$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: 5P6NpmegK+CuKp4yoSiipBbM2Ez3+l7QGbSKoknBtWA= Subject key identifier: BA:F2:BC:B9:10:B6:70:14:B2:AC:97:C3:46:5B:17:A8:19:E8:25:9C Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019F8154BEE084D2D06C52FB553141F8DE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A05 Signing time: Mon 20 Jul 2026 21:00:42 +0000 Manifest this update: Mon 20 Jul 2026 21:00:42 +0000 Manifest next update: Tue 21 Jul 2026 21:00:42 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: NSjMppLgK/W8dCyHI3fEYSD+w1UVrU+PiX/Y6NAWkpw=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:81:54:be:e0:84:d2:d0:6c:52:fb:55:31:41:f8:de:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jul 20 21:00:42 2026 GMT Not After : Jul 21 21:00:42 2026 GMT Subject: CN=baf2bcb910b67014b2ac97c3465b17a819e8259c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:86:3b:a5:3c:61:37:58:78:dd:f2:d0:01: bc:91:59:81:7c:8e:bd:9c:93:90:ae:24:7a:13:17: a2:6e:69:a7:2f:0c:d2:93:e2:d3:da:7e:0d:f6:49: 5b:1e:53:32:1b:c4:77:0f:22:7d:de:f5:f5:58:28: 2b:b0:86:2e:de:09:ed:ff:f6:35:f8:c3:d9:c9:7b: 40:c4:64:d3:55:8c:5d:d3:75:76:f9:35:37:6b:39: f0:9f:44:1e:dd:78:98:c9:46:ed:1a:7d:5f:3f:74: 9f:56:12:3c:85:c8:77:cc:59:4c:ca:d5:37:70:74: b2:f3:27:11:c8:fd:12:bb:37:cf:96:55:03:45:d0: 2a:14:4a:b8:f7:d9:4c:0f:fd:9a:a3:4d:5d:23:67: a8:df:8c:1e:23:78:2a:f0:b6:30:41:10:02:18:2e: f6:df:a7:d6:8f:2b:b8:92:e1:af:dd:d2:e1:ff:f6: 86:9c:8a:2b:6a:90:a4:61:24:8a:93:91:4c:84:fd: 91:7b:36:6d:bb:99:bb:ab:fb:e8:b2:ca:a0:44:2d: 70:47:1a:7c:7f:c4:4f:1d:ce:ab:30:08:03:fc:d7: 1f:ec:36:a8:e5:8c:17:ab:ee:dd:71:80:e7:8d:fa: 0f:84:f6:8b:a0:89:50:80:67:50:46:53:37:74:54: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:BC:B9:10:B6:70:14:B2:AC:97:C3:46:5B:17:A8:19:E8:25:9C X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:12:8a:30:49:96:71:aa:1f:45:f1:fb:42:47:d2:6f:6d:44: c3:98:45:79:05:ff:eb:1a:09:83:c8:49:5d:3a:ee:6f:90:7f: e6:06:97:9b:b7:e0:9f:bb:3b:71:e8:d4:ba:85:bc:44:5c:66: 58:c3:85:32:76:73:6d:73:68:87:2f:95:63:fc:e8:50:28:b5: 50:ad:52:a0:1d:db:2b:9d:41:00:87:eb:9d:7a:f4:25:1f:32: 22:4c:14:cd:e0:f5:97:98:68:55:17:36:99:10:05:fe:f3:4a: 99:9b:82:46:7d:64:1e:ba:af:67:18:2c:56:a1:22:02:52:e7: c7:66:d7:d3:0e:a5:96:5c:9c:2a:77:89:07:8f:a2:ce:ff:4c: a8:fd:11:f7:1d:94:45:04:18:40:34:bd:40:cc:c7:6b:f2:55: 97:ff:69:12:39:a4:5f:9a:cb:47:e3:9e:b5:68:df:79:55:af: d1:69:a3:f7:c5:55:e4:76:51:57:9c:91:fa:42:cc:0d:41:61: 76:9b:db:f4:a1:7e:a0:46:d3:12:e4:ed:76:32:11:0f:7d:8a: 93:70:a2:31:47:a6:0d:0c:53:2d:6f:6c:ed:9a:d8:90:e0:c8: e9:79:d5:9c:3a:fe:7a:34:52:9e:43:d0:99:75:c4:56:08:11: 44:f8:c9:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+BVL7ghNLQbFL7VTFB+N4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNzIwMjEwMDQyWhcNMjYwNzIxMjEwMDQyWjAzMTEwLwYDVQQD EyhiYWYyYmNiOTEwYjY3MDE0YjJhYzk3YzM0NjViMTdhODE5ZTgyNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7SGO6U8YTdYeN3y0AG8kVmBfI69 nJOQriR6ExeibmmnLwzSk+LT2n4N9klbHlMyG8R3DyJ93vX1WCgrsIYu3gnt//Y1 +MPZyXtAxGTTVYxd03V2+TU3aznwn0Qe3XiYyUbtGn1fP3SfVhI8hch3zFlMytU3 cHSy8ycRyP0SuzfPllUDRdAqFEq499lMD/2ao01dI2eo34weI3gq8LYwQRACGC72 36fWjyu4kuGv3dLh//aGnIorapCkYSSKk5FMhP2RezZtu5m7q/vossqgRC1wRxp8 f8RPHc6rMAgD/Ncf7Dao5YwXq+7dcYDnjfoPhPaLoIlQgGdQRlM3dFRTFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLryvLkQtnAUsqyXw0ZbF6gZ6CWcMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxKKMEmW caofRfH7QkfSb21Ew5hFeQX/6xoJg8hJXTrub5B/5gaXm7fgn7s7cejUuoW8RFxm WMOFMnZzbXNohy+VY/zoUCi1UK1SoB3bK51BAIfrnXr0JR8yIkwUzeD1l5hoVRc2 mRAF/vNKmZuCRn1kHrqvZxgsVqEiAlLnx2bX0w6lllycKneJB4+izv9MqP0R9x2U RQQYQDS9QMzHa/JVl/9pEjmkX5rLR+OetWjfeVWv0Wmj98VV5HZRV5yR+kLMDUFh dpvb9KF+oEbTEuTtdjIRD32Kk3CiMUemDQxTLW9s7ZrYkODI6XnVnDr+ejRSnkPQ mXXEVggRRPjJFQ== -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:04 2026 by rpki-client