$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: UK4KfD4bpDXOmDeaXcwmh1rwcSbx9k++/perdmYJngc= Subject key identifier: E4:83:DD:C0:1A:47:56:FE:D3:75:BB:50:4B:41:FA:74:0A:4F:33:0D Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A045E2F20B66C20C2E8D9560B807E31F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A6E Signing time: Fri 28 Aug 2026 01:01:35 +0000 Manifest this update: Fri 28 Aug 2026 01:01:35 +0000 Manifest next update: Sat 29 Aug 2026 01:01:35 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: KEN_6778skmDEY7gNu3YCezz4t4.roa (hash: BiBuCJMi4yMgx4Ww2BvIGPWYoCad7r7CF2uQBSh9UqA=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 0TW/8fIRKYqWcIlDvcwvfwkXWWZSTmExunapT1DE6VI=) 6: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Aug 2026 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:45:e2:f2:0b:66:c2:0c:2e:8d:95:60:b8:07:e3:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 28 01:01:35 2026 GMT Not After : Aug 29 01:01:35 2026 GMT Subject: CN=e483ddc01a4756fed375bb504b41fa740a4f330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:d4:30:3c:24:96:b8:d8:cf:78:4d:08:b3: 1f:ce:a5:ba:9a:44:b5:41:0c:93:f9:5a:be:58:43: 9d:03:90:d4:16:ca:f6:aa:9d:07:0b:c0:df:f3:b0: 28:d4:5f:c0:82:93:a6:e3:40:61:e2:92:27:c8:35: a2:c6:4f:c3:6f:fd:ad:09:19:b3:56:3b:48:24:2a: 90:1a:e2:67:9c:db:d6:33:d5:88:9a:ae:70:5b:77: 34:f8:28:a1:67:0f:69:78:c3:3f:ff:a6:7f:a6:dd: 61:7f:3e:73:d5:3d:1f:33:94:1c:09:43:70:4a:2b: db:ba:5c:2e:66:76:76:b9:5a:cd:43:2c:8f:6e:fe: 51:88:3d:6e:0f:14:33:fc:1f:a8:3f:ed:fc:85:0c: 36:a4:99:ee:33:8d:9a:64:60:8e:b9:69:36:15:8d: 2e:68:d5:45:1d:f4:40:d6:11:66:77:fa:0c:2b:0a: 6b:4a:69:7b:7d:3b:57:54:ee:81:21:dd:44:e3:ac: 27:e7:1c:6a:14:c2:49:34:ab:76:41:00:9a:1e:6d: 76:a1:29:fa:c3:ac:04:56:6b:b1:a3:b5:0e:a3:d0: 80:d4:fc:d6:e6:be:aa:f4:9b:b9:55:db:9c:86:8b: 38:d3:36:38:29:9b:54:a0:bd:01:53:44:4b:5b:d0: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:83:DD:C0:1A:47:56:FE:D3:75:BB:50:4B:41:FA:74:0A:4F:33:0D X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:a4:f7:7d:53:49:6d:ea:59:08:4d:51:eb:5a:20:1b:1f: 25:84:77:69:68:08:6d:41:17:9c:6e:f9:38:bf:ef:6a:31:b1: 51:77:83:d2:65:9d:7d:26:43:3c:1a:eb:e4:3d:b6:62:ca:92: 7c:f8:e1:cc:78:f7:73:a4:e4:1d:d6:a0:8e:7e:d7:b9:3b:03: 86:c7:46:f9:7b:aa:2b:5f:81:01:77:81:8d:02:7b:35:58:b8: fa:af:36:5f:d9:53:27:cf:11:bd:ee:44:66:3c:2e:98:5f:08: 4a:db:18:9b:f7:ba:f4:74:15:1f:7a:95:83:7a:d9:d1:f9:85: 77:d6:90:0a:66:13:a6:ae:77:0d:a4:79:3f:5b:16:ed:f2:b8: f2:76:07:85:4c:0f:e7:95:df:4e:b0:e0:96:4f:bf:c3:b2:02: cd:28:c4:15:0a:26:9c:f1:23:09:7b:3e:14:02:d8:31:68:94: 9b:0a:df:02:dc:ef:a6:8f:e5:f6:65:84:ef:61:62:ed:93:3d: dd:bc:68:f3:cf:74:fb:d7:39:11:cd:1d:5d:7b:fb:39:f2:e5: af:b5:db:c4:d3:61:ef:77:ec:e5:d8:b5:bf:5b:62:47:f9:e8: 3f:90:e5:63:0c:9e:34:6d:48:40:2b:44:f2:3e:92:74:24:be: 9f:09:9d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBF4vILZsIMLo2VYLgH4x9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODI4MDEwMTM1WhcNMjYwODI5MDEwMTM1WjAzMTEwLwYDVQQD EyhlNDgzZGRjMDFhNDc1NmZlZDM3NWJiNTA0YjQxZmE3NDBhNGYzMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3UMDwklrjYz3hNCLMfzqW6mkS1 QQyT+Vq+WEOdA5DUFsr2qp0HC8Df87Ao1F/AgpOm40Bh4pInyDWixk/Db/2tCRmz VjtIJCqQGuJnnNvWM9WImq5wW3c0+CihZw9peMM//6Z/pt1hfz5z1T0fM5QcCUNw SivbulwuZnZ2uVrNQyyPbv5RiD1uDxQz/B+oP+38hQw2pJnuM42aZGCOuWk2FY0u aNVFHfRA1hFmd/oMKwprSml7fTtXVO6BId1E46wn5xxqFMJJNKt2QQCaHm12oSn6 w6wEVmuxo7UOo9CA1PzW5r6q9Ju5Vduchos40zY4KZtUoL0BU0RLW9CtpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSD3cAaR1b+03W7UEtB+nQKTzMNMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfs6k931T SW3qWQhNUetaIBsfJYR3aWgIbUEXnG75OL/vajGxUXeD0mWdfSZDPBrr5D22YsqS fPjhzHj3c6TkHdagjn7XuTsDhsdG+XuqK1+BAXeBjQJ7NVi4+q82X9lTJ88Rve5E ZjwumF8IStsYm/e69HQVH3qVg3rZ0fmFd9aQCmYTpq53DaR5P1sW7fK48nYHhUwP 55XfTrDglk+/w7ICzSjEFQomnPEjCXs+FALYMWiUmwrfAtzvpo/l9mWE72Fi7ZM9 3bxo8890+9c5Ec0dXXv7OfLlr7XbxNNh73fs5di1v1tiR/noP5DlYwyeNG1IQCtE 8j6SdCS+nwmdTA== -----END CERTIFICATE-----Generated at Fri Aug 28 10:40:47 2026 by rpki-client