$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: faq0nabIZnu0h1rwUsK14HYcPq0hNO0+Ld9mzXmF9LM= Subject key identifier: 35:29:F0:5A:FB:80:0C:25:3E:78:BB:87:7D:E8:C7:88:51:29:C7:C2 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A031B7FE2A3CD68F4F93C71F1BA16E09D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A63 Signing time: Mon 24 Aug 2026 03:02:16 +0000 Manifest this update: Mon 24 Aug 2026 03:02:16 +0000 Manifest next update: Tue 25 Aug 2026 03:02:16 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: nQ/dg2XIb5NUreefP3R9+Qx7UJsVmScLZoCY/l878cQ=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=) 7: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 8: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) 13: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 03:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:31:b7:fe:2a:3c:d6:8f:4f:93:c7:1f:1b:a1:6e:09:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 24 03:02:16 2026 GMT Not After : Aug 25 03:02:16 2026 GMT Subject: CN=3529f05afb800c253e78bb877de8c7885129c7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:92:bb:59:48:1c:60:58:3d:3a:ae:ce:9c: d8:99:85:3f:59:61:3e:3b:d1:fc:9b:36:6d:b4:61: 2d:72:cf:e0:54:80:6a:26:a6:d2:45:53:01:1d:3e: 25:cf:5f:15:73:0b:80:5c:2a:28:73:0c:ef:91:eb: 03:99:2d:29:33:78:25:82:02:77:2b:c8:04:a5:9e: cd:73:16:c2:8f:41:8c:a9:98:d0:bf:48:81:87:ca: b4:90:58:49:37:38:0e:c4:2f:9c:6f:fc:5a:6c:e7: e6:b3:4e:26:b9:8a:53:18:d7:3b:43:3f:91:11:73: a7:24:cc:4b:42:c8:83:f0:5a:58:7b:87:21:64:31: ab:09:64:2c:1b:c2:f2:e6:20:e9:e6:20:0d:93:21: e7:7d:94:6c:24:7f:6e:4e:03:f0:ba:2b:82:ed:1d: d8:2c:32:fd:59:5a:bb:57:02:bd:5c:07:f9:4b:f4: 9c:8f:23:4a:66:3e:fe:15:ce:06:1a:36:7b:f8:23: b4:63:f8:4f:07:51:c5:a2:4a:14:05:4f:c0:c8:b8: 0b:e3:77:cf:ad:51:28:9c:02:13:75:0c:10:7e:9b: cb:dd:72:57:92:70:99:cf:81:2e:d4:7d:53:95:07: dd:64:45:bf:8c:11:44:21:53:16:72:84:18:3d:9c: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:F0:5A:FB:80:0C:25:3E:78:BB:87:7D:E8:C7:88:51:29:C7:C2 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b0:5d:a1:ed:9c:0a:11:79:4d:75:5c:7d:6a:c1:5f:d0:05: 7e:37:39:2f:a5:d8:27:93:ae:57:5f:b5:2a:32:93:f0:86:45: f6:f7:17:63:c7:1f:11:62:4a:d3:da:ac:12:bf:fa:35:72:e5: b6:f2:68:a0:c4:aa:85:d8:00:03:f1:c7:bc:aa:fb:1d:46:be: 27:56:0c:87:6a:6a:1a:8c:0a:f1:01:84:86:03:a7:4c:2f:39: e9:31:1e:83:c2:00:55:aa:62:0c:43:f7:48:64:3b:7d:47:1f: 82:c2:ae:f2:18:c5:5d:1d:40:be:e3:8b:1c:7a:44:dc:99:3d: 01:b1:4e:a7:c6:49:18:42:77:45:c5:9b:df:e1:df:aa:06:c4: 4f:09:52:ed:72:de:12:11:31:60:8d:fd:f8:d9:b7:b6:64:44: 4e:12:94:44:40:d0:ba:40:e3:25:39:c4:f1:9b:24:1e:ea:c1: fa:20:64:c1:6c:39:1f:88:b0:c2:bf:73:41:97:ab:55:7a:20: 7b:55:3a:75:bf:75:66:76:02:59:d7:41:df:32:e7:76:e5:87: d9:89:2e:20:b9:62:5d:5f:19:8e:26:a4:d0:44:f2:4f:46:15: e6:df:98:19:d1:a8:c1:9f:78:37:61:ee:7e:88:a6:14:7e:4e: e8:12:60:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAxt/4qPNaPT5PHHxuhbgnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODI0MDMwMjE2WhcNMjYwODI1MDMwMjE2WjAzMTEwLwYDVQQD EygzNTI5ZjA1YWZiODAwYzI1M2U3OGJiODc3ZGU4Yzc4ODUxMjljN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1riSu1lIHGBYPTquzpzYmYU/WWE+ O9H8mzZttGEtcs/gVIBqJqbSRVMBHT4lz18VcwuAXCoocwzvkesDmS0pM3glggJ3 K8gEpZ7NcxbCj0GMqZjQv0iBh8q0kFhJNzgOxC+cb/xabOfms04muYpTGNc7Qz+R EXOnJMxLQsiD8FpYe4chZDGrCWQsG8Ly5iDp5iANkyHnfZRsJH9uTgPwuiuC7R3Y LDL9WVq7VwK9XAf5S/ScjyNKZj7+Fc4GGjZ7+CO0Y/hPB1HFokoUBU/AyLgL43fP rVEonAITdQwQfpvL3XJXknCZz4Eu1H1TlQfdZEW/jBFEIVMWcoQYPZzDxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUp8Fr7gAwlPni7h33ox4hRKcfCMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbBdoe2c ChF5TXVcfWrBX9AFfjc5L6XYJ5OuV1+1KjKT8IZF9vcXY8cfEWJK09qsEr/6NXLl tvJooMSqhdgAA/HHvKr7HUa+J1YMh2pqGowK8QGEhgOnTC856TEeg8IAVapiDEP3 SGQ7fUcfgsKu8hjFXR1AvuOLHHpE3Jk9AbFOp8ZJGEJ3RcWb3+HfqgbETwlS7XLe EhExYI39+Nm3tmREThKUREDQukDjJTnE8ZskHurB+iBkwWw5H4iwwr9zQZerVXog e1U6db91ZnYCWddB3zLnduWH2YkuILliXV8Zjiak0ETyT0YV5t+YGdGowZ94N2Hu foimFH5O6BJgyg== -----END CERTIFICATE-----Generated at Mon Aug 24 10:36:41 2026 by rpki-client