$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: v95auDm/Wy+3ML1atHR2OogaPAS+5j4M9iMlviN9+fs= Subject key identifier: FB:5A:B8:75:10:50:02:AE:35:ED:64:A3:91:72:C6:BA:03:E8:D3:2D Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019DF57065C651E82B531EAFA26868F9563F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1938 Signing time: Tue 05 May 2026 00:01:17 +0000 Manifest this update: Tue 05 May 2026 00:01:17 +0000 Manifest next update: Wed 06 May 2026 00:01:17 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 1kWk+nv9gTB99Mg0dmxh5jJ3ndAy4vZwqdeg6gjDiLE=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 May 2026 21:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f5:70:65:c6:51:e8:2b:53:1e:af:a2:68:68:f9:56:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: May 5 00:01:17 2026 GMT Not After : May 6 00:01:17 2026 GMT Subject: CN=fb5ab875105002ae35ed64a39172c6ba03e8d32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:dc:27:56:84:39:e0:d8:37:90:53:bc:d7: 63:e9:ce:10:4a:ce:23:8c:58:2b:73:73:ff:03:dc: 65:cc:b8:bb:33:a1:17:5b:30:16:c1:a6:dc:b8:f6: 03:46:c0:cc:98:03:04:b3:a8:91:f0:18:c5:f3:c2: 83:ae:58:d5:5c:e6:6a:3f:f2:d6:60:38:d3:73:54: c4:6c:cc:39:3b:ce:d9:3b:e5:2f:61:8b:09:bd:c3: 20:1e:1b:25:bf:9a:ef:07:4f:f3:27:10:78:14:b2: ad:d1:eb:4d:c0:d8:b8:37:55:47:a1:16:37:ff:6b: ad:4e:d6:f9:11:e8:fa:f4:27:07:e7:e5:98:68:d3: fd:7a:03:dd:49:2c:2d:11:52:45:5d:f8:ef:bd:54: 0e:3b:01:9e:7b:7e:da:ec:e0:54:0f:7b:c6:c5:84: 86:0c:98:0f:f7:9e:84:5b:26:ec:70:12:b0:6f:db: e5:b7:95:99:4e:e8:ba:20:75:9d:ca:92:81:e6:d1: af:7a:01:0b:0b:57:2a:23:e5:f1:a4:1c:ef:81:65: fc:6d:b6:ee:5c:48:62:08:c0:a0:6b:7f:01:ab:ef: 5a:7b:1f:a2:bc:35:26:38:2f:be:a5:47:be:72:9b: a6:55:d6:10:2a:65:4c:6f:0c:a2:ec:95:ee:c8:cc: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5A:B8:75:10:50:02:AE:35:ED:64:A3:91:72:C6:BA:03:E8:D3:2D X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6a:dd:28:83:98:dd:10:27:21:a9:69:c0:9a:1c:5b:e4:a3: 69:bb:1d:ae:6b:e2:af:66:73:77:90:3e:d3:92:b7:a3:d0:f7: c7:ff:7d:69:3d:15:8c:c1:9d:a3:2b:ba:d5:34:57:7c:7b:2a: 47:13:04:29:a1:68:aa:37:b9:71:51:2a:26:b0:ef:0f:f4:67: 4e:f9:a6:a8:b5:eb:4b:a8:48:5f:78:fc:8f:e6:62:2f:ed:c4: b3:9a:1f:e7:4a:5e:d8:84:2f:18:68:1f:0a:ad:2a:09:c8:88: 71:27:9a:b6:37:01:c6:4c:ee:b3:83:f1:83:fd:48:80:4c:8b: f4:07:0d:e5:78:8b:02:ec:cc:ae:cf:cb:30:af:2d:a1:d6:b1: c6:da:af:91:93:e3:9a:6c:b3:a1:a9:a7:63:78:c1:c1:78:af: ca:b8:42:e8:2d:ab:4a:36:db:50:8c:4e:58:65:46:c1:97:24: 0b:b7:b3:a5:d3:3c:57:b1:b9:f3:c2:4e:1e:fa:5e:82:b5:74: 1c:2d:e3:9e:c9:9f:0d:da:a4:d2:f2:17:b6:08:3a:9f:12:cb: 90:1e:38:fc:cd:06:83:2a:b5:2c:c0:12:8e:2b:35:40:5e:7e: 54:0b:d3:49:e3:93:63:45:c1:80:09:9f:72:eb:09:46:45:82: d0:86:17:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ31cGXGUegrUx6vomho+VY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNTA1MDAwMTE3WhcNMjYwNTA2MDAwMTE3WjAzMTEwLwYDVQQD EyhmYjVhYjg3NTEwNTAwMmFlMzVlZDY0YTM5MTcyYzZiYTAzZThkMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4DcJ1aEOeDYN5BTvNdj6c4QSs4j jFgrc3P/A9xlzLi7M6EXWzAWwabcuPYDRsDMmAMEs6iR8BjF88KDrljVXOZqP/LW YDjTc1TEbMw5O87ZO+UvYYsJvcMgHhslv5rvB0/zJxB4FLKt0etNwNi4N1VHoRY3 /2utTtb5Eej69CcH5+WYaNP9egPdSSwtEVJFXfjvvVQOOwGee37a7OBUD3vGxYSG DJgP956EWybscBKwb9vlt5WZTui6IHWdypKB5tGvegELC1cqI+XxpBzvgWX8bbbu XEhiCMCga38Bq+9aex+ivDUmOC++pUe+cpumVdYQKmVMbwyi7JXuyMy9GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtauHUQUAKuNe1ko5FyxroD6NMtMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWrdKIOY 3RAnIalpwJocW+Sjabsdrmvir2Zzd5A+05K3o9D3x/99aT0VjMGdoyu61TRXfHsq RxMEKaFoqje5cVEqJrDvD/RnTvmmqLXrS6hIX3j8j+ZiL+3Es5of50pe2IQvGGgf Cq0qCciIcSeatjcBxkzus4Pxg/1IgEyL9AcN5XiLAuzMrs/LMK8todaxxtqvkZPj mmyzoamnY3jBwXivyrhC6C2rSjbbUIxOWGVGwZckC7ezpdM8V7G588JOHvpegrV0 HC3jnsmfDdqk0vIXtgg6nxLLkB44/M0Ggyq1LMASjis1QF5+VAvTSeOTY0XBgAmf cusJRkWC0IYXGw== -----END CERTIFICATE-----Generated at Tue May 5 03:21:51 2026 by rpki-client