$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: yCVymqmOQVq08uyWuQIoGZBqoWLp/iDz2KZd2bggt20= Subject key identifier: 3B:57:A7:2D:16:BE:81:54:E6:C3:66:E4:6F:E7:80:8F:D8:5F:E4:07 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FCC3846B597AB59482C33C23710F753F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A2D Signing time: Tue 04 Aug 2026 10:01:07 +0000 Manifest this update: Tue 04 Aug 2026 10:01:07 +0000 Manifest next update: Wed 05 Aug 2026 10:01:07 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: cJlO3xorVlPQ8+MHdBtWhcstIrGoU1pafvaUrd4w64o=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cc:38:46:b5:97:ab:59:48:2c:33:c2:37:10:f7:53:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 4 10:01:07 2026 GMT Not After : Aug 5 10:01:07 2026 GMT Subject: CN=3b57a72d16be8154e6c366e46fe7808fd85fe407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:b4:93:59:9d:71:66:a9:07:73:99:3f:9c: 9c:41:7d:d4:5c:9d:90:7f:64:fd:ce:b4:6e:f0:74: 4e:59:69:2f:d6:30:97:ad:3f:e3:22:51:d2:72:f0: 7c:e6:2a:a9:5d:bf:0f:59:12:11:fb:fc:c8:8b:ae: 95:c3:99:60:c8:c2:33:bf:7f:d7:a8:06:fb:dd:0f: 52:84:4d:5f:7e:71:cb:83:87:e3:6a:c0:b7:09:ff: 1d:3a:0f:af:82:71:e6:04:b7:e1:48:f1:b1:4d:e4: 58:86:7b:e6:9f:2d:5c:a0:fb:84:1d:b7:a4:98:23: cb:23:b1:e4:27:7a:ba:e4:e1:f1:12:ad:89:5f:e9: 03:7a:13:94:8d:08:72:b3:d2:d4:8d:c6:ae:e6:4a: c0:25:b9:5f:7b:e3:94:02:99:d9:04:85:03:00:30: 42:dd:ff:0b:24:7e:f6:1b:82:e3:dd:1e:d3:07:95: 60:f8:a1:00:1e:f4:3e:f3:05:5a:18:61:8c:20:41: c8:5d:73:1d:70:cf:e5:d5:c4:63:95:69:5d:af:83: 23:ac:51:e7:75:d5:1e:d6:6f:fc:cd:60:b1:e4:11: 24:32:23:fe:66:b3:30:7a:d4:27:13:cb:ef:e1:95: be:2c:2a:d1:e8:53:91:a7:3f:17:8c:79:86:32:b4: 91:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:57:A7:2D:16:BE:81:54:E6:C3:66:E4:6F:E7:80:8F:D8:5F:E4:07 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:51:8c:12:96:0d:89:37:22:f7:3c:14:ad:f0:ee:a4:05:cb: bd:b8:d4:90:04:ea:23:ef:10:03:bc:52:a1:ea:1b:e0:3c:4b: 43:27:61:fb:35:e0:6e:a2:b1:4a:4a:7e:77:ad:cd:87:fe:73: 10:15:e5:54:35:75:7b:d7:23:a6:1f:24:e8:a8:a8:70:41:b1: e1:6f:0a:d7:7d:47:86:6b:53:da:d3:3f:88:0e:d8:66:7c:78: 8b:17:8d:ad:82:a8:ec:59:10:2d:0f:5c:61:1a:0a:1f:d6:61: d0:9d:e3:74:5b:b9:4b:42:3e:f3:34:b7:96:48:fb:ea:89:77: e1:c2:8b:87:b8:8f:6a:d6:e7:d1:0e:f1:ed:6d:59:e6:3e:57: a9:c5:d5:26:cb:f5:7c:cf:80:67:5a:61:86:18:47:16:4e:f2: e0:ae:2e:1b:0b:f3:12:6d:f9:d1:c4:6d:28:36:e0:53:1b:6e: 42:39:6d:69:e2:72:6e:aa:ec:0f:7a:9e:16:c2:44:a1:ab:5a: 92:04:dd:12:03:dd:11:29:52:57:57:0c:be:73:3a:3c:46:72: 6c:f9:32:4d:03:f6:f2:36:4a:5f:d8:b4:4f:96:28:31:18:8d: d7:38:e6:7b:9d:eb:c6:d4:91:40:b5:2e:d5:9c:64:21:11:69: e3:7c:92:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/MOEa1l6tZSCwzwjcQ91P5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODA0MTAwMTA3WhcNMjYwODA1MTAwMTA3WjAzMTEwLwYDVQQD EygzYjU3YTcyZDE2YmU4MTU0ZTZjMzY2ZTQ2ZmU3ODA4ZmQ4NWZlNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dC0k1mdcWapB3OZP5ycQX3UXJ2Q f2T9zrRu8HROWWkv1jCXrT/jIlHScvB85iqpXb8PWRIR+/zIi66Vw5lgyMIzv3/X qAb73Q9ShE1ffnHLg4fjasC3Cf8dOg+vgnHmBLfhSPGxTeRYhnvmny1coPuEHbek mCPLI7HkJ3q65OHxEq2JX+kDehOUjQhys9LUjcau5krAJblfe+OUApnZBIUDADBC 3f8LJH72G4Lj3R7TB5Vg+KEAHvQ+8wVaGGGMIEHIXXMdcM/l1cRjlWldr4MjrFHn ddUe1m/8zWCx5BEkMiP+ZrMwetQnE8vv4ZW+LCrR6FORpz8XjHmGMrSRwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtXpy0WvoFU5sNm5G/ngI/YX+QHMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFGMEpYN iTci9zwUrfDupAXLvbjUkATqI+8QA7xSoeob4DxLQydh+zXgbqKxSkp+d63Nh/5z EBXlVDV1e9cjph8k6KiocEGx4W8K131HhmtT2tM/iA7YZnx4ixeNrYKo7FkQLQ9c YRoKH9Zh0J3jdFu5S0I+8zS3lkj76ol34cKLh7iPatbn0Q7x7W1Z5j5XqcXVJsv1 fM+AZ1phhhhHFk7y4K4uGwvzEm350cRtKDbgUxtuQjltaeJybqrsD3qeFsJEoata kgTdEgPdESlSV1cMvnM6PEZybPkyTQP28jZKX9i0T5YoMRiN1zjme53rxtSRQLUu 1ZxkIRFp43ySfA== -----END CERTIFICATE-----Generated at Tue Aug 4 17:02:39 2026 by rpki-client