$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: szE6q7y3BM+Ggdu8d1MbsQhhb5gfuo8hD+/I8hr9ApY= Subject key identifier: 31:EC:21:8E:8B:AC:52:5B:02:07:6B:CE:AD:36:B2:6D:02:AC:C3:BC Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A08B9FB5416EAB658A4D8F5B48B72590DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A95 Signing time: Thu 10 Sep 2026 14:01:34 +0000 Manifest this update: Thu 10 Sep 2026 14:01:34 +0000 Manifest next update: Fri 11 Sep 2026 14:01:34 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 06iBhG24TQONs8FmP1/5ktnEJv2VTCoucjMiuhkz0W0=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=) 7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=) 12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=) 14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:9f:b5:41:6e:ab:65:8a:4d:8f:5b:48:b7:25:90:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Sep 10 14:01:34 2026 GMT Not After : Sep 11 14:01:34 2026 GMT Subject: CN=31ec218e8bac525b02076bcead36b26d02acc3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:b9:cd:2d:6d:20:ee:ab:69:aa:d9:83:fc: 0b:82:44:19:d4:fc:b4:91:e8:46:54:05:5b:4b:54: ab:8d:ec:3e:f5:c3:11:41:ac:51:3c:b2:90:72:37: 41:61:11:4d:19:55:3b:da:2a:96:e5:20:c8:fb:60: 6f:03:48:4d:e3:12:67:f1:65:3d:2d:64:b9:f0:1a: 46:bc:30:23:ba:04:10:cc:79:c5:ad:85:99:a4:47: ea:7d:39:ca:a9:d2:b5:ff:11:d8:e2:34:d0:cb:d0: 15:69:e3:30:11:5f:80:e0:f5:f9:74:ef:75:14:87: db:e6:cf:21:8d:e8:7f:02:79:e0:50:7c:cd:c8:f6: 15:f4:82:38:b7:ed:6c:a5:2d:06:d4:39:79:e1:5b: e4:4f:6d:9d:9d:ec:e9:6a:25:a6:a2:7a:a5:b4:f9: bf:6a:78:f6:ff:c9:97:78:15:cf:b0:c5:1c:74:f6: 29:1a:48:b4:39:52:f1:8a:d6:23:00:7a:d2:40:8e: 5f:6d:42:fa:c3:53:fb:2c:e8:18:79:e3:e4:70:55: f5:52:9e:19:cb:5a:13:46:9d:2a:85:9d:4b:a2:2e: 42:63:3a:e0:c7:6c:d1:37:7d:f0:1c:b6:fa:e4:53: 87:d4:5b:e5:8f:9c:82:06:7c:16:de:fe:ea:14:b8: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EC:21:8E:8B:AC:52:5B:02:07:6B:CE:AD:36:B2:6D:02:AC:C3:BC X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2f:b1:d6:59:59:45:75:83:55:5f:6c:8f:3c:25:b0:c1:38: 25:2d:76:11:23:c2:61:21:fb:b2:e0:b1:fb:e3:9d:f9:2e:2f: be:80:46:8a:86:da:03:26:62:ee:bc:f1:9c:e0:84:cd:39:23: 91:b3:e6:1b:8e:f0:ab:39:71:f6:80:00:99:a8:04:ab:0e:02: a8:51:64:dd:40:12:56:a1:19:f8:11:b1:eb:65:b0:1a:fd:5f: 52:dd:a5:77:ab:19:d5:a3:57:2a:bc:e4:78:0d:13:12:c7:db: 08:fd:db:1b:f2:38:91:db:0f:ed:33:ef:06:90:0a:47:ab:41: 4a:30:a6:13:df:c3:e4:b6:b2:46:01:d1:33:90:44:a0:c3:f1: 5a:e6:bf:60:3d:55:6f:ce:13:27:e3:29:27:b6:2a:5f:49:df: b6:b8:55:b7:14:80:22:26:cd:ab:ce:b4:23:99:2a:3f:72:6b: fd:a8:b3:6b:9a:0a:8b:d9:46:8d:af:9b:d1:a7:b2:d8:bc:ae: b2:ba:59:70:2b:76:85:68:c7:5d:e7:9a:40:fd:a6:b3:ff:16: eb:fc:f5:ac:4c:4b:a5:d7:c2:8d:9b:68:4c:12:b3:34:f0:2f: 05:51:3d:97:6b:4f:a6:48:b7:1a:a4:9e:a1:fa:07:2c:58:63: 8a:49:2b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLn7VBbqtlik2PW0i3JZDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwOTEwMTQwMTM0WhcNMjYwOTExMTQwMTM0WjAzMTEwLwYDVQQD EygzMWVjMjE4ZThiYWM1MjViMDIwNzZiY2VhZDM2YjI2ZDAyYWNjM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDq5zS1tIO6raarZg/wLgkQZ1Py0 kehGVAVbS1Srjew+9cMRQaxRPLKQcjdBYRFNGVU72iqW5SDI+2BvA0hN4xJn8WU9 LWS58BpGvDAjugQQzHnFrYWZpEfqfTnKqdK1/xHY4jTQy9AVaeMwEV+A4PX5dO91 FIfb5s8hjeh/AnngUHzNyPYV9II4t+1spS0G1Dl54VvkT22dnezpaiWmonqltPm/ anj2/8mXeBXPsMUcdPYpGki0OVLxitYjAHrSQI5fbUL6w1P7LOgYeePkcFX1Up4Z y1oTRp0qhZ1Loi5CYzrgx2zRN33wHLb65FOH1Fvlj5yCBnwW3v7qFLgLxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHsIY6LrFJbAgdrzq02sm0CrMO8MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC+x1llZ RXWDVV9sjzwlsME4JS12ESPCYSH7suCx++Od+S4vvoBGiobaAyZi7rzxnOCEzTkj kbPmG47wqzlx9oAAmagEqw4CqFFk3UASVqEZ+BGx62WwGv1fUt2ld6sZ1aNXKrzk eA0TEsfbCP3bG/I4kdsP7TPvBpAKR6tBSjCmE9/D5LayRgHRM5BEoMPxWua/YD1V b84TJ+MpJ7YqX0nftrhVtxSAIibNq860I5kqP3Jr/aiza5oKi9lGja+b0aey2Lyu srpZcCt2hWjHXeeaQP2ms/8W6/z1rExLpdfCjZtoTBKzNPAvBVE9l2tPpki3GqSe ofoHLFhjikkrIQ== -----END CERTIFICATE-----Generated at Thu Sep 10 23:47:58 2026 by rpki-client