$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: LiEx/wVZ1r8Kr+H9RIyQ/ngRsjxMdC/Z7eJVV2G2Fys= Subject key identifier: 32:2A:86:66:DF:4E:B0:F8:D6:C4:3D:09:98:74:EA:96:42:69:38:54 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019FA975619F262B2718DCB6983A1CB824EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A1B Signing time: Tue 28 Jul 2026 16:01:09 +0000 Manifest this update: Tue 28 Jul 2026 16:01:09 +0000 Manifest next update: Wed 29 Jul 2026 16:01:09 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: NlNSSXP4viCKik74bAe0RmUBpjZZ4N5BfTKDwcP6nBQ=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:61:9f:26:2b:27:18:dc:b6:98:3a:1c:b8:24:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jul 28 16:01:09 2026 GMT Not After : Jul 29 16:01:09 2026 GMT Subject: CN=322a8666df4eb0f8d6c43d099874ea9642693854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:99:e0:cb:47:42:67:d5:ad:64:09:8b:29: 80:32:40:36:10:9f:33:ff:d9:df:00:f6:bc:26:15: 61:a7:5a:47:bc:78:d2:9c:ee:86:3f:f5:38:ed:7c: 4d:58:3c:1d:ab:82:f7:60:34:e6:8b:3a:c1:e8:6e: 0d:28:79:46:fb:1c:10:ed:13:c1:7b:96:d3:8c:1d: fc:7e:14:6b:98:8f:68:7d:d6:d9:40:61:f6:ef:99: f9:f7:46:f0:cb:35:43:6f:12:9a:e4:dc:5e:c5:27: 7e:f1:3b:a4:66:f3:70:07:b5:48:aa:6c:36:61:02: 33:d9:f7:32:ff:06:51:e6:0c:ef:69:cd:55:24:ca: 8c:07:dd:d0:99:59:07:c6:6a:8c:7a:fa:1c:87:ca: c2:00:e9:6f:80:a9:b5:f1:8f:37:a2:70:03:97:8f: ed:32:14:fe:36:cb:5e:30:fc:ac:70:01:8a:b7:54: ae:22:98:4a:a6:31:ba:8b:d5:44:f3:74:60:56:f4: da:40:ed:05:14:21:b3:02:5f:59:70:7f:1b:1f:91: 17:79:b0:fc:d0:bf:dc:b8:f6:46:7d:de:08:fc:be: be:0f:48:94:12:84:e3:74:ef:05:86:0c:08:da:bb: fc:48:43:55:d6:4c:37:62:45:dd:71:df:a9:e1:10: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:86:66:DF:4E:B0:F8:D6:C4:3D:09:98:74:EA:96:42:69:38:54 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:77:e2:cb:9c:ca:b5:7f:68:58:df:8d:8b:77:17:ae:2c:48: d1:fc:9c:07:b3:b8:e4:38:a5:c2:ca:78:41:82:ae:3f:74:0e: a1:aa:68:fb:7b:8f:41:4e:89:8b:d4:5c:46:11:f9:ab:c5:2c: ad:b9:e3:32:96:fa:53:db:8a:5f:56:ad:f6:19:ae:4f:af:90: 34:d2:04:f5:3d:7a:7e:65:de:47:88:7a:1b:16:67:b7:12:be: 1e:0e:f3:8c:14:01:64:84:ee:c4:7e:85:6c:3f:8c:53:e3:4e: c6:23:a7:39:43:6c:69:19:f8:2e:05:50:c8:32:54:45:68:f1: 26:b1:03:4e:e8:90:21:e8:6c:d3:21:60:c6:54:30:f8:ec:75: a8:58:e7:d1:79:c2:0d:80:e8:72:ed:37:39:0d:13:0d:ae:86: 0a:3d:43:6b:fd:b6:3f:fa:26:7e:83:e9:86:14:19:90:07:a4: 1b:03:c4:7e:f7:43:a8:6b:34:fa:22:a5:10:a7:40:34:2e:b3: 0f:c8:09:20:4a:60:91:4e:73:42:d8:d8:b9:31:71:ce:30:0c: 6b:a0:ad:af:c0:a3:93:53:7a:8e:dc:c4:84:5a:80:5d:db:51: d9:be:e3:46:bb:e1:cb:67:a2:a2:27:16:7f:7e:4b:29:ea:0d: c5:e6:08:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdWGfJisnGNy2mDocuCTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNzI4MTYwMTA5WhcNMjYwNzI5MTYwMTA5WjAzMTEwLwYDVQQD EygzMjJhODY2NmRmNGViMGY4ZDZjNDNkMDk5ODc0ZWE5NjQyNjkzODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRaZ4MtHQmfVrWQJiymAMkA2EJ8z /9nfAPa8JhVhp1pHvHjSnO6GP/U47XxNWDwdq4L3YDTmizrB6G4NKHlG+xwQ7RPB e5bTjB38fhRrmI9ofdbZQGH275n590bwyzVDbxKa5NxexSd+8TukZvNwB7VIqmw2 YQIz2fcy/wZR5gzvac1VJMqMB93QmVkHxmqMevoch8rCAOlvgKm18Y83onADl4/t MhT+NsteMPyscAGKt1SuIphKpjG6i9VE83RgVvTaQO0FFCGzAl9ZcH8bH5EXebD8 0L/cuPZGfd4I/L6+D0iUEoTjdO8FhgwI2rv8SENV1kw3YkXdcd+p4RCKTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIqhmbfTrD41sQ9CZh06pZCaThUMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXfiy5zK tX9oWN+Ni3cXrixI0fycB7O45Dilwsp4QYKuP3QOoapo+3uPQU6Ji9RcRhH5q8Us rbnjMpb6U9uKX1at9hmuT6+QNNIE9T16fmXeR4h6GxZntxK+Hg7zjBQBZITuxH6F bD+MU+NOxiOnOUNsaRn4LgVQyDJURWjxJrEDTuiQIehs0yFgxlQw+Ox1qFjn0XnC DYDocu03OQ0TDa6GCj1Da/22P/omfoPphhQZkAekGwPEfvdDqGs0+iKlEKdANC6z D8gJIEpgkU5zQtjYuTFxzjAMa6Ctr8Cjk1N6jtzEhFqAXdtR2b7jRrvhy2eioicW f35LKeoNxeYIPA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:44 2026 by rpki-client