:58:7d:fa:14:15:f9:b6: b8:f7:03:e5:80:0c:1c:b0:27:d5:6e:12:2e:32:aa: 09:68:93:a1:ef:f6:bb:41:34:91:f8:ff:a3:f1:98: dd:fe:ce:8b:9b:3e:72:50:db:16:bf:68:f2:5f:b2: a4:ac:d0:42:c2:bc:db:8e:b2:9c:20:a6:89:8a:ce: ec:19:94:bb:2d:40:d9:aa:0d:e8:b7:16:8b:9e:b2: 0c:e0:19:03:74:e1:9f:e9:90:ad:4e:0b:c3:8c:71: 7a:07:34:d3:f5:5e:11:61:15:1e:d6:8c:b8:8a:a1: 0b:8a:43:7c:4f:f0:a9:37:3d:90:88:7e:7a:81:04: b7:b6:a4:7e:d9:f6:92:87:a4:11:e4:ca:ef:63:d1: a3:56:ac:02:f4:dc:d3:9a:de:2f:49:ec:3a:0f:79: 6c:88:a0:c8:a3:75:30:e6:cc:7a:21:ee:23:68:2c: f5:da:b7:64:86:67:6e:7a:72:46:de:7b:c0:c2:5c: 60:0a:fc:6c:d7:85:4f:30:b0:10:ec:eb:7f:e9:d9: d9:8c:97:0a:e7:18:84:04:e5:3f:a8:80:fe:ca:84: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:CB:6C:55:DE:EC:24:EA:7D:0E:A6:B3:A7:D7:60:EF:6A:3A:2A X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6b:ae:2c:9d:93:a5:98:7f:fe:d0:c5:7e:5b:5c:7b:40:71: e8:1f:60:6f:e6:1d:62:f8:24:66:14:90:1f:77:51:15:dc:1b: 62:67:98:d4:65:0a:cd:39:61:bb:f5:00:14:e1:60:aa:c5:e6: f1:6d:8d:f8:94:41:eb:d0:b4:1e:7e:79:5d:d8:4c:58:80:a5: 23:76:aa:d1:d8:64:02:31:76:d8:6f:5e:56:be:44:1c:52:95: 4b:dd:0e:38:d6:7d:04:54:d7:27:df:bc:b0:63:95:f7:7b:7b: 42:2c:fe:b6:d6:e1:e2:1e:f7:70:bd:2e:f0:f9:b5:1e:87:53: dc:15:19:9a:2f:2e:fa:76:ca:9d:39:f5:a7:1b:25:8c:3a:f5: b6:62:67:a3:78:da:41:51:7a:58:23:e3:bc:4b:df:e2:6f:d4: ae:99:7c:9b:a1:c1:e5:a3:0b:88:7d:2b:ed:d8:b9:4d:a7:fd: e6:e9:2c:19:93:65:a9:6e:f9:52:d5:c8:27:6d:13:ea:bd:d0: 4a:9f:eb:65:62:d8:6b:8b:dd:34:e6:48:dc:0d:8d:61:c2:21: dc:8c:90:ad:19:a2:a8:72:6a:79:9a:bc:26:7f:07:83:ff:cd: b8:00:02:91:2f:cb:2c:49:96:c2:81:0b:25:e9:c5:2b:0a:1d: 51:fa:05:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/GbbC6Reu+u8IGbhQrJICLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODAzMDcwMTQ1WhcNMjYwODA0MDcwMTQ1WjAzMTEwLwYDVQQD EygyMjM0Y2I2YzU1ZGVlYzI0ZWE3ZDBlYTZiM2E3ZDc2MGVmNmEzYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN3ArcP8dgm+/5vtELiCajCi9dIy aqMDH9/RcNtPL5iewLXLYFh9+hQV+ba49wPlgAwcsCfVbhIuMqoJaJOh7/a7QTSR +P+j8Zjd/s6Lmz5yUNsWv2jyX7KkrNBCwrzbjrKcIKaJis7sGZS7LUDZqg3otxaL nrIM4BkDdOGf6ZCtTgvDjHF6BzTT9V4RYRUe1oy4iqELikN8T/CpNz2QiH56gQS3 tqR+2faSh6QR5MrvY9GjVqwC9NzTmt4vSew6D3lsiKDIo3Uw5sx6Ie4jaCz12rdk hmduenJG3nvAwlxgCvxs14VPMLAQ7Ot/6dnZjJcK5xiEBOU/qID+yoSw8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI0y2xV3uwk6n0OprOn12DvajoqMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2uuLJ2T pZh//tDFfltce0Bx6B9gb+YdYvgkZhSQH3dRFdwbYmeY1GUKzTlhu/UAFOFgqsXm 8W2N+JRB69C0Hn55XdhMWIClI3aq0dhkAjF22G9eVr5EHFKVS90OONZ9BFTXJ9+8 sGOV93t7Qiz+ttbh4h73cL0u8Pm1HodT3BUZmi8u+nbKnTn1pxsljDr1tmJno3ja QVF6WCPjvEvf4m/Urpl8m6HB5aMLiH0r7di5Taf95uksGZNlqW75UtXIJ20T6r3Q Sp/rZWLYa4vdNOZI3A2NYcIh3IyQrRmiqHJqeZq8Jn8Hg//NuAACkS/LLEmWwoEL JenFKwodUfoFIw== -----END CERTIFICATE-----Generated at Mon Aug 3 16:31:48 2026 by rpki-client