$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: ukUYpKuKxb+QpLZ6D10hqpMX5okO9fqn3zfsANLQGJk= Subject key identifier: 55:19:C9:7C:7A:DF:A5:50:43:75:35:69:AF:5D:33:5E:91:42:14:85 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 01A0024B2A5512E3AB58B5C64ABD0027A4D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1A49 Signing time: Fri 14 Aug 2026 22:01:15 +0000 Manifest this update: Fri 14 Aug 2026 22:01:15 +0000 Manifest next update: Sat 15 Aug 2026 22:01:15 +0000 Files and hashes: 1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=) 2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: QQAEzxNfEdnRAUSB1aR2XFwfaXw76Jdum9fGsKjYxro=) 5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:02:4b:2a:55:12:e3:ab:58:b5:c6:4a:bd:00:27:a4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Aug 14 22:01:15 2026 GMT Not After : Aug 15 22:01:15 2026 GMT Subject: CN=5519c97c7adfa55043753569af5d335e91421485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:e9:8d:d5:9f:ce:d9:3c:6d:83:7b:1e:03: 3c:21:84:2d:3a:c4:19:1c:0c:13:f8:33:05:cd:77: 4b:9c:90:a4:6d:ad:8b:03:4b:c9:a8:61:d3:f0:c6: 0e:22:b7:17:1a:0a:10:a1:40:94:c0:3f:05:0b:76: 3e:0a:95:02:3b:2e:3a:70:13:4a:a9:44:ca:a1:4c: 75:18:21:13:b4:77:bf:a6:4d:1b:82:52:71:87:ae: 1b:e4:39:d0:5c:e6:f4:29:78:75:10:4e:de:2a:2d: 55:3a:8a:05:8d:42:14:3c:84:79:83:85:4d:bb:76: f5:2e:2d:c7:8f:59:1a:47:32:8a:89:c4:3b:d6:77: 9d:7b:33:af:07:ca:a4:b2:03:e6:d4:cd:32:c0:a4: 4b:ac:31:9c:c4:fb:8e:a8:d0:6a:8d:22:b9:ea:a8: 2b:ec:77:3d:32:fd:c6:d5:ca:f6:a5:22:01:95:7a: 6c:be:87:52:ff:c9:98:79:9c:d5:ad:e8:1f:37:06: 33:c0:0d:58:a1:7f:aa:bd:85:70:2d:77:47:30:23: ef:50:53:7d:2a:97:c8:5b:79:2f:47:f6:41:71:db: f3:05:db:28:5c:c0:07:cd:d0:f9:20:35:5a:5f:46: 9c:cd:66:b9:8f:6a:f6:58:38:95:8e:c6:ed:de:12: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:C9:7C:7A:DF:A5:50:43:75:35:69:AF:5D:33:5E:91:42:14:85 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:92:d3:ad:4b:41:ad:70:98:69:2d:54:89:ca:d1:e7:3f:18: d9:35:d4:a6:8c:b3:50:00:f4:a8:24:60:8a:9a:c2:09:5f:2f: 2d:08:c3:a2:6e:e3:3d:8f:cb:ab:83:89:5a:3c:d3:40:a1:fe: f5:13:d6:51:41:8c:15:9c:7d:c0:0b:1e:8f:b5:e7:56:9e:f2: be:25:4d:d6:9e:70:b4:c3:f6:d7:0e:cd:bd:ae:07:24:d2:a5: 95:c4:0a:fd:ff:3b:48:77:21:b9:4f:da:6e:c7:df:af:9d:f2: 52:01:d2:bf:1e:44:41:71:22:c8:16:03:68:07:a0:c5:23:e4: bc:30:19:0f:9f:0d:c5:7c:84:9d:47:9a:bd:30:5b:3c:dd:dc: 6a:61:60:6e:6b:3f:4c:00:73:f1:90:6f:38:dd:40:bf:19:16: 2c:fe:6e:82:e5:5b:af:fa:c1:1c:e4:9a:de:30:23:67:52:53: cf:8d:77:6a:07:6b:dd:74:3d:2a:f8:99:6e:d0:b7:36:32:a0: 00:5d:4c:79:39:6c:75:d7:8f:c5:64:cd:4a:27:07:90:1d:95: b0:99:d5:3c:75:26:f9:50:58:ac:9d:cd:4a:65:d7:f4:5f:71: 01:d4:af:33:ef:a8:25:89:42:ed:58:b3:16:43:d5:1a:e7:b9: 40:3b:ea:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaACSypVEuOrWLXGSr0AJ6TYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwODE0MjIwMTE1WhcNMjYwODE1MjIwMTE1WjAzMTEwLwYDVQQD Eyg1NTE5Yzk3YzdhZGZhNTUwNDM3NTM1NjlhZjVkMzM1ZTkxNDIxNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6/pjdWfztk8bYN7HgM8IYQtOsQZ HAwT+DMFzXdLnJCkba2LA0vJqGHT8MYOIrcXGgoQoUCUwD8FC3Y+CpUCOy46cBNK qUTKoUx1GCETtHe/pk0bglJxh64b5DnQXOb0KXh1EE7eKi1VOooFjUIUPIR5g4VN u3b1Li3Hj1kaRzKKicQ71nedezOvB8qksgPm1M0ywKRLrDGcxPuOqNBqjSK56qgr 7Hc9Mv3G1cr2pSIBlXpsvodS/8mYeZzVregfNwYzwA1YoX+qvYVwLXdHMCPvUFN9 KpfIW3kvR/ZBcdvzBdsoXMAHzdD5IDVaX0aczWa5j2r2WDiVjsbt3hIO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUZyXx636VQQ3U1aa9dM16RQhSFMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpLTrUtB rXCYaS1UicrR5z8Y2TXUpoyzUAD0qCRgiprCCV8vLQjDom7jPY/Lq4OJWjzTQKH+ 9RPWUUGMFZx9wAsej7XnVp7yviVN1p5wtMP21w7Nva4HJNKllcQK/f87SHchuU/a bsffr53yUgHSvx5EQXEiyBYDaAegxSPkvDAZD58NxXyEnUeavTBbPN3camFgbms/ TABz8ZBvON1AvxkWLP5uguVbr/rBHOSa3jAjZ1JTz413agdr3XQ9KviZbtC3NjKg AF1MeTlsddePxWTNSicHkB2VsJnVPHUm+VBYrJ3NSmXX9F9xAdSvM++oJYlC7Viz FkPVGue5QDvqWw== -----END CERTIFICATE-----Generated at Sat Aug 15 00:51:26 2026 by rpki-client