$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: lOX4vrXoPTqg7gGaZS4uRPONBVvX+8ccSvDKF6SLjgc= Subject key identifier: 32:B0:4E:3B:E8:7B:B6:95:43:90:E1:5E:F3:E0:F0:4B:C7:52:9A:15 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019E78C27D2CDFDBC42A7275353612CFCB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 197C Signing time: Sat 30 May 2026 12:01:12 +0000 Manifest this update: Sat 30 May 2026 12:01:12 +0000 Manifest next update: Sun 31 May 2026 12:01:12 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=) 3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: kQCuZm3FAzJpKcEs9ETkS28RKC9lWGENhFDiFmj/Ghs=) 4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 31 May 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:78:c2:7d:2c:df:db:c4:2a:72:75:35:36:12:cf:cb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: May 30 12:01:12 2026 GMT Not After : May 31 12:01:12 2026 GMT Subject: CN=32b04e3be87bb6954390e15ef3e0f04bc7529a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:6b:17:6a:ba:84:82:2e:57:13:ab:dc:ab: 9d:71:af:b2:71:64:15:e7:d5:85:c3:9d:c5:37:81: 61:64:1d:ff:34:c5:a5:b7:6d:85:86:b2:6d:4f:0d: 9f:16:c9:34:1f:98:54:17:da:83:57:c2:33:20:f2: a1:51:f2:43:ae:b1:99:f0:fe:4e:2b:15:ff:8d:b6: 53:5b:94:e0:2d:3d:c0:20:77:3d:06:3e:da:33:7e: ac:71:e1:d9:89:77:18:a6:74:b5:13:0f:fc:a3:0f: 3e:aa:d4:dc:1f:13:52:02:c5:39:02:0b:3c:d7:9e: 7b:fb:7d:dd:ea:85:db:4a:64:c1:67:b8:1f:8c:3a: a5:63:b8:78:3a:8e:5c:8d:8f:8e:4f:5d:8d:70:3b: 84:f9:a3:00:0b:35:a8:c2:22:d4:d3:2f:4c:24:11: ff:4e:74:eb:8d:34:02:49:80:f8:ae:4a:d7:00:24: 0d:70:ff:46:0c:c2:6d:43:d1:f9:af:cf:ac:41:a0: 71:5a:84:2a:76:17:14:63:39:cb:1f:3f:8a:c3:08: 79:f4:7e:69:72:e0:4f:2f:a9:c7:ab:fe:97:e2:e4: 29:25:23:a0:49:6b:e8:88:ec:e3:fc:b0:2e:6b:70: 4e:22:4c:7c:3b:71:29:8a:9a:64:62:e6:18:79:6c: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B0:4E:3B:E8:7B:B6:95:43:90:E1:5E:F3:E0:F0:4B:C7:52:9A:15 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:42:a9:35:f2:1a:bf:53:c2:bb:44:4f:41:50:90:bd:ac:50: 7a:6f:a8:55:14:94:91:37:0f:62:65:3f:71:18:c8:a4:59:9d: 4a:3a:44:ae:6f:9e:fb:22:d2:63:af:ab:cc:ff:75:10:bc:c9: 57:ee:e5:53:a1:7d:61:f4:ec:d5:4d:e3:2f:1a:91:5e:2f:e9: 0b:b3:82:12:d5:d8:45:13:2d:b4:ef:23:eb:d1:44:09:64:04: 1c:17:2a:3a:6b:ee:f6:7b:ba:50:cc:b1:1c:f4:a2:b1:1c:c8: 40:2e:0c:fb:79:88:f6:63:88:86:75:c5:af:fa:45:6c:2a:be: ad:6c:f0:af:ba:af:9b:3b:c3:96:04:b6:c0:8d:81:1b:0a:bd: f5:dc:1a:0d:db:5f:1b:e6:0a:64:79:a1:6b:78:94:78:79:ce: 30:7f:e3:9e:06:58:2e:16:dd:f7:ee:fb:74:41:98:0f:c6:79: dc:2e:db:3e:37:63:55:ae:fa:0c:51:cf:de:43:11:ee:cf:1c: 7c:be:63:a9:93:3b:1b:78:ee:74:0e:ee:49:67:29:68:fb:b1: b6:dc:18:b1:13:5c:8d:15:6d:27:64:88:da:41:37:83:6d:d3: bc:66:ed:83:2b:f8:e1:59:10:d9:ad:a1:d1:ce:c9:fe:36:dc: f3:44:2b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ54wn0s39vEKnJ1NTYSz8t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwNTMwMTIwMTEyWhcNMjYwNTMxMTIwMTEyWjAzMTEwLwYDVQQD EygzMmIwNGUzYmU4N2JiNjk1NDM5MGUxNWVmM2UwZjA0YmM3NTI5YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sZrF2q6hIIuVxOr3Kudca+ycWQV 59WFw53FN4FhZB3/NMWlt22FhrJtTw2fFsk0H5hUF9qDV8IzIPKhUfJDrrGZ8P5O KxX/jbZTW5TgLT3AIHc9Bj7aM36sceHZiXcYpnS1Ew/8ow8+qtTcHxNSAsU5Ags8 1557+33d6oXbSmTBZ7gfjDqlY7h4Oo5cjY+OT12NcDuE+aMACzWowiLU0y9MJBH/ TnTrjTQCSYD4rkrXACQNcP9GDMJtQ9H5r8+sQaBxWoQqdhcUYznLHz+Kwwh59H5p cuBPL6nHq/6X4uQpJSOgSWvoiOzj/LAua3BOIkx8O3EpippkYuYYeWxLZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKwTjvoe7aVQ5DhXvPg8EvHUpoVMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEKpNfIa v1PCu0RPQVCQvaxQem+oVRSUkTcPYmU/cRjIpFmdSjpErm+e+yLSY6+rzP91ELzJ V+7lU6F9YfTs1U3jLxqRXi/pC7OCEtXYRRMttO8j69FECWQEHBcqOmvu9nu6UMyx HPSisRzIQC4M+3mI9mOIhnXFr/pFbCq+rWzwr7qvmzvDlgS2wI2BGwq99dwaDdtf G+YKZHmha3iUeHnOMH/jngZYLhbd9+77dEGYD8Z53C7bPjdjVa76DFHP3kMR7s8c fL5jqZM7G3judA7uSWcpaPuxttwYsRNcjRVtJ2SI2kE3g23TvGbtgyv44VkQ2a2h 0c7J/jbc80Qrsg== -----END CERTIFICATE-----Generated at Sat May 30 19:00:24 2026 by rpki-client