$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: oBKfJ5PhO2dkyorGxivPn1N0E2Z8OP08JbQXDGOxP7g= Subject key identifier: 23:6D:7B:A5:4F:98:BC:A3:28:D8:EA:FE:F8:0C:7E:78:E8:DC:8F:BE Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A03782CE4E599B7C30E114B6DB60634A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A66 Signing time: Tue 25 Aug 2026 06:01:54 +0000 Manifest this update: Tue 25 Aug 2026 06:01:54 +0000 Manifest next update: Wed 26 Aug 2026 06:01:54 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: UxN2cvOVL+iPkZOX/aHY8/qbdQ3vv9zSQc/cvduYjOo=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 7: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 8: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:37:82:ce:4e:59:9b:7c:30:e1:14:b6:db:60:63:4a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 25 06:01:54 2026 GMT Not After : Aug 26 06:01:54 2026 GMT Subject: CN=236d7ba54f98bca328d8eafef80c7e78e8dc8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:52:f6:28:3f:f0:1d:18:4d:05:57:0c:3d: 90:ce:59:67:9e:55:86:c4:1c:e5:4f:db:65:73:23: 36:ed:57:20:cd:31:da:ef:a8:8b:14:3b:9d:46:f4: 4c:ea:ac:b1:31:c6:7d:e6:2b:30:94:2f:07:51:8c: 3b:db:6f:e2:62:5c:7e:56:3c:14:92:c7:37:e3:56: c4:b2:9a:16:6f:ae:b6:e5:5a:b5:21:02:f1:c8:30: 86:df:57:91:f4:24:97:92:de:02:d6:9e:78:d4:03: 8c:0c:a9:32:50:39:29:e9:6c:50:4f:74:ca:50:92: 15:ea:9b:00:6c:e1:9f:bc:03:03:ca:7f:ca:2c:f5: a9:d6:de:72:ae:b7:62:1e:1f:83:10:52:ed:18:f0: c1:89:82:cd:47:10:19:02:09:a4:a6:98:10:ca:65: 5a:b5:92:95:cb:e4:2a:06:85:7e:7e:4c:8d:f4:4d: ab:94:e3:1a:17:d7:b2:41:ad:b1:83:68:3d:79:6a: 37:00:71:2d:09:9c:24:9d:ab:33:eb:19:1b:b1:99: e5:d0:7e:a5:47:17:d8:67:8a:bc:eb:4c:a8:37:39: 7f:d4:08:69:e2:14:2b:62:36:59:83:d2:49:3a:76: 8e:14:1e:87:f4:d1:70:43:3e:f3:da:5d:5a:79:b3: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6D:7B:A5:4F:98:BC:A3:28:D8:EA:FE:F8:0C:7E:78:E8:DC:8F:BE X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f6:c1:f2:f8:3b:72:74:9c:ab:4e:d9:5a:a0:87:96:8c:fb: 72:5d:70:fa:8a:5e:c2:de:91:3e:c3:23:76:5f:5c:9d:81:67: 9f:64:3a:d6:ff:b9:c5:59:91:db:de:cb:d9:02:ca:4e:a5:82: 4d:cc:0e:99:ed:47:ce:de:9f:94:37:cb:9a:c4:aa:70:b5:ad: 3a:c6:5e:59:d9:05:32:7a:80:31:ce:54:2d:87:c9:a5:e2:fa: de:2b:ce:38:ff:85:ea:fe:45:9e:6d:d8:f2:81:e5:4b:3b:00: af:33:54:de:69:fe:10:67:72:42:7f:f6:3b:fb:f4:96:6a:bb: 55:58:4a:f3:74:98:fa:14:da:7c:75:aa:d9:eb:01:eb:79:91: 5f:70:2c:51:0e:84:44:b8:d4:c7:6e:e9:65:9f:8f:c3:08:b2: 22:58:12:be:61:7e:41:f3:78:e2:c0:e8:9f:53:1f:23:8b:f5: 02:4e:b7:e3:6d:63:a0:7f:06:b5:9a:60:ab:e2:c7:ea:1e:1b: 8b:81:39:aa:07:a1:04:af:ff:f7:05:05:8b:53:9b:f6:6d:a4: 14:c6:4f:30:34:70:a3:55:c6:1d:f0:47:7b:ef:32:42:ed:ce: 9e:48:8e:a3:9d:11:ac:e7:38:e1:cc:e2:7d:de:ae:e6:8c:80: 0f:9c:04:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA3gs5OWZt8MOEUtttgY0p7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODI1MDYwMTU0WhcNMjYwODI2MDYwMTU0WjAzMTEwLwYDVQQD EygyMzZkN2JhNTRmOThiY2EzMjhkOGVhZmVmODBjN2U3OGU4ZGM4ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBlS9ig/8B0YTQVXDD2QzllnnlWG xBzlT9tlcyM27VcgzTHa76iLFDudRvRM6qyxMcZ95iswlC8HUYw722/iYlx+VjwU ksc341bEspoWb6625Vq1IQLxyDCG31eR9CSXkt4C1p541AOMDKkyUDkp6WxQT3TK UJIV6psAbOGfvAMDyn/KLPWp1t5yrrdiHh+DEFLtGPDBiYLNRxAZAgmkppgQymVa tZKVy+QqBoV+fkyN9E2rlOMaF9eyQa2xg2g9eWo3AHEtCZwknasz6xkbsZnl0H6l RxfYZ4q860yoNzl/1Ahp4hQrYjZZg9JJOnaOFB6H9NFwQz7z2l1aebPNKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNte6VPmLyjKNjq/vgMfnjo3I++MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfbB8vg7 cnScq07ZWqCHloz7cl1w+opewt6RPsMjdl9cnYFnn2Q61v+5xVmR297L2QLKTqWC TcwOme1Hzt6flDfLmsSqcLWtOsZeWdkFMnqAMc5ULYfJpeL63ivOOP+F6v5Fnm3Y 8oHlSzsArzNU3mn+EGdyQn/2O/v0lmq7VVhK83SY+hTafHWq2esB63mRX3AsUQ6E RLjUx27pZZ+PwwiyIlgSvmF+QfN44sDon1MfI4v1Ak63421joH8GtZpgq+LH6h4b i4E5qgehBK//9wUFi1Ob9m2kFMZPMDRwo1XGHfBHe+8yQu3OnkiOo50RrOc44czi fd6u5oyAD5wEog== -----END CERTIFICATE-----Generated at Tue Aug 25 10:09:08 2026 by rpki-client